last executing test programs: 1m10.516551848s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffff7f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x0, 0x3c}, 0x28) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) close(r3) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r3], 0x0, 0x3c, 0x0, 0x0, 0x7fff, 0x10000, @value=r3}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="e03f030036000b05d25a806c8c6f94f90224fc6010", 0x15}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000480)={'virt_wifi0\x00', 0x6}) ioctl(r6, 0x8b22, &(0x7f00000004c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000700), &(0x7f0000000740)=0x4) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000020601020000000000000000050000000900020073797a32000000000500010007000000050005000a0000000c00078008001240fffffffa05000400000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r5, &(0x7f0000000140)}, 0x20) sendmsg$nl_netfilter(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400c004}, 0x810) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e65746465767369657464657673696d3000000800d7737a0bc68424794208c4b5afeaf2747d563c787e778a000000000000000000001fa9bc4f30eb7e4641df33082fc6ab87b4684178551f78c82bd298d18b6fe98477b02ee7dcf108a515bbde2c945a37c56b71eda6540afb27", @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r11 = syz_open_dev$vim2m(&(0x7f00000008c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000900)={0x1, @pix={0x0, 0xfffffff8, 0x34565559, 0x4, 0x401, 0x7, 0x4, 0xa, 0x1, 0x0, 0x0, 0x3}}) 1m10.325972908s ago: executing program 1 (id=2): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000880)=0x81) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/4110, 0x48}], 0x1000000000000082) landlock_restrict_self(0xffffffffffffffff, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x23, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf1600"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="997425bd7000ffdbdf25150000004c0001800d0001007564703a73797a3200000000380004001400010002004e20e00000020000000000000000200002"], 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeded}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabc7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40084}, 0x44084) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100258dc23b0dd1ca211a817ee39cc8d23a60d715936e406ed15b83b4fba0bd7000ffdbd080243b0000140034c246c90300040000000800010086aa98856e362c5a2d42d45cd64a2a3d416eb669aa2e2c754fcdb0bac5d90519412307b46ae7ceb7d8ad70784ccf6a677c491fe0fec2526eed3ac66229d53dc5703d77abb069424c4a6754480ab2e7aa44590231e8507a3e48bfa832e58f2848", @ANYRES32=r4, @ANYBLOB="b451b07d36bfb4a0953cfbfce60d8a86f06a25a78723a596d4c99a3a82c29b845ded2be8abbbfccea50a5fd9ed79dc043582ee2245f93bd7b646c15203008ad55dceee4586c5e49e0ca34e49e5f8074dfb000000000000001761a31f44d32cf30e3e383333fcc46016854cfa53a8c4c28ec6c4d3e5e9cac4ebc0d9ebc8f87de2"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) r9 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x1ef}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m10.15407031s ago: executing program 2 (id=8): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8927, &(0x7f0000000280)='veth0:') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2010040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ram0\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000a61000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@cpuid={0x64, 0x18, {0xb, 0xffffffff}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x68747541, 0x444d4163, 0x69746e65}]}) syz_clone(0x200000, &(0x7f00000002c0)="99c0ed0f31f039053556ef5a71", 0xd, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="d34922a2d653db1d3e76a41ddf8ef5d70c7db3fbb62c84e9832180018954fed12640df5ad2ce2060cb05e38ee80822c1c8") ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x49, 0x100, 0x8001, 0x401, 0x0, 0x1, 0x1, 0x0, 0xd, 0xff, 0x0, 0x8000001b, 0x2, 0x47, 0xff}}) read$FUSE(r1, &(0x7f0000019b40)={0x2020}, 0xfffffed9) 1m9.926091947s ago: executing program 2 (id=10): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty, 0xfffffffc}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='mnt\x00', 0x1ff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x8}]}, &(0x7f0000000cc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x1000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) unshare(0x22020400) r7 = io_uring_setup(0x1694, &(0x7f00000002c0)={0x0, 0xfac7}) r8 = syz_io_uring_setup(0x48ce, &(0x7f00000009c0)={0x0, 0xd353, 0x3221, 0x0, 0x19a, 0x0, r7}, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000b00)={0x2e, 0x5c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b80)=@any_dev={0x3, 0xd35, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x23}}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000400)=0x7ccd4176) 1m9.445817551s ago: executing program 1 (id=14): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000b40)={0x1, &(0x7f0000000b80)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x160f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0xa0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000a00)={0x1, &(0x7f0000000a40)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) 1m8.550799482s ago: executing program 1 (id=16): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x10}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x2002) ioctl$EVIOCGABS3F(r3, 0x8018457f, 0x0) 1m8.547181602s ago: executing program 1 (id=18): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8927, &(0x7f0000000280)='veth0:') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2010040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ram0\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000a61000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@cpuid={0x64, 0x18, {0xb, 0xffffffff}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x68747541, 0x444d4163, 0x69746e65}]}) syz_clone(0x200000, &(0x7f00000002c0)="99c0ed0f31f039053556ef5a71", 0xd, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="d34922a2d653db1d3e76a41ddf8ef5d70c7db3fbb62c84e9832180018954fed12640df5ad2ce2060cb05e38ee80822c1c8") ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x49, 0x100, 0x8001, 0x401, 0x0, 0x1, 0x1, 0x0, 0xd, 0xff, 0x0, 0x8000001b, 0x2, 0x47, 0xff}}) read$FUSE(r1, &(0x7f0000019b40)={0x2020}, 0xfffffed9) 1m8.373723149s ago: executing program 2 (id=19): getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '/)\\\x00'}, &(0x7f0000000080)=""/89, 0x59) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x2, 0x81, 0x2, 0x5}, {0xc, 0x9, 0x10, 0xe}, {0xfc, 0x41, 0x81, 0x2}, {0x7ff, 0x6, 0x10, 0x7}]}) (rerun: 64) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x107800, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xffc0, 0x19, 0x1, 0x1}, {0x2, 0xf1, 0x6a, 0xffffffff}, {0xe, 0x0, 0x33, 0x5}]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000640)={0x1, 0x9, @start={r2, 0x0, "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", "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"}, [0x5, 0x100, 0x2, 0xa, 0xb96, 0xfffffffffffffff4, 0xc9, 0x101, 0x636, 0x5, 0x3, 0x3, 0x8, 0x1, 0x3, 0x5, 0x7fffffff, 0xfffffffffffffff8, 0x2, 0x5, 0x2, 0xa, 0x7, 0xfffffffffffffffc, 0x0, 0x1, 0x9, 0xfffffffffffffff9, 0x4, 0x1000, 0x502f, 0xffffffffffff5d3b, 0xaa, 0x0, 0x3530, 0x2, 0x4a, 0xb, 0x7fffffff, 0x0, 0x4, 0x6, 0x5, 0x1, 0x100000000, 0x4, 0xdd5f, 0x9, 0x7, 0x5, 0x6, 0x7, 0x6, 0x1, 0x76, 0x80000000, 0xffff, 0x7fff, 0x7, 0x4, 0x5, 0x2, 0x3, 0x8]}) (async) r3 = syz_open_dev$media(&(0x7f0000001080), 0x6, 0x2e08c2) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000010c0)={0x5, 0x1, 0xffe, 0xbe, 0x5, 0x7}) (async) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001100), &(0x7f0000001140)={0x0, 0xfb, 0xd5, 0x1, 0x4, "44a9d2a6558b5368bb0f80ea56e521f0", "311cc183a254e2a378557ecb04db67329bb65cd87a797b99cc0ad94eeb73f08972a0847b791dd32d53d33418a59428ee2b04a93783393f28633c40ab4bc4855f627db79534301eaad968636562787177e43653992ca67abd5f9dd22711d91bc7b6b85e62e1e01f014eb0c48ff39314757fb1d70f04799a0932dca6b373bd11761c1c66787609da419e379aedf86e2273fe544c88bd28d94a4573eab3ebd3733af2d8825f268c241700637de84933fa7629424c0f0c15d2b54a8dfc6032e94b1e"}, 0xd5, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000001300)={0x80000000, &(0x7f0000001240)=[{}, {0x80000000}], &(0x7f0000001280)=[{{0x80000000, 0x0}}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000001400)={r4, &(0x7f0000001340), &(0x7f0000001380)=[{{0x80000000}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000001500)={r7, &(0x7f0000001440), &(0x7f0000001480)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001540)={{r6, r5, 0x3, [0x100, 0x4]}, {r8, r9, 0x3, [0x4, 0x3]}, 0x4, [0x13, 0x10000]}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000001580), &(0x7f00000015c0)=0x8) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001600)={0x18, 0xf, 0x2, {{0x0, 0x2, 0x1}, 0x5e0}}, 0x18) (async, rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000019c0)={0x0, 0x3, 0x0, &(0x7f0000001640)=[{0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000001780)=[{}, {}], 0x2, 0x0, &(0x7f0000001880)=[{}, {}], 0x6, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}, {}, {}]}) (rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000001b00)={r11, &(0x7f0000001a40), &(0x7f0000001a80)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001b80)={0x3, &(0x7f0000001b40)=[{0x8, 0x6, 0x5, 0x41e}, {0x7ff, 0xc, 0x5c, 0x1000}, {0x4, 0x79, 0x4, 0x2}]}) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001bc0), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r12, 0x4004556e, 0x4) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000002000)={0x0, 0x4, 0x0, &(0x7f0000001c00)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000001d80)=[{}, {}], 0xa, 0x0, &(0x7f0000001e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001fc0)=[{}]}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000020c0)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002080)=@new_dev={0x1, 0x2a8, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x90}}}, &(0x7f0000002140)) r14 = getpid() ioctl$UBLK_U_CMD_ADD_DEV(r13, 0xc0207504, &(0x7f00000021c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000002180)=@any_dev={0x1, 0x24b, 0x0, 0x0, 0x1000, 0x7fffffff, r14, 0x0, 0x40}}) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000002240)=0x44102453) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000024c0)={&(0x7f0000002280)=[{0x0, 0x0, 0x1e23b26f, 0x5, 0xffff, 0x8, 0x8, 0x1}, {0x3, 0x0, 0x7, 0x100000001, 0x34, 0x8, 0x7, 0x2}, {0x2, 0x0, 0x6, 0x7, 0x100, 0x4, 0x80000001, 0x4}, {0x3, 0x0, 0x2000000000000000, 0xd, 0x3, 0x7fffffffffffffff, 0x444, 0xfffffffffffffffe}, {0x0, 0x0, 0x3, 0xfffffffffffff7b0, 0x9, 0x39e71950, 0x535, 0x9}, {0x1, 0x0, 0x9, 0x6, 0x200000, 0x9, 0x9, 0x5}, {0x0, 0x0, 0x6, 0x0, 0x2, 0x3, 0xd0c, 0x5}, {0x0, 0x0, 0xc56, 0x9, 0x82, 0xff, 0x2c, 0x2}, {0x1, 0x0, 0xfffffffffffffff8, 0x8b4, 0x100000000, 0x6, 0x1000, 0x6c1c}, {0x2, 0x0, 0xb, 0x10000, 0x9, 0xfffffffffffffff2, 0x4, 0x4}], 0xa, 0x38, 0x1, 0xb}) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) (async) inotify_init() setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) 1m8.279115454s ago: executing program 32 (id=19): getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '/)\\\x00'}, &(0x7f0000000080)=""/89, 0x59) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x2, 0x81, 0x2, 0x5}, {0xc, 0x9, 0x10, 0xe}, {0xfc, 0x41, 0x81, 0x2}, {0x7ff, 0x6, 0x10, 0x7}]}) (rerun: 64) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x107800, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xffc0, 0x19, 0x1, 0x1}, {0x2, 0xf1, 0x6a, 0xffffffff}, {0xe, 0x0, 0x33, 0x5}]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000640)={0x1, 0x9, @start={r2, 0x0, "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", "fd00600726ccdd20496e77807b83ee84813eb777057ea6856cc13ef9ffcb97b8dfe140835f01a7b791d1abd70cbccaffb276afbc9dafb1a492dbc2a2a68c3d8c77ca38a4e962a03eae58a2d4277b56c8fd13daeab3421d7aa865d13fa30ae23c59eb8c04ab87348a1aa10bd6c465cb7541bd9335a0be2a17cadab83809148b9613d901078f84335b648a48e2824b444a8e0324bf89cb046b0d4f5f16ce07f34692f225104253a33dab7af68b762208f851eea0f015402e002a0c6dce0a68cf9979a2ad6c73e6b016baa4cf928fb980dcca63eafb93538ee1e66e2b0a0453ee133ffadbbaf6d9e950e913fcabe0949de5a219ad58f65cb5a7f66819205340d35d962228306a2bb961bd0d78e851320c29609f70b36f6dfed7323aaebd86033c68b61b4d2ce97b580b39d4c9c761622553b8b9f8a9271b86ac60b68866dcf51ae0ef70a77ec5dd50352b52e3949b37b01fb8c03d45f94c367979412e1a627e8bde91be3eb53acaaf5af4b6370fbbb200d188ee4345a438a49d70ce84e3aab3a61c6bbfedb0da2816a615832145bfdaa12b937873893f227e9a658ca89a91d2629939824b8503dbfd65705ceeaf06a54298063fe05afde82701e0186d13f4b403e60a05ed3fdcc5f75a59c9ffb9855bb91ce06349b4b540912a223d81a6afaeb506dd58b4932b70810b7d8fee55b83993f08c6c2f099e2a2e9a6814f1358b8415f0859a722464b452e4dcfd5b66a1337a642170035b9c145fda8f810a70cea77d060105ad34225dc4a69b4d210962ea8d06b04a6f78f482e149cf02247e263cb9ea8af15f9e41c8f88f3d7194415c50663d33a65ee6b6c67b81a4e004a515c6faae1f19c86311d76d7fe8f0c1aa9d50030d1d49364433e04f1c1b33af36da536be0b2c871a2474bef366f1ca5909f74b358931b7c8a608bcda882d726c8d1fc6619f6cb1d5debdf612df30761cf16e79a60ad146cfec72055a6cb429c92bae8e29b8393448ce1327342a3ebee3278c02a45a49d3b8efd06ddc234110108cd10f1ccf6e16bd838e89cf6b46a1f03f1f3f8440902173d5f2fdb8e5adda5bc5cab7f26e3b27d715c4168da145ea06757947c66de258b876593b57df04acc66cf70cdf406cedd76424c2b1a7e5f149a2a4e834869eb014087b13fab15c757255c51fdcd008c056651ddd2ca5cccae0412c4215c03374956fbf670eff85691e78230adfd5f5cd7c8116f27388f1dc855d722ef5a4e90cc38d010ae9fba96ae48aed9b8b9296a751fbf8beb88f0e5fb119900a7239aab7198becdf850ecf7838286b955a3c93b9a4267b0c1f9fb656bc2ff821b1eda331116aa2159da6e2222c34ea2c62c1eeccaa6c8777a4a5c02515844baba6a8ac7d9e8c486d0e41128cf98e51fdd9605924e15b613adf2465656c1e26f3c85446a6aaafab78302825c05b1d6538d32c6"}, [0x5, 0x100, 0x2, 0xa, 0xb96, 0xfffffffffffffff4, 0xc9, 0x101, 0x636, 0x5, 0x3, 0x3, 0x8, 0x1, 0x3, 0x5, 0x7fffffff, 0xfffffffffffffff8, 0x2, 0x5, 0x2, 0xa, 0x7, 0xfffffffffffffffc, 0x0, 0x1, 0x9, 0xfffffffffffffff9, 0x4, 0x1000, 0x502f, 0xffffffffffff5d3b, 0xaa, 0x0, 0x3530, 0x2, 0x4a, 0xb, 0x7fffffff, 0x0, 0x4, 0x6, 0x5, 0x1, 0x100000000, 0x4, 0xdd5f, 0x9, 0x7, 0x5, 0x6, 0x7, 0x6, 0x1, 0x76, 0x80000000, 0xffff, 0x7fff, 0x7, 0x4, 0x5, 0x2, 0x3, 0x8]}) (async) r3 = syz_open_dev$media(&(0x7f0000001080), 0x6, 0x2e08c2) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000010c0)={0x5, 0x1, 0xffe, 0xbe, 0x5, 0x7}) (async) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001100), &(0x7f0000001140)={0x0, 0xfb, 0xd5, 0x1, 0x4, "44a9d2a6558b5368bb0f80ea56e521f0", "311cc183a254e2a378557ecb04db67329bb65cd87a797b99cc0ad94eeb73f08972a0847b791dd32d53d33418a59428ee2b04a93783393f28633c40ab4bc4855f627db79534301eaad968636562787177e43653992ca67abd5f9dd22711d91bc7b6b85e62e1e01f014eb0c48ff39314757fb1d70f04799a0932dca6b373bd11761c1c66787609da419e379aedf86e2273fe544c88bd28d94a4573eab3ebd3733af2d8825f268c241700637de84933fa7629424c0f0c15d2b54a8dfc6032e94b1e"}, 0xd5, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000001300)={0x80000000, &(0x7f0000001240)=[{}, {0x80000000}], &(0x7f0000001280)=[{{0x80000000, 0x0}}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000001400)={r4, &(0x7f0000001340), &(0x7f0000001380)=[{{0x80000000}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000001500)={r7, &(0x7f0000001440), &(0x7f0000001480)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001540)={{r6, r5, 0x3, [0x100, 0x4]}, {r8, r9, 0x3, [0x4, 0x3]}, 0x4, [0x13, 0x10000]}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000001580), &(0x7f00000015c0)=0x8) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001600)={0x18, 0xf, 0x2, {{0x0, 0x2, 0x1}, 0x5e0}}, 0x18) (async, rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000019c0)={0x0, 0x3, 0x0, &(0x7f0000001640)=[{0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000001780)=[{}, {}], 0x2, 0x0, &(0x7f0000001880)=[{}, {}], 0x6, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}, {}, {}]}) (rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000001b00)={r11, &(0x7f0000001a40), &(0x7f0000001a80)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001b80)={0x3, &(0x7f0000001b40)=[{0x8, 0x6, 0x5, 0x41e}, {0x7ff, 0xc, 0x5c, 0x1000}, {0x4, 0x79, 0x4, 0x2}]}) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001bc0), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r12, 0x4004556e, 0x4) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000002000)={0x0, 0x4, 0x0, &(0x7f0000001c00)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000001d80)=[{}, {}], 0xa, 0x0, &(0x7f0000001e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001fc0)=[{}]}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000020c0)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002080)=@new_dev={0x1, 0x2a8, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x90}}}, &(0x7f0000002140)) r14 = getpid() ioctl$UBLK_U_CMD_ADD_DEV(r13, 0xc0207504, &(0x7f00000021c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000002180)=@any_dev={0x1, 0x24b, 0x0, 0x0, 0x1000, 0x7fffffff, r14, 0x0, 0x40}}) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000002240)=0x44102453) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000024c0)={&(0x7f0000002280)=[{0x0, 0x0, 0x1e23b26f, 0x5, 0xffff, 0x8, 0x8, 0x1}, {0x3, 0x0, 0x7, 0x100000001, 0x34, 0x8, 0x7, 0x2}, {0x2, 0x0, 0x6, 0x7, 0x100, 0x4, 0x80000001, 0x4}, {0x3, 0x0, 0x2000000000000000, 0xd, 0x3, 0x7fffffffffffffff, 0x444, 0xfffffffffffffffe}, {0x0, 0x0, 0x3, 0xfffffffffffff7b0, 0x9, 0x39e71950, 0x535, 0x9}, {0x1, 0x0, 0x9, 0x6, 0x200000, 0x9, 0x9, 0x5}, {0x0, 0x0, 0x6, 0x0, 0x2, 0x3, 0xd0c, 0x5}, {0x0, 0x0, 0xc56, 0x9, 0x82, 0xff, 0x2c, 0x2}, {0x1, 0x0, 0xfffffffffffffff8, 0x8b4, 0x100000000, 0x6, 0x1000, 0x6c1c}, {0x2, 0x0, 0xb, 0x10000, 0x9, 0xfffffffffffffff2, 0x4, 0x4}], 0xa, 0x38, 0x1, 0xb}) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) (async) inotify_init() setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) 1m8.246466572s ago: executing program 1 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x2, 0x4, 0x4, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$kvm(0x0, &(0x7f0000000980), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f00000009c0)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$inet(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000b00), 0x82000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DVD_READ_STRUCT(r7, 0x2284, &(0x7f00000000c0)=@manufact={0x4, 0x81, 0x800, "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"}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r6, 0xae71, 0x0) 1m7.464079853s ago: executing program 1 (id=29): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000900)={0x1, @pix={0x0, 0xfffffff8, 0x34565559, 0x4, 0x401, 0x7, 0x4, 0xa, 0x1, 0x0, 0x0, 0x3}}) 1m7.446365435s ago: executing program 33 (id=29): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000900)={0x1, @pix={0x0, 0xfffffff8, 0x34565559, 0x4, 0x401, 0x7, 0x4, 0xa, 0x1, 0x0, 0x0, 0x3}}) 1m3.703939799s ago: executing program 5 (id=87): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x100}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0xfebc) socket$kcm(0x29, 0x5, 0x0) 1m3.643200181s ago: executing program 5 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6bca47a180", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r2 = dup(r1) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000008c0)) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000900), 0x22242, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./dev\x00', &(0x7f0000000a80)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./dev/sda\x00', 0x2, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, &(0x7f0000000b80)) setuid(0xee01) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000000b00)={0x6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000940)={0x2, 0x3}, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff2d, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=@newtfilter={0xb, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r4, {0x1, 0x1}, {}, {0x7, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x11) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5800004e092ef092974920b4bc787ee5e39700020603000000000000000c00078008000640000075000500010006002200050005c8f30cf1cc58b9088ea29246da5210000200000005000400000000000900020073797a31"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x2000, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)={0x0, 0x2}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x80, 0x10, 0x3, 0x0, {{0x47, 0x4, 0x2, 0x1d, 0x11c, 0x65, 0xfffe, 0x1, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x7, 0xf, "1b2f3c18a9a1c2790c24018b7a"}, @cipso={0x86, 0x4b, 0x2, [{0x5, 0xf, "c00fb1f76521c493cad97aa380"}, {0x6, 0xf, "1ae7f435d1f48fe626d790b3fd"}, {0x5, 0x4, "b80a"}, {0x7, 0xd, "c03404da1290df1455095e"}, {0x1, 0x11, "ed9c8398f8bdd4dd7df7b08c700123"}, {0x7, 0x5, "d0758b"}]}, @rr={0x7, 0x27, 0x49, [@loopback, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast2, @remote, @local]}, @cipso={0x86, 0x5e, 0x1, [{0x6, 0x4, 'O7'}, {0x2, 0x8, "28a39d2dc13b"}, {0x7, 0xc, "284914cea47474961737"}, {0x1, 0xe, "fba3fa2cc732dd968801683a"}, {0x6, 0x3, '\b'}, {0x0, 0x7, "1ad14b6011"}, {0x0, 0x11, "2b7d006cd70cd08b87406c02e32a91"}, {0x5, 0x7, "9a614e8e44"}, {0x6, 0x10, "56fb18c312ecc7662453677cccf0"}]}, @rr={0x7, 0x7, 0x3f, [@local]}, @cipso={0x86, 0x16, 0x2, [{0x1, 0x10, "de5459c43f4244978a5c2fa8e6c7"}]}, @ssrr={0x89, 0xb, 0x92, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r10, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000e00)=ANY=[@ANYBLOB="20030000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fcdbdf25060000006000018008000100", @ANYBLOB="471ee5b0fb116eadad133924b0253a598e10caf5df8afca5fb085ec391", @ANYBLOB="080003000300000014000200726f7365300000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007767300000000000000000000000000014000200697036677265746170300000000000006800018014000200697036746e6c3000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYRES8=r11, @ANYRES32=r4, @ANYBLOB="1400020076657468315f746f5f626174616476001400020076657468305f766c616e0000000000000800030003000000600001801400020070696d72656731000000000000000000140002007369743000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002006d6163766c616e310000000000000000480001801400020064766d727030000000000000000000000800030001000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="0800030000000000080003000200000008000300020000005800018008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000300010000000800030000000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="a72af0ca", @ANYRES32=r4, @ANYBLOB="7800018008000300010000000800030002000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=r4, @ANYRESHEX=r9, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400bf3836fc6b8d945700df3afecb365d46cbc15502006d", @ANYRES32=r4, @ANYBLOB="6c000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r4, @ANYBLOB="0800030000000000140002006970766c616e3100000000000000000014000200776c616e31000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="1400020064766d727031000000000000000000004c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000400000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000300000008000300030000001400018008000100", @ANYRES32=r4, @ANYBLOB="0800030003000000"], 0x320}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000dc0)={0x2, {0x2, 0x107, 0x4fa, 0x300, 0x1, 0x4000}}) 1m3.584147701s ago: executing program 5 (id=89): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x20000000) 1m3.583857043s ago: executing program 5 (id=90): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000b80)={0x84, @broadcast, 0x4e20, 0x3, 'nq\x00', 0x12, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000bc0)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x10, 0xd, 0x6c}, {@rand_addr=0x64010100, 0x4e23, 0x4, 0x1, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000c40)={&(0x7f0000000c80)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000d00)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracefs\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000008ab70000000071122500000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)="653a0dad679dfc070e12fbc68b147317dcd8905ce60377a1dbf97e0b024616e59eaccb7fb29f91253e3e9a4af3d3820c4300"/63, 0x3f) socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$I2C(&(0x7f0000000840), 0x1, 0x200080) fcntl$setlease(r4, 0x400, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENT(r5, 0x84, 0x7f, &(0x7f0000000b00)={0x0, 0x8007}, &(0x7f0000000b40)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20) r7 = landlock_create_ruleset(&(0x7f0000000880)={0x1fff, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = getpgid(r10) fcntl$setownex(r9, 0xf, &(0x7f0000000900)={0x2, r11}) sendmmsg$unix(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="11", 0x1}], 0x1}}], 0x1, 0x40015) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000580)='./tracefs\x00', r6}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setparam(r10, &(0x7f0000000ac0)=0x9) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r6, @ANYRES16=r8, @ANYRES64=r5, @ANYRES8=0x0, @ANYRES32=r11, @ANYRES16=r11], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x40008880) sendmsg$NFT_BATCH(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001", @ANYRESOCT=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4008850}, 0x40) sendmsg$NFT_BATCH(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001acffef0000000000000300000a600000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000340003800c00008008000340000000022400008008000340000000020c00054000000000000000050c0004400000000000000f"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m3.498004408s ago: executing program 5 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019"], 0x44}}, 0x0) (fail_nth: 4) 1m1.186048054s ago: executing program 5 (id=129): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @typedef={0x1}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x34, 0x0, 0xa}, 0x28) (fail_nth: 4) 1m1.037981509s ago: executing program 34 (id=129): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @typedef={0x1}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x34, 0x0, 0xa}, 0x28) (fail_nth: 4) 1m0.143107211s ago: executing program 3 (id=134): r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='recover_session\x00', &(0x7f00000002c0)='no\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'veth1_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x2000010, 0x0) unshare(0x20000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='jffs2\x00', 0x0, &(0x7f0000000540)='compr=none\x00') setns(r2, 0x20000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$proc_mixer(r3, &(0x7f00000003c0)=[{'LINE', @val={' \'', 'Master Playback Volume'}}, {'RECLEV', @void}], 0x3a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './sys/bus/pci/devices/0000:00:00.0/remove\x00'}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0x0, 0xf0, 0xb5, 0x6, 0xbe, 0x6, 0x2, 0x7, 0x0, 0x9, 0x5, 0x7}, {0x20000, 0xff01, 0x6, 0x0, 0x8, 0xe, 0x9, 0x0, 0xc, 0x2a, 0x78, 0x4, 0x9}, {0x1, 0x1000, 0x6, 0xfb, 0x0, 0xfb, 0x18, 0x81, 0xc, 0xfd, 0x0, 0x0, 0x2}], 0x4}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)={0x10000000}) 59.900744399s ago: executing program 3 (id=136): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x20000000) 59.819478133s ago: executing program 3 (id=137): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x808e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) r1 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x32}, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000080)='7', 0x1) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f00000000c0)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010b00000000000003000000070000001000f8ffc500feff0000000a95"], &(0x7f00000018c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94) 59.819269698s ago: executing program 3 (id=138): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000600)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x141842, 0x0) getxattr(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x14, r6, 0x72b}, 0x14}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0xd0, 0x5, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x5bbc87219def4922, 0x1, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0x33f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x40, 0x5}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x81, 0x8, 0x9, 0x40, 0x8}, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x1, 0x8, 0x2, 0x9, 0x4f}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x816}}, {0x44, &(0x7f0000000300)=@string={0x44, 0x3, "bce07be3d83d1ae18f7414a4c3fde3ac38d3511bd5586edc6210f5485d5aea0e3b8bfc50a1510f302cad34894e9e60bd35a012497b02ca5d4c38f61d5e0980a116a1"}}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpuidle/current_driver\x00', 0x0, 0x0) read(r8, &(0x7f0000000180)=""/100, 0x64) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fdd000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000400)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 59.243354736s ago: executing program 4 (id=144): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x20000000) 59.243033024s ago: executing program 4 (id=145): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000080)={{0x80, 0xbd}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x32cbe4cd, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0x101, 0x6, 0xe1d9, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000240)={0x80, 0x2, 0x2, 0x80, 0x8, 0x9}) r2 = openat$ipvtap(0xffffffffffffff9c, &(0x7f0000000140), 0x8c2, 0x0) r3 = getegid() ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)="653a2d5f67726f75702f6d796576656e7420fc1e3bef2b3995bbfdb8483b7cba7a76ea3810eba977816d7f636865642e", 0x30) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r4, 0x84, 0x24, &(0x7f0000000340)=0x2, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000800)={0x0, 0x2, 0x2, {0x5, @win={{0xa1, 0x80200000, 0x5, 0xffffff80}, 0x2, 0x8000, &(0x7f0000000180)={{0x1, 0x7, 0xe0000, 0x3}}, 0x800, 0x0, 0x8}}}) 59.173923028s ago: executing program 4 (id=146): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x10, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="e12171e11664fbe18ec2ce2a492d882dd4183df838f1f6e57a34a9f73e29076c28450a6b833935bf5e5f14f88212447e07049701ee0dd3371013cfff8359fdcdd70f6f0d1fc969ad31ccbee43d5d983c07f317a7d6f7d6e300e245a766151430a873822f761340fc7c581a22d7beb3dbb84167740dac8f48a24db6765c2248a2d559aaae26092ab140864a3c6ff65a62ef542fa3b22017a9c9d80baa4b0eba7619b4872d7d3a700d9453ffb03c8ab52030213cdab2a904", @ANYRESHEX=r2], 0x128}, 0x4044811) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfd6b, &(0x7f0000000b40)=ANY=[@ANYBLOB="79dab07a40f219a51032a4a4ac31f0c0caa04bd25b8e8e832e7cebee1f208688c08133dc6829b0eb274df9cb9ed33f3eba20b56bd5ea7243f8d32eca9a9d3ce431ab85ee4e05af8a3e86c32a03b4e178cc6f8a4feb4bd88dc531fe9f720933447f738b80e694f474260bf070d50da406f8db44ff0d3aa0eddafbc366def80db75a74fd73fe164ffaecba1c4fee4bf9b082209518cba922e57b1ddbb22cf1dd78eec9a501a3c17cddac6939e197"], 0x128}, 0x4004090) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000400)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x1, 0xf88, 0x0, 0x0, 0x1000, 0x0, r4, 0x0, 0xe8}}}, &(0x7f00000004c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000007c0)=0x1, 0x4) bind$rds(r9, &(0x7f0000000980)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f00000009c0)={&(0x7f0000000a00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/98, 0x62}], 0x1, &(0x7f0000000b00)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x4}}], 0x30, 0x8000}, 0x4044001) r10 = syz_open_dev$vim2m(&(0x7f0000000300), 0x10002, 0x2) write(r10, &(0x7f00000007c0), 0x0) ioctl$vim2m_VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f0000000800)=@mmap={0x401, 0x2, 0x4, 0x80, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x400}) r11 = dup(r8) syz_ublk_setup_queues(r11, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r6}}], 0x1, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r13 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101c42, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) write$binfmt_aout(r13, &(0x7f0000000300)=ANY=[], 0xfffffee2) bind$bt_l2cap(r13, &(0x7f0000000780)={0x1f, 0xf3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x1}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r12, &(0x7f0000000300), &(0x7f0000000340)=@udp=r0}, 0x20) 58.353173355s ago: executing program 3 (id=147): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x84) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r2, 0x0, 0x0, 0x8, 0x12, 0x1000, 0x0, 0x0, {[@mptcp=@capable_synack={0x1e, 0xc, 0x1, 0x0, 0x1, 0x1122334455667788}]}}}}}}}, 0x0) getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x60) sendto$inet(r1, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x40, r5, 0x5, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x40}}, 0x0) 58.295563181s ago: executing program 4 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x212081, 0x20) write(r0, &(0x7f0000000100)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000480)='./bus\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000640)='GPL\x00'}, 0x80) renameat2(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="3e64f5b4d9ec8df60e1371acdb8774c1afc5d93db6ca901b18ebd1fc5f66cb5fe78b4e7cbcbb506a86c70599bff5152f7e4602e5db6f2b691297982ad37c24f5e6f92a31d4e4c343e48e6e8a4bfaa3baff7acdb57d1ef7e4b084acf395ef033ab6ef2ea869be5dcf819ca88104c9bcfeb0f703f61dbdcdf8721fa7e27f257ebd3908400795bf2ff73a7ad1", 0x8b}], 0x1}, 0x240040d3) 58.120213879s ago: executing program 4 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000030000edffffffffffffff00764ee7562460db57"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000"/54], 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x4001}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x6484c2, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001000000000000000000140000001100010000000000000000000205000000000000006d5b16b111fede189bdfd457e17357f456cbb0ea44a4fe4488241c1c4f1ced1fe231b5fb1977173797db7999a479dfb45c4b1de712759f956d0f56aed1852047850c3e274758fae8f38640f7bfa58a73e1b7ef2fc5372c78aac54c3f532d70871d556e7c42321b9e557ecd41804512eed5e1de360e4970684e0f346262ba14230c"], 0x6c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000800)="600000800000210ee7decd7a000340008100", 0x12, 0x40, &(0x7f0000000840)={0x11, 0x8100, r8, 0x1, 0xd6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) 58.109705101s ago: executing program 3 (id=150): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc96, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc98, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={&(0x7f00000007c0), 0xc, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x158}}, 0x0) write$tun(r1, &(0x7f00000009c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x60, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) 58.067751381s ago: executing program 35 (id=150): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc96, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc98, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={&(0x7f00000007c0), 0xc, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x158}}, 0x0) write$tun(r1, &(0x7f00000009c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x60, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) 57.903945539s ago: executing program 4 (id=154): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x442, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RSETATTR(r0, &(0x7f00000003c0)={0x7, 0x1b, 0x1}, 0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r1, r0, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file2\x00', &(0x7f0000000480)=[0x2], 0x0, 0x0, 0x1}}, 0x40) (fail_nth: 4) 57.859034625s ago: executing program 36 (id=154): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x442, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RSETATTR(r0, &(0x7f00000003c0)={0x7, 0x1b, 0x1}, 0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r1, r0, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file2\x00', &(0x7f0000000480)=[0x2], 0x0, 0x0, 0x1}}, 0x40) (fail_nth: 4) 54.339464788s ago: executing program 8 (id=184): socket$igmp(0x2, 0x3, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000000)) 54.261648983s ago: executing program 8 (id=186): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000088000000a0000000004"], 0x50) r2 = fsopen(&(0x7f0000002380)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000023c0)='auto_da_alloc', &(0x7f0000002400)='0\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x11, r1, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000002340)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r4, &(0x7f0000000080)='1', 0x1) r5 = getuid() r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000003100)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000005100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000051c0)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r7, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000005780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005740)={&(0x7f0000005280)={0x4c0, 0x15, 0x4, 0x70bd26, 0x25dfdbfc, {0x1f}, [@nested={0xed, 0x87, 0x0, 0x1, [@typed={0x6, 0x154, 0x0, 0x0, @str='/\x00'}, @nested={0x4, 0x162}, @generic="58702ea2946f82342d8be66eedb46a376ac4b1964be3903f6300301c20b5c32a764023f71b544ae36a3e3eedd09c2454b0b340e665651cd495f49aaf7eb5c52eba43781cd7626e23b6b0be5665f235d2949b3710221d1e2c8e9773735c7c8f7249fb9aafb60237d12870697083ecc3806d5e3dff6b27fd1b677f916ab05c6241d70f81e4540a503bcbae6cac799d1d5ee6970ab3b8eeb708b4e4d3e75a9346ba3e480c067e2b2a0463a5ec609b5e5c4eb80c596d124ff9cb182c7f534b594ca312", @nested={0x4, 0x2d}, @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x4, 0x147}]}, @generic="81cf76389ee446dbf936e9549292a055258ef3305f1aa9699031e706b15278abd9b2ff58c14fc21be46360914632becf64c662873d9d894372c4e57e10b9a3a728c293ade168106e7525b79e7cac4f9fbcfad79e71b491a0a4b21ed6383837aabd747db01531b43d0ab56aaa516d58aa980ec1e50564821d55b047f791a65bb1b29fae26fe7c0ca32a31f42507db93ee30f4c7342d32d16c20cb1b92fca35715d3ad6b69c2eefa1effa60c1214f1bb243726c624dd50e48c21c78b16aaf7ea1b074fe6850af51642358993028422fbfb96ed582b44805bad485db2c6c1f3f4eebe4d31ca70366ad9", @nested={0xc, 0xe6, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0x4, 0xec}]}, @nested={0x10, 0xfe, 0x0, 0x1, [@typed={0xc, 0x93, 0x0, 0x0, @u64=0x4}]}, @generic="382f91c19585571bdad5897258e4cc892553b4cff8738b78f6b2ebe850037ccd891daac018cc5f7874f7c4089a4ac9c3f8adebc67d51652b3a23f7cccee845eb9790a8654c52e3ffe443bd9aabf76ad5e1bc310a40e4f252256965b23975660b2207e77fa9cef3f90968ba4b91fbce197ab78ed4d5965ae309c2266c1c9e81e1c0", @nested={0xea, 0xd4, 0x0, 0x1, [@typed={0x8, 0x62, 0x0, 0x0, @uid=r5}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @nested={0x4, 0xcb}, @typed={0x8, 0xa5, 0x0, 0x0, @uid=r7}, @generic="0261945fe18ce4c29b07dacc983f5df631e53f48fbaa8e71f562b58e3b369c7de4610cd77e573af623785c5b8d4555a359a85924c9af97310b412946ff74eb3a907ed02f4e2d5f70b1b2582dc76e06e8e1382bae9ea3f9ebc9c666d509f9767aa350ed21e01fbc97f09af265db8b76b86ee0c346f421ed352b1d90432c5d0c2616b3df2a853a067743be727d2ced82f1afd634644f9795a6ea070baf9b1dcf9edc232a1ea6410895745eb4c38293ff4779ebfc922c62e7b5d32c4da4558f"]}, @generic="4bdc286493ebc2650721c6a4f7e49a178b7b8cce1618c9d6b59fe8933a49615178d55144845a529419f4263f26afb01fde98d03eb54c02c94dcd216c10f25b1716a2e4e6464a5f4f5f369a37b7d31c43918727316b3dc1ea4e7ffae20e7c29684c4c00be3b2cde9a9cfe96b1d14d30c5fdf72630d44f94efcdbc2c9629e2bb445a8e531665eb6a60db40af0ac570150536cd11ba0315d1fca7be8904deb031b2e7071dfd13ef38fc15574a3ef6c14c99d8f82cac", @nested={0x8e, 0x119, 0x0, 0x1, [@typed={0x8, 0x16a, 0x0, 0x0, @ipv4=@local}, @generic="712c6ca33c55fcf11ced9c10c17aa60cc141580eb865f5dc103ec858604e853a54cd9084d57f8d4d9a4c3bafc781fc198c94d0ed12fcbe881e6227cffcce78f0e803d6368cc7a3c0d7457a3a294db2895eed97cd60ad9798d8b64cf1836f4e93e2d2b6d9d43e9a02fe7444a065f6ae006bc791367069108bfdb7f3bd8c27ade4170b"]}, @typed={0x4, 0x147}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x40}, 0x4800) mq_unlink(0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000240)="140000001600a9bb1120c038c7c57f5a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4) 54.26013266s ago: executing program 8 (id=189): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$CDROMVOLCTRL(r2, 0x5380, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r6, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000000)={0x8, r3}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r6}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r5}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r4, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r3}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f00000001c0)={0x8, r1}) close(r0) 54.203516637s ago: executing program 8 (id=193): r0 = socket$igmp(0x2, 0x3, 0x2) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0xfffffdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20048800, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3b) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="f0ff4500b808018ee02e0fe09300003e0f01cbbaf80c66b82c76678a66efbafc0cedb8c9000f00d80f23ff9a8f7fbe000f800b002e660ff67ecc", 0x3a}], 0x1, 0x58, &(0x7f0000000100)=[@dstype0={0x6, 0x5}], 0x1) 54.193077025s ago: executing program 8 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000240)='7', 0x1) write$P9_RREADDIR(r0, 0x0, 0x0) msgget$private(0x0, 0x10e) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0xa0, 0x0, 0x0, 0x8, 0x10000}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x350, 0x10000) ptrace$pokeuser(0x6, r1, 0x388, 0xffff7fffffffff7f) inotify_init1(0x800) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "ebfe"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4000, 0x40}}, @nested_vmlaunch={0x12f, 0x18}], 0x9a}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, r7, 0xe2110034) 53.902249476s ago: executing program 8 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1f7) (async) mount(0x0, &(0x7f0000000140)='sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0xfdef) (async) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000280)={0x7, 0x8, '\x00', 0x0, &(0x7f0000000240)=[0x0]}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x110a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x81}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 38.877741959s ago: executing program 37 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1f7) (async) mount(0x0, &(0x7f0000000140)='sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0xfdef) (async) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000280)={0x7, 0x8, '\x00', 0x0, &(0x7f0000000240)=[0x0]}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x110a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x81}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 8.226233739s ago: executing program 0 (id=669): r0 = syz_usb_connect(0x0, 0x32, &(0x7f00000017c0)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000018c0)={0x1c, &(0x7f0000001900)={0x0, 0x17, 0xb, "175415319b220dcd6de2ca"}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f00000019c0)={0x14, &(0x7f0000001940)={0x0, 0x4, 0x1b, {0x1b, 0x9, "c71ace5eb4a64219b11e707a29e18990ecf0da21077dafd400"}}, &(0x7f0000001980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x243f}}}, &(0x7f0000001c00)={0x44, &(0x7f0000001a00)={0x0, 0xb, 0x16, "f92aebfc7746c57f243a4f76fda74357429f09247f08"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001ac0)={0x20, 0x81, 0x3, "4b0ed1"}, &(0x7f0000001b00)={0x20, 0x82, 0x1, 'P'}, &(0x7f0000001b40)={0x20, 0x83, 0x1, 'Q'}, &(0x7f0000001b80)={0x20, 0x84, 0x4, "5c9b3375"}, &(0x7f0000001bc0)={0x20, 0x85, 0x3, "c240b2"}}) r1 = syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_vhci(0x0, 0x11) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) vmsplice(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000001740)="19efd130e8b5fdd0ab0b5422f3488bd7528dcea24f8ac75cf5fe22fc0794df642352d329112474ef44647af7ded18be555920571cfb7f4749f2c82d4cb250276", 0x40}], 0x1, 0x4) r5 = syz_open_dev$sg(&(0x7f00000016c0), 0xfffffffffffffffa, 0x40000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000001700)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001800)={0xb4, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '&\x00'}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'GPL\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10004893}, 0x8d0) syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x100c}, @l2cap_cid_signaling={{0x1008}, [@l2cap_info_rsp={{0xb, 0xe, 0x1004}, {0x7, 0x41, "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"}}]}}, 0x1011) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x5, 0xe, 0x0, &(0x7f0000000640)="7993ff01190000e5ffa53b00008f", 0x0, 0x3ff, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close_range(r6, 0xffffffffffffffff, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001c80), 0x400000, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000001cc0)=0x2) syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00') 4.775793536s ago: executing program 6 (id=711): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000880)=0x81) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/4110, 0x48}], 0x1000000000000082) landlock_restrict_self(0xffffffffffffffff, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x23, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf1600"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="997425bd7000ffdbdf25150000004c0001800d0001007564703a73797a3200000000380004001400010002004e20e00000020000000000000000200002"], 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeded}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabc7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40084}, 0x44084) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x1ef}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.564126559s ago: executing program 0 (id=716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ff) mount(&(0x7f00000007c0)=@filename='none\x00', &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000880)='bridge0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/net/bridge0/bridge/multicast_querier_interval\x00', 0x2, 0x0) write(r6, &(0x7f0000000900)='1000\n\x00', 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff2, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f00000001c0)='7', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x4}}, 0x1c) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r7) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB="5cb521cfc1f9e63e381e8927251ee4000400", @ANYRES16=r8, @ANYBLOB="000128bd7000ffdbdf25120000000c000380080001000a0000003c000980080002000000000008000100d809000008000200050000000800020005000000080001000800000008000100000001000800010003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000700)={'syz_tun\x00', &(0x7f0000000740)=@ethtool_link_settings={0x34, 0x0, 0x0, 0x0, 0x40, 0x80, 0xfd, 0x0, 0x0, 0x0, [0x0, 0xffffffff, 0x1, 0x4, 0x8, 0x400]}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) socket(0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.141857878s ago: executing program 0 (id=731): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12022, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)="c1e22038ba518aeefb0386", 0x42}, 0x1, 0x0, 0x0, 0x810}, 0x24004040) 4.052454587s ago: executing program 0 (id=725): r0 = syz_usb_connect(0x0, 0x32, &(0x7f00000017c0)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000018c0)={0x1c, &(0x7f0000001900)={0x0, 0x17, 0xb, "175415319b220dcd6de2ca"}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f00000019c0)={0x14, &(0x7f0000001940)={0x0, 0x4, 0x1b, {0x1b, 0x9, "c71ace5eb4a64219b11e707a29e18990ecf0da21077dafd400"}}, &(0x7f0000001980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x243f}}}, &(0x7f0000001c00)={0x44, &(0x7f0000001a00)={0x0, 0xb, 0x16, "f92aebfc7746c57f243a4f76fda74357429f09247f08"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001ac0)={0x20, 0x81, 0x3, "4b0ed1"}, &(0x7f0000001b00)={0x20, 0x82, 0x1, 'P'}, &(0x7f0000001b40)={0x20, 0x83, 0x1, 'Q'}, &(0x7f0000001b80)={0x20, 0x84, 0x4, "5c9b3375"}, &(0x7f0000001bc0)={0x20, 0x85, 0x3, "c240b2"}}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_vhci(0x0, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) vmsplice(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000001740)="19efd130e8b5fdd0ab0b5422f3488bd7528dcea24f8ac75cf5fe22fc0794df642352d329112474ef44647af7ded18be555920571cfb7f4749f2c82d4cb250276", 0x40}], 0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f00000016c0), 0xfffffffffffffffa, 0x40000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000001700)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001800)={0xb4, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '&\x00'}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'GPL\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10004893}, 0x8d0) syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x100c}, @l2cap_cid_signaling={{0x1008}, [@l2cap_info_rsp={{0xb, 0xe, 0x1004}, {0x7, 0x41, "1ae0fb0aef4dd1fe1b1d5d3efd4f89267d7b32f7662d42990da7157d224983a8fa9af4ad3b0664c723179b81b778dd07bc7dae48c839f5d4d3ed75619cebe7f516cdcaafb5bfca23818a8c3ffb1c942290dc6ad7e9b9a7f68cec0056efc644f53a42f3bd5112dff6239caaf3989a913b4a1f2886cfca090a41ade03fda00ee5a545f1ba313af482f382d55f8cba204776772e85a617b3c9400b9763076f0ec2ce5cdeb1a47b656de9509814a5158e1910b3f79e5db76d3267c14677277b7197c76d57d0437d939d6f71662ffd6807806bf4c48bed46c35e62fa82bee332f5279e0b5c3c140ee8239c06445253717de3685ce63022e75c73b0a3222b909e56d273d2c3888dd5973b8cab935eab5dbcc8310fe9951d3d7cfe69f60a154c27ab302f2f5e9ffed3b90134110808e3c77483cc7e747423997c65802cd9faafebb18e183bf4b5305b8d6cba3f7ad9f85b203dee5962009d9315c4bbeaeba816563a6d18dd379619ea003fe6ba63663fa34e9d5297ebc52e728fae0132cce1e861e43930a8bd66492d20f9c5bb41e5b754b34823bb112c41c9675d2f3cc311b7095741f1bc8e708b823fa8d32c1075bead7ba127d9cc11ceca9b0083af4cd275583c66178d665b063923607bbad7f5c29ba7a5160d609d95c855ba3c590c91f93563ab5f9819ec3f4e1b61b54c553fdf8bcebe3696164e7434a566877b303d22943e5dc665f026099042da670acc607619055a6cb669868ed3d00a6448b4a106ab22f7f38eb10ccab8c576632a832610d5eaa99f1f31532da181a9015da9ea5637c3c08db53497af8af51723120c122ed28b6e3054e8d45f843d01468514aad9f220b1ebee0a00f56ab3077691cedb7d0ee89234dbfcae08fe03910a6802358ac7ddce4701e2bf8594bef1df8aeae86976325ff11b8d49e9e88a6e389d115ba465c414a500661c783e7baf75c7f0c2d3704b705fc859fd1c15f1a87793218f6212eccf555715a132fcca0d4a4e5e866c2e6bf1180a15d347b6d9d77b59bec5a5c1815cfb17b7a1d89a5b594d11b8894c297cea228e1dbff3f3176b7d4cbf6c9ede5e8d0b1547cab9d9a29eb72f9fe542a0ad5f01bdf45ded66c2baabbd81e3dbe7b0ccb7c486ad0422714f7bda78b2190e3b8efcc80a9e539e172870e5d97659160d88b4eb4b455215d51daf45bffd5bd42b3c2d63f5677f0bfeb5ca553dacb075a4ff30f3dd66a9e6cfb9bce9d3b00896ca51c1c583174e72691cfd80a70af3284f07b1936bfb81b1ff47b21260f60d0f4baa4cbb861658f20a4f1ea9859ac41af44a9be5c0cd95774534ada37709b6d4a3a26e070103bf9df3278a617007190ddd645d876e73e72c45e852db096132b0a04f67311c3423b29adb40173046e84057ac99d5605ef078b09f92bd4f661a5919a5081c33f97b3ff78a8600336f82a37b6e96b10ea942339bea879dc26e0a0a7f7656d727168554ea264e0402053d7f16c4dc68190a8700d74e6573a3548f739cc6da28622c7559ecbda8786c61e77ca98b2716a449ec7effdc74c625a8f217c4341ecb39cf8a077c6c88ef72d2819a21e1922d99fef7c1e665b086c5b3b5b5c011b59a8a6c3a89f12402718ada6b2b9ecdd072c24dd013e8cc3770a6c7e0edd1de26f2e6999d036b00955bfcb72dc0dfd95f815325915e192d512acba46d5f79249f74ca1051d2888bc9b24e510bd7968f907818067e629579b9493cfd16019002305a356761eabd505065109439008ef75149f0a1d8d2b46a663b0f99bd1a9058c8272f5a477ae6e92ca418f3dbee7dbeb57e28bc37e6df7d5286c306dfde13cb36e0be1abf43dc038da91d3480f6d9d4cd6c786a034f6234649c8a6e33a9602ecef24b60b150d842981449492600c097de91ca3ab6d0b329cf5101a89b6456cc0944c6a83d03da7d292432c48740a4cf496685f3a92ca6339c18c4b5833ee933af867b7765ca7c8213427a919b668287e63c479e8ebbd97cfe7b2393e896aa8b85eb1115dbf73c69b210f6ffddee6686c9724848bf72111a464559588b490cfd4d54e8c2219003d3829ec77c2a125eba287cdb7407119c35759d7246e7c6395845139f5678d78f92fa60442025551951959c45b72961227f72b15b1d9384aacbb2d76059a3d311d313ebc5c3b4a1653c3e88e4c4c18cbf849c93bddfc87f90ebc5c671d84a3b1e69dec29dec14bd32714295649537052c3eee971a5ff531363115e9a09c2cae1aa24ba4d362ae8b45fa042f413bd961e07b0fd78a63a23fb5d8a4128b357abe5b3929f2b0844c06d2fd8d07ee18dbd8ee520aeb923ccef6c6fba6707d1b488352e4479e2e023499f3c5abb880f2883d08d205b696fa15383d6ca04868bce86b6971e55aed1b109211d1923a34fd94dbc3b12fd7b9e917a21275520331c2403bdea9f9c927dae2bd3a9f1ad743e08417f5c46a58428d31fa340444b2d915fdf8359ea70077dd72769419cb07616f6a61a3c713a138351df73330448c35e2ca8461c7cb7f7888ee735e0a5d060cf1b7bd0072fddf9033232dd5f4a0f8a936974a187946eae4b9b75eff2153ddcce04aefa4c7a30bcfa3fda4cf62cb87fcc67ff4657c93ff2b43507428978b169b897ed11870dd5b3e908d4ee41e21238998b6c05b1d1f28cb66422ffe7b46dccec31c5a2badcffd0990626fc209de3b229d5cb7ec6c0b28202333a8db94682eda806aaac7b780c1fc51ab94c8b2b7e7194253607fa0f64f0fbd0ae5c01bfe7a732f8dab9528c2f703887f776e2b1668d261f16f48ece5629c4139bc716bebe7f6eafee66f6ab2ce8eab19dbe0da25965ea9ab009a0906d4f9edf3c4721a409c4167c1d7753419da9450642cf21a04dc2d4d56a6cb65d80a911613748e0cb28cc4e554eb9ea81d24c803c1eb609b5f35c83e81bb909301c55bba4571d80e618c6cb048338f9e16b931dc8fe0a74444e33445c7ca72af37f73be5090706650f013f2627a273d83dff0ccec80b4fdb6eeb603f5c90a42c6ca31ee341e27b229705e84b156654e7b0dcf893e5d30bb431c8b518fe3ab3fa705de91e5d94e1149f42c069a278e6caf31578155469e9e17e18caf72e855d136c64349aecf19ecce20912e2b443db8f7880a2b1ecc0ce743e89afeddde8e4bf2b838b5f8f4264eb22f471be4aefb153d8779f6b37f0a817dc59034f6e41dab6f8e0c0b3451da19c82b698d6d6a3e2afcf9dcf0f1631212262a94939d33b495a8f06f5b4f285fe944439d9b2292a57fb4d91f3a8b835f9e00ff45f15112385886134ffbab10c8a8b72a3165c46878ffaeb44429db489762cb14aa26ab88dd2269e8e96a443140a724ba652aeb76b819640602c49ec4c375ae134e409aa897a4f47a677eb4226059cd16bed17fc6d03a20bfce6421127e72c2b404c8f853ddf9bd2a586afe2d5045f81fea8fff8a2f257063ff1d6c31cf7ac9c9c09405e07f58aca2e58d8997cf174f8099239c836f63a6e9af4b1e9c10fbff06b91d9b30f50faa843e6f4d1db3c1540fd4ccc47f986a4bc2523edbf515c43164591ce76275bbc7bf8aac31413951036a6e96dfa36095b78f5326c480dd059739bf8ec375644e8fedf4ad9f4e64d1f9ce5c8d6d568541c51928f652c50a1050d269bdb2172074d5dd9d32d652991d5d806df5e0b809e4856ffe01996a1d6a011c15cc16ce09086cfd52246522693b6b902a274422dc1ec0132ef0ad1453e0f5e78f3a95582d16990d1764fce7a48e9e7b62a38e5393187641faa49d6a2b164d2a9aa7ed38cf0057767b72bb3e92658a8980094b314cbe655047216909a195932c64460ca7b423a5e32250addd97206bddbb230f2d1e03379d6fd10d3d95860505848feda7c6362ed7d8e46a454e396c5d8b6b73007f711c7a0e7ccd7dd9f6dddf6164af6fbf3f6f295437172a065eb85d6af34475cf25ed1e41dff3cfdf50338f19e07e3474965bfbd902f5de6dab262968ead2012e5cd699181379ac35a7b994cd396bfca278f9fdce21eb7913bd4098ee4d6bae2c5efc4fd451b2e1d416e3edb463dafd647972917a32527384e6956baa833654f8060249ee4487773590650024c75af8b8850f2f6e7d180cfe97239283b1cc3bd7e1efb848a3e75b85a58de46cb4b6c6ac1a2cc63da6b46513e3407e905e0f65377db59c9f57bb52a15e7935af2b922854b5a74ebb8b53a9b0c650f8564fbdc4c0182aa7a8c11471524633ba1d55cca6d1137d9f1c23f36e97629dc4d70355bde2e6f6fc3cf9f6e9b811ee702684bf51fa3c9b75e40daa1dc3d116c86f61eedf952fa36f47c168e7a4d02779f270d3c4ce7bc8d2abca77c3e62ed1ccb3b664ee971a800b47f79f05d96cb2e046031bc810d8e1150966312d6d89b78e6091b80466ed3b4c3baa16003d442199b5d5b0e16af31e86fc0692eb32d880518393063a931b08c5b83fb32f791b1f55f96ef89ba387f3f6f78e93eb492e5ec28e921edf397d9e3726c142231d4e6a8d5035c8edafadbf8ceb1ef68079e225fbd94c6dbfab31892bc7d711d1cf1500564aa62c186ea47b08c00479258d0ceea45cf34e6e4714c8d63f68a0a689a6aedf33eba7eada5a26420ca4a8b800f0c1965daca95fbf47547843b98e1f84e48c376bc53b24be395c726ff738884e429a6e7971b50c105f8de3964d164cb357fd7a0f7b08a2033a13c5bff49e00070faee29c019df1c8061837a4b8070c4aec34565ca05e2a24c6f258efb13ded3f46ca3d4cba039b392d53ef91d6e40a234b6919f210007843d6178f8353d41d5ef6a28c8dfa4b7f0657115f65f0d5713c65679a3202c87bd1ee17e1c8ae1d20dba0458840cb6f26f879210c0a713ac89302c22bfbf98ec058337b6c58113a56e05ee758dbbce3f44cabfd93dd9effca975ccfda5eb34ad1381dc3045d194a95b76580aad981fb251e70ee694c477caeb5f30d126cb6ec06f35644375457759e3eac38319000267fcbca136fe5f3002d5d8ed42e4a1473557aec0d921ff71ea103c5621d957a2a73a273d6fcc92a49d9e6c8784a9a0c9909c1b8ae496feaf7c713035054c9cc40c9bb2de2bb87d366f0463bcacc3869a76f0446a5345b98269e6fe7b00c59b15e40111ac22e52e59af5ff2eb6f0c10b0bfed7d5a237fd3cf4a7dc3a13d87ae0f095a7e7465e51ec3a79ee866f94fc60be19face29bd29dcb4bca00e321b5096f0609552fa5ed867b4f78d8d808c8b5b937fffda8e2a723b9ea8524b9023bcb4fef4ad937fb6176f12789b01f89c2d8b9d4ee76a31fa99708932a217ae536d65eedded41e37b431149c4b1d7ba7919d21d9eac1266e5f7df33c5dd13b59ba48a962684918e6af8977b93eda839896759eed52d8a56fe8ddb7479108389ae7ab8d41e870417d56930c9eeb7031badc3c29398181d7b9600434fd7e6d56cd43ee97ae11d8a8eedb10f90806dc1e2833f71b71b23e16fee602f8c66e107d12778e1c967b659bee9eee9b8ab83fc1e1cd195d61c7a6d8d31258a6ee938999d306276171c5d65b839851388a7fed9b422538283f3cfbaad0553efec42899c690c959a51871f1305ce7631e9fea9d5648fbbaec0152687abea101555f43d57cacc468ff6cdac52ca20005745c2f3bb658333bc2c41cbc523030aeb8c716e3d8e8596780aa3a5f9ca97eb6fe2c6980ab1e05536e1c0cc0422ab2a60312464f65ffa4588f91618ce1e715631a8c7c89f3fb195334aee59fffee77c33ed5bf1d40115454b4d3a812a1e349c8da60bd5e05de861c4890d3b4b0875efb4c6815437ae"}}]}}, 0x1011) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 3.886484267s ago: executing program 6 (id=733): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'sit0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9000c0008000500210304"], 0x11) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000940)={@loopback={0x0, 0x3fc}, 0x0, r1}) 3.673159903s ago: executing program 7 (id=736): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000200)={0xc, "d4f429030cfb65587393ed9e9f666a31e9feed2c7adf37cf333004a2ed103ecc", 0x4, 0x1, 0x6, 0x3, 0x4, 0x1, 0x8, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) syz_clone(0x49000100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000004a80)=ANY=[@ANYBLOB="180000005400e5010000ffff0000000075000000", @ANYRES32=0x0], 0x18}}, 0x4080) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='.\x00', &(0x7f0000000400), 0x4, &(0x7f0000004c00)=ANY=[@ANYBLOB="7472616e733d76697274696f2c76657273696f7a3d3970323030302e752c69672f16d41bae00b71a3b6e6f726571762c6163636573733d636c69656e742c00"]) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c00cc7a0c00018008000100d580d6129f231cd2870d45dca58669159238b335b40ff3e073b3c641cb1531bf0c6d02b8d4ce0d6e6239d0ae1635bb70514207423dd336276a4de99b0891fbc706dabf301c5f4e674d43f153cf909a3e616ee5ab4a09bc28d44bf2b33433cf9fd0e4f9031ad4be09", @ANYRES32=r6, @ANYBLOB="1400038004000100040004000800020000000000"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mount(0x0, &(0x7f0000004b00)='./proc\x00', &(0x7f0000004b40)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004b80)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r7, &(0x7f0000004bc0)='7', 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3.416879381s ago: executing program 7 (id=737): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[{0x0, 0x7, 0xd, 0x9}], 0x10, 0x3}, 0x94) 3.388446764s ago: executing program 7 (id=738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x81, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='nfs4\x00', 0x208000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000001100)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0x7a456c6a, 0x10001}}]}) r2 = socket(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000180)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed82, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000011c0)={0x81, 0x0, 0x1}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000001240)) 3.256331873s ago: executing program 7 (id=739): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0xc0403d15, 0x0) 3.255202785s ago: executing program 6 (id=740): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='jffs2\x00', 0x0, &(0x7f0000000540)='compr=none\x00') 3.242002378s ago: executing program 7 (id=741): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000880)=0x81) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/4110, 0x48}], 0x1000000000000082) landlock_restrict_self(0xffffffffffffffff, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x23, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf1600"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="997425bd7000ffdbdf25150000004c0001800d0001007564703a73797a3200000000380004001400010002004e20e00000020000000000000000200002"], 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeded}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabc7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40084}, 0x44084) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x1ef}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.241343846s ago: executing program 6 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f7e0f092e0f06752066b9800000c00f3266004000000f300f01d7ba41000fbabda7002b", 0x31}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0xffffffff, 0x7, 0x92, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0x8, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x7fffffffffffffd}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000008}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write$binfmt_aout(r3, &(0x7f0000000900)=ANY=[@ANYRES16=r3, @ANYRES64=r3, @ANYRES32, @ANYRESHEX, @ANYBLOB="3466c5ec2b0830057d0e627b1be2d78040542ca5f3f08dca4a2f9ba1c53e70722efe26495cbb276e5ceb979e79f8bafbd60d3a769eabb98491f7d81110ecf832080ea937a61cd84a32ca25eff87113bc4951aee1a12718ea51b94e7b9346a0803e1bfae09318f5499ceb245e3c3584119d13a032f062f3129b365938fc746882dfb8941ceac4ad3b21a5912316fb6bd9d71d8c79295818be677d085352c5a7113d73e98bf75bc5ce39a1bed029e1e9c429ed300e", @ANYRES8, @ANYRES8=r2], 0xff2e) 3.013054177s ago: executing program 6 (id=743): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000240)='7', 0x1) write$P9_RREADDIR(r0, 0x0, 0x0) msgget$private(0x0, 0x10e) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0xa0, 0x0, 0x0, 0x8, 0x10000}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x350, 0x10000) ptrace$pokeuser(0x6, r1, 0x388, 0xffff7fffffffff7f) inotify_init1(0x800) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "ebfe"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4000, 0x40}}, @nested_vmlaunch={0x12f, 0x18}], 0x9a}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, r7, 0xe2110034) 2.778185219s ago: executing program 6 (id=747): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000025c0)=@newqdisc={0x474, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x448, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xb2, 0x1ff, 0x6, 0x200, 0x7, 0x1, 0x2, 0x3ff, 0x100, 0x6, 0xb7, 0xff, 0x3ff, 0x7, 0x8, 0x4, 0xfffffffa, 0x7fffffff, 0xcce, 0x0, 0xfffff7c5, 0x5a, 0x6, 0x10001, 0x9, 0x9, 0x322e, 0xe0, 0x8f14, 0x9, 0xf, 0x8, 0x3, 0x1, 0x7, 0x7, 0x8, 0xf, 0x2, 0x80000000, 0x2, 0xb41d, 0x1ff, 0x4, 0x40, 0x8, 0x1ff, 0x6, 0x200, 0x6b4, 0x4, 0x8c, 0x6, 0xa, 0x2, 0x2, 0x6feb, 0x2, 0x0, 0x7, 0x85, 0x4, 0x8d0, 0x1, 0x8, 0x5, 0x4, 0xfffffffa, 0x0, 0x3e9, 0x4a, 0x7, 0x81, 0x1, 0x7, 0x4, 0xfffffff7, 0x7, 0x4, 0x1ed, 0x80000000, 0x6, 0xff, 0x4, 0xba5, 0x6e5, 0x1, 0x9, 0x2, 0x9, 0x0, 0x5, 0x9, 0x7, 0x5, 0x7, 0x0, 0x1f99, 0xdaa4, 0xb, 0x400, 0xeb88, 0xe, 0xec, 0x10000, 0x8, 0x1, 0x5, 0xfffffffd, 0x5, 0xffff8000, 0xbf0, 0x0, 0x62, 0x1000, 0x3, 0x6, 0x7ff, 0x4, 0x83, 0x620d, 0x13, 0x8, 0x9, 0x400, 0x6, 0xfffffff5, 0xa, 0x6, 0x8, 0x4, 0xfffffff4, 0x100, 0x5cd, 0x3, 0x6, 0xf42, 0x4, 0x8, 0x0, 0x5, 0x9, 0x5, 0xe, 0x8001, 0x2, 0x6, 0x2, 0xd5fa, 0x7a, 0x2, 0xf, 0xcc, 0x4, 0x5, 0x0, 0x2, 0x92eb, 0x3, 0x144aaafa, 0x2, 0x8000, 0x7, 0x0, 0x40, 0x9d, 0xc3, 0x9, 0x401, 0x4, 0xf, 0xcaf1, 0x7, 0x0, 0xb, 0xd08, 0x7, 0xfff, 0x9, 0x7fffffff, 0x2, 0xa0c, 0xfffffffc, 0x4, 0x1365, 0x3, 0x0, 0x3, 0x1, 0x9, 0xd4, 0xa, 0x7, 0x8, 0x4, 0x7, 0xfffffffc, 0x7, 0x11632a05, 0x5, 0x4198, 0x6, 0x5f80, 0x1, 0x8, 0x100000, 0x7fffffff, 0x9, 0xd0b, 0x9, 0xfffffc00, 0x596e, 0x7fffffff, 0x40, 0xf, 0xb, 0x2, 0x8, 0x3, 0x8, 0x800, 0x95, 0x2, 0x200, 0xe, 0xba, 0x5, 0xa408, 0x5, 0xff, 0x6, 0x3ff, 0x7, 0x6, 0x0, 0x829, 0x5, 0x8000, 0x6, 0x8c2, 0x1, 0x9, 0xffffff0e, 0x3, 0xfffffff7, 0x5, 0x9, 0xffff830f, 0x81, 0xfffffff7, 0x10000000, 0x0, 0xb832, 0x0, 0x8, 0x4]}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x101, 0x2, 0x5, 0x16}, {0x4, 0x0, 0x4, 0xd0, 0x1f1, 0xb8b}, 0x10001, 0x28651449, 0x9c}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1d67}, @TCA_TBF_PBURST={0x8, 0x7, 0x1a62}]}}]}, 0x474}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') (async) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000002a40), r8) (async) getsockname$packet(r8, &(0x7f0000002a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002ac0)=0x14) sendmsg$nl_route(r7, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002c40)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d40)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfff, 0x3, 0x7435}, {0x1, 0x1000, 0x5, 0x7}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffa, 0x8, 0x201}, {0x1, 0x2}}}]}]}]}}]}, 0x70}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) mkdir(&(0x7f0000000480)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x8, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) syz_emit_ethernet(0x4e, &(0x7f0000002dc0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0xff, 0x0, 0x0, @local, @rand_addr=0xe0000000, {[@cipso={0x86, 0xd, 0x0, [{0x2, 0x7, "f431c75bab"}]}]}}}}}}}, 0x0) read$FUSE(r6, &(0x7f0000000580)={0x2020}, 0x2020) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2f, &(0x7f0000000240)=0x79b, 0x4) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100005060000000000000000000000000000000000000000000000000b000300636f6e666967000008000500020000002000120009000100766c616e0000000010000200080001"], 0x54}}, 0x0) 2.374941759s ago: executing program 7 (id=752): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x1a6cd3bcd9079d52) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES8=r0], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x6, 0x9) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4cc6, 0x181803) 1.916305394s ago: executing program 9 (id=757): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0xc0403d15, 0x0) 1.887048614s ago: executing program 9 (id=758): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'macvlan1\x00', {0x101}, 0x58f8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x1d3, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x195, 0x11, 0x0, @local, @local, {[@dstopts={0x2c, 0x1d, '\x00', [@generic={0x6, 0xe7, "86586ee0761f77882bb54332c2b9db2f46ed099de5786bc3d2e43cf3d88d494804ddb0333fb75752313ab5a437bfaabdc1a2a8db549df45d4868b9cf16ef50d9e096e82be07b6f38692ddb876c8bbb86209a6f3ac8c3056fd37eca3d7594b414b6cf8cc0a8b955aa442ad5fe9fcd484090ef397b0bd9c3692e7450d514a9122ca80688236d3d89cba90b21cf76e4e30397b2bf141279fe1b80cf87b3beeaefd2f4456c6c60388b980290f1c0f9b54ac9ddc867713516f1da243c15eb11b01dc9e02ed3c090e07b2fba338231c9ffb5518ff8489703506ca0afe5b3bcd19f4208eb7a16f21e6ee4"}]}, @routing={0x2, 0x0, 0x2, 0x9}], {0x4e1d, 0x4e20, 0x95, 0x0, @gue={{0x2, 0x0, 0x2, 0x2, 0x100}, "7bc626349537ded2142ab3b1bf492075354541d7ba0c7768fbdb4d9dde197cc1bd97ecf34a06f57482c6229041729a35d93c78d563dcc1729c7c65117edaaa1e09d2df862c7de18b328257d110d5187acc4e2a92ba24e2c69911e7d1585680680ea19e41a7489cf56272076d04526e2117f0b550d946d11dff735e95bc6894ea999d4ae913"}}}}}}}, 0x0) 1.733796095s ago: executing program 9 (id=759): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(r1) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x40000, &(0x7f0000000140)=[{&(0x7f0000000180)='W', 0x1}, {&(0x7f0000000000)="261e3e5a5a538b5053ca3216e026c84ef230d0db2f22faf7bd165bfa4488d23f94dede7fb3056f39baecd09b1d44a20d96", 0xfffffe8c}], 0x2}}], 0x1, 0x4008084) 862.668638ms ago: executing program 9 (id=760): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000880)=0x81) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/4110, 0x48}], 0x1000000000000082) landlock_restrict_self(0xffffffffffffffff, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x23, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf1600"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="997425bd7000ffdbdf25150000004c0001800d0001007564703a73797a3200000000380004001400010002004e20e00000020000000000000000200002"], 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeded}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabc7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40084}, 0x44084) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x1ef}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 554.863593ms ago: executing program 0 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f7e0f092e0f06752066b9800000c00f3266004000000f300f01d7ba41000fbabda7002b", 0x31}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0xffffffff, 0x7, 0x92, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0x8, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x7fffffffffffffd}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000008}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write$binfmt_aout(r3, &(0x7f0000000900)=ANY=[@ANYRES16=r3, @ANYRES64=r3, @ANYRES32, @ANYRESHEX, @ANYBLOB="3466c5ec2b0830057d0e627b1be2d78040542ca5f3f08dca4a2f9ba1c53e70722efe26495cbb276e5ceb979e79f8bafbd60d3a769eabb98491f7d81110ecf832080ea937a61cd84a32ca25eff87113bc4951aee1a12718ea51b94e7b9346a0803e1bfae09318f5499ceb245e3c3584119d13a032f062f3129b365938fc746882dfb8941ceac4ad3b21a5912316fb6bd9d71d8c79295818be677d085352c5a7113d73e98bf75bc5ce39a1bed029e1e9c429ed300e", @ANYRES8, @ANYRES8=r2], 0xff2e) 343.01663ms ago: executing program 0 (id=762): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000700)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000780)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000800)="96", 0x1}], 0x1}, 0x4048042) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000840)={'lo\x00', 0x3}) pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f00000008c0)={0x7, 0x1b, 0x2}, 0xffffff9a) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$sequencer(r1, &(0x7f00000009c0)=[@n={0x3, 0xff, @SEQ_NOTEON=@note=0x65, 0x2}], 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000a40)={@empty, @dev={0xac, 0x14, 0x14, 0x23}, 0xb, 0x20}}) write$cgroup_int(r1, &(0x7f0000000a80)=0x4, 0x12) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) (fail_nth: 5) 44.986689ms ago: executing program 9 (id=763): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[{0x0, 0x7, 0xd, 0x9}], 0x10, 0x3}, 0x94) 0s ago: executing program 9 (id=764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000200)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1b, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000290000003700000016000000000000008810"], 0x10a0}, 0x34004854) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000340)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0x7ff, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x3, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) syz_emit_ethernet(0x46, &(0x7f00000007c0)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='logfs\x00', 0x44006, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/vhci\x00', 0x8002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000ac0)='./md0\x00', 0x6180, 0x0) r6 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000b00)='./md0\x00', 0x2, 0x0) ioctl$STOP_ARRAY(r6, 0x932, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) recvmsg$inet_nvme(r4, &(0x7f0000000ec0)={&(0x7f0000000b40)=@pppol2tpv3in6, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/194, 0xc2}, {&(0x7f0000000cc0)=""/89, 0x59}, {&(0x7f0000000d40)=""/34, 0x22}], 0x3, &(0x7f0000000dc0)=""/233, 0xe9}, 0x2102) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000180)={0x12000000, 0x2, &(0x7f0000000040)=[0xe5c, 0xfd09], &(0x7f00000000c0)=[0x4, 0x2, 0x8f7c], &(0x7f0000000100)=[0x215, 0x9, 0x6, 0x1000], &(0x7f0000000140)=[0x800, 0xffc5]}) kernel console output (not intermixed with test programs): etlink: 64 bytes leftover after parsing attributes in process `syz.0.534'. [ 99.228191][ T7951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.534'. [ 99.401000][ T7961] jffs2: notice: (7961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 5 orphan) and 9 of xref (1 dead, 8 orphan) found. [ 99.413818][ T7961] input: syz0 as /devices/virtual/input/input14 [ 99.425207][ T7961] overlayfs: upper fs does not support tmpfile. [ 99.426087][ T7961] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.557695][ T7971] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 99.570097][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.570119][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.570131][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.570143][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.570154][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.570169][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.570181][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.570192][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.570203][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.570215][ T857] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 99.581878][ T857] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 99.595326][ T7971] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 99.598748][ T7971] macvlan3: entered promiscuous mode [ 99.598761][ T7971] macvlan3: entered allmulticast mode [ 99.599052][ T7971] bond3: entered promiscuous mode [ 99.599123][ T7971] bond3: entered allmulticast mode [ 99.601855][ T7971] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 99.602162][ T7971] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 99.607823][ T7971] bond3: left allmulticast mode [ 99.607842][ T7971] bond3: left promiscuous mode [ 99.651098][ T7976] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 99.658450][ T7974] macvlan3: entered promiscuous mode [ 99.658470][ T7974] macvlan3: entered allmulticast mode [ 99.658962][ T7974] bond3: entered promiscuous mode [ 99.659169][ T7974] bond3: entered allmulticast mode [ 99.659573][ T7974] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 99.660053][ T7974] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 99.661416][ T7974] bond3: left allmulticast mode [ 99.661432][ T7974] bond3: left promiscuous mode [ 99.790043][ T7984] FAULT_INJECTION: forcing a failure. [ 99.790043][ T7984] name failslab, interval 1, probability 0, space 0, times 0 [ 99.790078][ T7984] CPU: 3 UID: 0 PID: 7984 Comm: syz.0.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.790096][ T7984] Tainted: [L]=SOFTLOCKUP [ 99.790101][ T7984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.790110][ T7984] Call Trace: [ 99.790115][ T7984] [ 99.790121][ T7984] dump_stack_lvl+0x100/0x190 [ 99.790150][ T7984] should_fail_ex.cold+0x5/0xa [ 99.790176][ T7984] should_failslab+0xc2/0x120 [ 99.790193][ T7984] __kmalloc_noprof+0xfc/0x840 [ 99.790206][ T7984] ? __vb2_queue_alloc+0x23e/0x1160 [ 99.790225][ T7984] __vb2_queue_alloc+0x23e/0x1160 [ 99.790250][ T7984] vb2_core_create_bufs+0x5fa/0xa30 [ 99.790269][ T7984] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 99.790286][ T7984] ? lock_acquire+0x1d1/0x380 [ 99.790305][ T7984] ? __video_do_ioctl+0x50f/0xdf0 [ 99.790326][ T7984] vb2_create_bufs+0x40c/0x830 [ 99.790350][ T7984] ? __pfx_vb2_create_bufs+0x10/0x10 [ 99.790370][ T7984] ? v4l_sanitize_colorspace+0x220/0x410 [ 99.790395][ T7984] vb2_ioctl_create_bufs+0x244/0x3e0 [ 99.790445][ T7984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.790470][ T7984] vidioc_create_bufs+0x7d/0xf0 [ 99.790489][ T7984] v4l_create_bufs+0x17d/0x270 [ 99.790508][ T7984] __video_do_ioctl+0xb2a/0xdf0 [ 99.790528][ T7984] ? __might_fault+0xc5/0x140 [ 99.790544][ T7984] ? __pfx___video_do_ioctl+0x10/0x10 [ 99.790569][ T7984] video_usercopy+0x47a/0x1730 [ 99.790588][ T7984] ? __pfx___video_do_ioctl+0x10/0x10 [ 99.790608][ T7984] ? __pfx_video_usercopy+0x10/0x10 [ 99.790638][ T7984] v4l2_ioctl+0x1bd/0x250 [ 99.790656][ T7984] ? __pfx_v4l2_ioctl+0x10/0x10 [ 99.790676][ T7984] __x64_sys_ioctl+0x18e/0x210 [ 99.790692][ T7984] do_syscall_64+0x123/0x7b0 [ 99.790711][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.790726][ T7984] RIP: 0033:0x7f4f83fa8f19 [ 99.790739][ T7984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.790752][ T7984] RSP: 002b:00007f4f821f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.790766][ T7984] RAX: ffffffffffffffda RBX: 00007f4f84225fa0 RCX: 00007f4f83fa8f19 [ 99.790776][ T7984] RDX: 00002000000002c0 RSI: 00000000c100565c RDI: 0000000000000006 [ 99.790785][ T7984] RBP: 00007f4f84037f6d R08: 0000000000000000 R09: 0000000000000000 [ 99.790794][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.790803][ T7984] R13: 00007f4f84226038 R14: 00007f4f84225fa0 R15: 00007ffe2a0fc1d8 [ 99.790822][ T7984] [ 99.862030][ T2146] usb 12-1: USB disconnect, device number 2 [ 99.936437][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.938337][ T7988] FAULT_INJECTION: forcing a failure. [ 99.938337][ T7988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.938377][ T7988] CPU: 0 UID: 0 PID: 7988 Comm: syz.6.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.938394][ T7988] Tainted: [L]=SOFTLOCKUP [ 99.938397][ T7988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.938404][ T7988] Call Trace: [ 99.938411][ T7988] [ 99.938416][ T7988] dump_stack_lvl+0x100/0x190 [ 99.938445][ T7988] should_fail_ex.cold+0x5/0xa [ 99.938462][ T7988] _copy_to_user+0x32/0xd0 [ 99.938487][ T7988] ctl_ioctl+0x17b/0xcc0 [ 99.938508][ T7988] ? __pfx_ctl_ioctl+0x10/0x10 [ 99.938537][ T7988] ? selinux_file_ioctl+0x1e0/0x290 [ 99.938550][ T7988] dm_ctl_ioctl+0x22/0x30 [ 99.938565][ T7988] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 99.938580][ T7988] __x64_sys_ioctl+0x18e/0x210 [ 99.938593][ T7988] do_syscall_64+0x123/0x7b0 [ 99.938612][ T7988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.938622][ T7988] RIP: 0033:0x7f07d0ba8f19 [ 99.938632][ T7988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.938642][ T7988] RSP: 002b:00007f07d1aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.938652][ T7988] RAX: ffffffffffffffda RBX: 00007f07d0e25fa0 RCX: 00007f07d0ba8f19 [ 99.938659][ T7988] RDX: 0000200000000b00 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 99.938665][ T7988] RBP: 00007f07d1aff090 R08: 0000000000000000 R09: 0000000000000000 [ 99.938671][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.938677][ T7988] R13: 00007f07d0e26038 R14: 00007f07d0e25fa0 R15: 00007ffff5c71b18 [ 99.938691][ T7988] [ 100.640635][ T7996] i2c i2c-0: new_device: Missing parameters [ 100.642035][ T7996] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 100.677510][ T7999] FAULT_INJECTION: forcing a failure. [ 100.677510][ T7999] name failslab, interval 1, probability 0, space 0, times 0 [ 100.677555][ T7999] CPU: 3 UID: 0 PID: 7999 Comm: syz.6.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.677573][ T7999] Tainted: [L]=SOFTLOCKUP [ 100.677578][ T7999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.677585][ T7999] Call Trace: [ 100.677594][ T7999] [ 100.677600][ T7999] dump_stack_lvl+0x100/0x190 [ 100.677637][ T7999] should_fail_ex.cold+0x5/0xa [ 100.677658][ T7999] should_failslab+0xc2/0x120 [ 100.677678][ T7999] kmem_cache_alloc_noprof+0x92/0x6a0 [ 100.677700][ T7999] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 100.677718][ T7999] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 100.677739][ T7999] ? kvm_msr_allowed+0x2d0/0x450 [ 100.677760][ T7999] kvm_mmu_load+0xe3/0x25b0 [ 100.677778][ T7999] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 100.677792][ T7999] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 100.677809][ T7999] ? __pfx_kvm_mmu_load+0x10/0x10 [ 100.677825][ T7999] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 100.677842][ T7999] ? kvm_check_and_inject_events+0x896/0x1050 [ 100.677863][ T7999] vcpu_run+0x4009/0x60d0 [ 100.677889][ T7999] ? __pfx_vcpu_run+0x10/0x10 [ 100.677905][ T7999] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 100.677921][ T7999] ? lock_acquire+0x1d1/0x380 [ 100.677939][ T7999] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 100.677959][ T7999] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 100.677972][ T7999] ? __local_bh_enable_ip+0xa5/0x120 [ 100.677992][ T7999] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 100.678009][ T7999] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 100.678033][ T7999] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 100.678050][ T7999] ? lock_acquire+0x1d1/0x380 [ 100.678068][ T7999] ? do_raw_write_lock+0x11e/0x260 [ 100.678081][ T7999] ? find_held_lock+0x2b/0x80 [ 100.678095][ T7999] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 100.678114][ T7999] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 100.678137][ T7999] kvm_vcpu_ioctl+0x735/0x17b0 [ 100.678158][ T7999] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.678178][ T7999] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.678200][ T7999] ? do_vfs_ioctl+0x226/0x13e0 [ 100.678214][ T7999] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 100.678227][ T7999] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 100.678245][ T7999] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 100.678262][ T7999] ? __fget_files+0x34/0x3d0 [ 100.678287][ T7999] ? selinux_file_ioctl+0x1e0/0x290 [ 100.678300][ T7999] ? selinux_file_ioctl+0x1e7/0x290 [ 100.678314][ T7999] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.678334][ T7999] __x64_sys_ioctl+0x18e/0x210 [ 100.678350][ T7999] do_syscall_64+0x123/0x7b0 [ 100.678373][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.678387][ T7999] RIP: 0033:0x7f07d0ba8f19 [ 100.678399][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.678411][ T7999] RSP: 002b:00007f07d1ade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.678426][ T7999] RAX: ffffffffffffffda RBX: 00007f07d0e26090 RCX: 00007f07d0ba8f19 [ 100.678434][ T7999] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 100.678443][ T7999] RBP: 00007f07d1ade090 R08: 0000000000000000 R09: 0000000000000000 [ 100.678451][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.678458][ T7999] R13: 00007f07d0e26128 R14: 00007f07d0e26090 R15: 00007ffff5c71b18 [ 100.678477][ T7999] [ 100.814027][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 100.814039][ T43] audit: type=1400 audit(1794294035.583:887): avc: denied { write } for pid=8000 comm="syz.7.545" name="/" dev="9p" ino=71827779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.837256][ T8003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.837783][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.926250][ T8001] device-mapper: ioctl: Target spec extends beyond end of parameters [ 100.926267][ T8001] device-mapper: ioctl: unable to find target [ 100.974852][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.976635][ T1362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.049503][ T43] audit: type=1400 audit(1794294035.813:888): avc: denied { read } for pid=8006 comm="syz.6.556" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.052317][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.556'. [ 101.092701][ T8009] jffs2: notice: (8009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 10 of xdatum (0 unchecked, 10 orphan) and 18 of xref (2 dead, 16 orphan) found. [ 101.095356][ T43] audit: type=1400 audit(1794294035.863:889): avc: denied { write } for pid=8008 comm="syz.7.547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.099596][ T43] audit: type=1400 audit(1794294035.863:890): avc: denied { write } for pid=8008 comm="syz.7.547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.103166][ T8009] input: syz0 as /devices/virtual/input/input15 [ 101.120536][ T43] audit: type=1400 audit(1794294035.883:891): avc: denied { write } for pid=8008 comm="syz.7.547" name="file0" dev="jffs2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.120980][ T8009] overlayfs: upper fs does not support tmpfile. [ 101.120975][ T43] audit: type=1400 audit(1794294035.883:892): avc: denied { write } for pid=8008 comm="syz.7.547" name="work" dev="jffs2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.121142][ T43] audit: type=1400 audit(1794294035.883:893): avc: denied { write } for pid=8008 comm="syz.7.547" name="work" dev="jffs2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.121447][ T43] audit: type=1400 audit(1794294035.883:894): avc: denied { write } for pid=8008 comm="syz.7.547" name="work" dev="jffs2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.121538][ T43] audit: type=1400 audit(1794294035.883:895): avc: denied { write } for pid=8008 comm="syz.7.547" name="work" dev="jffs2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.121667][ T43] audit: type=1400 audit(1794294035.883:896): avc: denied { write } for pid=8008 comm="syz.7.547" name="work" dev="jffs2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.121747][ T8009] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.297452][ T2334] usb 14-1: USB disconnect, device number 2 [ 101.328566][ T2334] Unregistered device Abilis Systems DVB-Titan [ 101.338483][ T2334] as10x_usb: device has been disconnected [ 101.816654][ T8021] netlink: 32 bytes leftover after parsing attributes in process `syz.9.550'. [ 102.007009][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.030886][ T8028] FAULT_INJECTION: forcing a failure. [ 102.030886][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 102.030938][ T8028] CPU: 3 UID: 0 PID: 8028 Comm: syz.0.553 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.030959][ T8028] Tainted: [L]=SOFTLOCKUP [ 102.030964][ T8028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.030972][ T8028] Call Trace: [ 102.030984][ T8028] [ 102.030990][ T8028] dump_stack_lvl+0x100/0x190 [ 102.031037][ T8028] should_fail_ex.cold+0x5/0xa [ 102.031060][ T8028] should_failslab+0xc2/0x120 [ 102.031085][ T8028] __kmalloc_noprof+0xfc/0x840 [ 102.031100][ T8028] ? __pfx_dynamic_dname+0x10/0x10 [ 102.031115][ T8028] ? tomoyo_encode2+0xfb/0x3c0 [ 102.031133][ T8028] tomoyo_encode2+0xfb/0x3c0 [ 102.031150][ T8028] tomoyo_encode+0x29/0x50 [ 102.031163][ T8028] tomoyo_realpath_from_path+0x18c/0x690 [ 102.031183][ T8028] tomoyo_path_number_perm+0x23c/0x580 [ 102.031203][ T8028] ? tomoyo_path_number_perm+0x22e/0x580 [ 102.031224][ T8028] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.031251][ T8028] ? __lock_acquire+0x5c0/0x1f40 [ 102.031280][ T8028] ? __fget_files+0x34/0x3d0 [ 102.031298][ T8028] ? find_held_lock+0x2b/0x80 [ 102.031312][ T8028] ? hook_file_ioctl_common+0x140/0x440 [ 102.031333][ T8028] ? __fget_files+0x21f/0x3d0 [ 102.031353][ T8028] security_file_ioctl+0xd3/0x230 [ 102.031375][ T8028] __x64_sys_ioctl+0xb7/0x210 [ 102.031391][ T8028] do_syscall_64+0x123/0x7b0 [ 102.031419][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.031433][ T8028] RIP: 0033:0x7f4f83fa8f19 [ 102.031445][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.031459][ T8028] RSP: 002b:00007f4f821f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.031474][ T8028] RAX: ffffffffffffffda RBX: 00007f4f84225fa0 RCX: 00007f4f83fa8f19 [ 102.031484][ T8028] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 102.031495][ T8028] RBP: 00007f4f821f6090 R08: 0000000000000000 R09: 0000000000000000 [ 102.031505][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.031515][ T8028] R13: 00007f4f84226038 R14: 00007f4f84225fa0 R15: 00007ffe2a0fc1d8 [ 102.031537][ T8028] [ 102.031553][ T8028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.087685][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.169966][ T8034] TC_ACT_REPEAT abuse ? [ 102.342352][ T8050] xt_hashlimit: size too large, truncated to 1048576 [ 102.535242][ T1362] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 102.650465][ T8055] FAULT_INJECTION: forcing a failure. [ 102.650465][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 102.650499][ T8055] CPU: 3 UID: 0 PID: 8055 Comm: syz.9.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.650526][ T8055] Tainted: [L]=SOFTLOCKUP [ 102.650534][ T8055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.650546][ T8055] Call Trace: [ 102.650553][ T8055] [ 102.650561][ T8055] dump_stack_lvl+0x100/0x190 [ 102.650597][ T8055] should_fail_ex.cold+0x5/0xa [ 102.650626][ T8055] should_failslab+0xc2/0x120 [ 102.650649][ T8055] kmem_cache_alloc_noprof+0x92/0x6a0 [ 102.650678][ T8055] ? __pfx_map_id_range_down+0x10/0x10 [ 102.650703][ T8055] ? rcu_is_watching+0x13/0xc0 [ 102.650724][ T8055] ? security_inode_alloc+0x3b/0x2c0 [ 102.650757][ T8055] security_inode_alloc+0x3b/0x2c0 [ 102.650786][ T8055] inode_init_always_gfp+0xc75/0xfb0 [ 102.650815][ T8055] alloc_inode+0x8e/0x250 [ 102.650834][ T8055] sock_alloc+0x42/0x240 [ 102.650870][ T8055] __sock_create+0xc2/0x860 [ 102.650901][ T8055] inet_ctl_sock_create+0x94/0x230 [ 102.650924][ T8055] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 102.650949][ T8055] ? ndisc_net_init+0x148/0x3e0 [ 102.650973][ T8055] ? __pfx_ndisc_net_init+0x10/0x10 [ 102.651002][ T8055] igmp6_net_init+0x1b2/0x430 [ 102.651026][ T8055] ? __pfx_igmp6_net_init+0x10/0x10 [ 102.651049][ T8055] ops_init+0x1e2/0x5f0 [ 102.651078][ T8055] setup_net+0x118/0x3a0 [ 102.651103][ T8055] ? __pfx_setup_net+0x10/0x10 [ 102.651131][ T8055] ? bpf_lsm_namespace_init+0x9/0x10 [ 102.651157][ T8055] copy_net_ns+0x340/0x7a0 [ 102.651187][ T8055] create_new_namespaces+0x3ea/0xac0 [ 102.651226][ T8055] unshare_nsproxy_namespaces+0xf6/0x210 [ 102.651257][ T8055] ksys_unshare+0x44f/0x980 [ 102.651284][ T8055] ? __pfx_ksys_unshare+0x10/0x10 [ 102.651322][ T8055] __x64_sys_unshare+0x31/0x40 [ 102.651347][ T8055] do_syscall_64+0x123/0x7b0 [ 102.651372][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.651392][ T8055] RIP: 0033:0x7fa1d2da8f19 [ 102.651408][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.651426][ T8055] RSP: 002b:00007fa1d3cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 102.651445][ T8055] RAX: ffffffffffffffda RBX: 00007fa1d3025fa0 RCX: 00007fa1d2da8f19 [ 102.651457][ T8055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 102.651467][ T8055] RBP: 00007fa1d2e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 102.651479][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.651490][ T8055] R13: 00007fa1d3026038 R14: 00007fa1d3025fa0 R15: 00007ffda535bfa8 [ 102.651518][ T8055] [ 102.651546][ T8055] socket: no more sockets [ 102.651552][ T8055] Failed to initialize the IGMP6 autojoin socket (err -23) [ 102.685292][ T1362] usb 11-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 102.686257][ T1362] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.686297][ T1362] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.693370][ T1362] as10x_usb: device has been detected [ 102.693975][ T1362] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 102.705811][ T1362] usb 11-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 102.708782][ T1362] as10x_usb: error during firmware upload part1 [ 102.710164][ T1362] Registered device Abilis Systems DVB-Titan [ 102.763357][ T5145] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 102.772766][ T5145] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 103.411407][ T8072] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.535033][ T8072] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.535369][ T8072] netlink: 'syz.7.567': attribute type 1 has an invalid length. [ 103.570601][ T8072] md/raid1:md7: active with 1 out of 2 mirrors [ 103.572165][ T8072] md7: detected capacity change from 0 to 4096 [ 103.637480][ T8072] md7: detected capacity change from 4096 to 0 [ 103.637500][ T8072] md: md7 stopped. [ 103.786519][ T8080] IPVS: Error connecting to the multicast addr [ 103.956660][ T8084] xt_hashlimit: size too large, truncated to 1048576 [ 104.051295][ T8090] FAULT_INJECTION: forcing a failure. [ 104.051295][ T8090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.051314][ T8090] CPU: 1 UID: 0 PID: 8090 Comm: syz.7.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.051329][ T8090] Tainted: [L]=SOFTLOCKUP [ 104.051333][ T8090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.051339][ T8090] Call Trace: [ 104.051343][ T8090] [ 104.051348][ T8090] dump_stack_lvl+0x100/0x190 [ 104.051369][ T8090] should_fail_ex.cold+0x5/0xa [ 104.051386][ T8090] _copy_from_user+0x2e/0xd0 [ 104.051400][ T8090] ctl_ioctl+0x289/0xcc0 [ 104.051416][ T8090] ? __pfx_table_load+0x10/0x10 [ 104.051427][ T8090] ? __pfx_ctl_ioctl+0x10/0x10 [ 104.051456][ T8090] ? selinux_file_ioctl+0x1e0/0x290 [ 104.051469][ T8090] dm_ctl_ioctl+0x22/0x30 [ 104.051483][ T8090] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 104.051498][ T8090] __x64_sys_ioctl+0x18e/0x210 [ 104.051510][ T8090] do_syscall_64+0x123/0x7b0 [ 104.051525][ T8090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.051536][ T8090] RIP: 0033:0x7f53b05a8f19 [ 104.051545][ T8090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.051556][ T8090] RSP: 002b:00007f53b13e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.051566][ T8090] RAX: ffffffffffffffda RBX: 00007f53b0826090 RCX: 00007f53b05a8f19 [ 104.051573][ T8090] RDX: 00002000000003c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 104.051579][ T8090] RBP: 00007f53b13e5090 R08: 0000000000000000 R09: 0000000000000000 [ 104.051585][ T8090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.051591][ T8090] R13: 00007f53b0826128 R14: 00007f53b0826090 R15: 00007ffe8ec3fea8 [ 104.051605][ T8090] [ 104.084535][ T6568] net_ratelimit: 1 callbacks suppressed [ 104.084551][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.202828][ T8095] FAULT_INJECTION: forcing a failure. [ 104.202828][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 104.202858][ T8095] CPU: 2 UID: 0 PID: 8095 Comm: syz.9.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.202882][ T8095] Tainted: [L]=SOFTLOCKUP [ 104.202888][ T8095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.202898][ T8095] Call Trace: [ 104.202904][ T8095] [ 104.202912][ T8095] dump_stack_lvl+0x100/0x190 [ 104.202947][ T8095] should_fail_ex.cold+0x5/0xa [ 104.202976][ T8095] should_failslab+0xc2/0x120 [ 104.202998][ T8095] __kmalloc_noprof+0xfc/0x840 [ 104.203015][ T8095] ? rcu_is_watching+0x13/0xc0 [ 104.203036][ T8095] ? tomoyo_realpath_from_path+0xb6/0x690 [ 104.203062][ T8095] tomoyo_realpath_from_path+0xb6/0x690 [ 104.203089][ T8095] tomoyo_path_number_perm+0x23c/0x580 [ 104.203115][ T8095] ? tomoyo_path_number_perm+0x22e/0x580 [ 104.203142][ T8095] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.203179][ T8095] ? __lock_acquire+0x5c0/0x1f40 [ 104.203216][ T8095] ? __fget_files+0x34/0x3d0 [ 104.203238][ T8095] ? find_held_lock+0x2b/0x80 [ 104.203256][ T8095] ? hook_file_ioctl_common+0x140/0x440 [ 104.203284][ T8095] ? __fget_files+0x21f/0x3d0 [ 104.203310][ T8095] security_file_ioctl+0xd3/0x230 [ 104.203338][ T8095] __x64_sys_ioctl+0xb7/0x210 [ 104.203359][ T8095] do_syscall_64+0x123/0x7b0 [ 104.203382][ T8095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.203400][ T8095] RIP: 0033:0x7fa1d2da8f19 [ 104.203415][ T8095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.203431][ T8095] RSP: 002b:00007fa1d3cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.203450][ T8095] RAX: ffffffffffffffda RBX: 00007fa1d3025fa0 RCX: 00007fa1d2da8f19 [ 104.203461][ T8095] RDX: 0000200000000080 RSI: 00000000400454dc RDI: 0000000000000003 [ 104.203472][ T8095] RBP: 00007fa1d3cdb090 R08: 0000000000000000 R09: 0000000000000000 [ 104.203483][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.203493][ T8095] R13: 00007fa1d3026038 R14: 00007fa1d3025fa0 R15: 00007ffda535bfa8 [ 104.203517][ T8095] [ 104.203524][ T8095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.484038][ T8113] 9p: Bad value for 'rfdno' [ 104.523586][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.9.578'. [ 104.571080][ T8116] FAULT_INJECTION: forcing a failure. [ 104.571080][ T8116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.571110][ T8116] CPU: 1 UID: 0 PID: 8116 Comm: syz.0.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.571126][ T8116] Tainted: [L]=SOFTLOCKUP [ 104.571129][ T8116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.571136][ T8116] Call Trace: [ 104.571144][ T8116] [ 104.571149][ T8116] dump_stack_lvl+0x100/0x190 [ 104.571179][ T8116] should_fail_ex.cold+0x5/0xa [ 104.571196][ T8116] _copy_to_user+0x32/0xd0 [ 104.571216][ T8116] move_addr_to_user+0x144/0x1f0 [ 104.571236][ T8116] ____sys_recvmsg+0x285/0x6a0 [ 104.571255][ T8116] ? __pfx_____sys_recvmsg+0x10/0x10 [ 104.571275][ T8116] ? __lock_acquire+0x5c0/0x1f40 [ 104.571295][ T8116] __sys_recvmsg_sock+0x37/0x50 [ 104.571309][ T8116] io_recvmsg+0x2d5/0x11e0 [ 104.571325][ T8116] ? __fget_files+0x34/0x3d0 [ 104.571340][ T8116] ? __fget_files+0x215/0x3d0 [ 104.571354][ T8116] ? __pfx_io_recvmsg+0x10/0x10 [ 104.571373][ T8116] ? rcu_is_watching+0x13/0xc0 [ 104.571387][ T8116] io_issue_sqe+0x7a3/0x1c10 [ 104.571404][ T8116] io_submit_sqes+0xb5c/0x2760 [ 104.571423][ T8116] __do_sys_io_uring_enter+0xa88/0x1b10 [ 104.571438][ T8116] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.571456][ T8116] ? __fget_files+0x21f/0x3d0 [ 104.571469][ T8116] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 104.571485][ T8116] ? fput+0x7c/0x100 [ 104.571499][ T8116] ? ksys_write+0x1ac/0x250 [ 104.571509][ T8116] ? __pfx_ksys_write+0x10/0x10 [ 104.571524][ T8116] do_syscall_64+0x123/0x7b0 [ 104.571556][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.571567][ T8116] RIP: 0033:0x7f4f83fa8f19 [ 104.571577][ T8116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.571588][ T8116] RSP: 002b:00007f4f821f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 104.571598][ T8116] RAX: ffffffffffffffda RBX: 00007f4f84225fa0 RCX: 00007f4f83fa8f19 [ 104.571605][ T8116] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 104.571611][ T8116] RBP: 00007f4f821f6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.571617][ T8116] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 104.571624][ T8116] R13: 00007f4f84226038 R14: 00007f4f84225fa0 R15: 00007ffe2a0fc1d8 [ 104.571638][ T8116] [ 104.977650][ T8136] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.134647][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.134668][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.193745][ T8148] FAULT_INJECTION: forcing a failure. [ 105.193745][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 105.193777][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.0.588 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.193799][ T8148] Tainted: [L]=SOFTLOCKUP [ 105.193805][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.193815][ T8148] Call Trace: [ 105.193821][ T8148] [ 105.193828][ T8148] dump_stack_lvl+0x100/0x190 [ 105.193855][ T8148] should_fail_ex.cold+0x5/0xa [ 105.193880][ T8148] should_failslab+0xc2/0x120 [ 105.193900][ T8148] __kmalloc_noprof+0xfc/0x840 [ 105.193916][ T8148] ? tomoyo_encode2+0xfb/0x3c0 [ 105.193936][ T8148] tomoyo_encode2+0xfb/0x3c0 [ 105.193954][ T8148] tomoyo_encode+0x29/0x50 [ 105.193970][ T8148] tomoyo_realpath_from_path+0x18c/0x690 [ 105.193995][ T8148] tomoyo_path_number_perm+0x23c/0x580 [ 105.194018][ T8148] ? tomoyo_path_number_perm+0x22e/0x580 [ 105.194039][ T8148] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 105.194090][ T8148] ? __lock_acquire+0x5c0/0x1f40 [ 105.194124][ T8148] ? __fget_files+0x34/0x3d0 [ 105.194141][ T8148] ? find_held_lock+0x2b/0x80 [ 105.194157][ T8148] ? hook_file_ioctl_common+0x140/0x440 [ 105.194184][ T8148] ? __fget_files+0x21f/0x3d0 [ 105.194208][ T8148] security_file_ioctl+0xd3/0x230 [ 105.194230][ T8148] __x64_sys_ioctl+0xb7/0x210 [ 105.194249][ T8148] do_syscall_64+0x123/0x7b0 [ 105.194271][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.194288][ T8148] RIP: 0033:0x7f4f83fa8f19 [ 105.194301][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.194316][ T8148] RSP: 002b:00007f4f821f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.194329][ T8148] RAX: ffffffffffffffda RBX: 00007f4f84225fa0 RCX: 00007f4f83fa8f19 [ 105.194339][ T8148] RDX: 0000200000000c80 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 105.194349][ T8148] RBP: 00007f4f821f6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.194359][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.194368][ T8148] R13: 00007f4f84226038 R14: 00007f4f84225fa0 R15: 00007ffe2a0fc1d8 [ 105.194392][ T8148] [ 105.196263][ T8148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.265035][ T8151] xt_hashlimit: size too large, truncated to 1048576 [ 105.270375][ T8150] netlink: 3604 bytes leftover after parsing attributes in process `syz.0.589'. [ 105.286646][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.312453][ T8150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.589'. [ 105.399027][ T8157] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 105.529453][ T8165] FAULT_INJECTION: forcing a failure. [ 105.529453][ T8165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.529473][ T8165] CPU: 2 UID: 0 PID: 8165 Comm: syz.9.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.529487][ T8165] Tainted: [L]=SOFTLOCKUP [ 105.529491][ T8165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.529497][ T8165] Call Trace: [ 105.529500][ T8165] [ 105.529504][ T8165] dump_stack_lvl+0x100/0x190 [ 105.529525][ T8165] should_fail_ex.cold+0x5/0xa [ 105.529542][ T8165] should_fail_alloc_page+0xeb/0x140 [ 105.529556][ T8165] prepare_alloc_pages+0x1f0/0x5b0 [ 105.529572][ T8165] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 105.529589][ T8165] ? find_held_lock+0x2b/0x80 [ 105.529600][ T8165] ? is_bpf_text_address+0x8a/0x1a0 [ 105.529613][ T8165] ? is_bpf_text_address+0x8a/0x1a0 [ 105.529626][ T8165] ? bpf_ksym_find+0x128/0x1c0 [ 105.529641][ T8165] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 105.529657][ T8165] ? is_bpf_text_address+0x94/0x1a0 [ 105.529670][ T8165] ? kernel_text_address+0x8d/0x100 [ 105.529683][ T8165] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.529698][ T8165] ? arch_stack_walk+0xa6/0xf0 [ 105.529719][ T8165] ? stack_trace_save+0x8e/0xc0 [ 105.529733][ T8165] ? __pfx_stack_trace_save+0x10/0x10 [ 105.529747][ T8165] ? down_write+0x141/0x1f0 [ 105.529764][ T8165] ? kasan_save_stack+0x3f/0x50 [ 105.529780][ T8165] ? kasan_save_stack+0x30/0x50 [ 105.529790][ T8165] ? kasan_save_track+0x14/0x30 [ 105.529800][ T8165] ? __kasan_slab_alloc+0x89/0x90 [ 105.529811][ T8165] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 105.529827][ T8165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.529846][ T8165] ? policy_nodemask+0xed/0x5e0 [ 105.529861][ T8165] alloc_pages_mpol+0x201/0x560 [ 105.529875][ T8165] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 105.529892][ T8165] alloc_pages_noprof+0x1a/0x160 [ 105.529908][ T8165] pte_alloc_one+0x1c/0x3d0 [ 105.529919][ T8165] __pte_alloc+0x6d/0x3e0 [ 105.529934][ T8165] ? __pfx___pte_alloc+0x10/0x10 [ 105.529953][ T8165] do_anonymous_page+0x1307/0x2050 [ 105.529967][ T8165] ? find_held_lock+0x2b/0x80 [ 105.529978][ T8165] ? __pmd_alloc+0x3f6/0x950 [ 105.529988][ T8165] ? __pmd_alloc+0x3f6/0x950 [ 105.529998][ T8165] ? __pfx_do_anonymous_page+0x10/0x10 [ 105.530010][ T8165] ? do_raw_spin_unlock+0x145/0x1e0 [ 105.530021][ T8165] ? _raw_spin_unlock+0x28/0x50 [ 105.530031][ T8165] ? __pmd_alloc+0x3fb/0x950 [ 105.530043][ T8165] __handle_mm_fault+0x1eeb/0x2f40 [ 105.530058][ T8165] ? __pfx___handle_mm_fault+0x10/0x10 [ 105.530070][ T8165] ? __pfx_mt_find+0x10/0x10 [ 105.530093][ T8165] ? find_vma+0xbf/0x140 [ 105.530108][ T8165] ? __pfx_find_vma+0x10/0x10 [ 105.530125][ T8165] handle_mm_fault+0x363/0xa30 [ 105.530140][ T8165] do_user_addr_fault+0x745/0x12f0 [ 105.530160][ T8165] exc_page_fault+0x6f/0xd0 [ 105.530172][ T8165] asm_exc_page_fault+0x26/0x30 [ 105.530185][ T8165] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 105.530204][ T8165] Code: 89 ee 48 89 ef e8 01 1c d3 fc 4d 85 ff 75 26 e8 17 22 d3 fc 89 de 4c 89 e7 e8 dd 93 4d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 f1 21 d3 fc 48 89 d8 5b 5d 41 [ 105.530221][ T8165] RSP: 0018:ffffc9002071fd78 EFLAGS: 00050246 [ 105.530344][ T8165] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 105.530354][ T8165] RDX: 0000000000000001 RSI: ffffc9002071fdd8 RDI: 0000200000001880 [ 105.530364][ T8165] RBP: 0000200000001880 R08: 0000000000000000 R09: fffff520040e3fbe [ 105.530374][ T8165] R10: ffffc9002071fdf7 R11: 0000000000000000 R12: ffffc9002071fdd8 [ 105.530384][ T8165] R13: 00002000000018a0 R14: 00007ffffffff000 R15: 0000000000000000 [ 105.530406][ T8165] ? _copy_to_user+0x93/0xd0 [ 105.530426][ T8165] ksys_msgctl.constprop.0+0x2cc/0x340 [ 105.530448][ T8165] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 105.530466][ T8165] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.530507][ T8165] do_syscall_64+0x123/0x7b0 [ 105.530531][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.530548][ T8165] RIP: 0033:0x7fa1d2da8f19 [ 105.530561][ T8165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.530577][ T8165] RSP: 002b:00007fa1d3cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 105.530591][ T8165] RAX: ffffffffffffffda RBX: 00007fa1d3025fa0 RCX: 00007fa1d2da8f19 [ 105.530602][ T8165] RDX: 0000200000001880 RSI: 0000000000000003 RDI: 0000000000000000 [ 105.530612][ T8165] RBP: 00007fa1d3cdb090 R08: 0000000000000000 R09: 0000000000000000 [ 105.530622][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.530632][ T8165] R13: 00007fa1d3026038 R14: 00007fa1d3025fa0 R15: 00007ffda535bfa8 [ 105.530658][ T8165] [ 105.675707][ T8171] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.771024][ T2334] usb 11-1: USB disconnect, device number 3 [ 105.796274][ T2334] Unregistered device Abilis Systems DVB-Titan [ 105.806945][ T2334] as10x_usb: device has been disconnected [ 105.925908][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.119949][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.9.598'. [ 106.392689][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.405400][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.405525][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.405630][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.405730][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.405830][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.405927][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.408383][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.408488][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.408592][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.408690][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.408789][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.408887][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.408986][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409085][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409186][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409283][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409383][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409481][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409578][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409679][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409777][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409873][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.409978][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.410076][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.410176][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.410277][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.410377][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.415465][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.415593][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.415696][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.415799][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.415896][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.415995][ T8160] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 106.472612][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 106.472628][ T43] audit: type=1400 audit(1794294041.233:910): avc: denied { getopt } for pid=8187 comm="syz.7.599" lport=35736 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 106.516511][ T43] audit: type=1400 audit(1794294041.283:911): avc: denied { write } for pid=8191 comm="syz.7.600" name="auth.unix.ip" dev="proc" ino=4026533329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 106.517255][ T8192] netlink: 3604 bytes leftover after parsing attributes in process `syz.7.600'. [ 106.630539][ T43] audit: type=1400 audit(1794294041.393:912): avc: denied { create } for pid=8195 comm="syz.7.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.643076][ T8196] FAULT_INJECTION: forcing a failure. [ 106.643076][ T8196] name failslab, interval 1, probability 0, space 0, times 0 [ 106.643105][ T8196] CPU: 1 UID: 0 PID: 8196 Comm: syz.7.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.643131][ T8196] Tainted: [L]=SOFTLOCKUP [ 106.643138][ T8196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.643148][ T8196] Call Trace: [ 106.643154][ T8196] [ 106.643161][ T8196] dump_stack_lvl+0x100/0x190 [ 106.643193][ T8196] should_fail_ex.cold+0x5/0xa [ 106.643221][ T8196] should_failslab+0xc2/0x120 [ 106.643241][ T8196] kmem_cache_alloc_noprof+0x92/0x6a0 [ 106.643270][ T8196] ? sk_prot_alloc+0x60/0x2a0 [ 106.643299][ T8196] sk_prot_alloc+0x60/0x2a0 [ 106.643326][ T8196] sk_alloc+0x36/0xe80 [ 106.643347][ T8196] inet6_create+0x385/0x12b0 [ 106.643365][ T8196] ? inet6_create+0x7f/0x12b0 [ 106.643384][ T8196] __sock_create+0x339/0x860 [ 106.643413][ T8196] inet_ctl_sock_create+0x94/0x230 [ 106.643433][ T8196] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 106.643453][ T8196] ? ndisc_net_init+0x148/0x3e0 [ 106.643473][ T8196] ? __pfx_ndisc_net_init+0x10/0x10 [ 106.643494][ T8196] ? __pfx_igmp6_net_init+0x10/0x10 [ 106.643514][ T8196] igmp6_net_init+0x35/0x430 [ 106.643533][ T8196] ? __pfx_igmp6_net_init+0x10/0x10 [ 106.643551][ T8196] ops_init+0x1e2/0x5f0 [ 106.643575][ T8196] setup_net+0x118/0x3a0 [ 106.643598][ T8196] ? __pfx_setup_net+0x10/0x10 [ 106.643621][ T8196] ? bpf_lsm_namespace_init+0x9/0x10 [ 106.643643][ T8196] copy_net_ns+0x340/0x7a0 [ 106.643669][ T8196] create_new_namespaces+0x3ea/0xac0 [ 106.643698][ T8196] unshare_nsproxy_namespaces+0xf6/0x210 [ 106.643723][ T8196] ksys_unshare+0x44f/0x980 [ 106.643745][ T8196] ? __pfx_ksys_unshare+0x10/0x10 [ 106.643803][ T8196] __x64_sys_unshare+0x31/0x40 [ 106.643825][ T8196] do_syscall_64+0x123/0x7b0 [ 106.643848][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.643865][ T8196] RIP: 0033:0x7f53b05a8f19 [ 106.643881][ T8196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.643897][ T8196] RSP: 002b:00007f53b1406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 106.643915][ T8196] RAX: ffffffffffffffda RBX: 00007f53b0825fa0 RCX: 00007f53b05a8f19 [ 106.643926][ T8196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 106.643936][ T8196] RBP: 00007f53b0637f6d R08: 0000000000000000 R09: 0000000000000000 [ 106.643947][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.643956][ T8196] R13: 00007f53b0826038 R14: 00007f53b0825fa0 R15: 00007ffe8ec3fea8 [ 106.643980][ T8196] [ 106.647962][ T8196] Failed to initialize the IGMP6 control socket (err -105) [ 106.743650][ T8198] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.801249][ T8200] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.919906][ T8198] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.919991][ T8198] netlink: 'syz.0.603': attribute type 1 has an invalid length. [ 106.962196][ T8198] md/raid1:md0: active with 1 out of 2 mirrors [ 106.962616][ T8198] md0: detected capacity change from 0 to 4096 [ 107.030441][ T8198] md0: detected capacity change from 4096 to 0 [ 107.030455][ T8198] md: md0 stopped. [ 107.040711][ T8219] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 107.375814][ T8233] netlink: 20 bytes leftover after parsing attributes in process `syz.6.614'. [ 107.395861][ T2334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.444644][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.554463][ T2334] usb 5-1: Using ep0 maxpacket: 16 [ 107.555960][ T2334] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 107.556864][ T2334] usb 5-1: config 1 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.556879][ T2334] usb 5-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 16 [ 107.556890][ T2334] usb 5-1: config 1 interface 0 altsetting 32 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.556903][ T2334] usb 5-1: config 1 interface 0 has no altsetting 0 [ 107.558601][ T2334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.558613][ T2334] usb 5-1: Product: 휻䣆ǩç�¦ì•ƒÅªì«Œã¬¸å¤Šè¹»ç£»è‰˜Ú¤é»�닒㩘蓅洵ꇨ닢抜쥋錟兤뿱ç�“鉱༢抱é�Œå²�ꗰ栫ꯨ酾쨥뀉鼖ガå‹�欭Ⲟ楺`낳耥仮鶻 [ 107.558625][ T2334] usb 5-1: Manufacturer: áŸ�榭穷涡뮭႙橂컑㽅ꮻ官硔묟꤉⮙槅쎽쓓鞽秕䠟軫๠峖ì´�஗嫛굴墨规 [ 107.558634][ T2334] usb 5-1: SerialNumber: syz [ 107.560805][ T8230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.560922][ T8230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.714297][ T8237] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.986725][ T2334] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 107.992876][ T2334] usb 5-1: USB disconnect, device number 2 [ 107.993724][ T8248] FAULT_INJECTION: forcing a failure. [ 107.993724][ T8248] name failslab, interval 1, probability 0, space 0, times 0 [ 107.993740][ T8248] CPU: 3 UID: 0 PID: 8248 Comm: syz.9.618 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.993755][ T8248] Tainted: [L]=SOFTLOCKUP [ 107.993758][ T8248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.993764][ T8248] Call Trace: [ 107.993768][ T8248] [ 107.993772][ T8248] dump_stack_lvl+0x100/0x190 [ 107.993793][ T8248] should_fail_ex.cold+0x5/0xa [ 107.993810][ T8248] should_failslab+0xc2/0x120 [ 107.993823][ T8248] __kmalloc_noprof+0xfc/0x840 [ 107.993833][ T8248] ? rcu_is_watching+0x13/0xc0 [ 107.993845][ T8248] ? tomoyo_realpath_from_path+0xb6/0x690 [ 107.993860][ T8248] tomoyo_realpath_from_path+0xb6/0x690 [ 107.993875][ T8248] tomoyo_path_number_perm+0x23c/0x580 [ 107.993891][ T8248] ? tomoyo_path_number_perm+0x22e/0x580 [ 107.993908][ T8248] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.993929][ T8248] ? __lock_acquire+0x5c0/0x1f40 [ 107.993951][ T8248] ? __fget_files+0x34/0x3d0 [ 107.993965][ T8248] ? find_held_lock+0x2b/0x80 [ 107.993976][ T8248] ? hook_file_ioctl_common+0x140/0x440 [ 107.993992][ T8248] ? __fget_files+0x21f/0x3d0 [ 107.994008][ T8248] security_file_ioctl+0xd3/0x230 [ 107.994026][ T8248] __x64_sys_ioctl+0xb7/0x210 [ 107.994038][ T8248] do_syscall_64+0x123/0x7b0 [ 107.994053][ T8248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.994065][ T8248] RIP: 0033:0x7fa1d2da8f19 [ 107.994074][ T8248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.994084][ T8248] RSP: 002b:00007fa1d3cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.994095][ T8248] RAX: ffffffffffffffda RBX: 00007fa1d3025fa0 RCX: 00007fa1d2da8f19 [ 107.994102][ T8248] RDX: 0000000000000001 RSI: 00000000400454d0 RDI: 0000000000000003 [ 107.994108][ T8248] RBP: 00007fa1d3cdb090 R08: 0000000000000000 R09: 0000000000000000 [ 107.994114][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.994119][ T8248] R13: 00007fa1d3026038 R14: 00007fa1d3025fa0 R15: 00007ffda535bfa8 [ 107.994133][ T8248] [ 107.994137][ T8248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.109932][ T43] audit: type=1400 audit(1794294042.863:913): avc: denied { connect } for pid=8249 comm="syz.9.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.109977][ T43] audit: type=1400 audit(1794294042.863:914): avc: denied { name_connect } for pid=8249 comm="syz.9.619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 108.110007][ T43] audit: type=1400 audit(1794294042.863:915): avc: denied { accept } for pid=8249 comm="syz.9.619" lport=53168 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.116589][ T43] audit: type=1400 audit(1794294042.883:916): avc: denied { listen } for pid=8249 comm="syz.9.619" lport=53168 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.116619][ T43] audit: type=1400 audit(1794294042.883:917): avc: denied { write } for pid=8249 comm="syz.9.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.164539][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.174774][ T8262] netlink: 36 bytes leftover after parsing attributes in process `syz.7.622'. [ 108.175362][ T43] audit: type=1400 audit(1794294042.943:918): avc: denied { ioctl } for pid=8261 comm="syz.7.622" path="socket:[25459]" dev="sockfs" ino=25459 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 108.216151][ T8264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.305409][ T8271] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.308311][ T8272] FAULT_INJECTION: forcing a failure. [ 108.308311][ T8272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.308330][ T8272] CPU: 2 UID: 0 PID: 8272 Comm: syz.6.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.308345][ T8272] Tainted: [L]=SOFTLOCKUP [ 108.308349][ T8272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.308356][ T8272] Call Trace: [ 108.308359][ T8272] [ 108.308364][ T8272] dump_stack_lvl+0x100/0x190 [ 108.308385][ T8272] should_fail_ex.cold+0x5/0xa [ 108.308402][ T8272] should_fail_alloc_page+0xeb/0x140 [ 108.308416][ T8272] prepare_alloc_pages+0x1f0/0x5b0 [ 108.308431][ T8272] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 108.308448][ T8272] ? __pfx_get_page_from_freelist+0x10/0x10 [ 108.308465][ T8272] ? rcu_is_watching+0x13/0xc0 [ 108.308477][ T8272] ? trace_mm_page_alloc+0x164/0x1c0 [ 108.308489][ T8272] ? __alloc_frozen_pages_noprof+0x2f1/0x31e0 [ 108.308507][ T8272] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.308521][ T8272] ? lock_acquire+0x1d1/0x380 [ 108.308536][ T8272] ? is_bpf_text_address+0x25/0x1a0 [ 108.308550][ T8272] ? find_held_lock+0x2b/0x80 [ 108.308561][ T8272] ? is_bpf_text_address+0x8a/0x1a0 [ 108.308574][ T8272] ? is_bpf_text_address+0x8a/0x1a0 [ 108.308587][ T8272] ? bpf_ksym_find+0x128/0x1c0 [ 108.308602][ T8272] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.308619][ T8272] ? kernel_text_address+0x8d/0x100 [ 108.308640][ T8272] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 108.308656][ T8272] ? up_write+0x2dc/0x5b0 [ 108.308667][ T8272] ? policy_nodemask+0xed/0x5e0 [ 108.308682][ T8272] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 108.308705][ T8272] __kasan_populate_vmalloc+0xf0/0x210 [ 108.308719][ T8272] alloc_vmap_area+0x963/0x2bc0 [ 108.308734][ T8272] ? kasan_save_track+0x14/0x30 [ 108.308744][ T8272] ? __kasan_kmalloc+0xaa/0xb0 [ 108.308755][ T8272] ? __pfx_alloc_vmap_area+0x10/0x10 [ 108.308774][ T8272] ? arch_stack_walk+0xa6/0xf0 [ 108.308789][ T8272] ? __get_vm_area_node+0x124/0x350 [ 108.308802][ T8272] __get_vm_area_node+0x1ed/0x350 [ 108.308816][ T8272] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 108.308828][ T8272] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 108.308840][ T8272] ? stack_trace_save+0x8e/0xc0 [ 108.308854][ T8272] ? __pfx_stack_trace_save+0x10/0x10 [ 108.308868][ T8272] ? __pfx__kstrtoull+0x10/0x10 [ 108.308884][ T8272] ? stack_depot_save_flags+0x27/0xa10 [ 108.308897][ T8272] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 108.308910][ T8272] ? __kasan_kmalloc+0xaa/0xb0 [ 108.308921][ T8272] ? do_syscall_64+0x123/0x7b0 [ 108.308935][ T8272] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.308952][ T8272] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 108.308964][ T8272] __vmalloc_node_noprof+0xad/0xf0 [ 108.308976][ T8272] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 108.308990][ T8272] __vmalloc_noprof+0xa3/0x120 [ 108.309002][ T8272] ? __pfx___vmalloc_noprof+0x10/0x10 [ 108.309018][ T8272] bpf_prog_alloc_no_stats+0x59/0x690 [ 108.309033][ T8272] bpf_prog_alloc+0x3b/0x200 [ 108.309046][ T8272] bpf_prog_create_from_user+0xb4/0x2e0 [ 108.309063][ T8272] ? __pfx_seccomp_check_filter+0x10/0x10 [ 108.309078][ T8272] do_seccomp+0x82d/0x27d0 [ 108.309091][ T8272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.309105][ T8272] ? __fget_files+0x21f/0x3d0 [ 108.309120][ T8272] ? __pfx_do_seccomp+0x10/0x10 [ 108.309133][ T8272] ? fput+0x7c/0x100 [ 108.309148][ T8272] ? ksys_write+0x1ac/0x250 [ 108.309159][ T8272] ? __pfx_ksys_write+0x10/0x10 [ 108.309174][ T8272] do_syscall_64+0x123/0x7b0 [ 108.309187][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.309198][ T8272] RIP: 0033:0x7f07d0ba8f19 [ 108.309208][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.309218][ T8272] RSP: 002b:00007f07d1ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 108.309229][ T8272] RAX: ffffffffffffffda RBX: 00007f07d0e26090 RCX: 00007f07d0ba8f19 [ 108.309236][ T8272] RDX: 0000200000000a00 RSI: 0000000000000007 RDI: 0000000000000001 [ 108.309242][ T8272] RBP: 00007f07d1ade090 R08: 0000000000000000 R09: 0000000000000000 [ 108.309248][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.309254][ T8272] R13: 00007f07d0e26128 R14: 00007f07d0e26090 R15: 00007ffff5c71b18 [ 108.309267][ T8272] [ 108.309297][ T8272] syz.6.623: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 108.309332][ T8272] CPU: 2 UID: 0 PID: 8272 Comm: syz.6.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.309346][ T8272] Tainted: [L]=SOFTLOCKUP [ 108.309349][ T8272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.309354][ T8272] Call Trace: [ 108.309358][ T8272] [ 108.309362][ T8272] dump_stack_lvl+0x100/0x190 [ 108.309379][ T8272] warn_alloc.cold+0x9e/0xb2 [ 108.309391][ T8272] ? __pfx_warn_alloc+0x10/0x10 [ 108.309405][ T8272] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.309418][ T8272] ? __get_vm_area_node+0x2f0/0x350 [ 108.309432][ T8272] ? __get_vm_area_node+0x22b/0x350 [ 108.309445][ T8272] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 108.309457][ T8272] ? stack_trace_save+0x8e/0xc0 [ 108.309471][ T8272] ? __pfx_stack_trace_save+0x10/0x10 [ 108.309484][ T8272] ? __pfx__kstrtoull+0x10/0x10 [ 108.309499][ T8272] ? stack_depot_save_flags+0x27/0xa10 [ 108.309511][ T8272] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 108.309524][ T8272] ? __kasan_kmalloc+0xaa/0xb0 [ 108.309535][ T8272] ? do_syscall_64+0x123/0x7b0 [ 108.309547][ T8272] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.309564][ T8272] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 108.309576][ T8272] __vmalloc_node_noprof+0xad/0xf0 [ 108.309588][ T8272] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 108.309602][ T8272] __vmalloc_noprof+0xa3/0x120 [ 108.309613][ T8272] ? __pfx___vmalloc_noprof+0x10/0x10 [ 108.309629][ T8272] bpf_prog_alloc_no_stats+0x59/0x690 [ 108.309644][ T8272] bpf_prog_alloc+0x3b/0x200 [ 108.309657][ T8272] bpf_prog_create_from_user+0xb4/0x2e0 [ 108.309672][ T8272] ? __pfx_seccomp_check_filter+0x10/0x10 [ 108.309686][ T8272] do_seccomp+0x82d/0x27d0 [ 108.309699][ T8272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.309713][ T8272] ? __fget_files+0x21f/0x3d0 [ 108.309727][ T8272] ? __pfx_do_seccomp+0x10/0x10 [ 108.309740][ T8272] ? fput+0x7c/0x100 [ 108.309753][ T8272] ? ksys_write+0x1ac/0x250 [ 108.309764][ T8272] ? __pfx_ksys_write+0x10/0x10 [ 108.309782][ T8272] do_syscall_64+0x123/0x7b0 [ 108.309795][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.309805][ T8272] RIP: 0033:0x7f07d0ba8f19 [ 108.309813][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.309823][ T8272] RSP: 002b:00007f07d1ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 108.309832][ T8272] RAX: ffffffffffffffda RBX: 00007f07d0e26090 RCX: 00007f07d0ba8f19 [ 108.309838][ T8272] RDX: 0000200000000a00 RSI: 0000000000000007 RDI: 0000000000000001 [ 108.309844][ T8272] RBP: 00007f07d1ade090 R08: 0000000000000000 R09: 0000000000000000 [ 108.309850][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.309856][ T8272] R13: 00007f07d0e26128 R14: 00007f07d0e26090 R15: 00007ffff5c71b18 [ 108.309869][ T8272] [ 108.309872][ T8272] Mem-Info: [ 108.309877][ T8272] active_anon:25171 inactive_anon:15 isolated_anon:0 [ 108.309877][ T8272] active_file:161 inactive_file:64988 isolated_file:0 [ 108.309877][ T8272] unevictable:1000 dirty:558 writeback:0 [ 108.309877][ T8272] slab_reclaimable:15425 slab_unreclaimable:69068 [ 108.309877][ T8272] mapped:25565 shmem:18000 pagetables:1478 [ 108.309877][ T8272] sec_pagetables:303 bounce:0 [ 108.309877][ T8272] kernel_misc_reclaimable:0 [ 108.309877][ T8272] free:417461 free_pcp:19718 free_cma:0 [ 108.309901][ T8272] Node 0 active_anon:100680kB inactive_anon:60kB active_file:644kB inactive_file:259748kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:81780kB dirty:2228kB writeback:0kB shmem:70000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14848kB pagetables:5668kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 108.309926][ T8272] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 108.309949][ T8272] Node 0 DMA free:10792kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:144kB local_pcp:4kB free_cma:0kB [ 108.309975][ T8272] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 108.309992][ T8272] Node 0 DMA32 free:79892kB boost:6144kB min:33208kB low:39972kB high:46736kB reserved_highatomic:0kB free_highatomic:0kB active_anon:100680kB inactive_anon:60kB active_file:644kB inactive_file:259748kB unevictable:2000kB writepending:2228kB zspages:0kB present:2080628kB managed:1230580kB mlocked:0kB bounce:0kB free_pcp:41908kB local_pcp:8508kB free_cma:0kB [ 108.310020][ T8272] lowmem_reserve[]: 0 0 0 0 0 [ 108.310036][ T8272] Node 1 Normal free:1579160kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:36820kB local_pcp:12032kB free_cma:0kB [ 108.310062][ T8272] lowmem_reserve[]: 0 0 0 0 0 [ 108.310078][ T8272] Node 0 DMA: 18*4kB (U) 20*8kB (UE) 12*16kB (UE) 12*32kB (UME) 12*64kB (UE) 8*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 10792kB [ 108.310154][ T8272] Node 0 DMA32: 1029*4kB (UME) 381*8kB (UME) 116*16kB (UME) 524*32kB (UME) 238*64kB (UME) 97*128kB (UME) 39*256kB (UME) 12*512kB (ME) 6*1024kB (ME) 2*2048kB (U) 0*4096kB = 79804kB [ 108.310232][ T8272] Node 1 Normal: 18*4kB (UM) 30*8kB (UME) 36*16kB (UME) 39*32kB (UME) 21*64kB (UME) 10*128kB (UME) 10*256kB (UM) 10*512kB (UME) 2*1024kB (U) 4*2048kB (UME) 380*4096kB (UM) = 1579160kB [ 108.310310][ T8272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.310318][ T8272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 108.310325][ T8272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.310333][ T8272] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 108.310340][ T8272] 83145 total pagecache pages [ 108.310344][ T8272] 0 pages in swap cache [ 108.310347][ T8272] Free swap = 124996kB [ 108.310350][ T8272] Total swap = 124996kB [ 108.310354][ T8272] 1048443 pages RAM [ 108.310357][ T8272] 0 pages HighMem/MovableOnly [ 108.310361][ T8272] 291488 pages reserved [ 108.310364][ T8272] 0 pages cma reserved [ 108.386972][ T8277] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.387025][ T8277] netlink: 'syz.9.621': attribute type 1 has an invalid length. [ 108.389292][ T8267] block device autoloading is deprecated and will be removed. [ 108.450686][ T8277] md/raid1:md9: active with 1 out of 2 mirrors [ 108.459374][ T8277] md9: detected capacity change from 0 to 4096 [ 108.510660][ T8264] md9: detected capacity change from 4096 to 0 [ 108.510679][ T8264] md: md9 stopped. [ 108.579832][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.638251][ T207] IPVS: starting estimator thread 0... [ 108.724551][ T8289] IPVS: using max 44 ests per chain, 105600 per kthread [ 108.939690][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.9.631'. [ 109.153248][ T43] audit: type=1400 audit(1794294043.913:919): avc: denied { create } for pid=8304 comm="syz.7.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.219683][ T8307] xt_hashlimit: size too large, truncated to 1048576 [ 109.513997][ T8311] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.558487][ T8313] i2c i2c-0: new_device: Missing parameters [ 109.604713][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.695434][ T8322] FAULT_INJECTION: forcing a failure. [ 109.695434][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 109.695454][ T8322] CPU: 2 UID: 0 PID: 8322 Comm: syz.7.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.695469][ T8322] Tainted: [L]=SOFTLOCKUP [ 109.695473][ T8322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.695480][ T8322] Call Trace: [ 109.695489][ T8322] [ 109.695493][ T8322] dump_stack_lvl+0x100/0x190 [ 109.695521][ T8322] should_fail_ex.cold+0x5/0xa [ 109.695539][ T8322] should_failslab+0xc2/0x120 [ 109.695556][ T8322] __kmalloc_noprof+0xfc/0x840 [ 109.695567][ T8322] ? tomoyo_encode2+0xfb/0x3c0 [ 109.695581][ T8322] tomoyo_encode2+0xfb/0x3c0 [ 109.695595][ T8322] tomoyo_encode+0x29/0x50 [ 109.695606][ T8322] tomoyo_realpath_from_path+0x18c/0x690 [ 109.695621][ T8322] tomoyo_path_number_perm+0x23c/0x580 [ 109.695636][ T8322] ? tomoyo_path_number_perm+0x22e/0x580 [ 109.695653][ T8322] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.695674][ T8322] ? __lock_acquire+0x5c0/0x1f40 [ 109.695696][ T8322] ? __fget_files+0x34/0x3d0 [ 109.695710][ T8322] ? find_held_lock+0x2b/0x80 [ 109.695722][ T8322] ? hook_file_ioctl_common+0x140/0x440 [ 109.695738][ T8322] ? __fget_files+0x21f/0x3d0 [ 109.695754][ T8322] security_file_ioctl+0xd3/0x230 [ 109.695777][ T8322] __x64_sys_ioctl+0xb7/0x210 [ 109.695789][ T8322] do_syscall_64+0x123/0x7b0 [ 109.695808][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.695819][ T8322] RIP: 0033:0x7f53b05a8f19 [ 109.695831][ T8322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.695845][ T8322] RSP: 002b:00007f53b1406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.695859][ T8322] RAX: ffffffffffffffda RBX: 00007f53b0825fa0 RCX: 00007f53b05a8f19 [ 109.695868][ T8322] RDX: 0000200000000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 109.695879][ T8322] RBP: 00007f53b1406090 R08: 0000000000000000 R09: 0000000000000000 [ 109.695889][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.695895][ T8322] R13: 00007f53b0826038 R14: 00007f53b0825fa0 R15: 00007ffe8ec3fea8 [ 109.695910][ T8322] [ 109.695919][ T8322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.944893][ T8346] FAULT_INJECTION: forcing a failure. [ 109.944893][ T8346] name failslab, interval 1, probability 0, space 0, times 0 [ 109.944923][ T8346] CPU: 2 UID: 0 PID: 8346 Comm: syz.6.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.944945][ T8346] Tainted: [L]=SOFTLOCKUP [ 109.944951][ T8346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.944960][ T8346] Call Trace: [ 109.944966][ T8346] [ 109.944973][ T8346] dump_stack_lvl+0x100/0x190 [ 109.945004][ T8346] should_fail_ex.cold+0x5/0xa [ 109.945031][ T8346] should_failslab+0xc2/0x120 [ 109.945053][ T8346] __kmalloc_noprof+0xfc/0x840 [ 109.945068][ T8346] ? rcu_is_watching+0x13/0xc0 [ 109.945090][ T8346] ? tomoyo_realpath_from_path+0xb6/0x690 [ 109.945116][ T8346] tomoyo_realpath_from_path+0xb6/0x690 [ 109.945142][ T8346] tomoyo_path_number_perm+0x23c/0x580 [ 109.945167][ T8346] ? tomoyo_path_number_perm+0x22e/0x580 [ 109.945195][ T8346] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.945232][ T8346] ? __lock_acquire+0x5c0/0x1f40 [ 109.945276][ T8346] ? __fget_files+0x34/0x3d0 [ 109.945298][ T8346] ? find_held_lock+0x2b/0x80 [ 109.945317][ T8346] ? hook_file_ioctl_common+0x140/0x440 [ 109.945345][ T8346] ? __fget_files+0x21f/0x3d0 [ 109.945373][ T8346] security_file_ioctl+0xd3/0x230 [ 109.945402][ T8346] __x64_sys_ioctl+0xb7/0x210 [ 109.945423][ T8346] do_syscall_64+0x123/0x7b0 [ 109.945447][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.945465][ T8346] RIP: 0033:0x7f07d0ba8f19 [ 109.945479][ T8346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.945494][ T8346] RSP: 002b:00007f07d1aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.945510][ T8346] RAX: ffffffffffffffda RBX: 00007f07d0e25fa0 RCX: 00007f07d0ba8f19 [ 109.945521][ T8346] RDX: 00002000000002c0 RSI: 0000000000002270 RDI: 0000000000000003 [ 109.945531][ T8346] RBP: 00007f07d1aff090 R08: 0000000000000000 R09: 0000000000000000 [ 109.945541][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.945552][ T8346] R13: 00007f07d0e26038 R14: 00007f07d0e25fa0 R15: 00007ffff5c71b18 [ 109.945577][ T8346] [ 109.945584][ T8346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.951838][ T8341] i2c i2c-0: new_device: Missing parameters [ 110.007278][ T8348] bond0: entered promiscuous mode [ 110.007299][ T8348] bond_slave_0: entered promiscuous mode [ 110.007472][ T8348] bond_slave_1: entered promiscuous mode [ 110.009109][ T8348] batadv0: entered promiscuous mode [ 110.015061][ T8348] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 110.019042][ T8348] bond0: left promiscuous mode [ 110.019055][ T8348] bond_slave_0: left promiscuous mode [ 110.019158][ T8348] bond_slave_1: left promiscuous mode [ 110.022405][ T8348] batadv0: left promiscuous mode [ 110.075482][ T8351] block device autoloading is deprecated and will be removed. [ 110.098388][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.6.649'. [ 110.181169][ T8358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.182146][ T8358] bond0: (slave bond2): Enslaving as an active interface with an up link [ 110.263826][ T8361] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.474934][ T8370] jffs2: notice: (8370) jffs2_build_xattr_subsystem: complete building xattr subsystem, 15 of xdatum (0 unchecked, 15 orphan) and 27 of xref (3 dead, 24 orphan) found. [ 110.637110][ T8378] FAULT_INJECTION: forcing a failure. [ 110.637110][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 110.637129][ T8378] CPU: 0 UID: 0 PID: 8378 Comm: syz.7.655 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.637143][ T8378] Tainted: [L]=SOFTLOCKUP [ 110.637147][ T8378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.637153][ T8378] Call Trace: [ 110.637156][ T8378] [ 110.637161][ T8378] dump_stack_lvl+0x100/0x190 [ 110.637183][ T8378] should_fail_ex.cold+0x5/0xa [ 110.637216][ T8378] should_failslab+0xc2/0x120 [ 110.637230][ T8378] __kmalloc_cache_node_noprof+0x94/0x710 [ 110.637243][ T8378] ? __get_vm_area_node+0x124/0x350 [ 110.637256][ T8378] __get_vm_area_node+0x124/0x350 [ 110.637269][ T8378] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 110.637283][ T8378] ? vhost_task_create+0x1db/0x370 [ 110.637295][ T8378] ? lock_acquire+0x1d1/0x380 [ 110.637309][ T8378] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 110.637326][ T8378] ? find_held_lock+0x2b/0x80 [ 110.637338][ T8378] ? rcu_read_unlock+0x17/0x60 [ 110.637353][ T8378] ? vhost_task_create+0x1db/0x370 [ 110.637367][ T8378] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 110.637384][ T8378] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.637398][ T8378] ? rcu_is_watching+0x13/0xc0 [ 110.637410][ T8378] ? trace_kmem_cache_alloc+0xdd/0x100 [ 110.637424][ T8378] ? vhost_task_create+0x1db/0x370 [ 110.637439][ T8378] __vmalloc_node_noprof+0xad/0xf0 [ 110.637456][ T8378] ? vhost_task_create+0x1db/0x370 [ 110.637475][ T8378] copy_process+0x80b/0x88e0 [ 110.637509][ T8378] ? __pfx_copy_process+0x10/0x10 [ 110.637528][ T8378] ? kasan_save_track+0x14/0x30 [ 110.637545][ T8378] ? __kasan_kmalloc+0xaa/0xb0 [ 110.637562][ T8378] ? lockdep_init_map_type+0x5c/0x250 [ 110.637586][ T8378] ? lockdep_init_map_type+0x5c/0x250 [ 110.637604][ T8378] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 110.637616][ T8378] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 110.637633][ T8378] vhost_task_create+0x1db/0x370 [ 110.637652][ T8378] ? __pfx_vhost_task_create+0x10/0x10 [ 110.637677][ T8378] ? __pfx_vhost_task_fn+0x10/0x10 [ 110.637698][ T8378] ? register_lock_class+0x3f/0x7b0 [ 110.637719][ T8378] ? rcu_is_watching+0x13/0xc0 [ 110.637737][ T8378] ? trace_contention_end+0x126/0x160 [ 110.637765][ T8378] kvm_mmu_post_init_vm+0x1b3/0x360 [ 110.637788][ T8378] kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 110.637813][ T8378] ? __pfx___mutex_lock+0x10/0x10 [ 110.637832][ T8378] ? kasan_quarantine_put+0x104/0x240 [ 110.637853][ T8378] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 110.637875][ T8378] ? lock_acquire+0x1d1/0x380 [ 110.637897][ T8378] ? do_raw_write_lock+0x11e/0x260 [ 110.637912][ T8378] ? find_held_lock+0x2b/0x80 [ 110.637929][ T8378] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 110.637951][ T8378] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 110.637980][ T8378] kvm_vcpu_ioctl+0x735/0x17b0 [ 110.638007][ T8378] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.638031][ T8378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.638059][ T8378] ? do_vfs_ioctl+0x226/0x13e0 [ 110.638078][ T8378] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 110.638092][ T8378] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 110.638112][ T8378] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 110.638133][ T8378] ? __fget_files+0x34/0x3d0 [ 110.638165][ T8378] ? selinux_file_ioctl+0x1e0/0x290 [ 110.638181][ T8378] ? selinux_file_ioctl+0x1e7/0x290 [ 110.638198][ T8378] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 110.638223][ T8378] __x64_sys_ioctl+0x18e/0x210 [ 110.638242][ T8378] do_syscall_64+0x123/0x7b0 [ 110.638264][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.638280][ T8378] RIP: 0033:0x7f53b05a8f19 [ 110.638294][ T8378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.638309][ T8378] RSP: 002b:00007f53b1406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.638326][ T8378] RAX: ffffffffffffffda RBX: 00007f53b0825fa0 RCX: 00007f53b05a8f19 [ 110.638336][ T8378] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 110.638347][ T8378] RBP: 00007f53b1406090 R08: 0000000000000000 R09: 0000000000000000 [ 110.638357][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.638366][ T8378] R13: 00007f53b0826038 R14: 00007f53b0825fa0 R15: 00007ffe8ec3fea8 [ 110.638391][ T8378] [ 110.648858][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.848180][ T8386] i2c i2c-0: new_device: Missing parameters [ 110.909048][ T8391] FAULT_INJECTION: forcing a failure. [ 110.909048][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 110.909069][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.6.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.909083][ T8391] Tainted: [L]=SOFTLOCKUP [ 110.909086][ T8391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.909093][ T8391] Call Trace: [ 110.909096][ T8391] [ 110.909101][ T8391] dump_stack_lvl+0x100/0x190 [ 110.909124][ T8391] should_fail_ex.cold+0x5/0xa [ 110.909141][ T8391] should_failslab+0xc2/0x120 [ 110.909155][ T8391] __kvmalloc_node_noprof+0x113/0x9b0 [ 110.909171][ T8391] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 110.909187][ T8391] ? io_uring_setup.cold+0x1f4/0x1c7e [ 110.909202][ T8391] io_uring_setup.cold+0x1f4/0x1c7e [ 110.909216][ T8391] ? lock_acquire+0x1d1/0x380 [ 110.909231][ T8391] ? avc_has_perm_noaudit+0x56/0x470 [ 110.909247][ T8391] ? __pfx_io_uring_setup+0x10/0x10 [ 110.909260][ T8391] ? find_held_lock+0x2b/0x80 [ 110.909271][ T8391] ? avc_has_perm_noaudit+0x11e/0x470 [ 110.909283][ T8391] ? avc_has_perm_noaudit+0x11e/0x470 [ 110.909304][ T8391] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.909317][ T8391] ? ksys_write+0x1ac/0x250 [ 110.909328][ T8391] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 110.909345][ T8391] __x64_sys_io_uring_setup+0xc2/0x170 [ 110.909359][ T8391] do_syscall_64+0x123/0x7b0 [ 110.909373][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.909384][ T8391] RIP: 0033:0x7f07d0ba8f19 [ 110.909393][ T8391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.909411][ T8391] RSP: 002b:00007f07d1afefb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 110.909423][ T8391] RAX: ffffffffffffffda RBX: 0000200000000700 RCX: 00007f07d0ba8f19 [ 110.909430][ T8391] RDX: 00002000000007c0 RSI: 0000200000000700 RDI: 0000000000000021 [ 110.909437][ T8391] RBP: 00007f07d0c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 110.909443][ T8391] R10: 0000200000000800 R11: 0000000000000206 R12: 00002000000007c0 [ 110.909450][ T8391] R13: 0000200000000800 R14: 0000200000000780 R15: 00007ffff5c71b18 [ 110.909465][ T8391] [ 111.040209][ T8397] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.071378][ T8404] jffs2: notice: (8404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 15 of xdatum (0 unchecked, 15 orphan) and 27 of xref (3 dead, 24 orphan) found. [ 111.167524][ T8414] jffs2: notice: (8414) jffs2_build_xattr_subsystem: complete building xattr subsystem, 15 of xdatum (0 unchecked, 15 orphan) and 27 of xref (3 dead, 24 orphan) found. [ 111.200078][ T8419] xt_hashlimit: size too large, truncated to 1048576 [ 111.207939][ T1362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.388705][ T8429] i2c i2c-0: new_device: Missing parameters [ 111.467427][ T8432] FAULT_INJECTION: forcing a failure. [ 111.467427][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 111.467450][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.7.674 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.467466][ T8432] Tainted: [L]=SOFTLOCKUP [ 111.467471][ T8432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.467478][ T8432] Call Trace: [ 111.467482][ T8432] [ 111.467486][ T8432] dump_stack_lvl+0x100/0x190 [ 111.467508][ T8432] should_fail_ex.cold+0x5/0xa [ 111.467526][ T8432] should_failslab+0xc2/0x120 [ 111.467540][ T8432] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 111.467563][ T8432] ? lock_acquire+0x1d1/0x380 [ 111.467579][ T8432] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 111.467595][ T8432] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 111.467612][ T8432] kstrdup+0x51/0xe0 [ 111.467626][ T8432] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 111.467642][ T8432] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 111.467662][ T8432] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 111.467675][ T8432] selinux_socket_post_create+0x363/0x7e0 [ 111.467694][ T8432] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 111.467712][ T8432] ? rawv6_init_sk+0x18d/0x1d0 [ 111.467736][ T8432] ? __pfx_rawv6_init_sk+0x10/0x10 [ 111.467752][ T8432] ? inet6_create+0xb34/0x12b0 [ 111.467764][ T8432] security_socket_post_create+0xaf/0x270 [ 111.467782][ T8432] __sock_create+0x70b/0x860 [ 111.467803][ T8432] inet_ctl_sock_create+0x94/0x230 [ 111.467817][ T8432] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 111.467831][ T8432] ? neigh_table_register+0xd30/0x11b0 [ 111.467844][ T8432] ndisc_net_init+0x1a1/0x3e0 [ 111.467857][ T8432] ? __pfx_ndisc_net_init+0x10/0x10 [ 111.467870][ T8432] ? ac6_proc_init+0x5f/0x80 [ 111.467881][ T8432] ? inet6_net_init+0x76d/0xa20 [ 111.467897][ T8432] ? __pfx_ndisc_net_init+0x10/0x10 [ 111.467910][ T8432] ops_init+0x1e2/0x5f0 [ 111.467926][ T8432] setup_net+0x118/0x3a0 [ 111.467941][ T8432] ? __pfx_setup_net+0x10/0x10 [ 111.467955][ T8432] ? bpf_lsm_namespace_init+0x9/0x10 [ 111.467981][ T8432] copy_net_ns+0x340/0x7a0 [ 111.467999][ T8432] create_new_namespaces+0x3ea/0xac0 [ 111.468018][ T8432] unshare_nsproxy_namespaces+0xf6/0x210 [ 111.468060][ T8432] ksys_unshare+0x44f/0x980 [ 111.468075][ T8432] ? __pfx_ksys_unshare+0x10/0x10 [ 111.468097][ T8432] __x64_sys_unshare+0x31/0x40 [ 111.468115][ T8432] do_syscall_64+0x123/0x7b0 [ 111.468145][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.468182][ T8432] RIP: 0033:0x7f53b05a8f19 [ 111.468199][ T8432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.468216][ T8432] RSP: 002b:00007f53b1406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.468235][ T8432] RAX: ffffffffffffffda RBX: 00007f53b0825fa0 RCX: 00007f53b05a8f19 [ 111.468247][ T8432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 111.468259][ T8432] RBP: 00007f53b0637f6d R08: 0000000000000000 R09: 0000000000000000 [ 111.468270][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.468280][ T8432] R13: 00007f53b0826038 R14: 00007f53b0825fa0 R15: 00007ffe8ec3fea8 [ 111.468306][ T8432] [ 111.468401][ T8432] ICMPv6: NDISC: Failed to initialize the control socket (err -12) [ 111.494483][ T2334] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.632447][ T8441] jffs2: notice: (8441) jffs2_build_xattr_subsystem: complete building xattr subsystem, 15 of xdatum (0 unchecked, 15 orphan) and 27 of xref (3 dead, 24 orphan) found. [ 111.655239][ T2334] usb 5-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 111.659991][ T2334] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.660057][ T2334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.676385][ T2334] as10x_usb: device has been detected [ 111.677021][ T2334] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 111.700908][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.701630][ T2334] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 111.704680][ T2334] as10x_usb: error during firmware upload part1 [ 111.705130][ T2334] Registered device Abilis Systems DVB-Titan [ 111.709185][ T8445] FAULT_INJECTION: forcing a failure. [ 111.709185][ T8445] name failslab, interval 1, probability 0, space 0, times 0 [ 111.709212][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.6.680 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.709236][ T8445] Tainted: [L]=SOFTLOCKUP [ 111.709242][ T8445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.709253][ T8445] Call Trace: [ 111.709259][ T8445] [ 111.709267][ T8445] dump_stack_lvl+0x100/0x190 [ 111.709301][ T8445] should_fail_ex.cold+0x5/0xa [ 111.709329][ T8445] should_failslab+0xc2/0x120 [ 111.709350][ T8445] __kmalloc_noprof+0xfc/0x840 [ 111.709367][ T8445] ? __vb2_queue_alloc+0x23e/0x1160 [ 111.709392][ T8445] __vb2_queue_alloc+0x23e/0x1160 [ 111.709424][ T8445] vb2_core_create_bufs+0x5fa/0xa30 [ 111.709447][ T8445] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 111.709471][ T8445] ? lock_acquire+0x1d1/0x380 [ 111.709494][ T8445] ? __video_do_ioctl+0x50f/0xdf0 [ 111.709522][ T8445] vb2_create_bufs+0x40c/0x830 [ 111.709552][ T8445] ? __pfx_vb2_create_bufs+0x10/0x10 [ 111.709577][ T8445] ? v4l_sanitize_colorspace+0x220/0x410 [ 111.709609][ T8445] vb2_ioctl_create_bufs+0x244/0x3e0 [ 111.709634][ T8445] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.709663][ T8445] vidioc_create_bufs+0x7d/0xf0 [ 111.709685][ T8445] v4l_create_bufs+0x17d/0x270 [ 111.709708][ T8445] __video_do_ioctl+0xb2a/0xdf0 [ 111.709734][ T8445] ? __might_fault+0xc5/0x140 [ 111.709754][ T8445] ? __pfx___video_do_ioctl+0x10/0x10 [ 111.709786][ T8445] video_usercopy+0x47a/0x1730 [ 111.709811][ T8445] ? __pfx___video_do_ioctl+0x10/0x10 [ 111.709837][ T8445] ? __pfx_video_usercopy+0x10/0x10 [ 111.709877][ T8445] v4l2_ioctl+0x1bd/0x250 [ 111.709899][ T8445] ? __pfx_v4l2_ioctl+0x10/0x10 [ 111.709923][ T8445] __x64_sys_ioctl+0x18e/0x210 [ 111.709944][ T8445] do_syscall_64+0x123/0x7b0 [ 111.709968][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.709985][ T8445] RIP: 0033:0x7f07d0ba8f19 [ 111.710000][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.710016][ T8445] RSP: 002b:00007f07d1aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.710034][ T8445] RAX: ffffffffffffffda RBX: 00007f07d0e25fa0 RCX: 00007f07d0ba8f19 [ 111.710046][ T8445] RDX: 00002000000002c0 RSI: 00000000c100565c RDI: 0000000000000006 [ 111.710056][ T8445] RBP: 00007f07d0c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 111.710066][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.710077][ T8445] R13: 00007f07d0e26038 R14: 00007f07d0e25fa0 R15: 00007ffff5c71b18 [ 111.710102][ T8445] [ 111.773845][ T8446] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.136507][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 112.136537][ T43] audit: type=1400 audit(1794294046.903:925): avc: denied { accept } for pid=8458 comm="syz.7.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.137575][ T43] audit: type=1400 audit(1794294046.903:926): avc: denied { setopt } for pid=8458 comm="syz.7.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.138179][ T43] audit: type=1400 audit(1794294046.903:927): avc: denied { bind } for pid=8458 comm="syz.7.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.172471][ T5145] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 112.724697][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.964544][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.452394][ T8467] i2c i2c-0: new_device: Missing parameters [ 113.610413][ T8474] FAT-fs (nullb0): bogus number of reserved sectors [ 113.610427][ T8474] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 113.742630][ T8484] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.765642][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.804355][ T8492] FAULT_INJECTION: forcing a failure. [ 113.804355][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 113.804375][ T8492] CPU: 1 UID: 0 PID: 8492 Comm: syz.6.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.804390][ T8492] Tainted: [L]=SOFTLOCKUP [ 113.804394][ T8492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.804400][ T8492] Call Trace: [ 113.804412][ T8492] [ 113.804416][ T8492] dump_stack_lvl+0x100/0x190 [ 113.804445][ T8492] should_fail_ex.cold+0x5/0xa [ 113.804462][ T8492] should_failslab+0xc2/0x120 [ 113.804479][ T8492] kmem_cache_alloc_noprof+0x92/0x6a0 [ 113.804496][ T8492] ? netlink_deliver_tap+0x103/0xb50 [ 113.804514][ T8492] ? skb_clone+0x187/0x3f0 [ 113.804529][ T8492] skb_clone+0x187/0x3f0 [ 113.804543][ T8492] netlink_deliver_tap+0x82f/0xb50 [ 113.804560][ T8492] netlink_unicast+0x708/0x950 [ 113.804577][ T8492] ? __pfx_netlink_unicast+0x10/0x10 [ 113.804595][ T8492] netlink_sendmsg+0x9ac/0x10c0 [ 113.804612][ T8492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.804629][ T8492] ? selinux_socket_sendmsg+0x198/0x2f0 [ 113.804648][ T8492] ? ____sys_sendmsg+0xa99/0xc30 [ 113.804758][ T8492] ____sys_sendmsg+0xa99/0xc30 [ 113.804774][ T8492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.804790][ T8492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.804810][ T8492] ? lock_acquire+0x1d1/0x380 [ 113.804825][ T8492] ? get_pid_task+0x2a/0x250 [ 113.804836][ T8492] ___sys_sendmsg+0x190/0x1e0 [ 113.804847][ T8492] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.804857][ T8492] ? get_pid_task+0x106/0x250 [ 113.804872][ T8492] ? find_held_lock+0x2b/0x80 [ 113.804893][ T8492] __sys_sendmsg+0x160/0x210 [ 113.804928][ T8492] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.804957][ T8492] do_syscall_64+0x123/0x7b0 [ 113.804980][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.804996][ T8492] RIP: 0033:0x7f07d0ba8f19 [ 113.805011][ T8492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.805026][ T8492] RSP: 002b:00007f07d1aff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.805041][ T8492] RAX: ffffffffffffffda RBX: 00007f07d0e25fa0 RCX: 00007f07d0ba8f19 [ 113.805051][ T8492] RDX: 0000000020040040 RSI: 0000200000000200 RDI: 0000000000000004 [ 113.805061][ T8492] RBP: 00007f07d1aff090 R08: 0000000000000000 R09: 0000000000000000 [ 113.805072][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.805082][ T8492] R13: 00007f07d0e26038 R14: 00007f07d0e25fa0 R15: 00007ffff5c71b18 [ 113.805104][ T8492] [ 113.843272][ T8492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.852500][ T8492] bond0: (slave bond1): Enslaving as an active interface with an up link [ 113.871669][ T8498] FAULT_INJECTION: forcing a failure. [ 113.871669][ T8498] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.871695][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.7.689 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.871709][ T8498] Tainted: [L]=SOFTLOCKUP [ 113.871713][ T8498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.871720][ T8498] Call Trace: [ 113.871723][ T8498] [ 113.871729][ T8498] dump_stack_lvl+0x100/0x190 [ 113.871749][ T8498] should_fail_ex.cold+0x5/0xa [ 113.871767][ T8498] should_fail_alloc_page+0xeb/0x140 [ 113.871781][ T8498] prepare_alloc_pages+0x1f0/0x5b0 [ 113.871795][ T8498] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 113.871812][ T8498] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 113.871828][ T8498] ? is_bpf_text_address+0x94/0x1a0 [ 113.871841][ T8498] ? kernel_text_address+0x8d/0x100 [ 113.871853][ T8498] ? __kernel_text_address+0xd/0x30 [ 113.871864][ T8498] ? unwind_get_return_address+0x59/0xa0 [ 113.871877][ T8498] ? __lock_acquire+0x5c0/0x1f40 [ 113.871891][ T8498] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.871912][ T8498] ? __lock_acquire+0x5c0/0x1f40 [ 113.871932][ T8498] ? lock_acquire+0x1d1/0x380 [ 113.871947][ T8498] ? page_table_check_set+0x1aa/0x630 [ 113.871980][ T8498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.872001][ T8498] ? policy_nodemask+0xed/0x5e0 [ 113.872039][ T8498] alloc_pages_mpol+0x201/0x560 [ 113.872056][ T8498] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 113.872071][ T8498] ? lock_acquire+0x1d1/0x380 [ 113.872088][ T8498] folio_alloc_mpol_noprof+0x36/0x260 [ 113.872105][ T8498] vma_alloc_folio_noprof+0xed/0x1d0 [ 113.872120][ T8498] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 113.872141][ T8498] do_anonymous_page+0xac9/0x2050 [ 113.872159][ T8498] ? __pfx_do_anonymous_page+0x10/0x10 [ 113.872171][ T8498] ? rcu_read_unlock+0x2d/0xb0 [ 113.872187][ T8498] ? rcu_read_unlock+0x2d/0xb0 [ 113.872202][ T8498] __handle_mm_fault+0x1eeb/0x2f40 [ 113.872231][ T8498] ? __pfx___handle_mm_fault+0x10/0x10 [ 113.872244][ T8498] ? __pfx_follow_page_pte+0x10/0x10 [ 113.872259][ T8498] ? __pfx___css_rstat_updated+0x10/0x10 [ 113.872281][ T8498] handle_mm_fault+0x363/0xa30 [ 113.872296][ T8498] __get_user_pages+0x7ca/0x1d50 [ 113.872316][ T8498] ? __pfx___get_user_pages+0x10/0x10 [ 113.872337][ T8498] faultin_page_range+0x1f1/0x9e0 [ 113.872353][ T8498] ? lock_acquire+0x1d1/0x380 [ 113.872372][ T8498] madvise_do_behavior+0x354/0x510 [ 113.872388][ T8498] ? __pfx_madvise_do_behavior+0x10/0x10 [ 113.872403][ T8498] ? down_read+0x136/0x4c0 [ 113.872425][ T8498] do_madvise+0x238/0x290 [ 113.872437][ T8498] ? __pfx_do_madvise+0x10/0x10 [ 113.872450][ T8498] ? do_futex+0x190/0x440 [ 113.872465][ T8498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.872489][ T8498] __x64_sys_madvise+0xa9/0x110 [ 113.872502][ T8498] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.872514][ T8498] do_syscall_64+0x123/0x7b0 [ 113.872529][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.872540][ T8498] RIP: 0033:0x7f53b05a8f19 [ 113.872550][ T8498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.872560][ T8498] RSP: 002b:00007f53b13c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 113.872571][ T8498] RAX: ffffffffffffffda RBX: 00007f53b0826180 RCX: 00007f53b05a8f19 [ 113.872578][ T8498] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 113.872584][ T8498] RBP: 00007f53b0637f6d R08: 0000000000000000 R09: 0000000000000000 [ 113.872591][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.872597][ T8498] R13: 00007f53b0826218 R14: 00007f53b0826180 R15: 00007ffe8ec3fea8 [ 113.872612][ T8498] [ 114.060454][ T8510] device-mapper: raid: Choosing default region size of 4MiB [ 114.078036][ T43] audit: type=1400 audit(1794294048.843:928): avc: denied { setopt } for pid=8501 comm="syz.9.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.117247][ T43] audit: type=1400 audit(1794294048.883:929): avc: denied { ioctl } for pid=8509 comm="syz.6.696" path="socket:[29193]" dev="sockfs" ino=29193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.127061][ T43] audit: type=1400 audit(1794294048.893:930): avc: denied { read } for pid=8517 comm="syz.9.698" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 114.127237][ T43] audit: type=1400 audit(1794294048.893:931): avc: denied { open } for pid=8517 comm="syz.9.698" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 114.170544][ T43] audit: type=1400 audit(1794294048.933:932): avc: denied { connect } for pid=8509 comm="syz.6.696" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.171157][ T43] audit: type=1400 audit(1794294048.933:933): avc: denied { write } for pid=8509 comm="syz.6.696" laddr=fe80::11 lport=255 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.255623][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.269561][ T8531] FAULT_INJECTION: forcing a failure. [ 114.269561][ T8531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.269579][ T8531] CPU: 0 UID: 0 PID: 8531 Comm: syz.9.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.269594][ T8531] Tainted: [L]=SOFTLOCKUP [ 114.269598][ T8531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.269605][ T8531] Call Trace: [ 114.269609][ T8531] [ 114.269613][ T8531] dump_stack_lvl+0x100/0x190 [ 114.269635][ T8531] should_fail_ex.cold+0x5/0xa [ 114.269653][ T8531] _copy_from_user+0x2e/0xd0 [ 114.269667][ T8531] copy_msghdr_from_user+0x9f/0x4c0 [ 114.269679][ T8531] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 114.269693][ T8531] ? lock_acquire+0x1d1/0x380 [ 114.269709][ T8531] ? get_pid_task+0x2a/0x250 [ 114.269720][ T8531] ___sys_sendmsg+0x106/0x1e0 [ 114.269732][ T8531] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.269742][ T8531] ? get_pid_task+0x106/0x250 [ 114.269757][ T8531] ? find_held_lock+0x2b/0x80 [ 114.269778][ T8531] __sys_sendmsg+0x160/0x210 [ 114.269792][ T8531] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.269813][ T8531] do_syscall_64+0x123/0x7b0 [ 114.269829][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.269840][ T8531] RIP: 0033:0x7fa1d2da8f19 [ 114.269850][ T8531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.269860][ T8531] RSP: 002b:00007fa1d3cdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.269871][ T8531] RAX: ffffffffffffffda RBX: 00007fa1d3025fa0 RCX: 00007fa1d2da8f19 [ 114.269879][ T8531] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 114.269885][ T8531] RBP: 00007fa1d3cdb090 R08: 0000000000000000 R09: 0000000000000000 [ 114.269892][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.269898][ T8531] R13: 00007fa1d3026038 R14: 00007fa1d3025fa0 R15: 00007ffda535bfa8 [ 114.269912][ T8531] [ 114.363631][ T43] audit: type=1400 audit(1794294049.123:934): avc: denied { write } for pid=8535 comm="syz.9.704" name="auth.unix.ip" dev="proc" ino=4026533876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 114.367546][ T8536] netlink: 3604 bytes leftover after parsing attributes in process `syz.9.704'. [ 114.392364][ T8510] device-mapper: table: 248:13: raid: RAID device lookup failure (-ENOENT) [ 114.392381][ T8510] device-mapper: ioctl: error adding target to table [ 114.443338][ T8539] rxe_eth0 speed is unknown, defaulting to 1000 [ 114.579214][ T8540] FAULT_INJECTION: forcing a failure. [ 114.579214][ T8540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.579233][ T8540] CPU: 1 UID: 0 PID: 8540 Comm: syz.9.705 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.579247][ T8540] Tainted: [L]=SOFTLOCKUP [ 114.579251][ T8540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.579257][ T8540] Call Trace: [ 114.579262][ T8540] [ 114.579267][ T8540] dump_stack_lvl+0x100/0x190 [ 114.579288][ T8540] should_fail_ex.cold+0x5/0xa [ 114.579307][ T8540] should_fail_alloc_page+0xeb/0x140 [ 114.579322][ T8540] prepare_alloc_pages+0x1f0/0x5b0 [ 114.579336][ T8540] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 114.579354][ T8540] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 114.579370][ T8540] ? is_bpf_text_address+0x94/0x1a0 [ 114.579385][ T8540] ? kernel_text_address+0x8d/0x100 [ 114.579398][ T8540] ? __kernel_text_address+0xd/0x30 [ 114.579410][ T8540] ? unwind_get_return_address+0x59/0xa0 [ 114.579423][ T8540] ? __lock_acquire+0x5c0/0x1f40 [ 114.579437][ T8540] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.579458][ T8540] ? __lock_acquire+0x5c0/0x1f40 [ 114.579478][ T8540] ? lock_acquire+0x1d1/0x380 [ 114.579491][ T8540] ? page_table_check_set+0x1aa/0x630 [ 114.579505][ T8540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.579522][ T8540] ? policy_nodemask+0xed/0x5e0 [ 114.579537][ T8540] alloc_pages_mpol+0x201/0x560 [ 114.579551][ T8540] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 114.579565][ T8540] ? lock_acquire+0x1d1/0x380 [ 114.579581][ T8540] folio_alloc_mpol_noprof+0x36/0x260 [ 114.579597][ T8540] vma_alloc_folio_noprof+0xed/0x1d0 [ 114.579611][ T8540] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 114.579630][ T8540] do_anonymous_page+0xac9/0x2050 [ 114.579647][ T8540] ? __pfx_do_anonymous_page+0x10/0x10 [ 114.579659][ T8540] ? rcu_read_unlock+0x2d/0xb0 [ 114.579671][ T8540] ? rcu_read_unlock+0x2d/0xb0 [ 114.579697][ T8540] __handle_mm_fault+0x1eeb/0x2f40 [ 114.579713][ T8540] ? __pfx___handle_mm_fault+0x10/0x10 [ 114.579726][ T8540] ? __pfx_follow_page_pte+0x10/0x10 [ 114.579741][ T8540] ? __pfx___css_rstat_updated+0x10/0x10 [ 114.579765][ T8540] handle_mm_fault+0x363/0xa30 [ 114.579782][ T8540] __get_user_pages+0x7ca/0x1d50 [ 114.579803][ T8540] ? __pfx___get_user_pages+0x10/0x10 [ 114.579825][ T8540] faultin_page_range+0x1f1/0x9e0 [ 114.579841][ T8540] ? lock_acquire+0x1d1/0x380 [ 114.579857][ T8540] madvise_do_behavior+0x354/0x510 [ 114.579872][ T8540] ? __pfx_madvise_do_behavior+0x10/0x10 [ 114.579886][ T8540] ? down_read+0x136/0x4c0 [ 114.579907][ T8540] do_madvise+0x238/0x290 [ 114.579920][ T8540] ? __pfx_do_madvise+0x10/0x10 [ 114.579932][ T8540] ? do_futex+0x190/0x440 [ 114.579947][ T8540] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.579970][ T8540] __x64_sys_madvise+0xa9/0x110 [ 114.579983][ T8540] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.579995][ T8540] do_syscall_64+0x123/0x7b0 [ 114.580011][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.580049][ T8540] RIP: 0033:0x7fa1d2da8f19 [ 114.580060][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.580071][ T8540] RSP: 002b:00007fa1d3cba028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 114.580083][ T8540] RAX: ffffffffffffffda RBX: 00007fa1d3026090 RCX: 00007fa1d2da8f19 [ 114.580090][ T8540] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 114.580097][ T8540] RBP: 00007fa1d2e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 114.580103][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.580109][ T8540] R13: 00007fa1d3026128 R14: 00007fa1d3026090 R15: 00007ffda535bfa8 [ 114.580123][ T8540] [ 114.773864][ T1362] usb 5-1: USB disconnect, device number 3 [ 114.808275][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.819224][ T8567] tmpfs: Bad value for 'mpol' [ 114.855444][ T1362] Unregistered device Abilis Systems DVB-Titan [ 114.861630][ T1362] as10x_usb: device has been disconnected [ 114.936100][ T8574] FAULT_INJECTION: forcing a failure. [ 114.936100][ T8574] name failslab, interval 1, probability 0, space 0, times 0 [ 114.936122][ T8574] CPU: 1 UID: 0 PID: 8574 Comm: syz.0.716 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.936138][ T8574] Tainted: [L]=SOFTLOCKUP [ 114.936142][ T8574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.936148][ T8574] Call Trace: [ 114.936153][ T8574] [ 114.936158][ T8574] dump_stack_lvl+0x100/0x190 [ 114.936180][ T8574] should_fail_ex.cold+0x5/0xa [ 114.936199][ T8574] should_failslab+0xc2/0x120 [ 114.936213][ T8574] kmem_cache_alloc_noprof+0x92/0x6a0 [ 114.936232][ T8574] ? mas_preallocate+0xc22/0xee0 [ 114.936250][ T8574] mas_preallocate+0xc22/0xee0 [ 114.936267][ T8574] ? __pfx_mas_preallocate+0x10/0x10 [ 114.936280][ T8574] ? rcu_is_watching+0x13/0xc0 [ 114.936296][ T8574] ? vm_area_alloc+0x1f/0x160 [ 114.936309][ T8574] ? lockdep_init_map_type+0x5c/0x250 [ 114.936327][ T8574] __mmap_region+0x15c2/0x3910 [ 114.936347][ T8574] ? __page_table_check_zero+0x27f/0x410 [ 114.936361][ T8574] ? __page_table_check_zero+0x27f/0x410 [ 114.936374][ T8574] ? __pfx___mmap_region+0x10/0x10 [ 114.936406][ T8574] ? __page_table_check_zero+0x284/0x410 [ 114.936427][ T8574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.936448][ T8574] ? mas_prev_node+0x1de/0x1270 [ 114.936479][ T8574] ? mas_prev+0xa4/0x100 [ 114.936495][ T8574] ? __pfx_mas_prev+0x10/0x10 [ 114.936512][ T8574] ? mas_find+0x2cb/0x790 [ 114.936527][ T8574] ? unmapped_area_topdown+0x54e/0x6a0 [ 114.936575][ T8574] mmap_region+0x3db/0x6d0 [ 114.936591][ T8574] ? __pfx_mmap_region+0x10/0x10 [ 114.936625][ T8574] ? thp_get_unmapped_area_vmaflags+0x2a5/0x330 [ 114.936643][ T8574] ? selinux_mmap_addr+0x2b/0x100 [ 114.936657][ T8574] ? bpf_lsm_mmap_addr+0x9/0x30 [ 114.936674][ T8574] ? security_mmap_addr+0x71/0x1e0 [ 114.936686][ T8574] ? __get_unmapped_area+0x255/0x3e0 [ 114.936699][ T8574] do_mmap+0x12c7/0x1c30 [ 114.936712][ T8574] ? lock_acquire+0x1d1/0x380 [ 114.936727][ T8574] ? __pfx_do_mmap+0x10/0x10 [ 114.936737][ T8574] ? __pfx___might_resched+0x10/0x10 [ 114.936757][ T8574] ? __pfx_down_write_killable+0x10/0x10 [ 114.936774][ T8574] vm_mmap_pgoff+0x283/0x490 [ 114.936791][ T8574] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 114.936808][ T8574] ? find_held_lock+0x2b/0x80 [ 114.936819][ T8574] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 114.936834][ T8574] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 114.936851][ T8574] ksys_mmap_pgoff+0xe4/0x610 [ 114.936868][ T8574] ? find_held_lock+0x2b/0x80 [ 114.936879][ T8574] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 114.936900][ T8574] __x64_sys_mmap+0x125/0x190 [ 114.936916][ T8574] do_syscall_64+0x123/0x7b0 [ 114.936930][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.936942][ T8574] RIP: 0033:0x7f4f83fa8c82 [ 114.936952][ T8574] Code: 81 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 114.936962][ T8574] RSP: 002b:00007f4f821f4d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.936974][ T8574] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f83fa8c82 [ 114.936981][ T8574] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 114.936987][ T8574] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 114.936994][ T8574] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 114.937001][ T8574] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f4f84035650 [ 114.937017][ T8574] [ 114.943709][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 115.126726][ T8583] FAULT_INJECTION: forcing a failure. [ 115.126726][ T8583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.126755][ T8583] CPU: 2 UID: 0 PID: 8583 Comm: syz.7.721 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.126779][ T8583] Tainted: [L]=SOFTLOCKUP [ 115.126786][ T8583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.126817][ T8583] Call Trace: [ 115.126825][ T8583] [ 115.126833][ T8583] dump_stack_lvl+0x100/0x190 [ 115.126866][ T8583] should_fail_ex.cold+0x5/0xa [ 115.126892][ T8583] should_fail_alloc_page+0xeb/0x140 [ 115.126916][ T8583] prepare_alloc_pages+0x1f0/0x5b0 [ 115.126942][ T8583] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 115.126968][ T8583] ? mark_held_locks+0x40/0x70 [ 115.126991][ T8583] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 115.127013][ T8583] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.127033][ T8583] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 115.127059][ T8583] ? rcu_is_watching+0x13/0xc0 [ 115.127079][ T8583] ? trace_sched_exit_tp+0x120/0x160 [ 115.127096][ T8583] ? __schedule+0x1270/0x6a40 [ 115.127113][ T8583] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.127146][ T8583] ? __lock_acquire+0x5c0/0x1f40 [ 115.127178][ T8583] ? lock_acquire+0x1d1/0x380 [ 115.127198][ T8583] ? page_table_check_set+0x1aa/0x630 [ 115.127220][ T8583] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.127248][ T8583] ? policy_nodemask+0xed/0x5e0 [ 115.127270][ T8583] alloc_pages_mpol+0x201/0x560 [ 115.127291][ T8583] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 115.127313][ T8583] ? lock_acquire+0x1d1/0x380 [ 115.127338][ T8583] folio_alloc_mpol_noprof+0x36/0x260 [ 115.127363][ T8583] vma_alloc_folio_noprof+0xed/0x1d0 [ 115.127384][ T8583] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 115.127414][ T8583] do_anonymous_page+0xac9/0x2050 [ 115.127440][ T8583] ? __pfx_do_anonymous_page+0x10/0x10 [ 115.127458][ T8583] ? rcu_read_unlock+0x2d/0xb0 [ 115.127477][ T8583] ? rcu_read_unlock+0x2d/0xb0 [ 115.127502][ T8583] __handle_mm_fault+0x1eeb/0x2f40 [ 115.127542][ T8583] ? __pfx___handle_mm_fault+0x10/0x10 [ 115.127562][ T8583] ? __pfx_follow_page_pte+0x10/0x10 [ 115.127585][ T8583] ? __pfx___css_rstat_updated+0x10/0x10 [ 115.127630][ T8583] handle_mm_fault+0x363/0xa30 [ 115.127656][ T8583] __get_user_pages+0x7ca/0x1d50 [ 115.127690][ T8583] ? __pfx___get_user_pages+0x10/0x10 [ 115.127716][ T8583] ? plist_check_list+0x1b8/0x280 [ 115.127738][ T8583] faultin_page_range+0x1f1/0x9e0 [ 115.127763][ T8583] ? lock_acquire+0x1d1/0x380 [ 115.127787][ T8583] madvise_do_behavior+0x354/0x510 [ 115.127811][ T8583] ? __pfx_madvise_do_behavior+0x10/0x10 [ 115.127831][ T8583] ? down_read+0x136/0x4c0 [ 115.127863][ T8583] do_madvise+0x238/0x290 [ 115.127884][ T8583] ? __pfx_do_madvise+0x10/0x10 [ 115.127903][ T8583] ? do_futex+0x190/0x440 [ 115.127926][ T8583] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.127964][ T8583] __x64_sys_madvise+0xa9/0x110 [ 115.127984][ T8583] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.128002][ T8583] do_syscall_64+0x123/0x7b0 [ 115.128057][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.128077][ T8583] RIP: 0033:0x7f53b05a8f19 [ 115.128093][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.128108][ T8583] RSP: 002b:00007f53b13e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 115.128126][ T8583] RAX: ffffffffffffffda RBX: 00007f53b0826090 RCX: 00007f53b05a8f19 [ 115.128137][ T8583] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 115.128148][ T8583] RBP: 00007f53b0637f6d R08: 0000000000000000 R09: 0000000000000000 [ 115.128158][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.128168][ T8583] R13: 00007f53b0826128 R14: 00007f53b0826090 R15: 00007ffe8ec3fea8 [ 115.128192][ T8583] [ 115.141154][ T8581] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.412893][ T8601] ip6t_srh: unknown srh match flags 7700 [ 115.518869][ T8609] i2c i2c-0: new_device: Missing parameters [ 115.536874][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.536920][ T8612] FAULT_INJECTION: forcing a failure. [ 115.536920][ T8612] name failslab, interval 1, probability 0, space 0, times 0 [ 115.536940][ T8612] CPU: 2 UID: 0 PID: 8612 Comm: syz.9.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.536957][ T8612] Tainted: [L]=SOFTLOCKUP [ 115.536962][ T8612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.536982][ T8612] Call Trace: [ 115.536987][ T8612] [ 115.536992][ T8612] dump_stack_lvl+0x100/0x190 [ 115.537014][ T8612] should_fail_ex.cold+0x5/0xa [ 115.537033][ T8612] should_failslab+0xc2/0x120 [ 115.537048][ T8612] __kmalloc_noprof+0xfc/0x840 [ 115.537060][ T8612] ? usb_hcd_submit_urb+0x5e3/0x2140 [ 115.537079][ T8612] usb_hcd_submit_urb+0x5e3/0x2140 [ 115.537105][ T8612] usb_submit_urb+0x827/0x19b0 [ 115.537120][ T8612] ? __init_swait_queue_head+0xca/0x150 [ 115.537139][ T8612] usb_start_wait_urb+0x10e/0x580 [ 115.537153][ T8612] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 115.537171][ T8612] ? __asan_memset+0x23/0x50 [ 115.537190][ T8612] usb_control_msg+0x328/0x4b0 [ 115.537202][ T8612] ? __pfx_usb_control_msg+0x10/0x10 [ 115.537214][ T8612] ? __lock_acquire+0x5c0/0x1f40 [ 115.537232][ T8612] hub_ext_port_status+0x14e/0x690 [ 115.537247][ T8612] hub_activate+0x6e5/0x1c90 [ 115.537263][ T8612] ? __pfx_hub_activate+0x10/0x10 [ 115.537275][ T8612] ? find_held_lock+0x2b/0x80 [ 115.537286][ T8612] ? psi_trigger_create+0x9c0/0xc20 [ 115.537298][ T8612] ? usbdev_ioctl+0x3780/0x3b40 [ 115.537309][ T8612] ? usb_generic_driver_resume+0x70/0xa0 [ 115.537321][ T8612] ? hcd_bus_resume+0x37b/0x810 [ 115.537338][ T8612] hub_resume+0xb0/0x400 [ 115.537351][ T8612] ? __pfx_hub_resume+0x10/0x10 [ 115.537364][ T8612] ? __pfx_hcd_bus_resume+0x10/0x10 [ 115.537382][ T8612] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 115.537399][ T8612] usb_resume_both+0x53a/0x7f0 [ 115.537415][ T8612] ? __pfx_usb_resume_both+0x10/0x10 [ 115.537429][ T8612] ? __rpm_callback+0x272/0x620 [ 115.537443][ T8612] ? __pfx_usb_runtime_resume+0x10/0x10 [ 115.537459][ T8612] ? rcu_is_watching+0x13/0xc0 [ 115.537473][ T8612] ? __pfx_usb_runtime_resume+0x10/0x10 [ 115.537489][ T8612] __rpm_callback+0xc8/0x620 [ 115.537502][ T8612] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 115.537519][ T8612] ? __pfx_usb_runtime_resume+0x10/0x10 [ 115.537536][ T8612] rpm_callback+0x11f/0x150 [ 115.537551][ T8612] ? __pfx_usb_runtime_resume+0x10/0x10 [ 115.537568][ T8612] rpm_resume+0xd13/0x1320 [ 115.537583][ T8612] ? usbdev_open+0x151/0x860 [ 115.537601][ T8612] ? klist_put+0xcb/0x1d0 [ 115.537619][ T8612] ? __pfx_rpm_resume+0x10/0x10 [ 115.537632][ T8612] ? do_raw_spin_lock+0x128/0x260 [ 115.537643][ T8612] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 115.537655][ T8612] ? _raw_spin_lock_irqsave+0x52/0x60 [ 115.537669][ T8612] __pm_runtime_resume+0xb6/0x170 [ 115.537685][ T8612] usb_autoresume_device+0x23/0xe0 [ 115.537702][ T8612] usbdev_open+0x228/0x860 [ 115.537719][ T8612] ? kobject_get_unless_zero+0x156/0x200 [ 115.537735][ T8612] ? __pfx_usbdev_open+0x10/0x10 [ 115.537750][ T8612] ? chrdev_open+0x10b/0x6a0 [ 115.537764][ T8612] ? chrdev_open+0x10b/0x6a0 [ 115.537779][ T8612] ? __pfx_usbdev_open+0x10/0x10 [ 115.537794][ T8612] chrdev_open+0x234/0x6a0 [ 115.537808][ T8612] ? __pfx_chrdev_open+0x10/0x10 [ 115.537823][ T8612] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 115.537837][ T8612] do_dentry_open+0x674/0x1470 [ 115.537849][ T8612] ? __pfx_chrdev_open+0x10/0x10 [ 115.537866][ T8612] vfs_open_consume+0xcc/0x460 [ 115.537883][ T8612] path_openat+0x1547/0x23f0 [ 115.537899][ T8612] ? __pfx_path_openat+0x10/0x10 [ 115.537917][ T8612] do_file_open+0x20e/0x430 [ 115.537932][ T8612] ? __pfx_do_file_open+0x10/0x10 [ 115.537956][ T8612] ? _raw_spin_unlock+0x28/0x50 [ 115.537966][ T8612] ? alloc_fd+0x471/0x7a0 [ 115.537984][ T8612] do_sys_openat2+0x163/0x1d0 [ 115.538012][ T8612] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.538027][ T8612] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 115.538051][ T8612] __x64_sys_openat+0x12d/0x210 [ 115.538068][ T8612] ? __pfx___x64_sys_openat+0x10/0x10 [ 115.538094][ T8612] do_syscall_64+0x123/0x7b0 [ 115.538108][ T8612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.538121][ T8612] RIP: 0033:0x7fa1d2d6974e [ 115.538132][ T8612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.538142][ T8612] RSP: 002b:00007fa1d3cdab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.538154][ T8612] RAX: ffffffffffffffda RBX: 00007fa1d3cdb6c0 RCX: 00007fa1d2d6974e [ 115.538162][ T8612] RDX: 0000000000101101 RSI: 00007fa1d3cdac00 RDI: ffffffffffffff9c [ 115.538169][ T8612] RBP: 00007fa1d3cdac00 R08: 0000000000000000 R09: 0000000000000000 [ 115.538176][ T8612] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 115.538183][ T8612] R13: 00007fa1d3026038 R14: 00007fa1d3025fa0 R15: 00007ffda535bfa8 [ 115.538198][ T8612] [ 115.551842][ T5145] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 115.577478][ T5873] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.729770][ T5873] usb 5-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 115.732090][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.732118][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.737698][ T5873] as10x_usb: device has been detected [ 115.737989][ T5873] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 115.751677][ T5873] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 115.758520][ T5873] as10x_usb: error during firmware upload part1 [ 115.758751][ T5873] Registered device Abilis Systems DVB-Titan [ 115.808310][ T8620] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.846028][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.381091][ T8644] FAULT_INJECTION: forcing a failure. [ 116.381091][ T8644] name failslab, interval 1, probability 0, space 0, times 0 [ 116.381114][ T8644] CPU: 2 UID: 0 PID: 8644 Comm: syz.6.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.381129][ T8644] Tainted: [L]=SOFTLOCKUP [ 116.381133][ T8644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.381140][ T8644] Call Trace: [ 116.381146][ T8644] [ 116.381151][ T8644] dump_stack_lvl+0x100/0x190 [ 116.381177][ T8644] should_fail_ex.cold+0x5/0xa [ 116.381200][ T8644] should_failslab+0xc2/0x120 [ 116.381216][ T8644] __kmalloc_noprof+0xfc/0x840 [ 116.381226][ T8644] ? __kasan_kmalloc+0xaa/0xb0 [ 116.381237][ T8644] ? lsm_blob_alloc+0x68/0x90 [ 116.381257][ T8644] lsm_blob_alloc+0x68/0x90 [ 116.381276][ T8644] security_msg_queue_alloc+0x22/0x240 [ 116.381295][ T8644] newque+0x144/0x680 [ 116.381312][ T8644] ipcget+0xe7/0xe70 [ 116.381327][ T8644] ? __pfx_do_futex+0x10/0x10 [ 116.381347][ T8644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.381371][ T8644] ? __pfx_ipcget+0x10/0x10 [ 116.381390][ T8644] ? __x64_sys_futex+0x34f/0x4d0 [ 116.381408][ T8644] ? __x64_sys_futex+0x358/0x4d0 [ 116.381425][ T8644] __x64_sys_msgget+0x125/0x1a0 [ 116.381438][ T8644] ? __pfx___x64_sys_msgget+0x10/0x10 [ 116.381454][ T8644] do_syscall_64+0x123/0x7b0 [ 116.381469][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.381480][ T8644] RIP: 0033:0x7f07d0ba8f19 [ 116.381489][ T8644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.381499][ T8644] RSP: 002b:00007f07d1aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 116.381510][ T8644] RAX: ffffffffffffffda RBX: 00007f07d0e25fa0 RCX: 00007f07d0ba8f19 [ 116.381517][ T8644] RDX: 0000000000000000 RSI: 000000000000010e RDI: 0000000000000000 [ 116.381523][ T8644] RBP: 00007f07d0c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 116.381530][ T8644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.381536][ T8644] R13: 00007f07d0e26038 R14: 00007f07d0e25fa0 R15: 00007ffff5c71b18 [ 116.381550][ T8644] [ 116.529501][ T8652] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.778542][ T8661] fuse: Unknown parameter 'fuse' [ 116.781260][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.9.748'. [ 116.808576][ T8661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8661 comm=syz.9.748 [ 116.842829][ T8663] netlink: 3604 bytes leftover after parsing attributes in process `syz.9.749'. [ 116.896404][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.177202][ T8675] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.295806][ T1362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.304864][ T10] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 117.321208][ T8675] FAULT_INJECTION: forcing a failure. [ 117.321208][ T8675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.321230][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: syz.9.754 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.321246][ T8675] Tainted: [L]=SOFTLOCKUP [ 117.321250][ T8675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.321257][ T8675] Call Trace: [ 117.321270][ T8675] [ 117.321275][ T8675] dump_stack_lvl+0x100/0x190 [ 117.321307][ T8675] should_fail_ex.cold+0x5/0xa [ 117.321326][ T8675] should_fail_alloc_page+0xeb/0x140 [ 117.321346][ T8675] prepare_alloc_pages+0x1f0/0x5b0 [ 117.321361][ T8675] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 117.321378][ T8675] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.321395][ T8675] ? is_bpf_text_address+0x94/0x1a0 [ 117.321410][ T8675] ? kernel_text_address+0x8d/0x100 [ 117.321423][ T8675] ? __kernel_text_address+0xd/0x30 [ 117.321437][ T8675] ? unwind_get_return_address+0x59/0xa0 [ 117.321450][ T8675] ? __lock_acquire+0x5c0/0x1f40 [ 117.321465][ T8675] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.321488][ T8675] ? __lock_acquire+0x5c0/0x1f40 [ 117.321509][ T8675] ? lock_acquire+0x1d1/0x380 [ 117.321548][ T8675] ? page_table_check_set+0x1aa/0x630 [ 117.321562][ T8675] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.321582][ T8675] ? policy_nodemask+0xed/0x5e0 [ 117.321598][ T8675] alloc_pages_mpol+0x201/0x560 [ 117.321613][ T8675] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 117.321629][ T8675] ? lock_acquire+0x1d1/0x380 [ 117.321646][ T8675] folio_alloc_mpol_noprof+0x36/0x260 [ 117.321663][ T8675] vma_alloc_folio_noprof+0xed/0x1d0 [ 117.321679][ T8675] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 117.321700][ T8675] do_anonymous_page+0xac9/0x2050 [ 117.321718][ T8675] ? __pfx_do_anonymous_page+0x10/0x10 [ 117.321730][ T8675] ? rcu_read_unlock+0x2d/0xb0 [ 117.321743][ T8675] ? rcu_read_unlock+0x2d/0xb0 [ 117.321759][ T8675] __handle_mm_fault+0x1eeb/0x2f40 [ 117.321777][ T8675] ? __pfx___handle_mm_fault+0x10/0x10 [ 117.321790][ T8675] ? __pfx_follow_page_pte+0x10/0x10 [ 117.321805][ T8675] ? __pfx___css_rstat_updated+0x10/0x10 [ 117.321829][ T8675] handle_mm_fault+0x363/0xa30 [ 117.321846][ T8675] __get_user_pages+0x7ca/0x1d50 [ 117.321867][ T8675] ? __pfx___get_user_pages+0x10/0x10 [ 117.321889][ T8675] faultin_page_range+0x1f1/0x9e0 [ 117.321906][ T8675] ? lock_acquire+0x1d1/0x380 [ 117.321923][ T8675] madvise_do_behavior+0x354/0x510 [ 117.321939][ T8675] ? __pfx_madvise_do_behavior+0x10/0x10 [ 117.321954][ T8675] ? down_read+0x136/0x4c0 [ 117.321981][ T8675] do_madvise+0x238/0x290 [ 117.321995][ T8675] ? __pfx_do_madvise+0x10/0x10 [ 117.322009][ T8675] ? do_futex+0x190/0x440 [ 117.322031][ T8675] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.322057][ T8675] __x64_sys_madvise+0xa9/0x110 [ 117.322070][ T8675] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.322083][ T8675] do_syscall_64+0x123/0x7b0 [ 117.322099][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.322112][ T8675] RIP: 0033:0x7fa1d2da8f19 [ 117.322122][ T8675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.322133][ T8675] RSP: 002b:00007fa1d3cdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 117.322144][ T8675] RAX: ffffffffffffffda RBX: 00007fa1d3025fa0 RCX: 00007fa1d2da8f19 [ 117.322152][ T8675] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 117.322158][ T8675] RBP: 00007fa1d2e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 117.322165][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.322171][ T8675] R13: 00007fa1d3026038 R14: 00007fa1d3025fa0 R15: 00007ffda535bfa8 [ 117.322186][ T8675] [ 117.446143][ T10] usb 12-1: device descriptor read/64, error -71 [ 117.478673][ T8686] No source specified [ 117.540776][ T8690] xt_hashlimit: size too large, truncated to 1048576 [ 117.694438][ T10] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 117.835263][ T10] usb 12-1: device descriptor read/64, error -71 [ 117.935029][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.947829][ T10] usb usb12-port1: attempt power cycle [ 118.294398][ T10] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 118.324867][ T10] usb 12-1: device descriptor read/8, error -71 [ 118.564487][ T10] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 118.585035][ T10] usb 12-1: device descriptor read/8, error -71 [ 118.707877][ T10] usb usb12-port1: unable to enumerate USB device [ 118.846387][ T7868] usb 5-1: USB disconnect, device number 4 [ 118.860196][ T7868] Unregistered device Abilis Systems DVB-Titan [ 118.860934][ T7868] as10x_usb: device has been disconnected [ 118.967572][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.039907][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 119.039926][ T43] audit: type=1400 audit(1794294053.803:939): avc: denied { ioctl } for pid=8703 comm="syz.0.762" path="socket:[30431]" dev="sockfs" ino=30431 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.096783][ T8705] FAULT_INJECTION: forcing a failure. [ 119.096783][ T8705] name failslab, interval 1, probability 0, space 0, times 0 [ 119.096804][ T8705] CPU: 2 UID: 0 PID: 8705 Comm: syz.0.762 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.096819][ T8705] Tainted: [L]=SOFTLOCKUP [ 119.096823][ T8705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.096830][ T8705] Call Trace: [ 119.096834][ T8705] [ 119.096839][ T8705] dump_stack_lvl+0x100/0x190 [ 119.096861][ T8705] should_fail_ex.cold+0x5/0xa [ 119.096879][ T8705] should_failslab+0xc2/0x120 [ 119.096893][ T8705] kmem_cache_alloc_noprof+0x92/0x6a0 [ 119.096910][ T8705] ? __alloc_skb+0x4e9/0x710 [ 119.096929][ T8705] ? __alloc_skb+0x5b7/0x710 [ 119.096940][ T8705] ? sctp_chunkify+0x51/0x2f0 [ 119.096959][ T8705] sctp_chunkify+0x51/0x2f0 [ 119.096975][ T8705] _sctp_make_chunk+0x148/0x270 [ 119.096991][ T8705] sctp_make_datafrag_empty+0x14e/0x230 [ 119.097010][ T8705] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 119.097026][ T8705] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 119.097045][ T8705] sctp_datamsg_from_user+0x5ea/0x1360 [ 119.097068][ T8705] sctp_sendmsg_to_asoc+0x95a/0x1b60 [ 119.097085][ T8705] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 119.097117][ T8705] ? do_raw_spin_lock+0x128/0x260 [ 119.097129][ T8705] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 119.097142][ T8705] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 119.097155][ T8705] sctp_sendmsg+0x1144/0x22e0 [ 119.097173][ T8705] ? __pfx_sctp_sendmsg+0x10/0x10 [ 119.097187][ T8705] ? __pfx_sock_has_perm+0x10/0x10 [ 119.097213][ T8705] ? __pfx_sctp_sendmsg+0x10/0x10 [ 119.097228][ T8705] inet_sendmsg+0x11c/0x140 [ 119.097244][ T8705] sock_sendmsg+0x352/0x420 [ 119.097260][ T8705] ? __pfx_inet_sendmsg+0x10/0x10 [ 119.097274][ T8705] ? __pfx_sock_sendmsg+0x10/0x10 [ 119.097299][ T8705] splice_to_socket+0xbd5/0x1230 [ 119.097327][ T8705] ? __pfx_splice_to_socket+0x10/0x10 [ 119.097361][ T8705] ? bpf_lsm_file_permission+0x9/0x10 [ 119.097378][ T8705] ? security_file_permission+0x76/0x210 [ 119.097391][ T8705] ? __pfx_splice_to_socket+0x10/0x10 [ 119.097407][ T8705] do_splice+0x10a2/0x2090 [ 119.097423][ T8705] ? __lock_acquire+0x5c0/0x1f40 [ 119.097438][ T8705] ? ksys_write+0x190/0x250 [ 119.097450][ T8705] ? lock_acquire+0x1d1/0x380 [ 119.097467][ T8705] ? __pfx_do_splice+0x10/0x10 [ 119.097481][ T8705] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 119.097496][ T8705] ? __fget_files+0x34/0x3d0 [ 119.097515][ T8705] ? find_held_lock+0x2b/0x80 [ 119.097528][ T8705] __do_splice+0x33b/0x370 [ 119.097545][ T8705] ? __pfx___do_splice+0x10/0x10 [ 119.097564][ T8705] __x64_sys_splice+0x187/0x250 [ 119.097582][ T8705] do_syscall_64+0x123/0x7b0 [ 119.097597][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.097608][ T8705] RIP: 0033:0x7f4f83fa8f19 [ 119.097618][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.097628][ T8705] RSP: 002b:00007f4f821d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 119.097640][ T8705] RAX: ffffffffffffffda RBX: 00007f4f84226090 RCX: 00007f4f83fa8f19 [ 119.097647][ T8705] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000005 [ 119.097653][ T8705] RBP: 00007f4f821d5090 R08: 000000000000ffff R09: 0000000000000002 [ 119.097659][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.097666][ T8705] R13: 00007f4f84226128 R14: 00007f4f84226090 R15: 00007ffe2a0fc1d8 [ 119.097680][ T8705] [ 119.442255][ T8709] [ 119.443308][ T8709] ====================================================== [ 119.446185][ T8709] WARNING: possible circular locking dependency detected [ 119.448994][ T8709] syzkaller #0 Tainted: G L [ 119.451551][ T8709] ------------------------------------------------------ [ 119.454336][ T8709] syz.9.764/8709 is trying to acquire lock: [ 119.456792][ T8709] ffff888024b8c548 ((wq_completion)md_misc){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0 [ 119.460966][ T8709] [ 119.460966][ T8709] but task is already holding lock: [ 119.464010][ T8709] ffffffff90be6120 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 119.467721][ T8709] [ 119.467721][ T8709] which lock already depends on the new lock. [ 119.467721][ T8709] [ 119.471574][ T8709] [ 119.471574][ T8709] the existing dependency chain (in reverse order) is: [ 119.474584][ T8709] [ 119.474584][ T8709] -> #3 (major_names_lock){+.+.}-{4:4}: [ 119.477798][ T8709] lock_acquire+0x1d1/0x380 [ 119.479778][ T8709] __mutex_lock+0x19f/0x1c10 [ 119.481842][ T8709] blk_probe_dev+0x28/0x1e0 [ 119.483876][ T8709] blk_request_module+0x16/0xc0 [ 119.485675][ T8709] blkdev_get_no_open+0x9b/0xf0 [ 119.487815][ T8709] bdev_file_open_by_dev+0x70/0x210 [ 119.489949][ T8709] md_import_device+0x120/0x360 [ 119.491845][ T8709] md_add_new_disk+0xdbf/0x1820 [ 119.493760][ T8709] md_ioctl+0x2c1d/0x3700 [ 119.495366][ T8709] blkdev_ioctl+0x5ad/0x6f0 [ 119.497056][ T8709] __x64_sys_ioctl+0x18e/0x210 [ 119.498983][ T8709] do_syscall_64+0x123/0x7b0 [ 119.500859][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.502898][ T8709] [ 119.502898][ T8709] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 119.505902][ T8709] lock_acquire+0x1d1/0x380 [ 119.507875][ T8709] __mutex_lock+0x19f/0x1c10 [ 119.510000][ T8709] md_start_sync+0xc4/0xea0 [ 119.512146][ T8709] process_one_work+0xac7/0x1b10 [ 119.514433][ T8709] worker_thread+0x5ef/0xe50 [ 119.516609][ T8709] kthread+0x373/0x450 [ 119.518551][ T8709] ret_from_fork+0x730/0xd60 [ 119.520725][ T8709] ret_from_fork_asm+0x1a/0x30 [ 119.522950][ T8709] [ 119.522950][ T8709] -> #1 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 119.526881][ T8709] lock_acquire+0x1d1/0x380 [ 119.528992][ T8709] process_one_work+0xa32/0x1b10 [ 119.531174][ T8709] worker_thread+0x5ef/0xe50 [ 119.533265][ T8709] kthread+0x373/0x450 [ 119.535206][ T8709] ret_from_fork+0x730/0xd60 [ 119.537409][ T8709] ret_from_fork_asm+0x1a/0x30 [ 119.539650][ T8709] [ 119.539650][ T8709] -> #0 ((wq_completion)md_misc){+.+.}-{0:0}: [ 119.542923][ T8709] check_prev_add+0xeb/0xe60 [ 119.544714][ T8709] __lock_acquire+0x1528/0x1f40 [ 119.547024][ T8709] lock_acquire+0x1d1/0x380 [ 119.549176][ T8709] touch_wq_lockdep_map+0xad/0x1c0 [ 119.551506][ T8709] __flush_workqueue+0x131/0x1200 [ 119.553584][ T8709] md_alloc+0x30/0x10c0 [ 119.555107][ T8709] md_probe+0x73/0xf0 [ 119.556979][ T8709] blk_probe_dev+0x149/0x1e0 [ 119.559090][ T8709] blk_request_module+0x16/0xc0 [ 119.561355][ T8709] blkdev_get_no_open+0x9b/0xf0 [ 119.563617][ T8709] blkdev_open+0x141/0x4f0 [ 119.565733][ T8709] do_dentry_open+0x674/0x1470 [ 119.567747][ T8709] vfs_open_consume+0xcc/0x460 [ 119.569589][ T8709] path_openat+0x1547/0x23f0 [ 119.571197][ T8709] do_file_open+0x20e/0x430 [ 119.572840][ T8709] do_sys_openat2+0x163/0x1d0 [ 119.574463][ T8709] __x64_sys_openat+0x12d/0x210 [ 119.576466][ T8709] do_syscall_64+0x123/0x7b0 [ 119.578107][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.580118][ T8709] [ 119.580118][ T8709] other info that might help us debug this: [ 119.580118][ T8709] [ 119.583241][ T8709] Chain exists of: [ 119.583241][ T8709] (wq_completion)md_misc --> &mddev->reconfig_mutex --> major_names_lock [ 119.583241][ T8709] [ 119.588553][ T8709] Possible unsafe locking scenario: [ 119.588553][ T8709] [ 119.591632][ T8709] CPU0 CPU1 [ 119.593814][ T8709] ---- ---- [ 119.596027][ T8709] lock(major_names_lock); [ 119.597974][ T8709] lock(&mddev->reconfig_mutex); [ 119.600759][ T8709] lock(major_names_lock); [ 119.603117][ T8709] lock((wq_completion)md_misc); [ 119.604783][ T8709] [ 119.604783][ T8709] *** DEADLOCK *** [ 119.604783][ T8709] [ 119.607815][ T8709] locks held by syz.9.764/8709: 1, on CPU#0: [ 119.610013][ T8709] #0: ffffffff90be6120 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 119.613657][ T8709] [ 119.613657][ T8709] stack backtrace: [ 119.615707][ T8709] CPU: 0 UID: 0 PID: 8709 Comm: syz.9.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.619206][ T8709] Tainted: [L]=SOFTLOCKUP [ 119.620677][ T8709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.624416][ T8709] Call Trace: [ 119.625852][ T8709] [ 119.626992][ T8709] dump_stack_lvl+0x100/0x190 [ 119.628963][ T8709] print_circular_bug.cold+0x178/0x1be [ 119.631256][ T8709] check_noncircular+0x146/0x160 [ 119.633352][ T8709] ? kfree+0x22b/0x6d0 [ 119.635115][ T8709] check_prev_add+0xeb/0xe60 [ 119.636732][ T8709] ? do_sys_openat2+0x163/0x1d0 [ 119.638597][ T8709] ? do_syscall_64+0x123/0x7b0 [ 119.640659][ T8709] __lock_acquire+0x1528/0x1f40 [ 119.642732][ T8709] lock_acquire+0x1d1/0x380 [ 119.644515][ T8709] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 119.646204][ T8709] ? lockdep_init_map_type+0x5c/0x250 [ 119.647910][ T8709] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 119.649579][ T8709] touch_wq_lockdep_map+0xad/0x1c0 [ 119.651180][ T8709] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 119.652844][ T8709] __flush_workqueue+0x131/0x1200 [ 119.654414][ T8709] ? rcu_is_watching+0x13/0xc0 [ 119.655911][ T8709] ? trace_contention_end+0x126/0x160 [ 119.657561][ T8709] ? __mutex_lock+0x267/0x1c10 [ 119.659033][ T8709] ? __pfx___flush_workqueue+0x10/0x10 [ 119.660715][ T8709] ? lock_acquire+0x1d1/0x380 [ 119.662165][ T8709] ? find_inode_fast+0xa5/0xa30 [ 119.663647][ T8709] ? find_inode_fast+0x1fa/0xa30 [ 119.665167][ T8709] md_alloc+0x30/0x10c0 [ 119.666452][ T8709] md_probe+0x73/0xf0 [ 119.667700][ T8709] ? __pfx_md_probe+0x10/0x10 [ 119.669161][ T8709] blk_probe_dev+0x149/0x1e0 [ 119.670602][ T8709] blk_request_module+0x16/0xc0 [ 119.672106][ T8709] blkdev_get_no_open+0x9b/0xf0 [ 119.673601][ T8709] blkdev_open+0x141/0x4f0 [ 119.674992][ T8709] do_dentry_open+0x674/0x1470 [ 119.676502][ T8709] ? __pfx_blkdev_open+0x10/0x10 [ 119.678031][ T8709] vfs_open_consume+0xcc/0x460 [ 119.679527][ T8709] path_openat+0x1547/0x23f0 [ 119.680968][ T8709] ? __pfx_path_openat+0x10/0x10 [ 119.682463][ T8709] do_file_open+0x20e/0x430 [ 119.683860][ T8709] ? __pfx_do_file_open+0x10/0x10 [ 119.685411][ T8709] ? _raw_spin_unlock+0x28/0x50 [ 119.686928][ T8709] ? alloc_fd+0x471/0x7a0 [ 119.688238][ T8709] do_sys_openat2+0x163/0x1d0 [ 119.689684][ T8709] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.691254][ T8709] __x64_sys_openat+0x12d/0x210 [ 119.692787][ T8709] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.694433][ T8709] do_syscall_64+0x123/0x7b0 [ 119.695845][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.697640][ T8709] RIP: 0033:0x7fa1d2da8f19 [ 119.699017][ T8709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.704739][ T8709] RSP: 002b:00007fa1d3cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.707253][ T8709] RAX: ffffffffffffffda RBX: 00007fa1d3025fa0 RCX: 00007fa1d2da8f19 [ 119.709646][ T8709] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: ffffffffffffff9c [ 119.712036][ T8709] RBP: 00007fa1d2e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 119.714389][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.716775][ T8709] R13: 00007fa1d3026038 R14: 00007fa1d3025fa0 R15: 00007ffda535bfa8 [ 119.719156][ T8709] [ 119.725463][ T43] audit: type=1400 audit(1794294054.493:940): avc: denied { read append } for pid=8708 comm="syz.9.764" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.725577][ T43] audit: type=1400 audit(1794294054.493:941): avc: denied { open } for pid=8708 comm="syz.9.764" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.725854][ T43] audit: type=1400 audit(1794294054.493:942): avc: denied { ioctl } for pid=8708 comm="syz.9.764" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.728262][ T8709] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.728273][ T8709] block device autoloading is deprecated and will be removed. [ 120.016601][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.335079][ T1362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.046651][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.086619][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.577321][ T7868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.124470][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.205052][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.364502][ T1362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.165135][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.484613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.215050][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.254437][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.404830][ T1362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.285365][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.685600][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.334796][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.364882][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog