last executing test programs: 1m59.130155001s ago: executing program 2 (id=709): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_SET_GS(0x1e, r2, 0x0, 0x1001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) 1m58.928184187s ago: executing program 2 (id=710): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2902, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80}}}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f0000000040), 0x44) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r4, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000002501"], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x8080) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 1m58.159890906s ago: executing program 2 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) r1 = syz_open_dev$loop(0x0, 0x6, 0x14f882) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000160a01080000000000000000070000001400000011000100000040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) writev(r3, &(0x7f0000001ac0)=[{0x0}, {0x0}, {&(0x7f0000000480)="8d3d06937016f5e61c82e1976587444e77863bf4a268144c0bccae15dd198a70dc1a3d19b7842a54306ce4efe1eb29c8c5", 0x31}, {0x0}], 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800]}}) socket(0x10, 0x80002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000700)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20008810) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x40000000) 1m58.070030653s ago: executing program 2 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000000c0)=0x8) fallocate(r0, 0x0, 0x0, 0x1000f4) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x2, 0x4, 0x3}, 0x3}}, 0x18) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x90800, 0x0) 1m58.069744929s ago: executing program 2 (id=714): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NL80211_CMD_DEL_MPATH(r2, 0x0, 0x4001) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) pipe2(0x0, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe6, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000008500000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000010000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m57.819798703s ago: executing program 2 (id=715): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xff, 0x4}, {0x6, 0x58}}}}, 0x11) setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x3}}, 0x24, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000100)={0xf84, 0x4, 0x3}) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000004010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000851000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000, 0x1}) 1m36.747013851s ago: executing program 32 (id=715): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xff, 0x4}, {0x6, 0x58}}}}, 0x11) setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x3}}, 0x24, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000100)={0xf84, 0x4, 0x3}) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000004010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000851000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000, 0x1}) 1m21.606585682s ago: executing program 4 (id=1077): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_open_dev$loop(0x0, 0x6, 0x14f882) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000180)={0x0, {{0x2, 0x4e22, @remote}}}, 0x88) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000680)=ANY=[@ANYBLOB="09000020279a0f155d05000000e0b5a8184c", @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e64000000180003801400038010000180040003000800010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) r5 = syz_open_procfs(0x0, 0x0) mount$afs(&(0x7f0000000440), &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500), 0x200404, &(0x7f0000000540)={[{@flock_openafs}, {@dyn}, {@flock_local}, {@flock_write}, {@flock_openafs}, {@dyn}], [{@smackfsdef={'smackfsdef', 0x3d, '!(\')-[:/\x9c{^$&%'}}, {@subj_type={'subj_type', 0x3d, 'fq\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) preadv(r5, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000160a01080000000000000000070000001400000011000100000040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) writev(r6, &(0x7f0000001ac0)=[{0x0}, {0x0}, {&(0x7f0000000480)="8d3d06937016f5e61c82e1976587444e77863bf4a268144c0bccae15dd198a70dc1a3d19b7842a54306ce4efe1eb29c8c5", 0x31}, {0x0}], 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800]}}) unshare(0x200) socket(0x10, 0x80002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000700)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x300, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x7, 0xffff}, {0xf, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x20008810) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001800000225bd7000fcdbdf2502100007fc02c8030006000006001d004e220000100016800c00028008000100", @ANYRES32=r0, @ANYBLOB="0800b50e93e1061e506a02cb72b2d99b41e7939dda81f2be00099dfd4d38dc6c64f93b35786a68113a5421f04eeea372bc1b17ba1a", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m21.526170794s ago: executing program 4 (id=1080): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004"], 0x48) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0xf, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0xb, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000004, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x4000000100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x9c, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000380)={r1, 0x3f5, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000bc0)={r4, 0x2a, 0xffff, 0x1}) 1m21.439094065s ago: executing program 4 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/tipc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/tipc_rmem\x00', 0x0, 0x0) 1m21.318942349s ago: executing program 4 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) (async) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/error_log\x00', 0x20000, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes128, 0x10, @auto="f024342553b1a1ed"}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x102) getdents64(r2, 0x0, 0x0) (async) getdents64(r2, &(0x7f0000001f80)=""/4108, 0x100c) pread64(r1, &(0x7f0000000580)=""/133, 0x85, 0x2000000007d) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x882c0, 0x4) (async) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) (async) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) (async) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) (async) mkdirat(r1, &(0x7f0000000000)='./mnt\x00', 0x6f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000100)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uui=\x11%[d=off\x00') (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 1m21.217893845s ago: executing program 4 (id=1084): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_eeprom={0x43, 0x7, 0x1000000}}) prctl$PR_SET_IO_FLUSHER(0x59616d61, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x67b8, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3800000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000420000001800128008000100677470000c00028008000200", @ANYRES32=r8, @ANYBLOB="b000"], 0x38}, 0x1, 0xba01}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="400000000f732d5161a342a479eab346b0a2973720b2440cbbea32c4549114080026bd7000fcdbdf25090045006973736d080000000b004500736d635f696200000800030000000000"], 0x40}}, 0x8000) sendmmsg$inet(r6, &(0x7f0000000180)=[{{&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800) recvfrom$inet(r6, 0x0, 0x0, 0x12140, 0x0, 0xfffffffffffffdff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x8, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x6, 0x0, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x300000, 0xe, 0x8, 0x8000806e, 0x7, 0x18, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x3, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0x10f9, 0xf, 0x7, 0x6c7, 0x9, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7ffd, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0xb9dc, 0x1000005, 0x5f31, 0xd, 0x9, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x8, 0x47, 0x4000000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x2, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xb, 0x8000004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x200303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x4, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x2f8, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x2, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x5, 0x1, 0x1000000a, 0xffffffff, 0x5, 0x5, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x8, 0x93a, 0x6, 0x1000006, 0x4000000, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x4, 0x7e, 0x100, 0x1000, 0x5, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fff, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x5, 0xfff]}, 0x45c) fchdir(r4) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4680400400050000000000000002000600c42f75405f0000003800000046000000080000000100200001000500090000000000000003"], 0xb0) close(r9) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0x3b8, 0xfffffe00, 0x4}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r9, 0x80685600, &(0x7f0000000100)) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$rxrpc(0x21, 0x2, 0xa) write$UHID_INPUT(r11, &(0x7f0000002400)={0xc, {"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", 0x1025}}, 0x1006) 1m20.789385094s ago: executing program 4 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0) timerfd_settime(r2, 0x2, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000040000000000000000000000000000000000000000000000000074") 1m20.703036948s ago: executing program 33 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0) timerfd_settime(r2, 0x2, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000040000000000000000000000000000000000000000000000000074") 52.880724013s ago: executing program 1 (id=1547): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./sys\x00', 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x5400, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) shutdown(r6, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800cd8d000000e5ff000000020000000000000500000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) r7 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='atkbd', 0x5) pwrite64(r8, &(0x7f00000001c0)='S', 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000e3a6e522521cdcf4f3e5dc4b1a91285473ddaa75f725ee94031ce7d7b66b43ebda28fe9ec842b2fcb6ac929409e807f96a821cca27e8c867f39d997c69bee84f284e879e93b70994d804d75b99c61ad7cab6108af5b64973e5992b863be9e1b01c2d12dc9dbcea188ac5f074b018a192f47385f9bda995b74425b5396c773dbfd98ae80d70e0dec0ef18254634d4755634e2f9a2b95eee8a1bd81ca700"/186, @ANYRES32=0x1, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000300"/28], 0x50) 51.942413647s ago: executing program 1 (id=1562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000002ac0)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0xf98, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, [@dstopts={0x2c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x400}]}, @srh={0x2b, 0x0, 0x4, 0x0, 0x10, 0x58, 0x6}, @srh={0x3a, 0x2, 0x4, 0x1, 0x1, 0x48, 0x10, [@mcast2]}], "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"}}}}}, 0xfca) pipe(&(0x7f0000000040)) 51.817789703s ago: executing program 1 (id=1566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0xeb923771a6a8c729, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x200840c4) 51.777409997s ago: executing program 1 (id=1568): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000002c0)={r1, r2, 0x1, 0x0, 0x400000d4}) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b3", 0x2e}], 0x1}, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000200)=""/220) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r7}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000140)=0xb, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) 51.648444392s ago: executing program 1 (id=1572): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000140)={0x240, 0x80, 0x10}, 0x18) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x2000000, 0xffffffffffffff38, 0x0, 0x2, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000080)='-1\x00', 0x3) mkdirat(0xffffffffffffffff, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000b31e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x20040014) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x10, 0x80000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xb) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f00000001c0)) 49.414747023s ago: executing program 1 (id=1601): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000001f003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003"], 0x40}}, 0x0) 34.524031313s ago: executing program 34 (id=1601): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000001f003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003"], 0x40}}, 0x0) 17.713063198s ago: executing program 0 (id=2023): r0 = socket$kcm(0x10, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 17.592680829s ago: executing program 0 (id=2026): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) 17.539424412s ago: executing program 0 (id=2028): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./sys\x00', 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x5400, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) shutdown(r6, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800cd8d000000e5ff000000020000000000000500000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='atkbd', 0x5) pwrite64(r8, &(0x7f00000001c0), 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000e3a6e522521cdcf4f3e5dc4b1a91285473ddaa75f725ee94031ce7d7b66b43ebda28fe9ec842b2fcb6ac929409e807f96a821cca27e8c867f39d997c69bee84f284e879e93b70994d804d75b99c61ad7cab6108af5b64973e5992b863be9e1b01c2d12dc9dbcea188ac5f074b018a192f47385f9bda995b74425b5396c773dbfd98ae80d70e0dec0ef18254634d4755634e2f9a2b95eee8a1bd81ca700"/186, @ANYRES32=0x1, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000300"/28], 0x50) 16.449757054s ago: executing program 0 (id=2041): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdir(&(0x7f0000000240)='./file0\x00', 0x97) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./proc\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r1, r1, 0x0, 0x7f03) write(r0, &(0x7f0000000000)='270', 0x3) r2 = syz_open_dev$loop(0x0, 0x6, 0x14f882) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='schedstat\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4112, 0x1010}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x1, 0x20, 0x15, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f0000000000000000000000f700", [0x4, 0xfff]}}) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000160a010800000000000000000700000014000000110001000000400000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) writev(0xffffffffffffffff, &(0x7f0000001ac0)=[{&(0x7f0000000900)="a03683066fe8b9b3810261c526c225f530852f5a15fcd8e9046ca328cd9dbad0851b78ea07d98def75a67d99258fbe093c28a685332c7ee807eee6f0f7c05d0833c9585be59ceefed1482f285817ba93a7dba757ac71ae3603d75742cf8a45b9071b16d9dd6238c1dfab275193a343c9b76d63008000000000000075fa1c4fe47d9cb8df1682b6a4ac36b52ece82339c653e7508c86a031b712c04cd93ecbc2e79001cd6ac32dd9e8b00000000", 0xad}, {0x0}, {&(0x7f00000003c0)="f7a0506a73060eb28022c6843dabaeaabd376e89d021998b82b435f15543603b6ed0685670a45194b83ac09d682f47742b6198fadb5919287ce91f44f31b2c97a1636c5b00ac0efd3ce2f73baf149afc16c05330", 0x54}, {&(0x7f0000000480)="8d3d06937016f5e61c82e1976587444e77863bf4a268144c0bccae15dd198a70dc1a3d19b7842a54306ce4efe1eb29c8c5c96aad36", 0x35}, {&(0x7f0000000ac0)="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", 0xe80}], 0x5) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800]}}) socket(0x10, 0x80002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000700)) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x300024) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x300, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x7, 0xffff}, {0xf, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x20008810) 16.306196241s ago: executing program 0 (id=2042): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.086712667s ago: executing program 0 (id=2045): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) 16.041846783s ago: executing program 35 (id=2045): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) 3.825777427s ago: executing program 3 (id=2174): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003"], 0x40}}, 0x3000000) 3.69190117s ago: executing program 3 (id=2175): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0}) (async) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async, rerun: 32) r5 = syz_open_dev$loop(&(0x7f00000005c0), 0x7, 0x82000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000740)) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x6, 0x5, 0x1, {0x0, @pix_mp={0x3ff, 0x6, 0x32314742, 0x1, 0x8, [{0x8, 0x10000}, {0x6397, 0x3}, {0x3, 0x8a}, {0xd, 0xaf}, {0x10, 0x4}, {0xf, 0x6}, {0x9, 0x10001}, {0x2, 0x5fd}], 0x2, 0x80, 0x3, 0x2, 0x1}}, 0x2}) (rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async, rerun: 32) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x7, 0x4, 0x179, 0x6, 0x800, 0xf3, 0x3ef, 0x1, 0x2, 0x6, 0x2, 0x8, 0x9, 0x80000000000, 0xbdc], 0xeeee8000, 0x3c0b91}) (async, rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/xfrm_stat\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) close_range(r8, 0xffffffffffffffff, 0x0) 2.359476485s ago: executing program 6 (id=2195): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000019240)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000019200)='status\x00') (async) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) (async) r5 = io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl(r7, 0x4048aec9, &(0x7f0000000140)="030000000000000001000000050000000000000001") (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) (async) pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) (async) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000000)={@msf={0x9, 0x2}, 0x1, 0x0, 0x0}) 2.139381901s ago: executing program 6 (id=2199): openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'caif0\x00', 0x100}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'caif0\x00', 0x100}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010025bd7000fddbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="544657033a1162043ebd6b284cae7e91dadc222063538b1eb099b76091fa3b363af924677f4dfe7ef4037ee8190a2ebc2fae53de3b92b7b1fece85d55baa897e7be2909d92bfb20f6e9b003a722c0ae757b3e96e0596fa07c32c8476386844cc15ec252b586620332f6363fd335a9f11d418a5a458263b5c511602502f3108b79c15ede3d1d7b6f0245a0d99502d9b2f5ae3"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010010) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000085) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, &(0x7f0000010000), &(0x7f0000000180)=""/14, &(0x7f0000018000), 0x30000}) write(r1, &(0x7f0000000140), 0x0) (async) write(r1, &(0x7f0000000140), 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x6800) (async) r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x6800) read$usbfs(r11, &(0x7f00000001c0)=""/231, 0xe7) (async) read$usbfs(r11, &(0x7f00000001c0)=""/231, 0xe7) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) (async) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.0305862s ago: executing program 6 (id=2202): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x3, "b7cd8783e532b327d5120dc5e461bdfab6fa974b6cbd55e0812bdadeb1878b9e", 0x1000, 0x2, 0xffff, 0x8, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000206010100000000000000000a00000005000400020000000900020073797a32000000002c00078008000640000000da08001340000007ff0800134000001000050015000c0000000800124000000005050005000a000000050001000600000011000300686173683a6e65742c6e6574"], 0x78}, 0x1, 0x0, 0x0, 0x80820}, 0x80) 2.029891374s ago: executing program 6 (id=2204): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc24", 0xdb}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423b", 0x5a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512", 0x4a}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d", 0x36}, {&(0x7f0000000580)="fb411a9c85180744d674c3699fcb27d2e189c6", 0x13}, {&(0x7f0000000640)="1cc96615eecaacfeb350b8076b6c81828f6cdf330cb6539f08559aac557883119bb42271c062c2b26c2ad8", 0x2b}], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_io_uring_setup(0x3e1, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x2, 0x2ae, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, 0x0, 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0x20004004, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) write(r8, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="31032bbd7000000000000900000008000300", @ANYRES32=r13], 0x24}, 0x1, 0x0, 0x0, 0x2044041}, 0x0) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76", 0x309) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.600654422s ago: executing program 5 (id=2213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000002ac0)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0xf90, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, [@dstopts={0x2c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x400}]}, @srh={0x2b, 0x0, 0x4, 0x0, 0x10, 0x58, 0x6}, @srh={0x3a, 0x2, 0x4, 0x1, 0x1, 0x48, 0x10, [@mcast2]}], "84941749d8b6da8c9b9e0b07e22a7e71b0c74db7dd36c984a125d66b8ebfa2626df1bbceef3bff0e6afc8fe076466866f3524fa994aea131c7f676972fbe42a3085122e80aa23c28da20e0de828239b260fe9f3f49b5ca1dd6eae0c8dce0d4b67bad623b4b4ff7bce8265973d6452ca6d2ceee800b95dc3b21fc70b74cfdcef87dcd20a1ce7aad3028a0992fec0907e0c5720385c885e3e1ae3712ab74626f86d54e2b5f1505baf619e8bf32fbed5816c792e715a831457d916801e6014b8bfb25a1fca23272bd8e77751cfa7ccfce0ef6ef86cf3a75ef4891ad4c34305328e10af207d896bbd50faae7f25090f55e5bbeabab26c242ad30b270b312f8798a6a3cd31018884842032207a3807690217212d1873ee8e5b65817aca957433b39f4690080712e9075a2d4647896b3244aec5b5f39bcd5813d6cf5b8c7bb43a67a140e373f2989401f223f1212d062bfd9a07745ad2df2638055495008cb4925ad823912a553ddef4df0a0b1b6349322aff433b168efd21e839027bae9ffc864a2082ca0cfdf78ce83da031823fa558e92a4e4d531491b99a6f8507faeef095019cd28c9f04cba0646bf5128edb9cce78b97897c325b1e317d0786f93cec2c6923687acbffd83a9a3e895aafea344df2cc59decf06cda01a51572e06f373154ea0f1dd15ec7aa05ec8d764f5d78c2008a144d6895b56aef5874da5af000b7e076f594146153a12a193835a0c7f758421fec0b27596d5f5b5eedc2d213ec2b854379fac501ec67b5d66c2d4f17f3e061b83429084832b87ae8da8ce7df3334e36626d285f2dcd97a8d44394c7d7ddbf7dbbee6210cc9cb3e186e5f25e197e4ee8cc5d358f8e85e4ccef1bf45457ebf5c7965e4a87ca828aa773ef15761d45f335851de5ee80582ad12ded8cb69a604531cb955a7c49648e19004ad079b052b997329bf606bd3beb57c28018315e307142027accc809390184231da931f0c99aa19d0645ebb87daa16ee652ddf6d1331590ff537684b0b6d16d56085cb6736321bea4927ff70d5484d4a7af8c736e07d1c2e6564e09ab4ff843f760f77a14bef908e779202e9715c69eba13564e1fcf8d71d37eb295bbd6b571e25ec5cf380c00f1c2361af18c848b34365524a1cbb9287622e8e321f583b6aa6f76f2125af922ffd8d35985c1ae65dbe378fc0ce8328ac922119d385f01044d887b447d9cf564ae8f8c2722955e5f5e4a9ec95df8f0f705bde2fbccd776b9a2406c79dab9b262fbc005fcaf9f913ff4947538e0cd06a3e22e17c1fab55d9683e23a65372de06bf45d9cd9aa5d3a4ae3c3f5de34a12129238a9e0a334af9f6cad0bd021fca7561fc53c8d711ce6294f75c3cf606584eb4a95d0b8addb8a9c2ea6162017df3578d4623c950648c4d9f0f1d978a9c5bcc5c4c0ce1f58488b6eee469afaa7b63f3096ea572f552c55ba4643909efc306d327a2817f3c45d08a2d970729a72510e651b3f9802eb019558aae079d4d79140728d69fbf2677db8e2990a726c46be3109327940437badc0b703410bed46ae46b83473d31791ef0a106eaa63e790cb4d8a9706d4672e0d9791a4c7339333bd5df0550a9b6d58471e0ad3d212ca2b5898e3460f072f4d8248d4d15cf9f847dbb2b7aa714c84e2f680a7a0a817c546c15b07ccac4a40aaed43fdaeabd3ea7d31315cc2ada7ea9a3759b52b932e9e766298fbdef06d396f29187c8e87a15f280cf26fec7d0fc357f4a68d9c3e8b3aeca659b970677bbf3905065bc91c32cdbb782466436abdb8df6bd6deda3bc15228fc7e53f760b6d4dd9433e3306e5ecb58d728823311b61f388f2ed9de64edc28fc6ca0ed0816d03ab41081f913f9e5207858368751176004ef76eac2e0a66443c0dc35c5cd790fa633dc6062d130339a2263b4d3798de20de2fad44f77a51828e929dd646ab05d500024b74fc0fe0c8c88cc424a8cff1fdc2ec79efb0cab48f86b47e6c0d786c4b86218fd24e39255ce6e6eb1f46759e394ea6beb37ac9cc1a1ef66ee2b437a7e4e1fddcde65d837d793cae90899eec51ec69afe87d635601bc34d887c45bb6f1a13ef1c4f99d480c47d05710856bd1f2906e694b3a0954f3f0bc433212beddddabc5008a6d7e4921946bd1098db51e49a6b8edf6e9aecc2863f9a7fe4ab1c37575eb20f851a1a98a59c3b0e108ba1405a088d33a0913c3f7fc8002e47476f9e283c1fb87e4fa2334e2713b115a4a03a1bdf36dd37c5a85fb6313dfd57cab1a67d4813d05f9d0783100af8d3881c2bf6e942efacb44cc70daaf0e257d1378fc8334d33eaf38788194db2fcc518ff5e9fca3309a524e46eaa5219d7f2e06340d2ddff584423d0299f8b20c7270bd6096bd3c93f0429ddc0a66b1a17ef1d9986b819e60e5dc2f486b712c864aea255884e38d3ec0d4b88c9bfc8a3e055810e6e55f42c5e2ca24f09c994d8213ddd86e029c86232f9f021ac9fab1c15e9b8185dec6cac4fba6610998e971bbe7bdd937872bfd03df8a94eeea9d9daa2c4dd4426928e87ae8c8e1a6ed640b771f642925307d28eb7673b1949b80e073536ed01f9dab0832109c228339c688bba6f1bc55733f61ce2ad54bddbdc20f480cd227c1f607321e591a754f8751b2f55a340c2876986e81ff1ab9b5f5aac0d884ccbe8d3ffd37d76d2dd23ab93668218648ae2eeaf01c27b0dc858744aa8137d0b95996c624b0c3b28376383c0b2d79c3f68f1da4120d46e04732e376edb99e42383e26603ce118f45313ce0fa4892556527b677a797499353543c460845a4663bf54e5b5e4f3b1f60095a689188556705fe50006b18e1a54ddc6c03995048568d4b55f22cafe9f204482a4608869107352f2db6963b126b023530dcb4ac8e89a02f143a5d53bdad1b5d8186c63da3c4aa5ecb0a445829853563c47b899a8d3fed3cfd026e1ac1ab060110990d3514793e8caa2023e19618d5aa587772a72cbedb9a08a231ef47258984384ff523dd0519a87460bacb0200542c93167fb5b5af3a4f5df9dec738f8a40bc53304f7e71b99d76c292e0861b1166419622b5b67b060acfa8116eb207af95c6a8bc271bcc592af35d3884181e973eedfc33af1efd5f40a1998588933a5cda27ab14778d36c6c3fafd95046bdbd4392f84a8bea2be9279cb67eaaf4ca3487dadd5594bb426a7e3a54ed259159e043457704bbab5f4847693f22de6a7026c91d060c8fba176f626455c0c6f5eeed1be109d0b2239e8125ceb6e6d07d4a702df7bbe7ef7c103d2cf6b86373313fcaf8a426404f691ef945b9cc21ff70b65528856c8d0f62bbcb1d741d26cad04dbb9c28aeaf45294afd3156ea978ccf30517fe544e60e8d66a79b6f127a62022d3fced773e228cfc5a2e25dcf07ef417a8e8f6f9a6a573627acf1cca364cc6d7fa033bd547d420b2c1d099ad047d9b22a6a743e97b5cab715d6cb26032d7733cdcecfb63847acb7f28ae80fcf9647a9261391c7e754de69479216b691831e40a825506901d45d54001f375513afaccebd909a673d8bb10d0390740a8b657f6d6fd7fcdf4f27fea8384dff17a7b63931cd8217a7c937b692489fb038448043b3d87599f75474e7289e3af345ca598fd885331e58c20319447903a8db455d7d1a119dc5693dc42d94e24c327a5216b3ae50a0d3530cb8c9a4d023f795b93839e0160332958806dd57b94917726749d6b3c25103c66fb736d6307f2d5f0d81d39f3a3386b0c1f8939c1707d7b0a970ce1faf489d4f5e391fcc937000ae68145f18c7b0f153ea2405e57615e8efce117f8d1885a2445762b256846baab3bbf42970caff15ccb60a5df776f171d4c8351dbe58575307052d6a89bc0b335d6f896249a97b4025de660a931981e173b0704b57394d30159d05cc44709af7a47f41b70e7fd3f4b4ca68e718be643c6e8ca151a0e86934676b1298ba6dcafd35eb2ff7ba1b4070f76a0329a6683caacad09c097758a61714a89cecba940b7aa21e1b9f4c95c8c617a34dee442da1a05f5af052484e9878a2bfd17f6ffe6186866777a70c8e94e54b58c86328ec188d36b897a3aa06df2138a117c0f5c71bad6c332e3fc4a1dd330d9721dad458564ee445defe1d0f682a4298b075a3d943fe8f141ca10deaa8ecc390ada23dc5d929cdcf6784166eef355ee1fa86c1b09389051699e1cc49b4ad50f39c8bfd54b6c1944b47c359c14ae459b3c598c49e1261844e2b374bfd262ec6e92efd302b9f6902645fcbdcd839eada8f359d31400a4e84d87cdecbf76d0b8593df11f8627935c8ec59f3e279f4128c699520fdef898a409c03d41e6fb71f6dae17c98b4556d9cdcb33d81eceac07574c496d70387ef23c4eefddb29ca90f19e905f0eddacc618d51cbe95ddc303004a2545af2d4a1ab2bc5da5dc1204a78c7c9bd79b7bdfd782d3ca1a9758ea63bae830e5bacc89d51d1b6fb4a7c20a0d675ac88405e2fba6078c5c206c4f8bf36f510b06653d801319341c3f810bbd4d16806c54558f00cbe50a6c7cbf1aebdfbf97c59517361bd6ee30609489b19a084bd64be513f0ac706f14fec4da31e4d7b1c072a73bc7d8115cf151ee7fe8d48fba6514662afcb76c20af41c4ae7939a768d0009fa91a02c4dd116c378928cca8cd5ff951a144628fa1d965809f6509ab162e7453696630d2df0bc15c9bee18ec1c996c78c96ef615e5375bac22d75c2be259a19a1869778b349562d7c82990ed2e6be56dc86f21af2a2ac9a461600cdbfac1fb54a6187d171e0cf09d96931d1e4fa6c8a6d1956111037cd167a452a55b2e4d96278e782ba32645c345bc4b6ff9da6b1acb5c3e87267226dc072a32338b47e119843d56aa95d7e94640f9b8dbed6d942fff494f578608c84940b46a93376913a853443b9769325c74ed45a85930953c1e0823e8beff4267ba9b34f7a3ad825d525b4185bb8333a1f8fb1ee81515a123ee2fecb12cb655bae143cf667b88a9357c6ea3cf3c906d627952a348f805e063aa347c06acafa1c399bd9e681c1286dcf8556cba8d02e11b6772453abfeeba5ff73438a4c25a27838806f8a09c6e7748e2f8b2ba850e5ac7eac05c053a489a8539849cd25007a17a9220955bb84e9621b5b871d90409fcb1f8b653e830b53528c30aeaddabc9a5d39c2eb525e435e4d8f8c875ca3e051ac3ba235e9fc4ac261fba3eebd3e5c87fe9735522971be57e9ef1e1ced41dbaeb5114a730f4c33519d8402851da1cb37ae4a7dc2eccbbdc2792e9df1c935a0a42666e1552b9121fb404eb43df14031a4d0c670c36300c0428c621d8c4adbddc0aa22c625d3ef51b084ae1684e3d3bc31f9fc2553a9adb8466ac3a436d7cc445fa71ea624f8cb392091589c1eda49b119ac9ef287d8f28b7adb5f8c16a97ed9ae00258236f386067f8d2c21c56192aec17efe031b43a0261bf3cf7230c10c61f5b8971f7efcd2046c39bbf1df57a16a5adac9c993995bc93189b24e29eafa73d290db21b4"}}}}}, 0xfc2) pipe(&(0x7f0000000040)) 1.372785169s ago: executing program 5 (id=2214): bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000130000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.280889252s ago: executing program 5 (id=2215): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='\x00\x00', 0xc6a2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffa}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6ce}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x70}}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) (async) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='\x00\x00', 0xc6a2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffa}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6ce}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x70}}, 0x4000000) (async) 1.012398585s ago: executing program 6 (id=2217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xa08, 0x2, 0x3, 0x20004, 0xe8c0, 0x80, 0x2, 0x400, 0x5, 0x20040008004, 0x2, 0x7b, 0x40, 0x3, 0x4], 0x25000, 0x160a55}) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 920.649678ms ago: executing program 5 (id=2218): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66, 0x0, 0x0, 0xfffffffe}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xf0, 0x96, 0x2b, @dev={0xfe, 0x80, '\x00', 0x19}, @loopback, 0x7, 0x8080, 0x7, 0x2}}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@private, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000c80)=0xe8) bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x8, r2, 0xb, r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x3, 0x4, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x4) 914.252237ms ago: executing program 5 (id=2219): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0x83) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="54328a001a00330625bd700008dcdf25ac14144a000000000000000000000000ff010000000000000000000000000001000000004e278001000000003c000000", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="640101010000000000000000000000000000000032000000230300000000000001000000000000000700000000000000fdffffffffffffff0c00000000000000be9200000000000006000000000000000100000000000000000000000000000000000400000000000000000000000000ffffffffffffffdffbffffff0300000009ca000025bd7000023500000200010009000000000000001c00040003004e214e240000fe80000000000000000000000000004248000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000ae86134c0fe5990a00000000"], 0x154}, 0x1, 0x0, 0x0, 0x44000840}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x6, 0xb, 0x4, 0x80, 0xa, {0x0, 0xea60}, {0x3, 0x0, 0x9, 0x10, 0x6, 0x0, "5895396b"}, 0xc, 0x1, {0x0}, 0xfffffff9}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, &(0x7f00000000c0)={0x30a32c3, 0x1, @qpsk={0x60b721a, 0x1e}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x100, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xfff1, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300003f00028008000500", @ANYRES32=r7, @ANYBLOB="08000a006cb1783b44136f83843a7ce02a4acb379b271348e2a6b3d422ae10df54495ece7fba39fa502519fc3c76723c7c0309585350f1d926513f4e64e2d6fd8192fe8b594c59ccfde9a582ebd5cd06fc39e928cc4af3a3e4da79c00b746031032514e81302ece0add9c4ada4764aa3cab374b1d702dd1afa5e7aa8189eca5702a2e4b792c42a700be5f7806dc76a5f1dbe552e2721231f9e8fa9d20f5012b00e29cddf9546aecb2211a0ca9dc772e44aa0a57c99830f33c55e2adf6d7f34d3237e847e", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000011c0)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x7, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}]}}]}, 0x40}}, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xfdef) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000000a06010300000000000000000300000a480008800c00078006030000000100000c0007800800064000000002100007800c001b400000000000000001c900000c00078008000a4000fe0300495be422c7a7340ac926d4e0ccf68c7d6d25cb169a42422a5b010f57538a4c09dbe6dafded94fd0621a0b56a19d85dbe4e4d5c0700"/144], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x880) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) mlockall(0x5) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r9}, 0x4) setsockopt(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)="0118269db93bda7b297893dbebf7e87c", 0x10) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000300)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) 789.703593ms ago: executing program 7 (id=2220): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x20000, 0x201, 0xc1}) 789.512292ms ago: executing program 6 (id=2221): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r0, 0x164, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r1}) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) (async) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000600)={0x80, 0x7, 0x1, {0x2, @sliced={0xfeff, [0x8, 0x401, 0x9, 0x6, 0x9, 0x80, 0x800, 0x3, 0x8001, 0xaf73, 0x400, 0xffff, 0x5, 0x1, 0x9b, 0xbb2, 0x7, 0x4, 0x6, 0x2, 0x0, 0x6, 0x6, 0xc118, 0x7, 0x4, 0x631, 0xd000, 0x6, 0xd7, 0x9, 0x8, 0x3ff, 0x56b, 0x9, 0x1, 0x1, 0x7ff, 0xfff8, 0x7, 0x1, 0x3ff, 0x5, 0x0, 0x6, 0xa00, 0xb, 0x8], 0x1000}}, 0x1}) (async) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) (async) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xff7f, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x8) (async) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="4d0000007d0100000046000e00080000001000000000030000000000000000000100f1f3ffff01800000040000000000000012002f6465762f7501006b2d636f6e74726f6c0000000000010000"], 0x4d) (async) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r1) 787.591691ms ago: executing program 7 (id=2222): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0xfffffffc}, 0x50) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x203, @multicast1}, 0x10) listen(r1, 0x6) r2 = accept4(r1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000005500)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4450}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x12, r0, 0x100000000) 680.67086ms ago: executing program 3 (id=2223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000002ac0)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0x68, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, [@dstopts={0x2c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x400}]}, @srh={0x2b, 0x0, 0x4, 0x0, 0x10, 0x58, 0x6}, @srh={0x3a, 0x2, 0x4, 0x1, 0x1, 0x48, 0x10, [@mcast2]}]}}}}}, 0x9a) pipe(&(0x7f0000000040)) 669.437977ms ago: executing program 7 (id=2224): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e0, 0x0, 0x2c0, 0x168, 0x98, 0x0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@empty, @empty, 0xffffffff, 0xff000000, 'vlan1\x00', 'bond0\x00', {}, {}, 0x5c, 0x3, 0xe6}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="596927827c59", 0x3bd, 0x3, [0x17, 0x1, 0x3b, 0x29, 0x36, 0x3d, 0x23, 0x22, 0x33, 0x1a, 0x41, 0x2b, 0x2c, 0x29, 0x3b, 0x2e], 0x1, 0xd149, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x2, "3b9ebf93057bb8e8d95af6f517629a476ab8f1f7b549a97ae5a7e5c8de0e"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x240408c4}, 0x0) 581.25481ms ago: executing program 5 (id=2225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./sys\x00', 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x5400, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) shutdown(r6, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800cd8d000000e5ff000000020000000000000500000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='atkbd', 0x5) pwrite64(r8, &(0x7f00000001c0)='S', 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000e3a6e522521cdcf4f3e5dc4b1a91285473ddaa75f725ee94031ce7d7b66b43ebda28fe9ec842b2fcb6ac929409e807f96a821cca27e8c867f39d997c69bee84f284e879e93b70994d804d75b99c61ad7cab6108af5b64973e5992b863be9e1b01c2d12dc9dbcea188ac5f074b018a192f47385f9bda995b74425b5396c773dbfd98ae80d70e0dec0ef18254634d4755634e2f9a2b95eee8a1bd81ca700"/186, @ANYRES32=0x1, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32], 0x50) 509.382433ms ago: executing program 3 (id=2226): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="0100000500cd960000c85df0e900", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c812712f4ba84cc4267c84bb16c27270"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r5, r5, 0x2e}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x3e, r6}, 0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r11, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)=ANY=[@ANYBLOB="14000005", @ANYRES16=r12, @ANYBLOB="010029bd7000ffdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r12, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40014}, 0x240080c5) io_setup(0x10, &(0x7f0000000280)=0x0) io_cancel(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x4, r11, &(0x7f00000004c0)="1c94121579088e08b1ec3cc5f24bc629ac36e5d317eb567a3c3ce3ad39fb1fa51b9cbf0f0c9ddee7b80adcaabd85ca95499f1df7850eb9b730f21ff6cb4fa8d7cb4bcc40d8607d23eac118bea668f245c2fcb211868c9998221746d7e2f925a3abbf7785c9687485208d48af263d7c1976a893d07d97e78a91b0fdfd67336ac94aefdbfeb90ecf7389234906be25a71294e9b6ac517cb436315a4ccd781da92080e5f027470c8440fcdb57e583888c81c0f8edcedb66cc540c976b894ea243c3807675e917c6e629a6db0688d6198d3369b4334d2f7f89ac", 0xd8, 0x20, 0x0, 0x0, r10}, &(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611040000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 400.22414ms ago: executing program 3 (id=2227): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x8000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003", 0x2b}], 0x1}, 0x4005) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x5, @remote}, {0xa, 0x0, 0x0, @local, 0x2}, r1, 0x2}}, 0x48) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000160001035c52b6c37384270b13"], 0x14}, 0x1, 0x0, 0x0, 0x24044001}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x61, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x20044004) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x10000, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aer,ecryptfs_key_bytes=16\x00') ioctl$SIOCGETSGCNT_IN6(r7, 0x5411, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local}) 399.06449ms ago: executing program 7 (id=2228): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0) timerfd_settime(r2, 0x2, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000004000000000074") 309.944853ms ago: executing program 7 (id=2229): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x1, 0x10000, 0x2000, &(0x7f0000c37000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x1, 0xf0, 0x20, 0x2}, {0x9, 0x9, 0x5}, {0x7347, 0x7f, 0x7, 0x9}, {0x7fff, 0x8, 0xab, 0x4}, {0x1, 0x7, 0x6, 0x80000000}]}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08800000084400001c0012800b000100864b6e65766500000c000280050004000100020008000b00", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg$can_raw(r2, &(0x7f00000006c0)={&(0x7f0000000400)=@ax25={{}, [@null, @remote, @remote, @netrom, @netrom, @bcast, @default]}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000000540)=""/247, 0xf7}], 0x2, &(0x7f0000000680)=""/26, 0x1a}, 0x10002) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="210f29bd7000fcdbdf251c00000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x2000c000) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r9) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r13], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r14, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000804) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffff10000100000001000008001c0044000000000000c3b5dda5abe4b6e2f1c4feca6aa7b035fe88132626e4c853da18a6de11ae6e377d823e08e79d3c9ab87dff37c383406bcf1536ddd4e4c25cf65d94e1abe95dc07ab3a9ebc94666651ba0d5cba13aad638581910ed272c4de335168143f6e3e35cfd24bcaf625293f0f64eea3b506b92b545dc2cd9ec391b2a2b53af2aa79635ce33783554cb4aa4ed77ddeb82462506b192bb435d3f2b07e464085b28816278ebf7944400ef78137ee082d19636c714c88"]) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r12, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000015}, 0x2400c840) 294.788394ms ago: executing program 3 (id=2230): timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$setperm(0x5, r0, 0x20000220) keyctl$chown(0x4, r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x2000) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000000)) 0s ago: executing program 7 (id=2231): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) (async, rerun: 32) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5c, &(0x7f0000000340)}, 0x400000e0) (async) r4 = socket(0x27, 0x4, 0x102) (async, rerun: 32) r5 = epoll_create1(0x0) (rerun: 32) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0xe000202b}) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, @local, @empty}}}}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r9 = dup3(r4, r6, 0x0) set_mempolicy(0x8000, &(0x7f0000000000)=0x40, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000000300)={0x4000201f}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d831, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x0, 0x0, 0x0) (rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x16, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfe87, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc2e, 0x0, 0x0, 0x1000, 0x6b2b, 0x0, 0x0, 0x55}}}, &(0x7f0000000140)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r11, r10, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe703, 0x8000, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8686, 0x0, 0x40040001, 0x336}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000005540)={&(0x7f0000000340)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4020080}, 0xc000) (rerun: 32) kernel console output (not intermixed with test programs): 00 R09: 0000000000000000 [ 186.430457][T12011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.430464][T12011] R13: 00007fc1cd826038 R14: 00007fc1cd825fa0 R15: 00007ffd8f00acb8 [ 186.430481][T12011] [ 186.454677][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 186.570229][T12027] futex_wake_op: syz.6.1916 tries to shift op by -1; fix this program [ 186.575141][T12027] binder: BINDER_SET_CONTEXT_MGR already set [ 186.575156][T12027] binder: 12024:12027 ioctl 4018620d 200000004a80 returned -16 [ 186.652765][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1920'. [ 186.679274][T12038] FAULT_INJECTION: forcing a failure. [ 186.679274][T12038] name failslab, interval 1, probability 0, space 0, times 0 [ 186.679310][T12038] CPU: 3 UID: 0 PID: 12038 Comm: syz.5.1921 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.679335][T12038] Tainted: [L]=SOFTLOCKUP [ 186.679343][T12038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.679356][T12038] Call Trace: [ 186.679363][T12038] [ 186.679372][T12038] dump_stack_lvl+0x100/0x190 [ 186.679404][T12038] should_fail_ex.cold+0x5/0xa [ 186.679432][T12038] should_failslab+0xc2/0x120 [ 186.679459][T12038] __kmalloc_cache_noprof+0x91/0x6d0 [ 186.679478][T12038] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 186.679500][T12038] ? blk_alloc_queue_stats+0x3f/0x110 [ 186.679524][T12038] blk_alloc_queue_stats+0x3f/0x110 [ 186.679543][T12038] blk_alloc_queue+0xda/0x790 [ 186.679566][T12038] __blk_alloc_disk+0xa0/0x170 [ 186.679583][T12038] ? __pfx___blk_alloc_disk+0x10/0x10 [ 186.679599][T12038] ? __pfx___debug_object_init+0x10/0x10 [ 186.679634][T12038] ? lockdep_init_map_type+0x5c/0x250 [ 186.679669][T12038] ? lockdep_init_map_type+0x5c/0x250 [ 186.679697][T12038] dm_create+0x5e8/0x1530 [ 186.679727][T12038] dev_create+0x121/0x2a0 [ 186.679746][T12038] ? __pfx_dev_create+0x10/0x10 [ 186.679771][T12038] ctl_ioctl+0x4d2/0xcc0 [ 186.679788][T12038] ? __pfx_dev_create+0x10/0x10 [ 186.679807][T12038] ? __pfx_ctl_ioctl+0x10/0x10 [ 186.679850][T12038] ? selinux_file_ioctl+0x13b/0x290 [ 186.679871][T12038] ? selinux_file_ioctl+0xb6/0x290 [ 186.679895][T12038] dm_ctl_ioctl+0x22/0x30 [ 186.679911][T12038] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 186.679928][T12038] __x64_sys_ioctl+0x18e/0x210 [ 186.679950][T12038] do_syscall_64+0x123/0x790 [ 186.679972][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.679991][T12038] RIP: 0033:0x7f952899e159 [ 186.680007][T12038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.680023][T12038] RSP: 002b:00007f952985e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.680042][T12038] RAX: ffffffffffffffda RBX: 00007f9528c25fa0 RCX: 00007f952899e159 [ 186.680054][T12038] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 186.680064][T12038] RBP: 00007f9528a3506b R08: 0000000000000000 R09: 0000000000000000 [ 186.680075][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.680085][T12038] R13: 00007f9528c26038 R14: 00007f9528c25fa0 R15: 00007ffec8306f88 [ 186.680137][T12038] [ 186.706474][T12040] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1922'. [ 186.725235][T12042] syzkaller0: entered promiscuous mode [ 186.725256][T12042] syzkaller0: entered allmulticast mode [ 186.864819][T12049] FAULT_INJECTION: forcing a failure. [ 186.864819][T12049] name failslab, interval 1, probability 0, space 0, times 0 [ 186.864852][T12049] CPU: 1 UID: 0 PID: 12049 Comm: syz.6.1924 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.864878][T12049] Tainted: [L]=SOFTLOCKUP [ 186.864885][T12049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.864896][T12049] Call Trace: [ 186.864902][T12049] [ 186.864909][T12049] dump_stack_lvl+0x100/0x190 [ 186.864940][T12049] should_fail_ex.cold+0x5/0xa [ 186.864964][T12049] should_failslab+0xc2/0x120 [ 186.864988][T12049] kmem_cache_alloc_noprof+0x92/0x6a0 [ 186.867779][T12049] ? __pfx_map_id_range_down+0x10/0x10 [ 186.867797][T12049] ? security_inode_alloc+0x3b/0x2c0 [ 186.867814][T12049] security_inode_alloc+0x3b/0x2c0 [ 186.867829][T12049] inode_init_always_gfp+0xc6f/0xfb0 [ 186.867849][T12049] alloc_inode+0x8e/0x250 [ 186.867862][T12049] new_inode+0x22/0x1c0 [ 186.867874][T12049] debugfs_create_dir+0xbe/0x440 [ 186.867889][T12049] drm_debugfs_clients_add+0x6f/0x210 [ 186.867906][T12049] drm_file_alloc+0x5c6/0xb40 [ 186.867927][T12049] drm_open_helper+0x1fc/0x540 [ 186.867947][T12049] drm_open+0x1a0/0x3e0 [ 186.867965][T12049] ? __pfx_drm_open+0x10/0x10 [ 186.867983][T12049] drm_stub_open+0x20f/0x380 [ 186.868002][T12049] ? __pfx_drm_stub_open+0x10/0x10 [ 186.868020][T12049] chrdev_open+0x234/0x6a0 [ 186.868037][T12049] ? __pfx_chrdev_open+0x10/0x10 [ 186.868054][T12049] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 186.868069][T12049] do_dentry_open+0x6ab/0x14d0 [ 186.868082][T12049] ? __pfx_chrdev_open+0x10/0x10 [ 186.868105][T12049] vfs_open+0x82/0x3f0 [ 186.868122][T12049] path_openat+0x19fa/0x2440 [ 186.868142][T12049] ? __pfx_path_openat+0x10/0x10 [ 186.868162][T12049] do_file_open+0x20e/0x430 [ 186.868180][T12049] ? __pfx_do_file_open+0x10/0x10 [ 186.868207][T12049] ? _raw_spin_unlock+0x28/0x50 [ 186.868224][T12049] ? alloc_fd+0x471/0x7a0 [ 186.868243][T12049] do_sys_openat2+0x10f/0x1e0 [ 186.868260][T12049] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.868276][T12049] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 186.868296][T12049] __x64_sys_openat+0x12d/0x210 [ 186.868315][T12049] ? __pfx___x64_sys_openat+0x10/0x10 [ 186.868339][T12049] do_syscall_64+0x123/0x790 [ 186.868354][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.868367][T12049] RIP: 0033:0x7fc1cd55e98e [ 186.868377][T12049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.868388][T12049] RSP: 002b:00007fc1ce46db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.868399][T12049] RAX: ffffffffffffffda RBX: 00007fc1ce46e6c0 RCX: 00007fc1cd55e98e [ 186.868407][T12049] RDX: 0000000000000000 RSI: 00007fc1ce46dc00 RDI: ffffffffffffff9c [ 186.868440][T12049] RBP: 00007fc1ce46dc00 R08: 0000000000000000 R09: 0000000000000000 [ 186.868448][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 186.868455][T12049] R13: 00007fc1cd826038 R14: 00007fc1cd825fa0 R15: 00007ffd8f00acb8 [ 186.868472][T12049] [ 186.868555][T12049] debugfs: out of free dentries, can not create directory 'client-62' [ 186.894310][T12050] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 187.055687][T12059] zram: Cannot change disksize for initialized device [ 187.320506][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 187.495614][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 187.622188][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 187.622206][ T43] audit: type=1400 audit(1825065618.780:10322): avc: denied { create } for pid=12082 comm="syz.5.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.622479][ T43] audit: type=1400 audit(1825065618.780:10323): avc: denied { bind } for pid=12082 comm="syz.5.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.680127][ T5090] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 187.680499][ T5090] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 187.681359][ T5090] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 187.688120][T12089] busy [ 188.060483][T12100] FAULT_INJECTION: forcing a failure. [ 188.060483][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 188.060519][T12100] CPU: 2 UID: 0 PID: 12100 Comm: syz.3.1939 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.060546][T12100] Tainted: [L]=SOFTLOCKUP [ 188.060554][T12100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.060567][T12100] Call Trace: [ 188.060575][T12100] [ 188.060584][T12100] dump_stack_lvl+0x100/0x190 [ 188.060653][T12100] should_fail_ex.cold+0x5/0xa [ 188.060685][T12100] should_failslab+0xc2/0x120 [ 188.060722][T12100] __kmalloc_cache_noprof+0x91/0x6d0 [ 188.060745][T12100] ? percpu_ref_init+0xec/0x3f0 [ 188.060781][T12100] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 188.060815][T12100] percpu_ref_init+0xec/0x3f0 [ 188.060848][T12100] blk_alloc_queue+0x574/0x790 [ 188.060875][T12100] __blk_alloc_disk+0xa0/0x170 [ 188.060895][T12100] ? __pfx___blk_alloc_disk+0x10/0x10 [ 188.060913][T12100] ? __pfx___debug_object_init+0x10/0x10 [ 188.060956][T12100] ? lockdep_init_map_type+0x5c/0x250 [ 188.060983][T12100] ? lockdep_init_map_type+0x5c/0x250 [ 188.061040][T12100] dm_create+0x5e8/0x1530 [ 188.061082][T12100] dev_create+0x121/0x2a0 [ 188.061104][T12100] ? __pfx_dev_create+0x10/0x10 [ 188.061140][T12100] ctl_ioctl+0x4d2/0xcc0 [ 188.061161][T12100] ? __pfx_dev_create+0x10/0x10 [ 188.061184][T12100] ? __pfx_ctl_ioctl+0x10/0x10 [ 188.061236][T12100] ? selinux_file_ioctl+0x13b/0x290 [ 188.061265][T12100] ? selinux_file_ioctl+0xb6/0x290 [ 188.061295][T12100] dm_ctl_ioctl+0x22/0x30 [ 188.061316][T12100] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 188.061336][T12100] __x64_sys_ioctl+0x18e/0x210 [ 188.061362][T12100] do_syscall_64+0x123/0x790 [ 188.061393][T12100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.061415][T12100] RIP: 0033:0x7fd93759e159 [ 188.061433][T12100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.061455][T12100] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.061475][T12100] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 188.061489][T12100] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 188.061503][T12100] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 188.061515][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.061528][T12100] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 188.061556][T12100] [ 188.404931][ T43] audit: type=1400 audit(1825065619.552:10324): avc: denied { write } for pid=12115 comm="syz.3.1945" name="/" dev="9p" ino=72095551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.405113][T12116] FAULT_INJECTION: forcing a failure. [ 188.405113][T12116] name failslab, interval 1, probability 0, space 0, times 0 [ 188.405148][T12116] CPU: 2 UID: 0 PID: 12116 Comm: syz.3.1945 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.405180][T12116] Tainted: [L]=SOFTLOCKUP [ 188.405188][T12116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.405200][T12116] Call Trace: [ 188.405209][T12116] [ 188.405218][T12116] dump_stack_lvl+0x100/0x190 [ 188.405259][T12116] should_fail_ex.cold+0x5/0xa [ 188.405291][T12116] should_failslab+0xc2/0x120 [ 188.405322][T12116] __kmalloc_noprof+0xfc/0x840 [ 188.405348][T12116] ? trace_kmem_cache_alloc+0xdd/0x100 [ 188.405378][T12116] ? p9_fcall_init+0x101/0x420 [ 188.405408][T12116] p9_fcall_init+0x101/0x420 [ 188.405436][T12116] p9_tag_alloc+0x20d/0x860 [ 188.405464][T12116] ? __pfx_p9_tag_alloc+0x10/0x10 [ 188.405489][T12116] ? kasan_save_track+0x14/0x30 [ 188.405516][T12116] ? p9_client_attach+0x91/0x2b0 [ 188.405543][T12116] ? v9fs_fid_lookup+0x9a4/0xf50 [ 188.405575][T12116] ? v9fs_vfs_lookup+0x1a1/0x5c0 [ 188.405599][T12116] ? v9fs_vfs_atomic_open_dotl+0x87e/0xd90 [ 188.405626][T12116] ? atomic_open+0x17e/0x560 [ 188.405646][T12116] ? lookup_open+0x842/0x1990 [ 188.405668][T12116] ? path_openat+0xa2c/0x2440 [ 188.405703][T12116] ? do_file_open+0x20e/0x430 [ 188.405736][T12116] p9_client_prepare_req+0x19b/0x4d0 [ 188.405764][T12116] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 188.405795][T12116] ? __lock_acquire+0x5c0/0x1f40 [ 188.405828][T12116] p9_client_rpc+0x1c4/0xd60 [ 188.405859][T12116] ? __pfx_p9_client_rpc+0x10/0x10 [ 188.405887][T12116] ? idr_alloc_u32+0x22b/0x320 [ 188.405917][T12116] ? find_held_lock+0x2b/0x80 [ 188.405949][T12116] ? find_held_lock+0x2b/0x80 [ 188.406002][T12116] ? p9_fid_create+0x26d/0x460 [ 188.406029][T12116] ? rcu_is_watching+0x13/0xc0 [ 188.406070][T12116] p9_client_attach+0x153/0x2b0 [ 188.406104][T12116] ? __pfx_p9_client_attach+0x10/0x10 [ 188.406133][T12116] ? v9fs_fid_lookup+0x500/0xf50 [ 188.406177][T12116] v9fs_fid_lookup+0x9a4/0xf50 [ 188.406210][T12116] ? __pfx_v9fs_mapped_dotl_flags+0x10/0x10 [ 188.406240][T12116] v9fs_vfs_lookup+0x1a1/0x5c0 [ 188.406268][T12116] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 188.406298][T12116] ? avc_has_perm+0x135/0x1e0 [ 188.406353][T12116] v9fs_vfs_atomic_open_dotl+0x87e/0xd90 [ 188.406385][T12116] ? selinux_determine_inode_label+0x1ab/0x400 [ 188.406417][T12116] ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10 [ 188.406448][T12116] ? may_create+0x285/0x440 [ 188.406478][T12116] ? __pfx_may_create+0x10/0x10 [ 188.406523][T12116] atomic_open+0x17e/0x560 [ 188.406544][T12116] ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10 [ 188.406579][T12116] lookup_open+0x842/0x1990 [ 188.406617][T12116] path_openat+0xa2c/0x2440 [ 188.406653][T12116] ? __pfx_path_openat+0x10/0x10 [ 188.406697][T12116] do_file_open+0x20e/0x430 [ 188.406730][T12116] ? __pfx_do_file_open+0x10/0x10 [ 188.406781][T12116] ? _raw_spin_unlock+0x28/0x50 [ 188.406813][T12116] ? alloc_fd+0x471/0x7a0 [ 188.406852][T12116] do_sys_openat2+0x10f/0x1e0 [ 188.406888][T12116] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.406933][T12116] __x64_sys_openat+0x12d/0x210 [ 188.406966][T12116] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.407012][T12116] do_syscall_64+0x123/0x790 [ 188.407038][T12116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.407061][T12116] RIP: 0033:0x7fd93759e159 [ 188.407080][T12116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.407101][T12116] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.407125][T12116] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 188.407140][T12116] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 188.407154][T12116] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 188.407168][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.407181][T12116] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 188.407213][T12116] [ 188.641531][T12126] FAULT_INJECTION: forcing a failure. [ 188.641531][T12126] name failslab, interval 1, probability 0, space 0, times 0 [ 188.641556][T12126] CPU: 1 UID: 0 PID: 12126 Comm: syz.0.1950 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.641574][T12126] Tainted: [L]=SOFTLOCKUP [ 188.641579][T12126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.641587][T12126] Call Trace: [ 188.641592][T12126] [ 188.641597][T12126] dump_stack_lvl+0x100/0x190 [ 188.641620][T12126] should_fail_ex.cold+0x5/0xa [ 188.641645][T12126] should_failslab+0xc2/0x120 [ 188.641664][T12126] __kmalloc_cache_noprof+0x91/0x6d0 [ 188.641678][T12126] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 188.641694][T12126] ? blk_alloc_queue_stats+0x3f/0x110 [ 188.641709][T12126] blk_alloc_queue_stats+0x3f/0x110 [ 188.641722][T12126] blk_alloc_queue+0xda/0x790 [ 188.641739][T12126] __blk_alloc_disk+0xa0/0x170 [ 188.641752][T12126] ? __pfx___blk_alloc_disk+0x10/0x10 [ 188.641779][T12126] ? __pfx___debug_object_init+0x10/0x10 [ 188.641808][T12126] ? lockdep_init_map_type+0x5c/0x250 [ 188.641824][T12126] ? lockdep_init_map_type+0x5c/0x250 [ 188.641843][T12126] dm_create+0x5e8/0x1530 [ 188.641864][T12126] dev_create+0x121/0x2a0 [ 188.641877][T12126] ? __pfx_dev_create+0x10/0x10 [ 188.641894][T12126] ctl_ioctl+0x4d2/0xcc0 [ 188.641906][T12126] ? __pfx_dev_create+0x10/0x10 [ 188.641919][T12126] ? __pfx_ctl_ioctl+0x10/0x10 [ 188.641947][T12126] ? selinux_file_ioctl+0x13b/0x290 [ 188.641961][T12126] ? selinux_file_ioctl+0xb6/0x290 [ 188.641978][T12126] dm_ctl_ioctl+0x22/0x30 [ 188.641989][T12126] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 188.642002][T12126] __x64_sys_ioctl+0x18e/0x210 [ 188.642097][T12126] do_syscall_64+0x123/0x790 [ 188.642117][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.642132][T12126] RIP: 0033:0x7fa52b79e159 [ 188.642145][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.642159][T12126] RSP: 002b:00007fa52c709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.642172][T12126] RAX: ffffffffffffffda RBX: 00007fa52ba25fa0 RCX: 00007fa52b79e159 [ 188.642181][T12126] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 188.642189][T12126] RBP: 00007fa52b83506b R08: 0000000000000000 R09: 0000000000000000 [ 188.642197][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.642204][T12126] R13: 00007fa52ba26038 R14: 00007fa52ba25fa0 R15: 00007ffc177663c8 [ 188.642220][T12126] [ 188.685209][T12128] 9pnet_virtio: no channels available for device syz [ 188.702527][ T43] audit: type=1400 audit(1825065619.853:10325): avc: denied { write } for pid=12127 comm="syz.3.1947" name="/" dev="9p" ino=72095551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.711885][ T43] audit: type=1400 audit(1825065619.863:10326): avc: denied { write } for pid=12127 comm="syz.3.1947" name="/" dev="9p" ino=72095551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.800309][T12132] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 189.292409][T12156] netlink: 'syz.0.1960': attribute type 1 has an invalid length. [ 189.327843][T12146] ip6t_rt: unknown flags D [ 189.328613][T12156] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.514608][ T43] audit: type=1400 audit(1825065620.674:10327): avc: denied { mounton } for pid=12160 comm="syz.0.1961" path="/file0" dev="bpf" ino=48788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 189.599301][T12174] overlayfs: upper fs does not support tmpfile. [ 189.602146][T12171] netlink: 'syz.3.1965': attribute type 30 has an invalid length. [ 189.625099][T12178] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.678081][T12186] CIFS: Attempting to mount //127.0.0.1/test [ 189.678990][T12186] CIFS: VFS: Error connecting to socket. Aborting operation. [ 189.679012][T12186] CIFS: VFS: cifs_mount failed w/return code = -111 [ 189.696209][T12171] netlink: 'syz.3.1965': attribute type 30 has an invalid length. [ 189.754565][T12188] FAULT_INJECTION: forcing a failure. [ 189.754565][T12188] name failslab, interval 1, probability 0, space 0, times 0 [ 189.754605][T12188] CPU: 2 UID: 0 PID: 12188 Comm: syz.0.1970 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.754637][T12188] Tainted: [L]=SOFTLOCKUP [ 189.754646][T12188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.754660][T12188] Call Trace: [ 189.754683][T12188] [ 189.754695][T12188] dump_stack_lvl+0x100/0x190 [ 189.754744][T12188] should_fail_ex.cold+0x5/0xa [ 189.754770][T12188] should_failslab+0xc2/0x120 [ 189.754806][T12188] __kmalloc_noprof+0xfc/0x840 [ 189.754833][T12188] ? xfrm_hash_alloc+0xcf/0x100 [ 189.754865][T12188] xfrm_hash_alloc+0xcf/0x100 [ 189.754885][T12188] xfrm_state_init+0x15f/0x570 [ 189.754925][T12188] ? __pfx_xfrm_net_init+0x10/0x10 [ 189.754946][T12188] xfrm_net_init+0x20e/0xcf0 [ 189.754970][T12188] ? __pfx_xfrm_net_init+0x10/0x10 [ 189.754989][T12188] ops_init+0x1e2/0x5f0 [ 189.755022][T12188] setup_net+0x118/0x3a0 [ 189.755051][T12188] ? __pfx_setup_net+0x10/0x10 [ 189.755089][T12188] copy_net_ns+0x345/0x7a0 [ 189.755112][T12188] create_new_namespaces+0x3ea/0xac0 [ 189.755147][T12188] unshare_nsproxy_namespaces+0xf2/0x220 [ 189.755175][T12188] ksys_unshare+0x4a2/0xa70 [ 189.755203][T12188] ? __pfx_ksys_unshare+0x10/0x10 [ 189.755237][T12188] __x64_sys_unshare+0x31/0x40 [ 189.755262][T12188] do_syscall_64+0x123/0x790 [ 189.755293][T12188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.755316][T12188] RIP: 0033:0x7fa52b79e159 [ 189.755334][T12188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.755353][T12188] RSP: 002b:00007fa52c709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 189.755382][T12188] RAX: ffffffffffffffda RBX: 00007fa52ba25fa0 RCX: 00007fa52b79e159 [ 189.755395][T12188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 189.755408][T12188] RBP: 00007fa52b83506b R08: 0000000000000000 R09: 0000000000000000 [ 189.755421][T12188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.755434][T12188] R13: 00007fa52ba26038 R14: 00007fa52ba25fa0 R15: 00007ffc177663c8 [ 189.755462][T12188] [ 189.986614][T12199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.997958][T12199] gretap0: entered promiscuous mode [ 190.075536][T12204] netlink: 'syz.0.1976': attribute type 2 has an invalid length. [ 190.180240][ T43] audit: type=1400 audit(1825065621.336:10328): avc: denied { mounton } for pid=12208 comm="syz.3.1978" path="/550/file0" dev="tmpfs" ino=3063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 190.184592][T12211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12211 comm=syz.0.1979 [ 190.247145][ T43] audit: type=1400 audit(1825065621.396:10329): avc: denied { write } for pid=12212 comm="syz.0.1980" name="nullb" dev="configfs" ino=3937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.279701][ T43] audit: type=1400 audit(1825065621.436:10330): avc: denied { write } for pid=12212 comm="syz.0.1980" name="zoned" dev="configfs" ino=50297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 190.280168][ T43] audit: type=1400 audit(1825065621.436:10331): avc: denied { open } for pid=12212 comm="syz.0.1980" path="/471/config/nullb/nullb1/zoned" dev="configfs" ino=50297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 190.288484][T12213] null_blk: nullb1: using native zone append [ 190.309260][T12216] FAULT_INJECTION: forcing a failure. [ 190.309260][T12216] name failslab, interval 1, probability 0, space 0, times 0 [ 190.309288][T12216] CPU: 3 UID: 0 PID: 12216 Comm: syz.6.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.309305][T12216] Tainted: [L]=SOFTLOCKUP [ 190.309310][T12216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.309317][T12216] Call Trace: [ 190.309322][T12216] [ 190.309327][T12216] dump_stack_lvl+0x100/0x190 [ 190.309366][T12216] should_fail_ex.cold+0x5/0xa [ 190.309387][T12216] should_failslab+0xc2/0x120 [ 190.309404][T12216] __kmalloc_cache_noprof+0x91/0x6d0 [ 190.309418][T12216] ? allocate_cgrp_cset_links+0xca/0x230 [ 190.309435][T12216] allocate_cgrp_cset_links+0xca/0x230 [ 190.309453][T12216] find_css_set+0x949/0x1ec0 [ 190.309488][T12216] ? __pfx_find_css_set+0x10/0x10 [ 190.309505][T12216] ? __lock_acquire+0xe8b/0x1f40 [ 190.309529][T12216] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 190.309551][T12216] cgroup_attach_task+0x3e4/0x770 [ 190.309570][T12216] ? __pfx_cgroup_attach_task+0x10/0x10 [ 190.309590][T12216] ? lock_acquire+0x1d1/0x380 [ 190.309610][T12216] ? get_task_cred+0x189/0x360 [ 190.309624][T12216] __cgroup1_procs_write.isra.0+0x2c4/0x420 [ 190.309649][T12216] ? __pfx___cgroup1_procs_write.isra.0+0x10/0x10 [ 190.309668][T12216] ? kernfs_root+0xf8/0x2a0 [ 190.309688][T12216] cgroup_file_write+0x1e6/0x8a0 [ 190.309705][T12216] ? __pfx_cgroup1_procs_write+0x10/0x10 [ 190.309723][T12216] ? __pfx_cgroup_file_write+0x10/0x10 [ 190.309739][T12216] ? __kmalloc_noprof+0x350/0x840 [ 190.309770][T12216] kernfs_fop_write_iter+0x3e0/0x5f0 [ 190.309783][T12216] ? __pfx_cgroup_file_write+0x10/0x10 [ 190.309801][T12216] vfs_write+0x6af/0x1050 [ 190.309814][T12216] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 190.309829][T12216] ? __pfx_vfs_write+0x10/0x10 [ 190.309840][T12216] ? find_held_lock+0x2b/0x80 [ 190.309867][T12216] ksys_write+0x12a/0x250 [ 190.309880][T12216] ? __pfx_ksys_write+0x10/0x10 [ 190.309898][T12216] do_syscall_64+0x123/0x790 [ 190.309912][T12216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.309929][T12216] RIP: 0033:0x7fc1cd59e159 [ 190.309944][T12216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.309961][T12216] RSP: 002b:00007fc1ce46e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.309979][T12216] RAX: ffffffffffffffda RBX: 00007fc1cd825fa0 RCX: 00007fc1cd59e159 [ 190.309990][T12216] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 190.309997][T12216] RBP: 00007fc1cd63506b R08: 0000000000000000 R09: 0000000000000000 [ 190.310004][T12216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.310011][T12216] R13: 00007fc1cd826038 R14: 00007fc1cd825fa0 R15: 00007ffd8f00acb8 [ 190.310027][T12216] [ 190.412422][T12221] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 190.412447][T12221] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.414034][T12221] vhci_hcd vhci_hcd.0: Device attached [ 190.416640][T12221] comedi comedi2: comedi_config --init_data is deprecated [ 190.433855][T12223] vhci_hcd: connection closed [ 190.434191][ T12] vhci_hcd vhci_hcd.3: stop threads [ 190.434214][ T12] vhci_hcd vhci_hcd.3: release socket [ 190.434234][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 190.467621][T12213] null_blk: disk nullb1 created [ 190.585397][T12226] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12226 comm=syz.0.1984 [ 190.667111][T12233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.669066][T12233] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 190.762831][T12237] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.762877][T12237] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 190.873938][T12237] program syz.5.1988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.984437][T12251] FAULT_INJECTION: forcing a failure. [ 190.984437][T12251] name failslab, interval 1, probability 0, space 0, times 0 [ 190.984480][T12251] CPU: 3 UID: 0 PID: 12251 Comm: syz.0.1991 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.984532][T12251] Tainted: [L]=SOFTLOCKUP [ 190.984542][T12251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.984557][T12251] Call Trace: [ 190.984567][T12251] [ 190.984578][T12251] dump_stack_lvl+0x100/0x190 [ 190.984620][T12251] should_fail_ex.cold+0x5/0xa [ 190.984653][T12251] should_failslab+0xc2/0x120 [ 190.984687][T12251] __kmalloc_noprof+0xfc/0x840 [ 190.984715][T12251] ? trace_kmem_cache_alloc+0xdd/0x100 [ 190.984749][T12251] ? p9_fcall_init+0x101/0x420 [ 190.984782][T12251] p9_fcall_init+0x101/0x420 [ 190.984812][T12251] p9_tag_alloc+0x16c/0x860 [ 190.984871][T12251] ? __pfx_p9_tag_alloc+0x10/0x10 [ 190.984902][T12251] ? kasan_save_track+0x14/0x30 [ 190.984954][T12251] ? p9_client_attach+0x91/0x2b0 [ 190.985014][T12251] ? v9fs_fid_lookup+0x9a4/0xf50 [ 190.985051][T12251] ? v9fs_vfs_lookup+0x1a1/0x5c0 [ 190.985079][T12251] ? v9fs_vfs_atomic_open_dotl+0x87e/0xd90 [ 190.985109][T12251] ? atomic_open+0x17e/0x560 [ 190.985132][T12251] ? lookup_open+0x842/0x1990 [ 190.985156][T12251] ? path_openat+0xa2c/0x2440 [ 190.985187][T12251] ? do_file_open+0x20e/0x430 [ 190.985228][T12251] p9_client_prepare_req+0x19b/0x4d0 [ 190.985255][T12251] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 190.985285][T12251] ? __lock_acquire+0x5c0/0x1f40 [ 190.985318][T12251] p9_client_rpc+0x1c4/0xd60 [ 190.985346][T12251] ? __pfx_p9_client_rpc+0x10/0x10 [ 190.985370][T12251] ? idr_alloc_u32+0x22b/0x320 [ 190.985396][T12251] ? find_held_lock+0x2b/0x80 [ 190.985422][T12251] ? find_held_lock+0x2b/0x80 [ 190.985527][T12251] ? p9_fid_create+0x26d/0x460 [ 190.985556][T12251] ? rcu_is_watching+0x13/0xc0 [ 190.985594][T12251] p9_client_attach+0x153/0x2b0 [ 190.985617][T12251] ? __pfx_p9_client_attach+0x10/0x10 [ 190.985636][T12251] ? v9fs_fid_lookup+0x500/0xf50 [ 190.985672][T12251] v9fs_fid_lookup+0x9a4/0xf50 [ 190.985705][T12251] ? __pfx_v9fs_mapped_dotl_flags+0x10/0x10 [ 190.985734][T12251] v9fs_vfs_lookup+0x1a1/0x5c0 [ 190.985758][T12251] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 190.985785][T12251] ? avc_has_perm+0x135/0x1e0 [ 190.985818][T12251] v9fs_vfs_atomic_open_dotl+0x87e/0xd90 [ 190.985841][T12251] ? selinux_determine_inode_label+0x1ab/0x400 [ 190.985869][T12251] ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10 [ 190.985944][T12251] ? may_create+0x285/0x440 [ 190.985988][T12251] ? __pfx_may_create+0x10/0x10 [ 190.986028][T12251] atomic_open+0x17e/0x560 [ 190.986047][T12251] ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10 [ 190.986083][T12251] lookup_open+0x842/0x1990 [ 190.986116][T12251] path_openat+0xa2c/0x2440 [ 190.986145][T12251] ? __pfx_path_openat+0x10/0x10 [ 190.986180][T12251] do_file_open+0x20e/0x430 [ 190.986208][T12251] ? __pfx_do_file_open+0x10/0x10 [ 190.986253][T12251] ? _raw_spin_unlock+0x28/0x50 [ 190.986282][T12251] ? alloc_fd+0x471/0x7a0 [ 190.986327][T12251] do_sys_openat2+0x10f/0x1e0 [ 190.986359][T12251] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.986398][T12251] __x64_sys_openat+0x12d/0x210 [ 190.986427][T12251] ? __pfx___x64_sys_openat+0x10/0x10 [ 190.986468][T12251] do_syscall_64+0x123/0x790 [ 190.986491][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.986512][T12251] RIP: 0033:0x7fa52b79e159 [ 190.986530][T12251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.986549][T12251] RSP: 002b:00007fa52c709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.986571][T12251] RAX: ffffffffffffffda RBX: 00007fa52ba25fa0 RCX: 00007fa52b79e159 [ 190.986585][T12251] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 190.986605][T12251] RBP: 00007fa52b83506b R08: 0000000000000000 R09: 0000000000000000 [ 190.986617][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.986630][T12251] R13: 00007fa52ba26038 R14: 00007fa52ba25fa0 R15: 00007ffc177663c8 [ 190.986658][T12251] [ 190.999692][T12253] __nla_validate_parse: 11 callbacks suppressed [ 190.999705][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 191.020647][T12253] batadv0: entered promiscuous mode [ 191.027456][T12253] macsec2: entered promiscuous mode [ 191.029391][T12253] macsec2: entered allmulticast mode [ 191.029413][T12253] batadv0: entered allmulticast mode [ 191.037741][T12253] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 191.041525][T12253] batadv0: left allmulticast mode [ 191.041696][T12253] batadv0: left promiscuous mode [ 191.327159][T12255] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.361455][T12257] program syz.0.1993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.361550][T12257] ata1.00: invalid command format 6 [ 191.363309][T12257] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 191.363326][T12257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1993'. [ 191.394158][T12255] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.435628][T12259] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1995'. [ 191.578490][T12263] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 191.690468][T12265] syzkaller1: entered promiscuous mode [ 191.690491][T12265] syzkaller1: entered allmulticast mode [ 191.955641][T12284] syzkaller1: entered promiscuous mode [ 191.955662][T12284] syzkaller1: entered allmulticast mode [ 192.126040][T12305] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.2005'. [ 192.134259][T12306] syzkaller1: entered promiscuous mode [ 192.134274][T12306] syzkaller1: entered allmulticast mode [ 192.156770][T12308] FAULT_INJECTION: forcing a failure. [ 192.156770][T12308] name failslab, interval 1, probability 0, space 0, times 0 [ 192.156804][T12308] CPU: 3 UID: 0 PID: 12308 Comm: syz.3.2007 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.156831][T12308] Tainted: [L]=SOFTLOCKUP [ 192.156838][T12308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.156849][T12308] Call Trace: [ 192.156855][T12308] [ 192.156863][T12308] dump_stack_lvl+0x100/0x190 [ 192.156892][T12308] should_fail_ex.cold+0x5/0xa [ 192.156918][T12308] should_failslab+0xc2/0x120 [ 192.156941][T12308] __kmalloc_noprof+0xfc/0x840 [ 192.156962][T12308] ? xfrm_hash_alloc+0xcf/0x100 [ 192.157021][T12308] ? __pfx_xfrm_net_init+0x10/0x10 [ 192.157040][T12308] xfrm_hash_alloc+0xcf/0x100 [ 192.157056][T12308] xfrm_net_init+0x242/0xcf0 [ 192.157076][T12308] ? __pfx_xfrm_net_init+0x10/0x10 [ 192.157090][T12308] ops_init+0x1e2/0x5f0 [ 192.157114][T12308] setup_net+0x118/0x3a0 [ 192.157139][T12308] ? __pfx_setup_net+0x10/0x10 [ 192.157169][T12308] copy_net_ns+0x345/0x7a0 [ 192.157188][T12308] create_new_namespaces+0x3ea/0xac0 [ 192.157214][T12308] unshare_nsproxy_namespaces+0xf2/0x220 [ 192.157238][T12308] ksys_unshare+0x4a2/0xa70 [ 192.157260][T12308] ? __pfx_ksys_unshare+0x10/0x10 [ 192.157291][T12308] __x64_sys_unshare+0x31/0x40 [ 192.157311][T12308] do_syscall_64+0x123/0x790 [ 192.157332][T12308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.157351][T12308] RIP: 0033:0x7fd93759e159 [ 192.157367][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.157384][T12308] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.157404][T12308] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 192.157417][T12308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 192.157428][T12308] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 192.157439][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.157450][T12308] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 192.157473][T12308] [ 192.370127][T12318] FAULT_INJECTION: forcing a failure. [ 192.370127][T12318] name failslab, interval 1, probability 0, space 0, times 0 [ 192.370154][T12318] CPU: 0 UID: 0 PID: 12318 Comm: syz.3.2009 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.370174][T12318] Tainted: [L]=SOFTLOCKUP [ 192.370180][T12318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.370188][T12318] Call Trace: [ 192.370194][T12318] [ 192.370200][T12318] dump_stack_lvl+0x100/0x190 [ 192.370226][T12318] should_fail_ex.cold+0x5/0xa [ 192.370245][T12318] should_failslab+0xc2/0x120 [ 192.370265][T12318] kmem_cache_alloc_noprof+0x92/0x6a0 [ 192.370283][T12318] ? __proc_create+0xc1/0x8f0 [ 192.370296][T12318] ? __proc_create+0x247/0x8f0 [ 192.370313][T12318] __proc_create+0x247/0x8f0 [ 192.370327][T12318] ? __pfx___proc_create+0x10/0x10 [ 192.370342][T12318] ? _raw_write_unlock+0x28/0x50 [ 192.370355][T12318] ? proc_register+0x56d/0x910 [ 192.370371][T12318] proc_create_reg+0x75/0x170 [ 192.370386][T12318] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 192.370404][T12318] proc_create_net_single+0x86/0x180 [ 192.370419][T12318] ? __pfx_proc_create_net_single+0x10/0x10 [ 192.370434][T12318] ? __pfx___netlink_kernel_create+0x10/0x10 [ 192.370472][T12318] fib_proc_init+0xa9/0x1d0 [ 192.370493][T12318] fib_net_init+0x30c/0x460 [ 192.370514][T12318] ? __pfx_fib_net_init+0x10/0x10 [ 192.370533][T12318] ? timer_init_key+0x150/0x310 [ 192.370549][T12318] ? __pfx_nl_fib_input+0x10/0x10 [ 192.370571][T12318] ? devinet_init_net+0x56c/0x8d0 [ 192.370593][T12318] ? __pfx_fib_net_init+0x10/0x10 [ 192.370611][T12318] ops_init+0x1e2/0x5f0 [ 192.370633][T12318] setup_net+0x118/0x3a0 [ 192.370652][T12318] ? __pfx_setup_net+0x10/0x10 [ 192.370675][T12318] copy_net_ns+0x345/0x7a0 [ 192.370689][T12318] create_new_namespaces+0x3ea/0xac0 [ 192.370709][T12318] unshare_nsproxy_namespaces+0xf2/0x220 [ 192.370733][T12318] ksys_unshare+0x4a2/0xa70 [ 192.370751][T12318] ? __pfx_ksys_unshare+0x10/0x10 [ 192.370775][T12318] __x64_sys_unshare+0x31/0x40 [ 192.370794][T12318] do_syscall_64+0x123/0x790 [ 192.370823][T12318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.370839][T12318] RIP: 0033:0x7fd93759e159 [ 192.370852][T12318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.370864][T12318] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.370879][T12318] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 192.370889][T12318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 192.370899][T12318] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 192.370908][T12318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.370916][T12318] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 192.370935][T12318] [ 192.428782][T12327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2010'. [ 192.540041][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'. [ 192.711500][T12331] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 192.761364][T12331] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 192.942554][T12338] FAULT_INJECTION: forcing a failure. [ 192.942554][T12338] name failslab, interval 1, probability 0, space 0, times 0 [ 192.942613][T12338] CPU: 2 UID: 0 PID: 12338 Comm: syz.3.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.942636][T12338] Tainted: [L]=SOFTLOCKUP [ 192.942641][T12338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.942649][T12338] Call Trace: [ 192.942654][T12338] [ 192.942660][T12338] dump_stack_lvl+0x100/0x190 [ 192.942681][T12338] should_fail_ex.cold+0x5/0xa [ 192.942697][T12338] should_failslab+0xc2/0x120 [ 192.942715][T12338] __kmalloc_cache_noprof+0x91/0x6d0 [ 192.942728][T12338] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 192.942743][T12338] ? blk_alloc_queue_stats+0x3f/0x110 [ 192.942758][T12338] blk_alloc_queue_stats+0x3f/0x110 [ 192.942770][T12338] blk_alloc_queue+0xda/0x790 [ 192.942784][T12338] __blk_alloc_disk+0xa0/0x170 [ 192.942795][T12338] ? __pfx___blk_alloc_disk+0x10/0x10 [ 192.942805][T12338] ? __pfx___debug_object_init+0x10/0x10 [ 192.942827][T12338] ? lockdep_init_map_type+0x5c/0x250 [ 192.942843][T12338] ? lockdep_init_map_type+0x5c/0x250 [ 192.942858][T12338] dm_create+0x5e8/0x1530 [ 192.942877][T12338] dev_create+0x121/0x2a0 [ 192.942889][T12338] ? __pfx_dev_create+0x10/0x10 [ 192.942904][T12338] ctl_ioctl+0x4d2/0xcc0 [ 192.942915][T12338] ? __pfx_dev_create+0x10/0x10 [ 192.942928][T12338] ? __pfx_ctl_ioctl+0x10/0x10 [ 192.942953][T12338] ? selinux_file_ioctl+0x13b/0x290 [ 192.942967][T12338] ? selinux_file_ioctl+0xb6/0x290 [ 192.942982][T12338] dm_ctl_ioctl+0x22/0x30 [ 192.942993][T12338] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 192.943006][T12338] __x64_sys_ioctl+0x18e/0x210 [ 192.943021][T12338] do_syscall_64+0x123/0x790 [ 192.943035][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.943047][T12338] RIP: 0033:0x7fd93759e159 [ 192.943056][T12338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.943067][T12338] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.943079][T12338] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 192.943086][T12338] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 192.943093][T12338] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 192.943100][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.943107][T12338] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 192.943123][T12338] [ 192.944343][T12340] overlay: ./file1 is not a directory [ 192.948258][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 192.948268][ T43] audit: type=1400 audit(1825065624.111:10361): avc: denied { write } for pid=12335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.083541][T12349] FAULT_INJECTION: forcing a failure. [ 193.083541][T12349] name failslab, interval 1, probability 0, space 0, times 0 [ 193.083564][T12349] CPU: 2 UID: 0 PID: 12349 Comm: syz.3.2017 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.083582][T12349] Tainted: [L]=SOFTLOCKUP [ 193.083586][T12349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.083594][T12349] Call Trace: [ 193.083599][T12349] [ 193.083603][T12349] dump_stack_lvl+0x100/0x190 [ 193.083625][T12349] should_fail_ex.cold+0x5/0xa [ 193.083649][T12349] should_failslab+0xc2/0x120 [ 193.083666][T12349] __kmalloc_noprof+0xfc/0x840 [ 193.083681][T12349] ? xfrm_hash_alloc+0xcf/0x100 [ 193.083696][T12349] ? __pfx_xfrm_net_init+0x10/0x10 [ 193.083707][T12349] xfrm_hash_alloc+0xcf/0x100 [ 193.083717][T12349] xfrm_state_init+0xd7/0x570 [ 193.083737][T12349] ? __pfx_xfrm_net_init+0x10/0x10 [ 193.083747][T12349] xfrm_net_init+0x20e/0xcf0 [ 193.083761][T12349] ? __pfx_xfrm_net_init+0x10/0x10 [ 193.083772][T12349] ops_init+0x1e2/0x5f0 [ 193.083792][T12349] setup_net+0x118/0x3a0 [ 193.083809][T12349] ? __pfx_setup_net+0x10/0x10 [ 193.083830][T12349] copy_net_ns+0x345/0x7a0 [ 193.083841][T12349] create_new_namespaces+0x3ea/0xac0 [ 193.083859][T12349] unshare_nsproxy_namespaces+0xf2/0x220 [ 193.083873][T12349] ksys_unshare+0x4a2/0xa70 [ 193.083888][T12349] ? __pfx_ksys_unshare+0x10/0x10 [ 193.083909][T12349] __x64_sys_unshare+0x31/0x40 [ 193.083923][T12349] do_syscall_64+0x123/0x790 [ 193.083937][T12349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.083949][T12349] RIP: 0033:0x7fd93759e159 [ 193.083958][T12349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.083969][T12349] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 193.083981][T12349] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 193.083989][T12349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 193.083995][T12349] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 193.084002][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.084009][T12349] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 193.084024][T12349] [ 193.104698][ T43] audit: type=1400 audit(1825065624.261:10362): avc: denied { write } for pid=12346 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.196676][T12351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.213746][T12356] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2020'. [ 193.322606][T12358] FAULT_INJECTION: forcing a failure. [ 193.322606][T12358] name failslab, interval 1, probability 0, space 0, times 0 [ 193.322631][T12358] CPU: 2 UID: 0 PID: 12358 Comm: syz.0.2019 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.322648][T12358] Tainted: [L]=SOFTLOCKUP [ 193.322653][T12358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.322660][T12358] Call Trace: [ 193.322664][T12358] [ 193.322669][T12358] dump_stack_lvl+0x100/0x190 [ 193.322691][T12358] should_fail_ex.cold+0x5/0xa [ 193.322707][T12358] should_failslab+0xc2/0x120 [ 193.322725][T12358] __kmalloc_noprof+0xfc/0x840 [ 193.322741][T12358] ? __register_sysctl_table+0xac/0x1650 [ 193.322756][T12358] __register_sysctl_table+0xac/0x1650 [ 193.322769][T12358] ? lock_acquire+0x1d1/0x380 [ 193.322785][T12358] ? __pfx___register_sysctl_table+0x10/0x10 [ 193.322797][T12358] ? is_module_address+0x5f/0xf0 [ 193.322829][T12358] ? is_module_address+0x5f/0xf0 [ 193.322847][T12358] register_net_sysctl_sz+0x325/0x420 [ 193.322864][T12358] ? __asan_memcpy+0x3c/0x60 [ 193.322879][T12358] xfrm_sysctl_init+0x1f5/0x2d0 [ 193.322895][T12358] xfrm_net_init+0x856/0xcf0 [ 193.322910][T12358] ? __pfx_xfrm_net_init+0x10/0x10 [ 193.322921][T12358] ops_init+0x1e2/0x5f0 [ 193.322939][T12358] setup_net+0x118/0x3a0 [ 193.322956][T12358] ? __pfx_setup_net+0x10/0x10 [ 193.322976][T12358] copy_net_ns+0x345/0x7a0 [ 193.322988][T12358] create_new_namespaces+0x3ea/0xac0 [ 193.323005][T12358] unshare_nsproxy_namespaces+0xf2/0x220 [ 193.323020][T12358] ksys_unshare+0x4a2/0xa70 [ 193.323034][T12358] ? __pfx_ksys_unshare+0x10/0x10 [ 193.323054][T12358] __x64_sys_unshare+0x31/0x40 [ 193.323070][T12358] do_syscall_64+0x123/0x790 [ 193.323083][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.323096][T12358] RIP: 0033:0x7fa52b79e159 [ 193.323107][T12358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.323117][T12358] RSP: 002b:00007fa52c709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 193.323130][T12358] RAX: ffffffffffffffda RBX: 00007fa52ba25fa0 RCX: 00007fa52b79e159 [ 193.323137][T12358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 193.323144][T12358] RBP: 00007fa52b83506b R08: 0000000000000000 R09: 0000000000000000 [ 193.323151][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.323158][T12358] R13: 00007fa52ba26038 R14: 00007fa52ba25fa0 R15: 00007ffc177663c8 [ 193.323173][T12358] [ 193.346581][T12363] Bluetooth: ISO socket layer initialized [ 193.448148][T12366] netlink: 'syz.0.2023': attribute type 27 has an invalid length. [ 193.460351][ T5090] Bluetooth: hci2: Unable to find connection for dst 66:55:44:33:22:11 sid 0x01 [ 193.463993][T12366] bond0: (slave bond_slave_1): Releasing backup interface [ 193.505839][T12369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2024'. [ 193.505855][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2024'. [ 193.514141][T12369] FAULT_INJECTION: forcing a failure. [ 193.514141][T12369] name failslab, interval 1, probability 0, space 0, times 0 [ 193.514164][T12369] CPU: 3 UID: 0 PID: 12369 Comm: syz.3.2024 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.514180][T12369] Tainted: [L]=SOFTLOCKUP [ 193.514184][T12369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.514191][T12369] Call Trace: [ 193.514196][T12369] [ 193.514200][T12369] dump_stack_lvl+0x100/0x190 [ 193.514222][T12369] should_fail_ex.cold+0x5/0xa [ 193.514240][T12369] should_failslab+0xc2/0x120 [ 193.514258][T12369] __kmalloc_cache_noprof+0x91/0x6d0 [ 193.514272][T12369] ? create_filter_start.constprop.0+0x1c4/0x310 [ 193.514290][T12369] create_filter_start.constprop.0+0x1c4/0x310 [ 193.514306][T12369] apply_subsystem_event_filter+0x188/0x17a0 [ 193.514321][T12369] ? __might_fault+0xc5/0x140 [ 193.514333][T12369] ? __might_fault+0xc5/0x140 [ 193.514344][T12369] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 193.514362][T12369] ? _copy_from_user+0x59/0xd0 [ 193.514378][T12369] subsystem_filter_write+0x95/0x120 [ 193.514393][T12369] vfs_write+0x2aa/0x1050 [ 193.514406][T12369] ? __pfx_subsystem_filter_write+0x10/0x10 [ 193.514420][T12369] ? lock_acquire+0x1d1/0x380 [ 193.514433][T12369] ? __fget_files+0x34/0x3d0 [ 193.514447][T12369] ? __pfx_vfs_write+0x10/0x10 [ 193.514459][T12369] ? find_held_lock+0x2b/0x80 [ 193.514476][T12369] ? __fget_files+0x215/0x3d0 [ 193.514493][T12369] ? __fget_files+0x21f/0x3d0 [ 193.514512][T12369] ksys_write+0x12a/0x250 [ 193.514524][T12369] ? __pfx_ksys_write+0x10/0x10 [ 193.514541][T12369] do_syscall_64+0x123/0x790 [ 193.514554][T12369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.514566][T12369] RIP: 0033:0x7fd93759e159 [ 193.514576][T12369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.514587][T12369] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.514598][T12369] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 193.514606][T12369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 193.514612][T12369] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 193.514619][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.514625][T12369] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 193.514648][T12369] [ 193.604561][ T43] audit: type=1400 audit(1825065624.762:10363): avc: denied { write } for pid=12362 comm="syz.5.2022" name="/" dev="9p" ino=72095551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.604688][ T43] audit: type=1400 audit(1825065624.762:10364): avc: denied { link } for pid=12362 comm="syz.5.2022" name="file1" dev="9p" ino=72095593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.620387][T12377] FAULT_INJECTION: forcing a failure. [ 193.620387][T12377] name failslab, interval 1, probability 0, space 0, times 0 [ 193.620422][T12377] CPU: 2 UID: 0 PID: 12377 Comm: syz.3.2027 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.620475][T12377] Tainted: [L]=SOFTLOCKUP [ 193.620483][T12377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.620497][T12377] Call Trace: [ 193.620505][T12377] [ 193.620514][T12377] dump_stack_lvl+0x100/0x190 [ 193.620551][T12377] should_fail_ex.cold+0x5/0xa [ 193.620581][T12377] should_failslab+0xc2/0x120 [ 193.620611][T12377] __kmalloc_cache_noprof+0x91/0x6d0 [ 193.620631][T12377] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 193.620655][T12377] ? blk_alloc_queue_stats+0x3f/0x110 [ 193.620683][T12377] blk_alloc_queue_stats+0x3f/0x110 [ 193.620705][T12377] blk_alloc_queue+0xda/0x790 [ 193.620731][T12377] __blk_alloc_disk+0xa0/0x170 [ 193.620751][T12377] ? __pfx___blk_alloc_disk+0x10/0x10 [ 193.620768][T12377] ? __pfx___debug_object_init+0x10/0x10 [ 193.620810][T12377] ? lockdep_init_map_type+0x5c/0x250 [ 193.620837][T12377] ? lockdep_init_map_type+0x5c/0x250 [ 193.620865][T12377] dm_create+0x5e8/0x1530 [ 193.620900][T12377] dev_create+0x121/0x2a0 [ 193.620925][T12377] ? __pfx_dev_create+0x10/0x10 [ 193.620957][T12377] ctl_ioctl+0x4d2/0xcc0 [ 193.621034][T12377] ? __pfx_dev_create+0x10/0x10 [ 193.621058][T12377] ? __pfx_ctl_ioctl+0x10/0x10 [ 193.621109][T12377] ? selinux_file_ioctl+0x13b/0x290 [ 193.621136][T12377] ? selinux_file_ioctl+0xb6/0x290 [ 193.621165][T12377] dm_ctl_ioctl+0x22/0x30 [ 193.621186][T12377] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 193.621207][T12377] __x64_sys_ioctl+0x18e/0x210 [ 193.621234][T12377] do_syscall_64+0x123/0x790 [ 193.621273][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.621296][T12377] RIP: 0033:0x7fd93759e159 [ 193.621313][T12377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.621332][T12377] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.621351][T12377] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 193.621364][T12377] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 193.621378][T12377] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 193.621391][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.621403][T12377] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 193.621431][T12377] [ 193.712076][ T43] audit: type=1400 audit(1825065624.872:10365): avc: denied { write } for pid=12362 comm="syz.5.2022" name="/" dev="9p" ino=72095551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.714167][T12364] netfs: Duplicate cookie detected [ 193.714181][T12364] netfs: O-cookie c=00000003 [fl=4008 na=0 nA=0 s=-] [ 193.714196][T12364] netfs: O-cookie V=00000005 [9p,syz,] [ 193.714208][T12364] netfs: O-key=[8] '67174c0400000000' [ 193.714222][T12364] netfs: N-cookie c=00000004 [fl=8 na=0 nA=0 s=-] [ 193.714236][T12364] netfs: N-cookie V=00000005 [9p,syz,] [ 193.714246][T12364] netfs: N-key=[8] '67174c0400000000' [ 193.773309][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.773363][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.057811][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'. [ 194.440885][ T43] audit: type=1400 audit(1825065625.603:10366): avc: denied { write } for pid=12406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.510686][ T43] audit: type=1400 audit(1825065625.663:10367): avc: denied { write } for pid=12413 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.725050][ T43] audit: type=1400 audit(1825065625.884:10368): avc: denied { write } for pid=12426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.749068][T12432] FAULT_INJECTION: forcing a failure. [ 194.749068][T12432] name failslab, interval 1, probability 0, space 0, times 0 [ 194.749098][T12432] CPU: 1 UID: 0 PID: 12432 Comm: syz.3.2040 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.749117][T12432] Tainted: [L]=SOFTLOCKUP [ 194.749122][T12432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.749130][T12432] Call Trace: [ 194.749135][T12432] [ 194.749141][T12432] dump_stack_lvl+0x100/0x190 [ 194.749165][T12432] should_fail_ex.cold+0x5/0xa [ 194.749181][T12432] should_failslab+0xc2/0x120 [ 194.749200][T12432] __kmalloc_noprof+0xfc/0x840 [ 194.749215][T12432] ? xfrm_hash_alloc+0xcf/0x100 [ 194.749243][T12432] ? __pfx_xfrm_net_init+0x10/0x10 [ 194.749255][T12432] xfrm_hash_alloc+0xcf/0x100 [ 194.749266][T12432] xfrm_net_init+0x242/0xcf0 [ 194.749280][T12432] ? __pfx_xfrm_net_init+0x10/0x10 [ 194.749291][T12432] ops_init+0x1e2/0x5f0 [ 194.749312][T12432] setup_net+0x118/0x3a0 [ 194.749330][T12432] ? __pfx_setup_net+0x10/0x10 [ 194.749352][T12432] copy_net_ns+0x345/0x7a0 [ 194.749366][T12432] create_new_namespaces+0x3ea/0xac0 [ 194.749384][T12432] unshare_nsproxy_namespaces+0xf2/0x220 [ 194.749399][T12432] ksys_unshare+0x4a2/0xa70 [ 194.749414][T12432] ? __pfx_ksys_unshare+0x10/0x10 [ 194.749433][T12432] __x64_sys_unshare+0x31/0x40 [ 194.749448][T12432] do_syscall_64+0x123/0x790 [ 194.749461][T12432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.749473][T12432] RIP: 0033:0x7fd93759e159 [ 194.749484][T12432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.749495][T12432] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 194.749506][T12432] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 194.749514][T12432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 194.749520][T12432] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 194.749527][T12432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.749534][T12432] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 194.749549][T12432] [ 194.828922][ T43] audit: type=1400 audit(1825065625.994:10369): avc: denied { write } for pid=12437 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.917172][ T5738] bond0: (slave syz_tun): Releasing backup interface [ 194.999176][ T43] audit: type=1400 audit(1825065626.164:10370): avc: denied { write } for pid=12442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.169289][T12455] FAULT_INJECTION: forcing a failure. [ 195.169289][T12455] name failslab, interval 1, probability 0, space 0, times 0 [ 195.169313][T12455] CPU: 0 UID: 0 PID: 12455 Comm: syz.3.2046 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.169330][T12455] Tainted: [L]=SOFTLOCKUP [ 195.169334][T12455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.169342][T12455] Call Trace: [ 195.169347][T12455] [ 195.169352][T12455] dump_stack_lvl+0x100/0x190 [ 195.169374][T12455] should_fail_ex.cold+0x5/0xa [ 195.169389][T12455] should_failslab+0xc2/0x120 [ 195.169407][T12455] __kmalloc_cache_noprof+0x91/0x6d0 [ 195.169420][T12455] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 195.169434][T12455] ? blk_alloc_queue_stats+0x3f/0x110 [ 195.169450][T12455] blk_alloc_queue_stats+0x3f/0x110 [ 195.169462][T12455] blk_alloc_queue+0xda/0x790 [ 195.169478][T12455] __blk_alloc_disk+0xa0/0x170 [ 195.169496][T12455] ? __pfx___blk_alloc_disk+0x10/0x10 [ 195.169506][T12455] ? __pfx___debug_object_init+0x10/0x10 [ 195.169530][T12455] ? lockdep_init_map_type+0x5c/0x250 [ 195.169547][T12455] ? lockdep_init_map_type+0x5c/0x250 [ 195.169564][T12455] dm_create+0x5e8/0x1530 [ 195.169583][T12455] dev_create+0x121/0x2a0 [ 195.169595][T12455] ? __pfx_dev_create+0x10/0x10 [ 195.169611][T12455] ctl_ioctl+0x4d2/0xcc0 [ 195.169622][T12455] ? __pfx_dev_create+0x10/0x10 [ 195.169634][T12455] ? __pfx_ctl_ioctl+0x10/0x10 [ 195.169659][T12455] ? selinux_file_ioctl+0x13b/0x290 [ 195.169673][T12455] ? selinux_file_ioctl+0xb6/0x290 [ 195.169690][T12455] dm_ctl_ioctl+0x22/0x30 [ 195.169701][T12455] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 195.169714][T12455] __x64_sys_ioctl+0x18e/0x210 [ 195.169730][T12455] do_syscall_64+0x123/0x790 [ 195.169744][T12455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.169756][T12455] RIP: 0033:0x7fd93759e159 [ 195.169766][T12455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.169776][T12455] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.169789][T12455] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 195.169797][T12455] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 195.169804][T12455] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 195.169811][T12455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.169818][T12455] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 195.169832][T12455] [ 195.251077][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.257701][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.259246][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.266439][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.267248][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.307721][T12412] ceph: No mds server is up or the cluster is laggy [ 195.407614][T12474] overlay: filesystem on ./bus not supported [ 195.794809][T12503] FAULT_INJECTION: forcing a failure. [ 195.794809][T12503] name failslab, interval 1, probability 0, space 0, times 0 [ 195.794847][T12503] CPU: 0 UID: 0 PID: 12503 Comm: syz.3.2056 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.794878][T12503] Tainted: [L]=SOFTLOCKUP [ 195.794886][T12503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.794900][T12503] Call Trace: [ 195.794908][T12503] [ 195.794918][T12503] dump_stack_lvl+0x100/0x190 [ 195.794953][T12503] should_fail_ex.cold+0x5/0xa [ 195.794984][T12503] should_failslab+0xc2/0x120 [ 195.795014][T12503] __kmalloc_cache_noprof+0x91/0x6d0 [ 195.795037][T12503] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 195.795062][T12503] ? blk_alloc_queue_stats+0x3f/0x110 [ 195.795088][T12503] blk_alloc_queue_stats+0x3f/0x110 [ 195.795112][T12503] blk_alloc_queue+0xda/0x790 [ 195.795140][T12503] __blk_alloc_disk+0xa0/0x170 [ 195.795158][T12503] ? __pfx___blk_alloc_disk+0x10/0x10 [ 195.795178][T12503] ? __pfx___debug_object_init+0x10/0x10 [ 195.795227][T12503] ? lockdep_init_map_type+0x5c/0x250 [ 195.795254][T12503] ? lockdep_init_map_type+0x5c/0x250 [ 195.795283][T12503] dm_create+0x5e8/0x1530 [ 195.795322][T12503] dev_create+0x121/0x2a0 [ 195.795346][T12503] ? __pfx_dev_create+0x10/0x10 [ 195.795378][T12503] ctl_ioctl+0x4d2/0xcc0 [ 195.795401][T12503] ? __pfx_dev_create+0x10/0x10 [ 195.795425][T12503] ? __pfx_ctl_ioctl+0x10/0x10 [ 195.795474][T12503] ? selinux_file_ioctl+0x13b/0x290 [ 195.795520][T12503] ? selinux_file_ioctl+0xb6/0x290 [ 195.795556][T12503] dm_ctl_ioctl+0x22/0x30 [ 195.795577][T12503] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 195.795600][T12503] __x64_sys_ioctl+0x18e/0x210 [ 195.795629][T12503] do_syscall_64+0x123/0x790 [ 195.795656][T12503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.795682][T12503] RIP: 0033:0x7fd93759e159 [ 195.795703][T12503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.795722][T12503] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.795747][T12503] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 195.795761][T12503] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 195.795777][T12503] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 195.795788][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.795800][T12503] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 195.795829][T12503] [ 195.869499][T12513] pimreg9: entered allmulticast mode [ 196.015905][T12459] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.016003][T12459] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.016069][T12459] bridge_slave_0: entered allmulticast mode [ 196.016920][T12459] bridge_slave_0: entered promiscuous mode [ 196.027049][T12459] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.027186][T12459] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.027252][T12459] bridge_slave_1: entered allmulticast mode [ 196.028045][T12459] bridge_slave_1: entered promiscuous mode [ 196.053990][T12459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.055359][T12459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.077074][T12459] team0: Port device team_slave_0 added [ 196.078555][T12459] team0: Port device team_slave_1 added [ 196.106514][T12459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.106530][T12459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.106552][T12459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.108112][T12459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.108127][T12459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.108149][T12459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.150115][T12459] hsr_slave_0: entered promiscuous mode [ 196.150620][T12459] hsr_slave_1: entered promiscuous mode [ 196.150949][T12459] debugfs: 'hsr0' already exists in 'hsr' [ 196.150963][T12459] Cannot create hsr debugfs directory [ 196.327600][T12541] ip_tables: iptables: counters copy to user failed while replacing table [ 196.348231][T12459] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 196.351603][T12459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.356373][T12459] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.359120][T12459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.374257][T12459] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.377695][T12459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.378399][T12459] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.384584][T12459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.414566][T12552] FAULT_INJECTION: forcing a failure. [ 196.414566][T12552] name failslab, interval 1, probability 0, space 0, times 0 [ 196.414592][T12552] CPU: 3 UID: 0 PID: 12552 Comm: syz.3.2064 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.414612][T12552] Tainted: [L]=SOFTLOCKUP [ 196.414618][T12552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.414626][T12552] Call Trace: [ 196.414631][T12552] [ 196.414637][T12552] dump_stack_lvl+0x100/0x190 [ 196.414674][T12552] should_fail_ex.cold+0x5/0xa [ 196.414694][T12552] should_failslab+0xc2/0x120 [ 196.414718][T12552] __kmalloc_cache_noprof+0x91/0x6d0 [ 196.414731][T12552] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 196.414746][T12552] ? blk_alloc_queue_stats+0x3f/0x110 [ 196.414765][T12552] blk_alloc_queue_stats+0x3f/0x110 [ 196.414779][T12552] blk_alloc_queue+0xda/0x790 [ 196.414796][T12552] __blk_alloc_disk+0xa0/0x170 [ 196.414808][T12552] ? __pfx___blk_alloc_disk+0x10/0x10 [ 196.414820][T12552] ? __pfx___debug_object_init+0x10/0x10 [ 196.414845][T12552] ? lockdep_init_map_type+0x5c/0x250 [ 196.414861][T12552] ? lockdep_init_map_type+0x5c/0x250 [ 196.414879][T12552] dm_create+0x5e8/0x1530 [ 196.414927][T12552] dev_create+0x121/0x2a0 [ 196.414942][T12552] ? __pfx_dev_create+0x10/0x10 [ 196.414961][T12552] ctl_ioctl+0x4d2/0xcc0 [ 196.414975][T12552] ? __pfx_dev_create+0x10/0x10 [ 196.414989][T12552] ? __pfx_ctl_ioctl+0x10/0x10 [ 196.415021][T12552] ? selinux_file_ioctl+0x13b/0x290 [ 196.415038][T12552] ? selinux_file_ioctl+0xb6/0x290 [ 196.415057][T12552] dm_ctl_ioctl+0x22/0x30 [ 196.415069][T12552] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 196.415083][T12552] __x64_sys_ioctl+0x18e/0x210 [ 196.415099][T12552] do_syscall_64+0x123/0x790 [ 196.415126][T12552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.415141][T12552] RIP: 0033:0x7fd93759e159 [ 196.415153][T12552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.415166][T12552] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.415181][T12552] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 196.415191][T12552] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 196.415200][T12552] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 196.415208][T12552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.415217][T12552] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 196.415235][T12552] [ 196.456249][T12459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.484397][T12459] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.494039][T12558] FAULT_INJECTION: forcing a failure. [ 196.494039][T12558] name failslab, interval 1, probability 0, space 0, times 0 [ 196.494079][T12558] CPU: 3 UID: 0 PID: 12558 Comm: syz.5.2067 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.494113][T12558] Tainted: [L]=SOFTLOCKUP [ 196.494122][T12558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.494137][T12558] Call Trace: [ 196.494147][T12558] [ 196.494158][T12558] dump_stack_lvl+0x100/0x190 [ 196.494198][T12558] should_fail_ex.cold+0x5/0xa [ 196.494230][T12558] should_failslab+0xc2/0x120 [ 196.494287][T12558] __kmalloc_noprof+0xfc/0x840 [ 196.494316][T12558] ? __register_sysctl_table+0xbc8/0x1650 [ 196.494343][T12558] ? __register_sysctl_table+0xbe4/0x1650 [ 196.494376][T12558] __register_sysctl_table+0xbe4/0x1650 [ 196.494407][T12558] ? __pfx___register_sysctl_table+0x10/0x10 [ 196.494429][T12558] ? is_module_address+0x5f/0xf0 [ 196.494459][T12558] ? is_module_address+0x5f/0xf0 [ 196.494495][T12558] register_net_sysctl_sz+0x325/0x420 [ 196.494526][T12558] ? __asan_memcpy+0x3c/0x60 [ 196.494554][T12558] nf_log_net_init+0x109/0x450 [ 196.494587][T12558] ? __pfx_nf_log_net_init+0x10/0x10 [ 196.494617][T12558] ops_init+0x1e2/0x5f0 [ 196.494654][T12558] setup_net+0x118/0x3a0 [ 196.494680][T12558] ? __pfx_setup_net+0x10/0x10 [ 196.494720][T12558] copy_net_ns+0x345/0x7a0 [ 196.494741][T12558] create_new_namespaces+0x3ea/0xac0 [ 196.494769][T12558] unshare_nsproxy_namespaces+0xf2/0x220 [ 196.494796][T12558] ksys_unshare+0x4a2/0xa70 [ 196.494817][T12558] ? __pfx_ksys_unshare+0x10/0x10 [ 196.494846][T12558] __x64_sys_unshare+0x31/0x40 [ 196.494866][T12558] do_syscall_64+0x123/0x790 [ 196.494884][T12558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.494900][T12558] RIP: 0033:0x7f952899e159 [ 196.494914][T12558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.494928][T12558] RSP: 002b:00007f952985e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 196.494944][T12558] RAX: ffffffffffffffda RBX: 00007f9528c25fa0 RCX: 00007f952899e159 [ 196.494955][T12558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 196.494964][T12558] RBP: 00007f9528a3506b R08: 0000000000000000 R09: 0000000000000000 [ 196.494973][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.494983][T12558] R13: 00007f9528c26038 R14: 00007f9528c25fa0 R15: 00007ffec8306f88 [ 196.495005][T12558] [ 196.495075][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.495100][T12558] sysctl could not get directory: /net/netfilter/nf_log -12 [ 196.495129][ T8379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.505659][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.505713][ T8379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.531136][T12559] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 196.622559][T12559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.633362][T12559] bond1: (slave bond2): making interface the new active one [ 196.636383][T12559] bond1: (slave bond2): Enslaving as an active interface with an up link [ 196.648032][T12566] __nla_validate_parse: 2 callbacks suppressed [ 196.648049][T12566] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2069'. [ 196.648247][T12566] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2069'. [ 196.679666][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'. [ 196.679690][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'. [ 196.750297][T12575] netlink: 'syz.5.2070': attribute type 1 has an invalid length. [ 196.828458][T12459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.930651][T12589] pim6reg1: entered promiscuous mode [ 196.930771][T12589] pim6reg1: entered allmulticast mode [ 196.968480][T12459] veth0_vlan: entered promiscuous mode [ 196.974354][T12459] veth1_vlan: entered promiscuous mode [ 196.988915][T12459] veth0_macvtap: entered promiscuous mode [ 196.991825][T12459] veth1_macvtap: entered promiscuous mode [ 196.999134][T12459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.005815][T12459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.008660][ T5090] Bluetooth: hci2: connection err: -111 [ 197.042652][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.042856][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.043245][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.043519][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.168447][ T7145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.168463][ T7145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.190171][ T7145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.190192][ T7145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.247256][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2052'. [ 197.360916][ T5090] Bluetooth: hci0: command tx timeout [ 197.369405][T12596] netlink: 'syz.6.2074': attribute type 21 has an invalid length. [ 197.373304][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2074'. [ 197.384370][T12603] team1: entered promiscuous mode [ 197.384411][T12603] team1: entered allmulticast mode [ 197.384685][T12603] 8021q: adding VLAN 0 to HW filter on device team1 [ 197.515278][T12614] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 197.515296][T12614] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 197.682284][T12617] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2079'. [ 197.791607][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2081'. [ 198.022990][T12632] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2049 sclass=netlink_audit_socket pid=12632 comm=syz.5.2085 [ 198.023314][T12632] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12632 comm=syz.5.2085 [ 198.365582][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2091'. [ 198.523317][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 198.537574][T12663] vlan2: entered promiscuous mode [ 198.537595][T12663] batadv0: entered promiscuous mode [ 198.537811][T12663] vlan2: entered allmulticast mode [ 198.537824][T12663] batadv0: entered allmulticast mode [ 198.568734][T12665] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 198.577936][T12668] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 198.954048][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x6113 instead [ 198.954072][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 198.954087][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 198.954834][T12672] jffs2: notice: (12672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 198.977092][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 198.977106][ T43] audit: type=1400 audit(1825065630.149:10385): avc: denied { associate } for pid=12674 comm="syz.5.2094" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 199.036721][T12681] netlink: 'syz.5.2095': attribute type 1 has an invalid length. [ 199.050639][T12681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.062597][T12681] bond1: (slave geneve2): making interface the new active one [ 199.063607][T12681] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 199.066570][T12681] CIFS: Attempting to mount //127.0.0.1/share [ 199.099622][T12684] FAULT_INJECTION: forcing a failure. [ 199.099622][T12684] name failslab, interval 1, probability 0, space 0, times 0 [ 199.099646][T12684] CPU: 3 UID: 0 PID: 12684 Comm: syz.7.2096 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.099662][T12684] Tainted: [L]=SOFTLOCKUP [ 199.099667][T12684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.099675][T12684] Call Trace: [ 199.099680][T12684] [ 199.099685][T12684] dump_stack_lvl+0x100/0x190 [ 199.099707][T12684] should_fail_ex.cold+0x5/0xa [ 199.099723][T12684] should_failslab+0xc2/0x120 [ 199.099740][T12684] __kmalloc_cache_noprof+0x91/0x6d0 [ 199.099753][T12684] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 199.099769][T12684] ? blk_alloc_queue_stats+0x3f/0x110 [ 199.099784][T12684] blk_alloc_queue_stats+0x3f/0x110 [ 199.099796][T12684] blk_alloc_queue+0xda/0x790 [ 199.099810][T12684] __blk_alloc_disk+0xa0/0x170 [ 199.099821][T12684] ? __pfx___blk_alloc_disk+0x10/0x10 [ 199.099831][T12684] ? __pfx___debug_object_init+0x10/0x10 [ 199.099853][T12684] ? lockdep_init_map_type+0x5c/0x250 [ 199.099868][T12684] ? lockdep_init_map_type+0x5c/0x250 [ 199.099883][T12684] dm_create+0x5e8/0x1530 [ 199.099903][T12684] dev_create+0x121/0x2a0 [ 199.099915][T12684] ? __pfx_dev_create+0x10/0x10 [ 199.099930][T12684] ctl_ioctl+0x4d2/0xcc0 [ 199.099942][T12684] ? __pfx_dev_create+0x10/0x10 [ 199.099953][T12684] ? __pfx_ctl_ioctl+0x10/0x10 [ 199.099978][T12684] ? selinux_file_ioctl+0x13b/0x290 [ 199.099992][T12684] ? selinux_file_ioctl+0xb6/0x290 [ 199.100007][T12684] dm_ctl_ioctl+0x22/0x30 [ 199.100018][T12684] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 199.100031][T12684] __x64_sys_ioctl+0x18e/0x210 [ 199.100054][T12684] do_syscall_64+0x123/0x790 [ 199.100069][T12684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.100081][T12684] RIP: 0033:0x7fd82ab9e159 [ 199.100092][T12684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.100103][T12684] RSP: 002b:00007fd82bb32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.100115][T12684] RAX: ffffffffffffffda RBX: 00007fd82ae25fa0 RCX: 00007fd82ab9e159 [ 199.100123][T12684] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 199.100130][T12684] RBP: 00007fd82ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 199.100138][T12684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.100146][T12684] R13: 00007fd82ae26038 R14: 00007fd82ae25fa0 R15: 00007fff069e40a8 [ 199.100162][T12684] [ 199.336299][ T5090] Bluetooth: hci0: Unable to find connection for dst 66:55:44:33:22:11 sid 0x01 [ 199.343883][ T5090] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 199.428171][ T5090] Bluetooth: hci0: command tx timeout [ 199.438718][T12689] netlink: 'syz.7.2097': attribute type 2 has an invalid length. [ 199.699078][T12704] bond1 (unregistering): Released all slaves [ 199.873804][T12681] CIFS: VFS: Error connecting to socket. Aborting operation. [ 199.873830][T12681] CIFS: VFS: cifs_mount failed w/return code = -4 [ 199.885961][T12709] FAULT_INJECTION: forcing a failure. [ 199.885961][T12709] name failslab, interval 1, probability 0, space 0, times 0 [ 199.885995][T12709] CPU: 3 UID: 0 PID: 12709 Comm: syz.3.2105 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.886022][T12709] Tainted: [L]=SOFTLOCKUP [ 199.886030][T12709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.886043][T12709] Call Trace: [ 199.886050][T12709] [ 199.886059][T12709] dump_stack_lvl+0x100/0x190 [ 199.886091][T12709] should_fail_ex.cold+0x5/0xa [ 199.886118][T12709] should_failslab+0xc2/0x120 [ 199.886147][T12709] __kmalloc_cache_noprof+0x91/0x6d0 [ 199.886166][T12709] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 199.886194][T12709] ? blk_alloc_queue_stats+0x3f/0x110 [ 199.886222][T12709] blk_alloc_queue_stats+0x3f/0x110 [ 199.886247][T12709] blk_alloc_queue+0xda/0x790 [ 199.886274][T12709] __blk_alloc_disk+0xa0/0x170 [ 199.886292][T12709] ? __pfx___blk_alloc_disk+0x10/0x10 [ 199.886309][T12709] ? __pfx___debug_object_init+0x10/0x10 [ 199.886347][T12709] ? lockdep_init_map_type+0x5c/0x250 [ 199.886376][T12709] ? lockdep_init_map_type+0x5c/0x250 [ 199.886401][T12709] dm_create+0x5e8/0x1530 [ 199.886434][T12709] dev_create+0x121/0x2a0 [ 199.886453][T12709] ? __pfx_dev_create+0x10/0x10 [ 199.886477][T12709] ctl_ioctl+0x4d2/0xcc0 [ 199.886495][T12709] ? __pfx_dev_create+0x10/0x10 [ 199.886515][T12709] ? __pfx_ctl_ioctl+0x10/0x10 [ 199.886561][T12709] ? selinux_file_ioctl+0x13b/0x290 [ 199.886581][T12709] ? selinux_file_ioctl+0xb6/0x290 [ 199.886606][T12709] dm_ctl_ioctl+0x22/0x30 [ 199.886623][T12709] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 199.886642][T12709] __x64_sys_ioctl+0x18e/0x210 [ 199.886666][T12709] do_syscall_64+0x123/0x790 [ 199.886695][T12709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.886717][T12709] RIP: 0033:0x7fd93759e159 [ 199.886735][T12709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.886756][T12709] RSP: 002b:00007fd938542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.886776][T12709] RAX: ffffffffffffffda RBX: 00007fd937825fa0 RCX: 00007fd93759e159 [ 199.886790][T12709] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 199.886803][T12709] RBP: 00007fd93763506b R08: 0000000000000000 R09: 0000000000000000 [ 199.886816][T12709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.886828][T12709] R13: 00007fd937826038 R14: 00007fd937825fa0 R15: 00007ffd59d576f8 [ 199.886856][T12709] [ 200.081291][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.085484][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.086513][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.091515][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.092040][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.125714][T12722] ip6t_hbh: unknown flags 83 [ 200.164932][ T43] audit: type=1400 audit(1825065631.331:10386): avc: denied { mounton } for pid=12724 comm="syz.6.2111" path="/59/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 200.166306][ T43] audit: type=1400 audit(1825065631.331:10387): avc: denied { remount } for pid=12724 comm="syz.6.2111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 200.219488][T11024] bond0: (slave syz_tun): Releasing backup interface [ 200.220563][T12725] netlink: 'syz.6.2111': attribute type 1 has an invalid length. [ 200.221796][ T63] smc: removing ib device syz1 [ 200.256796][T12725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.274866][T12725] bond1: (slave geneve2): making interface the new active one [ 200.280473][T12725] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 200.280848][ T63] smbdirect: ib_dev[syz1] removed [ 200.910814][T12752] ip_tables: iptables: counters copy to user failed while replacing table [ 201.180874][ T43] audit: type=1400 audit(1825065632.352:10388): avc: denied { write } for pid=12767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.190223][T12770] tmpfs: Unknown parameter 'dont_measure' [ 201.238228][ T43] audit: type=1400 audit(1825065632.412:10389): avc: denied { write } for pid=12774 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.241936][ T5832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.241959][ T5832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.294631][T12718] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.294720][T12718] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.294779][T12718] bridge_slave_0: entered allmulticast mode [ 201.295508][T12718] bridge_slave_0: entered promiscuous mode [ 201.297013][T12718] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.297091][T12718] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.297151][T12718] bridge_slave_1: entered allmulticast mode [ 201.297875][T12718] bridge_slave_1: entered promiscuous mode [ 201.313725][T12718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.319001][T12718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.336002][ T5832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.338096][ T5832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.371304][T12718] team0: Port device team_slave_0 added [ 201.372609][T12718] team0: Port device team_slave_1 added [ 201.374084][T12782] FAULT_INJECTION: forcing a failure. [ 201.374084][T12782] name failslab, interval 1, probability 0, space 0, times 0 [ 201.374105][T12782] CPU: 3 UID: 0 PID: 12782 Comm: syz.7.2122 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.374120][T12782] Tainted: [L]=SOFTLOCKUP [ 201.374126][T12782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.374133][T12782] Call Trace: [ 201.374138][T12782] [ 201.374142][T12782] dump_stack_lvl+0x100/0x190 [ 201.374163][T12782] should_fail_ex.cold+0x5/0xa [ 201.374180][T12782] should_failslab+0xc2/0x120 [ 201.374198][T12782] __kmalloc_cache_noprof+0x91/0x6d0 [ 201.374210][T12782] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 201.374224][T12782] ? blk_alloc_queue_stats+0x3f/0x110 [ 201.374239][T12782] blk_alloc_queue_stats+0x3f/0x110 [ 201.374251][T12782] blk_alloc_queue+0xda/0x790 [ 201.374266][T12782] __blk_alloc_disk+0xa0/0x170 [ 201.374276][T12782] ? __pfx___blk_alloc_disk+0x10/0x10 [ 201.374286][T12782] ? __pfx___debug_object_init+0x10/0x10 [ 201.374308][T12782] ? lockdep_init_map_type+0x5c/0x250 [ 201.374322][T12782] ? lockdep_init_map_type+0x5c/0x250 [ 201.374338][T12782] dm_create+0x5e8/0x1530 [ 201.374357][T12782] dev_create+0x121/0x2a0 [ 201.374369][T12782] ? __pfx_dev_create+0x10/0x10 [ 201.374384][T12782] ctl_ioctl+0x4d2/0xcc0 [ 201.374396][T12782] ? __pfx_dev_create+0x10/0x10 [ 201.374408][T12782] ? __pfx_ctl_ioctl+0x10/0x10 [ 201.374449][T12782] ? selinux_file_ioctl+0x13b/0x290 [ 201.374467][T12782] ? selinux_file_ioctl+0xb6/0x290 [ 201.374483][T12782] dm_ctl_ioctl+0x22/0x30 [ 201.374494][T12782] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 201.374507][T12782] __x64_sys_ioctl+0x18e/0x210 [ 201.374524][T12782] do_syscall_64+0x123/0x790 [ 201.374538][T12782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.374550][T12782] RIP: 0033:0x7fd82ab9e159 [ 201.374560][T12782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.374571][T12782] RSP: 002b:00007fd82bb32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.374584][T12782] RAX: ffffffffffffffda RBX: 00007fd82ae25fa0 RCX: 00007fd82ab9e159 [ 201.374592][T12782] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 201.374600][T12782] RBP: 00007fd82ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 201.374607][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.374615][T12782] R13: 00007fd82ae26038 R14: 00007fd82ae25fa0 R15: 00007fff069e40a8 [ 201.374630][T12782] [ 201.396800][T12718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.396811][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.396825][T12718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.399503][T12718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.399514][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.399527][T12718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.417869][T12718] hsr_slave_0: entered promiscuous mode [ 201.418318][T12718] hsr_slave_1: entered promiscuous mode [ 201.418633][T12718] debugfs: 'hsr0' already exists in 'hsr' [ 201.418645][T12718] Cannot create hsr debugfs directory [ 201.494668][ T5832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.494692][ T5832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.506124][ T5090] Bluetooth: hci0: command tx timeout [ 201.674216][T12792] tmpfs: Bad value for 'mpol' [ 201.706297][ T5832] bridge_slave_1: left allmulticast mode [ 201.706316][ T5832] bridge_slave_1: left promiscuous mode [ 201.706433][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.708770][ T5832] bridge_slave_0: left allmulticast mode [ 201.708783][ T5832] bridge_slave_0: left promiscuous mode [ 201.708907][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.719102][ T5832] pimreg9: left allmulticast mode [ 201.746357][ T43] audit: type=1400 audit(1825065632.922:10390): avc: denied { write } for pid=12802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.751090][ T43] audit: type=1400 audit(1825065632.922:10391): avc: denied { checkpoint_restore } for pid=12799 comm="syz.5.2127" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.798698][ T43] audit: type=1400 audit(1825065632.972:10392): avc: denied { write } for pid=12806 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.995323][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.000761][ T5832] bond0 (unregistering): Released all slaves [ 202.012761][ T5832] bond1 (unregistering): (slave bond2): Releasing backup interface [ 202.013547][ T5832] bond1 (unregistering): Released all slaves [ 202.025024][ T5832] bond2 (unregistering): Released all slaves [ 202.037851][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 202.146083][ T5090] Bluetooth: hci3: command tx timeout [ 202.147403][ T5832] : left promiscuous mode [ 202.251959][ T5832] tipc: Left network mode [ 202.255017][ T5832] rxrpc: Leaked peer a3 {1} 127.0.0.1:7003 [ 202.483401][ T43] audit: type=1400 audit(1825065633.653:10393): avc: denied { write } for pid=12816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.572130][ T43] audit: type=1400 audit(1825065633.743:10394): avc: denied { write } for pid=12819 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.653480][ T5832] hsr_slave_0: left promiscuous mode [ 202.653905][ T5832] hsr_slave_1: left promiscuous mode [ 202.654264][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.654275][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.662569][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.662590][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.702247][ T5832] veth1_macvtap: left promiscuous mode [ 202.702273][ T5832] veth0_macvtap: left promiscuous mode [ 202.702334][ T5832] veth1_vlan: left promiscuous mode [ 202.702383][ T5832] veth0_vlan: left promiscuous mode [ 202.978793][ T7145] smc: removing ib device syz0 [ 203.063822][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 203.075656][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 203.162281][ T5808] infiniband syz0: ib_query_port failed (-19) [ 203.246229][ T7145] smbdirect: ib_dev[syz0] removed [ 203.594060][ T5090] Bluetooth: hci0: command tx timeout [ 203.599557][T12848] __nla_validate_parse: 5 callbacks suppressed [ 203.599575][T12848] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2136'. [ 203.792104][T12718] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.807890][T12718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.809576][T12718] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.821675][T12718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.822440][T12718] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.827706][T12718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.828198][T12718] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.840791][T12718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.846446][T12846] e1000e 0000:00:02.0 eth1: removed PHC [ 203.983785][ C3] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 204.052984][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 204.052996][ T43] audit: type=1400 audit(1825065635.224:10398): avc: denied { write } for pid=12860 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.094817][T12846] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 204.233557][ T5090] Bluetooth: hci3: command tx timeout [ 204.267263][ T43] audit: type=1400 audit(1825065635.445:10399): avc: denied { mounton } for pid=12820 comm="syz.5.2130" path="/278/config" dev="configfs" ino=2114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.270701][ T43] audit: type=1400 audit(1825065635.445:10400): avc: denied { write } for pid=12820 comm="syz.5.2130" name="usb_gadget" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.322444][ T43] audit: type=1400 audit(1825065635.495:10401): avc: denied { write } for pid=12820 comm="syz.5.2130" name="usb_gadget" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.429696][ T43] audit: type=1400 audit(1825065635.605:10402): avc: denied { write } for pid=12863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.454116][T12718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.476714][T12718] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.484154][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.484201][ T7149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.491153][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.491199][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.532742][T12718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.587062][ T43] audit: type=1400 audit(1825065635.765:10403): avc: denied { write } for pid=12866 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.778863][ T43] audit: type=1400 audit(1825065635.955:10404): avc: denied { write } for pid=12873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.871335][ T43] audit: type=1400 audit(1825065636.045:10405): avc: denied { map } for pid=12878 comm="syz.6.2138" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.891976][ T43] audit: type=1400 audit(1825065636.065:10406): avc: denied { write } for pid=12881 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.951891][ T43] audit: type=1400 audit(1825065636.125:10407): avc: denied { mount } for pid=12820 comm="syz.5.2130" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 205.072683][T12901] tun0: tun_chr_ioctl cmd 1074025678 [ 205.072698][T12901] tun0: group set to 0 [ 205.125289][T12718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.224646][T12718] veth0_vlan: entered promiscuous mode [ 205.231858][T12718] veth1_vlan: entered promiscuous mode [ 205.239823][T12916] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2145'. [ 205.266888][T12718] veth0_macvtap: entered promiscuous mode [ 205.269901][T12718] veth1_macvtap: entered promiscuous mode [ 205.284235][T12718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.288542][T12718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.374632][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.374666][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.374684][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.374702][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.501946][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.501961][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.566353][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.566370][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.706055][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2151'. [ 205.781831][T12945] veth3: entered promiscuous mode [ 205.781848][T12945] veth3: entered allmulticast mode [ 205.785152][T12945] bridge1: port 1(veth3) entered blocking state [ 205.785202][T12945] bridge1: port 1(veth3) entered disabled state [ 205.792989][T12945] bridge1: port 1(veth3) entered blocking state [ 205.793038][T12945] bridge1: port 1(veth3) entered forwarding state [ 205.900079][T12953] veth5: entered promiscuous mode [ 205.900095][T12953] veth5: entered allmulticast mode [ 205.904254][T12953] bridge1: port 2(veth5) entered blocking state [ 205.904312][T12953] bridge1: port 2(veth5) entered disabled state [ 205.912060][T12953] bridge1: port 2(veth5) entered blocking state [ 205.914017][T12953] bridge1: port 2(veth5) entered forwarding state [ 206.006816][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2150'. [ 206.011327][T12959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.014037][T12963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.239462][ T5832] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 206.312069][ T5090] Bluetooth: hci3: command tx timeout [ 206.498772][T12973] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2156'. [ 206.564748][T12977] FAULT_INJECTION: forcing a failure. [ 206.564748][T12977] name failslab, interval 1, probability 0, space 0, times 0 [ 206.564773][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.3.2157 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.564789][T12977] Tainted: [L]=SOFTLOCKUP [ 206.564794][T12977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.564800][T12977] Call Trace: [ 206.564806][T12977] [ 206.564811][T12977] dump_stack_lvl+0x100/0x190 [ 206.564833][T12977] should_fail_ex.cold+0x5/0xa [ 206.564849][T12977] should_failslab+0xc2/0x120 [ 206.564867][T12977] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 206.564882][T12977] ? find_held_lock+0x2b/0x80 [ 206.564899][T12977] ? blk_alloc_queue+0x31/0x790 [ 206.564941][T12977] blk_alloc_queue+0x31/0x790 [ 206.564959][T12977] __blk_alloc_disk+0xa0/0x170 [ 206.564971][T12977] ? __pfx___blk_alloc_disk+0x10/0x10 [ 206.564982][T12977] ? __pfx___debug_object_init+0x10/0x10 [ 206.565006][T12977] ? lockdep_init_map_type+0x5c/0x250 [ 206.565027][T12977] ? lockdep_init_map_type+0x5c/0x250 [ 206.565044][T12977] dm_create+0x5e8/0x1530 [ 206.565065][T12977] dev_create+0x121/0x2a0 [ 206.565079][T12977] ? __pfx_dev_create+0x10/0x10 [ 206.565095][T12977] ctl_ioctl+0x4d2/0xcc0 [ 206.565120][T12977] ? __pfx_dev_create+0x10/0x10 [ 206.565135][T12977] ? __pfx_ctl_ioctl+0x10/0x10 [ 206.565163][T12977] ? selinux_file_ioctl+0x13b/0x290 [ 206.565178][T12977] ? selinux_file_ioctl+0xb6/0x290 [ 206.565194][T12977] dm_ctl_ioctl+0x22/0x30 [ 206.565204][T12977] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 206.565216][T12977] __x64_sys_ioctl+0x18e/0x210 [ 206.565231][T12977] do_syscall_64+0x123/0x790 [ 206.565246][T12977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.565258][T12977] RIP: 0033:0x7fb0b8f9e159 [ 206.565268][T12977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.565279][T12977] RSP: 002b:00007fb0b9f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.565291][T12977] RAX: ffffffffffffffda RBX: 00007fb0b9225fa0 RCX: 00007fb0b8f9e159 [ 206.565299][T12977] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 206.565307][T12977] RBP: 00007fb0b903506b R08: 0000000000000000 R09: 0000000000000000 [ 206.565315][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.565322][T12977] R13: 00007fb0b9226038 R14: 00007fb0b9225fa0 R15: 00007ffc1be2d678 [ 206.565338][T12977] [ 206.734820][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.735262][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.741085][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.744003][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.744524][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.745027][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.745412][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.745663][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.745929][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.751656][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.878947][T12996] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2162'. [ 206.911751][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2161'. [ 207.202989][T12992] syz.6.2161 (12992) used greatest stack depth: 19288 bytes left [ 207.247807][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2169'. [ 207.248236][T13013] netlink: 'syz.7.2169': attribute type 11 has an invalid length. [ 207.437758][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2174'. [ 207.640656][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2170'. [ 207.651626][T13044] fuse: fd is not a fuse device [ 207.858957][T13048] FAULT_INJECTION: forcing a failure. [ 207.858957][T13048] name failslab, interval 1, probability 0, space 0, times 0 [ 207.858995][T13048] CPU: 1 UID: 0 PID: 13048 Comm: syz.5.2177 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.859042][T13048] Tainted: [L]=SOFTLOCKUP [ 207.859052][T13048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.859066][T13048] Call Trace: [ 207.859083][T13048] [ 207.859091][T13048] dump_stack_lvl+0x100/0x190 [ 207.859138][T13048] should_fail_ex.cold+0x5/0xa [ 207.859168][T13048] should_failslab+0xc2/0x120 [ 207.859202][T13048] __kmalloc_cache_noprof+0x91/0x6d0 [ 207.859226][T13048] ? percpu_ref_init+0xec/0x3f0 [ 207.859260][T13048] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 207.859293][T13048] percpu_ref_init+0xec/0x3f0 [ 207.859325][T13048] blk_alloc_queue+0x574/0x790 [ 207.859350][T13048] __blk_alloc_disk+0xa0/0x170 [ 207.859369][T13048] ? __pfx___blk_alloc_disk+0x10/0x10 [ 207.859387][T13048] ? __pfx___debug_object_init+0x10/0x10 [ 207.859427][T13048] ? lockdep_init_map_type+0x5c/0x250 [ 207.859453][T13048] ? lockdep_init_map_type+0x5c/0x250 [ 207.859481][T13048] dm_create+0x5e8/0x1530 [ 207.859522][T13048] dev_create+0x121/0x2a0 [ 207.859546][T13048] ? __pfx_dev_create+0x10/0x10 [ 207.859577][T13048] ctl_ioctl+0x4d2/0xcc0 [ 207.859598][T13048] ? __pfx_dev_create+0x10/0x10 [ 207.859620][T13048] ? __pfx_ctl_ioctl+0x10/0x10 [ 207.859675][T13048] ? selinux_file_ioctl+0x13b/0x290 [ 207.859701][T13048] ? selinux_file_ioctl+0xb6/0x290 [ 207.859731][T13048] dm_ctl_ioctl+0x22/0x30 [ 207.859750][T13048] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 207.859773][T13048] __x64_sys_ioctl+0x18e/0x210 [ 207.859797][T13048] do_syscall_64+0x123/0x790 [ 207.859826][T13048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.859847][T13048] RIP: 0033:0x7f952899e159 [ 207.859866][T13048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.859887][T13048] RSP: 002b:00007f952985e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.859915][T13048] RAX: ffffffffffffffda RBX: 00007f9528c25fa0 RCX: 00007f952899e159 [ 207.859928][T13048] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 207.859941][T13048] RBP: 00007f9528a3506b R08: 0000000000000000 R09: 0000000000000000 [ 207.859953][T13048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.859965][T13048] R13: 00007f9528c26038 R14: 00007f9528c25fa0 R15: 00007ffec8306f88 [ 207.859992][T13048] [ 208.204489][T13094] FAULT_INJECTION: forcing a failure. [ 208.204489][T13094] name failslab, interval 1, probability 0, space 0, times 0 [ 208.204513][T13094] CPU: 3 UID: 0 PID: 13094 Comm: syz.6.2186 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.204530][T13094] Tainted: [L]=SOFTLOCKUP [ 208.204537][T13094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.204544][T13094] Call Trace: [ 208.204549][T13094] [ 208.204555][T13094] dump_stack_lvl+0x100/0x190 [ 208.204577][T13094] should_fail_ex.cold+0x5/0xa [ 208.204595][T13094] should_failslab+0xc2/0x120 [ 208.204613][T13094] __kmalloc_cache_noprof+0x91/0x6d0 [ 208.204626][T13094] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 208.204641][T13094] ? blk_alloc_queue_stats+0x3f/0x110 [ 208.204656][T13094] blk_alloc_queue_stats+0x3f/0x110 [ 208.204668][T13094] blk_alloc_queue+0xda/0x790 [ 208.204683][T13094] __blk_alloc_disk+0xa0/0x170 [ 208.204694][T13094] ? __pfx___blk_alloc_disk+0x10/0x10 [ 208.204703][T13094] ? __pfx___debug_object_init+0x10/0x10 [ 208.204726][T13094] ? lockdep_init_map_type+0x5c/0x250 [ 208.204741][T13094] ? lockdep_init_map_type+0x5c/0x250 [ 208.204756][T13094] dm_create+0x5e8/0x1530 [ 208.204776][T13094] dev_create+0x121/0x2a0 [ 208.204788][T13094] ? __pfx_dev_create+0x10/0x10 [ 208.204803][T13094] ctl_ioctl+0x4d2/0xcc0 [ 208.204814][T13094] ? __pfx_dev_create+0x10/0x10 [ 208.204826][T13094] ? __pfx_ctl_ioctl+0x10/0x10 [ 208.204851][T13094] ? selinux_file_ioctl+0x13b/0x290 [ 208.204867][T13094] ? selinux_file_ioctl+0xb6/0x290 [ 208.204884][T13094] dm_ctl_ioctl+0x22/0x30 [ 208.204922][T13094] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 208.204938][T13094] __x64_sys_ioctl+0x18e/0x210 [ 208.204953][T13094] do_syscall_64+0x123/0x790 [ 208.204968][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.204981][T13094] RIP: 0033:0x7fc1cd59e159 [ 208.204991][T13094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.205001][T13094] RSP: 002b:00007fc1ce46e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.205019][T13094] RAX: ffffffffffffffda RBX: 00007fc1cd825fa0 RCX: 00007fc1cd59e159 [ 208.205028][T13094] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 208.205037][T13094] RBP: 00007fc1cd63506b R08: 0000000000000000 R09: 0000000000000000 [ 208.205044][T13094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.205052][T13094] R13: 00007fc1cd826038 R14: 00007fc1cd825fa0 R15: 00007ffd8f00acb8 [ 208.205067][T13094] [ 208.207630][T13096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=13096 comm=syz.7.2187 [ 208.341575][T13109] /dev/sg0: Can't lookup blockdev [ 208.383108][ T5090] Bluetooth: hci3: command tx timeout [ 208.569164][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.582176][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.582206][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.582226][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.582244][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.630079][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2191'. [ 208.834943][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2196'. [ 208.881678][T13147] FAULT_INJECTION: forcing a failure. [ 208.881678][T13147] name failslab, interval 1, probability 0, space 0, times 0 [ 208.881701][T13147] CPU: 2 UID: 0 PID: 13147 Comm: syz.5.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.881716][T13147] Tainted: [L]=SOFTLOCKUP [ 208.881721][T13147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.881729][T13147] Call Trace: [ 208.881733][T13147] [ 208.881738][T13147] dump_stack_lvl+0x100/0x190 [ 208.881760][T13147] should_fail_ex.cold+0x5/0xa [ 208.881777][T13147] should_failslab+0xc2/0x120 [ 208.881795][T13147] __kmalloc_cache_noprof+0x91/0x6d0 [ 208.881807][T13147] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 208.881821][T13147] ? blk_alloc_queue_stats+0x3f/0x110 [ 208.881836][T13147] blk_alloc_queue_stats+0x3f/0x110 [ 208.881848][T13147] blk_alloc_queue+0xda/0x790 [ 208.881863][T13147] __blk_alloc_disk+0xa0/0x170 [ 208.881874][T13147] ? __pfx___blk_alloc_disk+0x10/0x10 [ 208.881885][T13147] ? __pfx___debug_object_init+0x10/0x10 [ 208.881908][T13147] ? lockdep_init_map_type+0x5c/0x250 [ 208.881923][T13147] ? lockdep_init_map_type+0x5c/0x250 [ 208.881961][T13147] dm_create+0x5e8/0x1530 [ 208.881982][T13147] dev_create+0x121/0x2a0 [ 208.881996][T13147] ? __pfx_dev_create+0x10/0x10 [ 208.882012][T13147] ctl_ioctl+0x4d2/0xcc0 [ 208.882024][T13147] ? __pfx_dev_create+0x10/0x10 [ 208.882037][T13147] ? __pfx_ctl_ioctl+0x10/0x10 [ 208.882065][T13147] ? selinux_file_ioctl+0x13b/0x290 [ 208.882079][T13147] ? selinux_file_ioctl+0xb6/0x290 [ 208.882095][T13147] dm_ctl_ioctl+0x22/0x30 [ 208.882106][T13147] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 208.882117][T13147] __x64_sys_ioctl+0x18e/0x210 [ 208.882131][T13147] do_syscall_64+0x123/0x790 [ 208.882144][T13147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.882163][T13147] RIP: 0033:0x7f952899e159 [ 208.882174][T13147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.882186][T13147] RSP: 002b:00007f952985e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.882200][T13147] RAX: ffffffffffffffda RBX: 00007f9528c25fa0 RCX: 00007f952899e159 [ 208.882207][T13147] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 208.882215][T13147] RBP: 00007f9528a3506b R08: 0000000000000000 R09: 0000000000000000 [ 208.882223][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.882231][T13147] R13: 00007f9528c26038 R14: 00007f9528c25fa0 R15: 00007ffec8306f88 [ 208.882247][T13147] [ 209.258312][T13175] batman_adv: batadv0: Adding interface: syzkaller0 [ 209.258326][T13175] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.258344][T13175] batman_adv: batadv0: Interface activated: syzkaller0 [ 209.274519][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 209.274533][ T43] audit: type=1400 audit(1825065640.458:10432): avc: denied { write } for pid=13173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.296185][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2206'. [ 209.323140][T13183] FAULT_INJECTION: forcing a failure. [ 209.323140][T13183] name failslab, interval 1, probability 0, space 0, times 0 [ 209.323164][T13183] CPU: 2 UID: 0 PID: 13183 Comm: syz.5.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.323182][T13183] Tainted: [L]=SOFTLOCKUP [ 209.323186][T13183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.323193][T13183] Call Trace: [ 209.323198][T13183] [ 209.323203][T13183] dump_stack_lvl+0x100/0x190 [ 209.323226][T13183] should_fail_ex.cold+0x5/0xa [ 209.323242][T13183] should_failslab+0xc2/0x120 [ 209.323260][T13183] __kmalloc_cache_noprof+0x91/0x6d0 [ 209.323272][T13183] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 209.323287][T13183] ? blk_alloc_queue_stats+0x3f/0x110 [ 209.323302][T13183] blk_alloc_queue_stats+0x3f/0x110 [ 209.323313][T13183] blk_alloc_queue+0xda/0x790 [ 209.323329][T13183] __blk_alloc_disk+0xa0/0x170 [ 209.323341][T13183] ? __pfx___blk_alloc_disk+0x10/0x10 [ 209.323351][T13183] ? __pfx___debug_object_init+0x10/0x10 [ 209.323374][T13183] ? lockdep_init_map_type+0x5c/0x250 [ 209.323388][T13183] ? lockdep_init_map_type+0x5c/0x250 [ 209.323405][T13183] dm_create+0x5e8/0x1530 [ 209.323426][T13183] dev_create+0x121/0x2a0 [ 209.323437][T13183] ? __pfx_dev_create+0x10/0x10 [ 209.323452][T13183] ctl_ioctl+0x4d2/0xcc0 [ 209.323464][T13183] ? __pfx_dev_create+0x10/0x10 [ 209.323476][T13183] ? __pfx_ctl_ioctl+0x10/0x10 [ 209.323500][T13183] ? selinux_file_ioctl+0x13b/0x290 [ 209.323514][T13183] ? selinux_file_ioctl+0xb6/0x290 [ 209.323530][T13183] dm_ctl_ioctl+0x22/0x30 [ 209.323540][T13183] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 209.323551][T13183] __x64_sys_ioctl+0x18e/0x210 [ 209.323567][T13183] do_syscall_64+0x123/0x790 [ 209.323586][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.323599][T13183] RIP: 0033:0x7f952899e159 [ 209.323609][T13183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.323621][T13183] RSP: 002b:00007f952985e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.323635][T13183] RAX: ffffffffffffffda RBX: 00007f9528c25fa0 RCX: 00007f952899e159 [ 209.323643][T13183] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 209.323650][T13183] RBP: 00007f9528a3506b R08: 0000000000000000 R09: 0000000000000000 [ 209.323663][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.323672][T13183] R13: 00007f9528c26038 R14: 00007f9528c25fa0 R15: 00007ffec8306f88 [ 209.323688][T13183] [ 209.336800][ T43] audit: type=1400 audit(1825065640.518:10433): avc: denied { write } for pid=13182 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.466856][ T43] audit: type=1400 audit(1825065640.648:10434): avc: denied { write } for pid=13192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.517387][ T43] audit: type=1400 audit(1825065640.698:10435): avc: denied { write } for pid=13200 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.542365][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2212'. [ 209.585574][ T43] audit: type=1400 audit(1825065640.768:10436): avc: denied { write } for pid=13207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.639805][ T43] audit: type=1400 audit(1825065640.818:10437): avc: denied { write } for pid=13212 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.646464][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.776075][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2210'. [ 209.965072][T13218] SELinux: Context is not valid (left unmapped). [ 209.968495][ T43] audit: type=1400 audit(1825065641.149:10438): avc: denied { relabelto } for pid=13217 comm="syz.5.2215" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 209.968772][ T43] audit: type=1400 audit(1825065641.149:10439): avc: denied { associate } for pid=13217 comm="syz.5.2215" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1650 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 209.979845][T13166] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 210.001104][T13166] batman_adv: batadv0: Removing interface: syzkaller0 [ 210.010075][ T43] audit: type=1400 audit(1825065641.199:10440): avc: denied { write } for pid=13217 comm="syz.5.2215" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 210.010107][ T43] audit: type=1400 audit(1825065641.199:10441): avc: denied { setattr } for pid=13217 comm="syz.5.2215" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 210.239796][T13234] netlink: 'syz.5.2218': attribute type 14 has an invalid length. [ 210.275543][T13236] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 6 out of range (51000000..2150000000) [ 210.459610][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.507549][ T13] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 210.540141][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.540173][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.540193][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.540213][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.599346][ T5880] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 210.750154][ T5880] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.751574][ T5880] usb 11-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.751594][ T5880] usb 11-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 210.751606][ T5880] usb 11-1: config 0 interface 0 has no altsetting 0 [ 210.753187][ T5880] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.753200][ T5880] usb 11-1: Product: syz [ 210.753208][ T5880] usb 11-1: Manufacturer: syz [ 210.753215][ T5880] usb 11-1: SerialNumber: syz [ 210.754755][ T5880] usb 11-1: config 0 descriptor?? [ 210.755181][T13246] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 210.766960][ T5880] usb 11-1: selecting invalid altsetting 0 [ 210.794891][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2225'. [ 210.799003][T13269] FAULT_INJECTION: forcing a failure. [ 210.799003][T13269] name failslab, interval 1, probability 0, space 0, times 0 [ 210.799097][T13269] CPU: 2 UID: 0 PID: 13269 Comm: syz.7.2228 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.799115][T13269] Tainted: [L]=SOFTLOCKUP [ 210.799121][T13269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.799129][T13269] Call Trace: [ 210.799135][T13269] [ 210.799141][T13269] dump_stack_lvl+0x100/0x190 [ 210.799162][T13269] should_fail_ex.cold+0x5/0xa [ 210.799179][T13269] should_failslab+0xc2/0x120 [ 210.799197][T13269] __kmalloc_cache_noprof+0x91/0x6d0 [ 210.799208][T13269] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 210.799222][T13269] ? blk_alloc_queue_stats+0x3f/0x110 [ 210.799237][T13269] blk_alloc_queue_stats+0x3f/0x110 [ 210.799249][T13269] blk_alloc_queue+0xda/0x790 [ 210.799264][T13269] __blk_alloc_disk+0xa0/0x170 [ 210.799275][T13269] ? __pfx___blk_alloc_disk+0x10/0x10 [ 210.799286][T13269] ? __pfx___debug_object_init+0x10/0x10 [ 210.799309][T13269] ? lockdep_init_map_type+0x5c/0x250 [ 210.799327][T13269] ? lockdep_init_map_type+0x5c/0x250 [ 210.799343][T13269] dm_create+0x5e8/0x1530 [ 210.799362][T13269] dev_create+0x121/0x2a0 [ 210.799374][T13269] ? __pfx_dev_create+0x10/0x10 [ 210.799389][T13269] ctl_ioctl+0x4d2/0xcc0 [ 210.799400][T13269] ? __pfx_dev_create+0x10/0x10 [ 210.799418][T13269] ? __pfx_ctl_ioctl+0x10/0x10 [ 210.799446][T13269] ? selinux_file_ioctl+0x13b/0x290 [ 210.799462][T13269] ? selinux_file_ioctl+0xb6/0x290 [ 210.799479][T13269] dm_ctl_ioctl+0x22/0x30 [ 210.799491][T13269] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 210.799503][T13269] __x64_sys_ioctl+0x18e/0x210 [ 210.799519][T13269] do_syscall_64+0x123/0x790 [ 210.799533][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.799544][T13269] RIP: 0033:0x7fd82ab9e159 [ 210.799554][T13269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.799565][T13269] RSP: 002b:00007fd82bb32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.799577][T13269] RAX: ffffffffffffffda RBX: 00007fd82ae25fa0 RCX: 00007fd82ab9e159 [ 210.799585][T13269] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 210.799594][T13269] RBP: 00007fd82ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 210.799602][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.799610][T13269] R13: 00007fd82ae26038 R14: 00007fd82ae25fa0 R15: 00007fff069e40a8 [ 210.799626][T13269] [ 210.832436][T13267] ecryptfs_validate_options: eCryptfs doesn't support cipher: aer [ 210.832460][T13267] Error validating options; rc = [-22] [ 210.931216][T13273] netlink: 'syz.7.2229': attribute type 1 has an invalid length. [ 210.946331][T13273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.968324][ T5880] usb 11-1: USB disconnect, device number 2 [ 211.208777][T13274] [ 211.209643][T13274] ====================================================== [ 211.212045][T13274] WARNING: possible circular locking dependency detected [ 211.214279][T13274] syzkaller #0 Tainted: G L [ 211.216551][T13274] ------------------------------------------------------ [ 211.219478][T13274] syz.3.2230/13274 is trying to acquire lock: [ 211.221984][T13274] ffff88805b666e68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 211.226568][T13274] [ 211.226568][T13274] but task is already holding lock: [ 211.229709][T13274] ffff888059bae660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 211.233675][T13274] [ 211.233675][T13274] which lock already depends on the new lock. [ 211.233675][T13274] [ 211.237756][T13274] [ 211.237756][T13274] the existing dependency chain (in reverse order) is: [ 211.241376][T13274] [ 211.241376][T13274] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 211.244979][T13274] lock_acquire+0x1d1/0x380 [ 211.246838][T13274] lock_sock_nested+0x41/0xf0 [ 211.248688][T13274] smc_listen_out+0xf2/0x4b0 [ 211.250783][T13274] smc_listen_work+0x767/0x50e0 [ 211.252812][T13274] process_one_work+0xac7/0x1b10 [ 211.254707][T13274] worker_thread+0x5ef/0xe50 [ 211.256745][T13274] kthread+0x373/0x450 [ 211.258405][T13274] ret_from_fork+0x730/0xd60 [ 211.260172][T13274] ret_from_fork_asm+0x1a/0x30 [ 211.262268][T13274] [ 211.262268][T13274] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 211.266448][T13274] check_prev_add+0xeb/0xe60 [ 211.268786][T13274] __lock_acquire+0x1528/0x1f40 [ 211.271158][T13274] lock_acquire+0x1d1/0x380 [ 211.273108][T13274] __flush_work+0x4de/0xcb0 [ 211.275280][T13274] cancel_work_sync+0xd1/0xf0 [ 211.277336][T13274] smc_clcsock_release+0x5f/0xe0 [ 211.279423][T13274] __smc_release+0x5c2/0x880 [ 211.281547][T13274] smc_close_non_accepted+0xda/0x200 [ 211.283854][T13274] smc_close_active+0x4ff/0x1060 [ 211.286059][T13274] __smc_release+0x634/0x880 [ 211.288150][T13274] smc_release+0x1fc/0x620 [ 211.290266][T13274] __sock_release+0xb3/0x260 [ 211.292444][T13274] sock_close+0x1c/0x30 [ 211.294287][T13274] __fput+0x3ff/0xb50 [ 211.296116][T13274] task_work_run+0x150/0x240 [ 211.298255][T13274] exit_to_user_mode_loop+0x1d8/0x700 [ 211.300416][T13274] do_syscall_64+0x661/0x790 [ 211.302096][T13274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.305059][T13274] [ 211.305059][T13274] other info that might help us debug this: [ 211.305059][T13274] [ 211.309488][T13274] Possible unsafe locking scenario: [ 211.309488][T13274] [ 211.312936][T13274] CPU0 CPU1 [ 211.315162][T13274] ---- ---- [ 211.317360][T13274] lock(sk_lock-AF_SMC/1); [ 211.319162][T13274] lock((work_completion)(&new_smc->smc_listen_work)); [ 211.322805][T13274] lock(sk_lock-AF_SMC/1); [ 211.325565][T13274] lock((work_completion)(&new_smc->smc_listen_work)); [ 211.327819][T13274] [ 211.327819][T13274] *** DEADLOCK *** [ 211.327819][T13274] [ 211.331105][T13274] locks held by syz.3.2230/13274: 3, last CPU#3: [ 211.333600][T13274] #0: ffff88804127b600 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 211.337638][T13274] #1: ffff888059bae660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 211.340926][T13274] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 211.344633][T13274] [ 211.344633][T13274] stack backtrace: [ 211.347155][T13274] CPU: 3 UID: 0 PID: 13274 Comm: syz.3.2230 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.351719][T13274] Tainted: [L]=SOFTLOCKUP [ 211.353460][T13274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.357377][T13274] Call Trace: [ 211.358772][T13274] [ 211.359797][T13274] dump_stack_lvl+0x100/0x190 [ 211.361697][T13274] print_circular_bug.cold+0x178/0x1be [ 211.364061][T13274] check_noncircular+0x146/0x160 [ 211.366224][T13274] check_prev_add+0xeb/0xe60 [ 211.368114][T13274] __lock_acquire+0x1528/0x1f40 [ 211.370070][T13274] lock_acquire+0x1d1/0x380 [ 211.371930][T13274] ? __flush_work+0x4ca/0xcb0 [ 211.373815][T13274] ? preempt_schedule_thunk+0x16/0x40 [ 211.375664][T13274] ? __flush_work+0x4ca/0xcb0 [ 211.377352][T13274] __flush_work+0x4de/0xcb0 [ 211.379156][T13274] ? __flush_work+0x4ca/0xcb0 [ 211.381047][T13274] ? __pfx___flush_work+0x10/0x10 [ 211.383149][T13274] ? __lock_acquire+0x5c0/0x1f40 [ 211.385275][T13274] ? __pfx_wq_barrier_func+0x10/0x10 [ 211.387617][T13274] ? __pfx___might_resched+0x10/0x10 [ 211.389934][T13274] ? __smc_release+0x5ba/0x880 [ 211.391543][T13274] cancel_work_sync+0xd1/0xf0 [ 211.393431][T13274] smc_clcsock_release+0x5f/0xe0 [ 211.395434][T13274] __smc_release+0x5c2/0x880 [ 211.397318][T13274] ? __pfx_sock_def_readable+0x10/0x10 [ 211.399502][T13274] smc_close_non_accepted+0xda/0x200 [ 211.401430][T13274] smc_close_active+0x4ff/0x1060 [ 211.403245][T13274] __smc_release+0x634/0x880 [ 211.405211][T13274] smc_release+0x1fc/0x620 [ 211.407217][T13274] __sock_release+0xb3/0x260 [ 211.409297][T13274] ? __pfx_sock_close+0x10/0x10 [ 211.411089][T13274] sock_close+0x1c/0x30 [ 211.412738][T13274] __fput+0x3ff/0xb50 [ 211.414387][T13274] ? _raw_spin_unlock_irq+0x23/0x50 [ 211.416481][T13274] task_work_run+0x150/0x240 [ 211.418382][T13274] ? __pfx_task_work_run+0x10/0x10 [ 211.420092][T13274] exit_to_user_mode_loop+0x1d8/0x700 [ 211.422104][T13274] ? rcu_is_watching+0x13/0xc0 [ 211.424144][T13274] do_syscall_64+0x661/0x790 [ 211.426357][T13274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.428763][T13274] RIP: 0033:0x7fb0b8f9e159 [ 211.430657][T13274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.437902][T13274] RSP: 002b:00007ffc1be2d7d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 211.441330][T13274] RAX: 0000000000000000 RBX: 00007ffc1be2d8c0 RCX: 00007fb0b8f9e159 [ 211.444542][T13274] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 211.447628][T13274] RBP: 0000000000033928 R08: 0000000000000001 R09: 0000000000000000 [ 211.450661][T13274] R10: 0000001b2eb20000 R11: 0000000000000246 R12: 00007ffc1be2d900 [ 211.453414][T13274] R13: 00007fb0b9225fac R14: 0000000000033a63 R15: 00007fb0b9225fa0 [ 211.456687][T13274] [ 213.018151][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.817848][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 214.617384][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 219.336087][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!