last executing test programs: 1m8.713949847s ago: executing program 1 (id=3239): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m8.64463129s ago: executing program 1 (id=3240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f2435f01000884", 0x7, 0x4008041, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000380)={r10, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r11}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000500)={0x0, 0x9, 0x2, 0x9, 0x3, [0x0, 0x0, 0x0], [0x3, 0x1ff, 0x6, 0xa436], [0xffffffff, 0xfff, 0x50, 0xe], [0x1, 0x9, 0xd, 0x26]}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000480)={0x1, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000640)={0x0, 0x24d, 0x100, 0x29, 0x0, [0x0, r11, r12, r13], [0x0, 0x3, 0xb3f, 0xc], [0x2, 0x80000001, 0x6, 0x400], [0x8000000000000000, 0x100, 0xb, 0x606]}) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r16, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1m8.524263061s ago: executing program 1 (id=3244): syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003"], 0xfdef) (fail_nth: 9) 1m8.41302726s ago: executing program 1 (id=3245): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m8.412457205s ago: executing program 1 (id=3246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 1m8.264970982s ago: executing program 1 (id=3248): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) (rerun: 64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4b44, 0x10000000000004) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}]}}) 1m0.034224442s ago: executing program 3 (id=3386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0xa}, 0x94) sendmsg$inet(r1, &(0x7f0000000940)={&(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, 0x0}, 0x8d894f13108400a4) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async, rerun: 32) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0x5, 0x0, 0x0, @msi={0x2, 0x8, 0xffffffff, 0x4}}]}) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) (async) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f00000000c0)={{0x9, 0x1, 0x793, 0x2, '\x00', 0x8}, 0x3, 0x4, 0x9, r4, 0x4, 0x80000000, 'syz0\x00', &(0x7f0000000040)=[']\x00', '/dev/kvm\x00', '/dev/kvm\x00', '/dev/kvm\x00'], 0x1d}) 59.951885654s ago: executing program 3 (id=3388): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 59.951349993s ago: executing program 3 (id=3389): r0 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000006c0)={0x7b, "5d5089748723ea6b0d699f6ee5cff42c29df3f08a0f68a31019075a6a8eafed2", 0x5, 0x4, 0x7, 0x6, 0x4, 0x4, 0x4, 0x400}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0de]}}]}}]}, 0x8c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) 59.843807956s ago: executing program 3 (id=3391): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0xfffffffe, 0xfffffffc, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in=@multicast2, {0x2, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x3f, 0x543}, {0x4, 0x7fffffffffffffff, 0xffffff7fffffffff, 0x7}, {}, 0x70bd2c, 0x34fe, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x800) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40678, &(0x7f00000001c0)={0x2, 0x4e25, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv', 0x2) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 59.624351597s ago: executing program 3 (id=3394): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000f00", @ANYRES32=0x0, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400ab003700010a000000000000000080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 59.154460375s ago: executing program 3 (id=3397): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (fail_nth: 1) 59.099787084s ago: executing program 32 (id=3397): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (fail_nth: 1) 53.215630177s ago: executing program 33 (id=3248): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) (rerun: 64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4b44, 0x10000000000004) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}]}}) 14.443324807s ago: executing program 4 (id=4069): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0xffffffff, 0x200640) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000080)={0x0, r1, 0xffffffffffffffff, 0xa00000000000000, 0x200, '\x00', {0xffff, 0xda0, 0x7, 0x0, 0x4, 0x8, 0x3, 0xffffffffffffff81, {0x2, 0x2}, {0xb, 0x7fff}, {0xc, 0x7}, 0xf7, 0x6, 0x0, 0x1, 0xf, 0x4, 0xfff, 0x2, 0x9, 0x40, '\x00', 0x8, 0x4, 0x8000, 0xff}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 14.44289495s ago: executing program 4 (id=4070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x8300, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000003c0)=[{0x30, 0x5, 0x53, 0xfffff030}, {0x6, 0xc1, 0x6, 0x406}]}, 0x10) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x2, 0xffffffff, 0x200, 0x5, 0xe, 0xe, 0xa54, 0x1, 0x1, 0xc09, 0x6, 0x103, 0xf, 0x18}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x1, 0x1c, 0x68, 0x0, 0xc, 0x11, 0x0, @multicast2, @local}, {0x4e21, 0x4e23, 0x8}}}, 0x2a) 14.341049189s ago: executing program 4 (id=4072): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000200)={0x2, 0x1}, 0x2) syz_fuse_handle_req(r4, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r6, r7, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000000000)={0x4, 0x9, 0xffffffc0, 0x8, 0x8, "6700d1b65292a3f197956f8ce71235e5dc071e", 0x7, 0x95f}) setresuid(0xee01, r3, r3) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@updsa={0x134, 0x1a, 0x4, 0x70bd28, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@loopback, 0x4e20, 0x6, 0x4e20, 0x7, 0x2, 0x80, 0x0, 0x0, r2, r3}, {@in=@empty, 0x4d5, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xb, 0x4, 0xfff, 0x4, 0xb807, 0x0, 0x1, 0x80000001}, {0x6, 0x8001, 0xfffffffffffffffb, 0x6}, {0x7f, 0x9, 0x8}, 0x70bd28, 0x3506, 0x8, 0x3, 0x8, 0xe}, [@replay_thresh={0x8, 0xb, 0x1}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, @tfcpad={0x8, 0x16, 0x6}, @lastused={0xc, 0xf, 0x5}, @lastused={0xc, 0xf, 0x8000000000000000}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000005}, 0x8010) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x404f) ioctl$TCSETS(r10, 0x800455cc, 0x0) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=r10, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES8=r10, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r11 = socket$inet(0x2, 0x800, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0xfe9a, 0x6, 0x10001, 0xa, 0x9, 0xffffffffffffffff}) setsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000140)={r12, r3, 0xffffffffffffffff}, 0xc) 14.244177886s ago: executing program 4 (id=4073): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x8001, 0x6, 0x1, 0xffffffff, 0x0, 0xcc7, 0x8, 0x7, 0xe, 0x2, 0x6, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x1ae, 0xfffffff5]}) sendto$inet(r2, &(0x7f00000001c0)="cc673db80f1f4e065720427f09811996254535ab1cf226223b4498edf8f9fd25d0084ff1cc5cfe3001815601dff397f0d40be623c1f2cd91bc4ce9123e29e4471e005f4a4c09174e0944b679cd2f40916f56eca688c88b", 0x57, 0x4000000, &(0x7f0000000240)={0x2, 0x4e20, @private=0xa010100}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast2, @in=@private}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r2, &(0x7f0000000300)) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="0bad348b8a8cc5535fe52f359ffc9c64937f5fb27fe6c0368c86ccdbe47ccb61a18b9fd4b8ac9973b2632d8a5a3ab208105af5f20ca85d1d31f54a79f3ee2f63c012016e735335f93857ff6ae36f4565e088894a83d09477075871a77b87a91ed8b3e564a2275c65d63513c6cbf7ba3d7056c354ddf325cd1deec14c6ffcac5354e4698b0543ac8df3fcf36bd58cfb659e68158316b1c8036d7db0f2c40d9bb181f054dea6139717523603e978f306fd118c5dbcd510b80dc2bceea73c4b1bfe838da8490e63a8", @ANYBLOB="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"/346], 0x0) 14.243624036s ago: executing program 4 (id=4075): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@local, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001780)) preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000016c0), 0x200100, 0x0) sendmmsg$unix(r0, &(0x7f0000001740)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000180)="fd13111a9cec4128f0fa3917", 0xc}, {&(0x7f0000000380)="4935ca6b43629f917f7c15f6b6f21b6518434f8275b3d4ee7d6aeaa6808578f464f734c3e51e4ec606be756415ef3dd4f7999b1e1e29dbf86056b8ba0afe8bb1b0169de5d69b86913ea715d172a7a95bb2ec74d245db6387f4422027913b43", 0x5f}, {&(0x7f0000000400)="06ed81329855267df17d895382b360b1fcc4da2ff8b60a745b802a6fde2e562496b3190f75cbe2ca0ae351c148f7cfa05b2d4370ffa303fd2e327d3af12aaabccde10aa0817b1408f3994760d7b6", 0x4e}, {&(0x7f0000000480)="70fa9ac79373aafaa0fdcc7e62f6c07169b3c173b3c4a1d6d7478273cd45d517d4a6c8", 0x23}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="e6fd798f210dd31ed103e200fe71cbf01ec467a5dd1084033b1136424d783b0c904ef3", 0x23}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="6dabffdeb790f60a4d634718e9919bad0adbfb7ce62e35db937bc9bdedb712bbe38115d964cf2375797b97ecd6d04060c8580ca6", 0x34}], 0x8, &(0x7f0000001700)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r0]}}], 0x20, 0x4}}], 0x1, 0x801) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 14.003028414s ago: executing program 4 (id=4077): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf250600000008000400ac1414312700070073797374656d5f753a6f626a6563745f723a696e736d6f645f657865635f743a7330000008000500ac1414aa14000200fc0200"/90], 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x4004804) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000005c0)={0x0, 0xfff}, &(0x7f0000000600)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x3) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) socket(0x27, 0x3, 0x274) 13.954344669s ago: executing program 34 (id=4077): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf250600000008000400ac1414312700070073797374656d5f753a6f626a6563745f723a696e736d6f645f657865635f743a7330000008000500ac1414aa14000200fc0200"/90], 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x4004804) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000005c0)={0x0, 0xfff}, &(0x7f0000000600)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x3) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) socket(0x27, 0x3, 0x274) 1.581631812s ago: executing program 2 (id=4296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, &(0x7f00000003c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000180)=0x800004, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xce, 0x0, 0x6}]}) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 1.580345116s ago: executing program 2 (id=4298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = signalfd4(r0, &(0x7f0000000200)={[0x80000000]}, 0x8, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0xfffffffa, &(0x7f00000011c0)="d522e36a88fdf8cdbd8db52324707702dddbee814aa7b48031cb3bde9d4afc625190a673472b210230f2825fa60b8e02bda4c7b1abdbb78732633e338f19dd13d923fe2236d1e9a46a4a4eef7871afb3e5824fac8310d6e0638f65249cba679e5387392d2e9545510413acf31a49543e8e5cb82eec753f2ad4ef8f76f085041e271fe18580b917eb9218017813") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10, {0x207}}, './cgroup/../file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r14 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCINQ(r14, 0x541b, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc8, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '/dev/comedi3\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r16 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r16, 0x40946400, &(0x7f0000000300)={'dmm32at\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0xd, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x4006, 0xfff, 0x1, 0x2, 0x105, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x4b86dcaf, 0x2, 0x421, 0xd, 0xe6b, 0x6, 0x10008, 0x6, 0x1cdc, 0xfbfffff8]}) 1.203868807s ago: executing program 2 (id=4305): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x0, 0x989680}, 0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x4d, 0xd832}}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 1.203513091s ago: executing program 2 (id=4306): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socket(0x2b, 0x4, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mq_open(0x0, 0xc3, 0x40, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1d19"], 0x1c) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="3472616e733d67677270696f2c76657273696f6c3d397032303087a4752c00"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000540)='./file1\x00', r5}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x1, 0xa) fchdir(r6) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80000) sendmmsg$alg(r8, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) 1.053808737s ago: executing program 2 (id=4310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@broadcast]}) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWOBJ={0x50, 0x12, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x3c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x5}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e22}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x3}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e22}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x8906}]}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = io_uring_setup(0x3f0d, &(0x7f0000000180)={0x0, 0x2c3f, 0x2, 0x21, 0xab}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x4) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvfrom$inet_nvme(r7, 0x0, 0x0, 0x40000002, 0x0, 0x0) getpeername$packet(r7, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) 694.016704ms ago: executing program 6 (id=4318): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) 612.331807ms ago: executing program 5 (id=4319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000010a05000000000000000000020000000900010073797a300000b500bf5792ad2ba060e586c228682a090b38e4928baa7d85e5f2f30ebd00848a60c002f4e4db446f6adf7df24701aef405afe4025e157f924e068467eb793f8541ba"], 0x20}}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000010a05000000000000000000020000000900010073797a300000b500bf5792ad2ba060e586c228682a090b38e4928baa7d85e5f2f30ebd00848a60c002f4e4db446f6adf7df24701aef405afe4025e157f924e068467eb793f8541ba"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1f, 0x2, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"aa648c2ab4cfd33d46c2d8143c29d4d8", 0x0, 0x0, {0x6f, 0x2}, {0x3, 0xffffffff}, 0x100000000, [0x400, 0x5, 0x4000000000000005, 0x1, 0x3ff, 0x7, 0x80000001, 0x8, 0x6, 0xffffffffffffe3ce, 0x100000000, 0x5, 0x1, 0x5, 0x6, 0x80]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000800)={0x0, 0x9, 0x1, [0x2, 0xffffffff80000001, 0xc6d, 0x2, 0x1], [0x100, 0x40, 0xffffffffffff7fff, 0xffffffffffffff01, 0x5, 0x23a2276f, 0x8, 0x7, 0x10, 0x5, 0x0, 0x100000001, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7, 0x9, 0x9, 0x659, 0xd0, 0x7fffffffffffffff, 0x6d, 0x7fffffffffffffff, 0x4, 0x9, 0x3, 0x3, 0x4, 0x2, 0x8, 0x8, 0x9, 0x9, 0x8, 0x3, 0xff, 0x4, 0xf0b, 0x3, 0x9, 0xd9b, 0x7, 0x6, 0xbb5, 0x7, 0x2, 0x2, 0x3ff, 0x4f0c, 0x40, 0x3885, 0x0, 0x6, 0x2, 0x1, 0x8, 0xd, 0x5971, 0x6, 0x401, 0x3, 0x70c, 0x9, 0x80000000, 0x5, 0xd88, 0x7, 0x5, 0x1ff, 0x5, 0x8001, 0x9, 0x5, 0x4, 0xfffffffffffffffb, 0x9, 0x81, 0x8, 0x6, 0x3, 0x400, 0xa, 0x45a, 0x5, 0x50, 0xfffffffffffffff4, 0x5, 0x8add, 0x2, 0x0, 0x9, 0x1, 0xffffffff, 0xb, 0x4, 0xa3, 0x7, 0x0, 0x1800000000000, 0x9, 0x2, 0xfffffffffffffff9, 0x8, 0x7, 0xdf, 0xfba, 0x100000001, 0x8000, 0x0, 0x8, 0x4, 0xb971, 0x1, 0xaca6, 0x8, 0x3, 0x9, 0x81]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000800)={0x0, 0x9, 0x1, [0x2, 0xffffffff80000001, 0xc6d, 0x2, 0x1], [0x100, 0x40, 0xffffffffffff7fff, 0xffffffffffffff01, 0x5, 0x23a2276f, 0x8, 0x7, 0x10, 0x5, 0x0, 0x100000001, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7, 0x9, 0x9, 0x659, 0xd0, 0x7fffffffffffffff, 0x6d, 0x7fffffffffffffff, 0x4, 0x9, 0x3, 0x3, 0x4, 0x2, 0x8, 0x8, 0x9, 0x9, 0x8, 0x3, 0xff, 0x4, 0xf0b, 0x3, 0x9, 0xd9b, 0x7, 0x6, 0xbb5, 0x7, 0x2, 0x2, 0x3ff, 0x4f0c, 0x40, 0x3885, 0x0, 0x6, 0x2, 0x1, 0x8, 0xd, 0x5971, 0x6, 0x401, 0x3, 0x70c, 0x9, 0x80000000, 0x5, 0xd88, 0x7, 0x5, 0x1ff, 0x5, 0x8001, 0x9, 0x5, 0x4, 0xfffffffffffffffb, 0x9, 0x81, 0x8, 0x6, 0x3, 0x400, 0xa, 0x45a, 0x5, 0x50, 0xfffffffffffffff4, 0x5, 0x8add, 0x2, 0x0, 0x9, 0x1, 0xffffffff, 0xb, 0x4, 0xa3, 0x7, 0x0, 0x1800000000000, 0x9, 0x2, 0xfffffffffffffff9, 0x8, 0x7, 0xdf, 0xfba, 0x100000001, 0x8000, 0x0, 0x8, 0x4, 0xb971, 0x1, 0xaca6, 0x8, 0x3, 0x9, 0x81]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000c40)={{r1}, r3, 0xa, @unused=[0x91f0584, 0x4fb, 0x0, 0x1000], @devid=r4}) r5 = memfd_secret(0x80000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r5, 0xe6d87000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x6, 0x7000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r8, 0xc018aec0, &(0x7f00000000c0)={0x1}) sendmsg$nl_route(r6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) 612.118205ms ago: executing program 6 (id=4320): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) fanotify_init(0x0, 0x101000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000210014000300767863616e31000000000000000000001658097cc51256f3db7e1953f4991435a6316352ab186bbcb81c8c77ccd51db1a6a0185ed96230bc25be40a5ca87bcea4c3290f7d40411f9ea5e4dfd574db9094292daf341bd0e8d340ab63f65ab3c7857720226f95825a7f4ea3579c6fbe81c85c090d07c285d15264ee2f97acb91a677d38f77c82d18e951df0fbaf3effec78fab0b5148f26b54f8db34abc4d42656198a0ff32d2070bc69d0453d30f7dfc6b2d5c4b26bd57c18dede5e81b792529d7f7f1831edbc86d2df0c5854e0832f4c9d8471c876f0ecda6e7a2765a9c6cd1c135d63e2eb78066f0b6d23c0f2"], 0x34}}, 0x0) 534.106454ms ago: executing program 0 (id=4321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x32}, 0x80, &(0x7f0000000840)=[{&(0x7f00000008c0)="0400090021de000828348d34c2d0d8ac9a6ccbfdb03751a1ae9fd0493a85ef63393040ca329784fa68d2a6ac6da7ac8f14adfea2e4c3aac3dc25feac55983ca8d26ca5ecdff23c626b7675adbc92f41ccf115215962806efbc58f09be3f8d7095ac3bd777cbcb26e982ef909c4dda68646a99b88845a5a0ef9ceab16162086649d44be19d29c0e89ce1c9d7db65f097dd559525c45e91efd1c52c4c89e40d6da7994a534c805518c5d7abf1a34b30702865d6cceed0200000000000000be42b5640990dce7545762b81641ed2bbb752d62f915a6", 0xd4}, {&(0x7f0000000c40)="6398ff92b2c85af2e5defb6592a57205f0e9d37524ca210e1c2694951d09a55ff007b7c31af3873b271ef3a055c56ae4032023e35dc9c92946e440e3b74f3bd5af13cc0cd7d389012d7c446034b8ca1242b636fbc78639e94f5a27468a96013f4da2480375179fd5b846e6686f6c7a2f3928dff774f14f4c38506868d1e225645d4b96ac2798e91788937849d7b1db378b50f130fb758cf1a559122a13c523502891aaed24ac06cf9a96c83a73ef8ace73050cd302911919c1c744faab842b4c8a", 0xc1}], 0x2}, 0x4) 533.579767ms ago: executing program 5 (id=4322): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r1, 0x164, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB="8de935a2e3217002a6328c727d1ee3bbe378cb5a44f0149441430432af0c27968f2fab63d5418e7c5d2aee95d5418d11eb66801f494a1a023dae63abfd99d8057ee238b8ca16db3238a00eb0ba4655c325e681a22b2b41708df45006143fe48142ec38cb932fecb9ae3c1df82d0dfce40f621e8ffbe597f8855efb2621", @ANYBLOB="3000000002", @ANYRES64=r1, @ANYRES16=r1, @ANYRES8=r1], 0x8) 464.025913ms ago: executing program 5 (id=4323): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000800008700fe88a43de1"], 0xfdef) 463.554284ms ago: executing program 2 (id=4324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90807dc0, 0x0, 0x2, 0x3, 0x800004, 0x0, 0x0, 0x5a}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x88c02) r7 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x7e9b, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0xf23, 0x0, 0xc, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x0, 0x5, 0x400000, {0x8000000000006, 0x9, 0x0, 0x80000000000000ff, 0x8, 0x0, 0x9, 0x59, 0x3, 0x8000, 0x3fd, r4, r5, 0x3ff, 0x4}}, {0x4, 0x6, 0x2b, 0x8422, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xfc}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, @ax25={0x3, @default}, @isdn={0x22, 0xff, 0xb, 0x4, 0x8}, 0x9, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000080)='nicvf0\x00', 0x52, 0x5, 0x81}) 384.280276ms ago: executing program 0 (id=4325): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1000, 0x7, 0x0, 0x9}, 'syz1\x00', 0xc}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="bcd622d66ac64802f04286b0e145", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='f2fs\x00', 0x0, &(0x7f0000000380)='acl') close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f0000000040)) syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x0) 383.853676ms ago: executing program 5 (id=4326): r0 = syz_clone(0x8000000, &(0x7f0000000140)="2cc07f83e7f5eb78ddf327d3bd605eedc8ce9ae3e69b7e7b34027cda831c1bd0ebb3abd225c22f6fe52313e122b037a165de88d4161f033afdd24a16b79768a43d175010248795263e4294329346601b33c9d37580c7ddd1804e8272e7157c36f1fd9f72088f6a5fab655a5463034a39a5a0c6d98a92ecd8fc9d596a39c64255d66e017e834951d40b45225f674aed1aeb4b0a9c09daa1c04a54d8de5733b88075f1f51eef9994b97510c4137a4c732e", 0xb0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000680)="a65e82f489837f075f44991865e4dce1b927144812eb9296f4b1482222217ecb50d54e023f9629a07b904bb14f0e4e178022c585431bd07ed84fb75f84e4e89cba58e4b590c0802a4ffca9a024e615ff366deafca0cfefe524e71f3d78d8572a74195fffca98449edd3538b749e671b654e81e8542d7626804cb7d0c789afdb91edc3d78030121c0710ed486897b1f4d4f7487f769b8d5e822f36cc718ee95f3c9e7a0cb20bdd53e2656c25e259282bf3f0e32f767a8c23f988762188d11db24b9813837e2d87f6a5a82bf69debc91264caf59b83c4d56871b37a63ce2f6928487fb19f273cd2967baedeb0c934cbf33af391ecaf7e6760872aff47eb8682e2881a13e28125bfb71bccc046873a1116532560969d0bc0390279ff81776a649af306a81cbd07cca52ff748b24f8f4eea616e267adf8be8474b8fbcfba4d814248de78fbe8075dc6242fb3cf786311029a6a75bb87e50db08255ddcda2a2590aa5b7147416613c24711f45c96bf9430ebbad540f7d4fd18ca72966d1e402e49dc051ef216e71994dae48a8b5651563495319454d7f07d2dd741c715b2b612102306bfccb5fef2370203b9639c07844ae1477b1dd8c43feb0fd11e3b7214bed601ca326a9b1729cab3e1a1ca37ee978c586f7de4368a7c7fb924b7c33f70b439b1afa63ce5df23a20a09ed3cf0fe0200ee294ab82ae18b210bd9a4d334c27c71692a82f01fb9b7835f97b5ac470b5a966cd9b8930a988bdc156c51fd04ea11842d73ebce8f541cd595cfb61653b6d4c154a2db3b4d3a0dbc2ecb267bf783fe340f8421fbd086d43125d53102e873ac3733866cd1190a17d6d8b38a9ff42a645b9a8f9ec6a440a64150fc6eef533877f3ac3cccb5c8602f4d319226867eb8c770f5f90fb574f1379720838751721f250fc1de216756489411726fd00073a4afd0003abfdfadd3f87fc2c71c61280117620399d56f86b2edf0895075bd3b198cf6f222ed7b1a824889c8d324a9b0007bda3b405c1abec88d505af0a98291c18e632e46334574769c9886ca12003bc732a91ea8f815a3816c82342930b9be7fd7613d8ca3576a36beef136145cab58deaa8655a1da2668a45db7cd80dd72528290ce1f4fd4c1138207281bd98488ae0b333e8e879874254397547593a29d4832ffd19c4646a528a1c9437cda9d7353c5fe17ef3260e9b4eee44b850c478ee7f068ecf5d9a5f624ec9dee29583c1172e4b8abecfe02553a000df53dafbf066cd9d12e6a2e4d962c03cc46d28dae8c60e07a1d2541f8a8500d98ee2b03082f65a33499da95deff7dc1506546d9cd786b4b4c986a796684e0ebf00a52093e68b5d91c1cd74d126c5aa7535028dad0c7cdf5a78a1c773e54017ab12fc6f3042e9de5a57df5a426301c85d6834e57bffe3e7f623a4b29b0b45e19473ea5defc4b64dd755afde75ae14a5b87e85fd8cdcb132bab8b8b89a7c2baa11ceb021acb7df7463ec72a7b4a8c99054f9cd2ea245b5bca4817c6fd923d69db7d9a73980c7b93f2a64d38f155f567606338f34862b17e6840e26548c9f5bedbb187ddca0ee99b1adb91bf1e335c852d23ddc7dfd1b844915636887e0a4e7ee1adf4b349288bb38b2690e9a8e7f797075a6af09e14fa74b8ef1c5c1de2213608c6b9f8394d27cc4420735f45fe00169320f5423b328f6a29166dffa8a76fa0fa2fdc9df0d9101fb105f49157e4ab8f440000d041ff71f03414dfe8a2aa996e4e7a6c739042bc534404061b17cf8d687becba683c0b2620eee2c2600b1a8bba5d9cfc804e5ff9483c7f66e548248ef4e61673af6bf17c5ddbfeaef853e0c50f29631cf0bbac7f64e29aceba623a50e7423ea91e4db5cc85b4e9f3cceb2636146e0affa66a13417442fd2c7afa54d9a73263ea3b939bc8eebe8390dcba4c8d0c3084a5cbfee34aaff47b18ac9bbf6c61accce79b397566c845a130329a459c00e2e5f15ea552233bd45f76855c401dd18509c9cd38d1d696e6c9b517821d0d3a2e5ccffd933b5d2c748a8b62a3c30ac2ff4b429396ada0ecca5b10a6c02fb3effadfa5028aca1980d3150b46a59ecb5b3de85934da024cf4d85cf1f393ad1eac9d3a3daf8f486c4bc1627e0d3638d69d3b954dfa221da39cce622a4813c01f9b016918bd706c71c95587bd583e0b984c0bc3e3d54ec7ca4495d4eae04ccd0479e4f0697deed4a65679f7d5fc0bc03a6d637a8cf7c18279740b6db745f8b63cca9872059d237b53b22a32de98f31c42bceaf25857656951c0d67c48562aaeb3f3ee7008c937df00a664198178369b97e99319e37e99c9f7755a7f07a1545d7a0e7d98ce0267b66dac070dcbab7d26dea2507fb7db8300adee83eb2674189aa9f94e1f7d61d9b465c83c3301a76d78856e9e674f186044b9c56d56efd42b9882e57386280ca18048bbc75c1b2eda1cb4e113d8a785d3420eaad7099d8a51f41cad08329ba25c65b5d71b68469adb8b442607072bdbc48abc243addbf9cf0576fdf63f48e874749e9e8bd42c26f4613d6b3bbf6ac53f000d69ae0c2876500aeab927ce761d4ae5ee67c4a8a6541c4f85d497ae4c1aa7d5fc4da6a59e078a6a52f89e7cfed1c397dd5be791188ce14851fb7b653da41a8499c4294ec92eab37ed6a058e773a7b65eb18d403d62917bb8a39a0a622074bab33ddca41312d558fcabc04caf099f2a182ed910283969dca444bc4d26b61cb8333b2296fad9b7d1b43b4dac4f2622efc475f0ebb06520c9f241dc5c395a11fda1a2234ccd10bbf3fb84b5f244324efcabf4ae4185038b9398fa2eb15b22618208488d5cf88fb674771c97c604364cd7f67ee30a4e8ffacb6fc5a1b7d1ffd47433fb9ca0d180c8b8e8c67383d705be1721b730aec63f6260fa196e2aa6872434e836b444cde8829efa03d09361f8361d0981a9b0ec092d03cc09e97ad61b3cd6fb53bfd83b7df9efe3a5fa83b89351f2e9ab863de96717b17c426a1f35ca0f3add1aa421a3599b8f34202021cf104bad1a12f1c95145d1f54bcae1643cbcc16e81a346622b1dae5e7f32878b73df0e49610ab7d47a0f1d9593690e3bd9a7ca21a48d3947c76e3220196edd2f52c3d9970be565547593ccd31470264005a68b8b40854c6c330690cf7ce6304d650291f0fd48073dce4547578be417ced6c2cc18f3204e2e482758e80da777c6805d8918f0b5509b27a30cdd53196d167de0ba4d85e401ce30c2a894756814c13433d888d9fc38d0a278ed403d5764dad3ef6603d1e624879e9b6bfbe2e08df552b328a47ca3fe115ffcc39f52db16a93ae6cc792cb458b34d775b212079121b167878a18cd26e271ed659843309ac02ae9457dbaf0ee663fd86576f205ba65eadbc115924c5d8e6e313a0af66e7dc17cd22014b84b5f3b451b7457fa1de47c8c5106b1f55fdedd0c76de1a7bbc8ad6b4c1e5c6e0e3c7411b4f3b5c3c51d51dd28f6e148f763064acf9682b83fd025300a946c22344d7a52e660474baab5c90db3ad5dea3ccec589cec481497317f0926ddabd452edaec1a4fa39d43024c31c7d875ede446cd317768b104fc2dcaf49e7c9c15bd54124b4b75df75c019a0c6bc3c9fd07ec275cfb134518b9ad652c54d1b46307a2bfd4905e05e6ce9c4f349a80d21eb11f77f27a98b292e04f51192e918b43631ed0a00f6a016703abce9a11bdf86bdc2f70fbea7434742cae6c231e41beaedab9d287240a7e78e414aa78c83076cab7992dfbcada35fe752898f864de6d1f0fa90d909a5cf66b19bb3367b3d1004400acc2e65dfbe7eba11898b581de402e7667314d6294ec05cc44cb64c65ff9d104519947a5e78cca432062f3c86a83830be629b84aaa46b25b6d960f2f441554287352617cb97b85692168b1905c9741bde8d8330f1a67d23017cfaa264717b231e50e6ae67296d3930ad10870a6fa39691717f14f8e59ad21d6b0bfa4662563421a3ba66c1de42b28a313fe1cb63c82a11030ee203b8c5210880069f2a4fad372ec2323b174a28b5f7cddcc21f6ad939df3246ae70d1e3123cab6cd71346a1cd26e63da5279aadf3c35329001ffc99d343a6f8deef69ebdcb732fa836617f472c7a8d6f815b89527cc98af8160736e707d5fb7675b480e5ac9321684d9000e766d9e8fea69a292050477c9dfb524dc7e6dbe25e2b356199fdb8b9ca66f965ca47338e13cf5ffa74590cef8b8fafa5779bf5300f777e4cf3bc58eac8ee943ba9255843a8168bd451b8b9eb577c01742a0c63c28da6882dd37f7705d54df16359471dc7b54f85e8725deca2966ee82cee9325ac5f7635adf30fe4dfeeeaf0150ec8df578cae38e685211ed913b04dbce79686f1d0d4d21258d5c3ffa4c9479c0b267dfc997b1c83a0e941f71980c050cf36508af4c8abae86cb743ffa49a9558be80ac63bd1622d5e040079f0a54b05c5e213832881a070f6e0c6419e63dbecc1895b876aa1340f485b20af7489fac486e9dc5f1dbd973247eecbfe2588f815f7f67fc8761f38577134fdac5ff9c8d374064789e858a8013ccc1ee19e5bf3ce19e757c7dcc25fa98e3869dbc80c25a8308419cab22e4dc8ee990375a7cc067a6d00c9f10ad9ad6cb22c45414f974ba34b4222e8ee050ce6fe0cec21af388c4574d6cf5a10798e73defc182c97b39e1fd9c0786b3a4a3b9ba4c7194168f668b931403c6d5236f2fff11362e8a8596e8310e4f2979226f4fb41e2b72e0857d591d55ae8e86e8a40578b8a3e858ff1609959f40eb10ba3d2feb3b8b8fc1d50a88292b444bb61676f7f41919c8ca09133e2bea2f00c05ba3b0f4f24c4b01e66daae47d01dc9ff3675db99a9f4c46e54906e9dd1ba49a7962d862fd06b8a922974de37631d000082601281c4cc98202c369bb3eb1adaaf832d798b4bebcb2d8463e5b5d26a11ec6203774d71feaef38e1590f25456e5a6c3511d7501681212398b6cd4ab01894c1da7a035a823fb9baef2ed72330c3076cf6a9319555dbd9edfa8331a152b118f883e2d4735798a2cf176442c40c92d7545eb287187a5d293911968571d5e9c2a8a44afe4a1a6a4d118abd05536803bd4c083f6ac4a0e3bc73c8507a87938aaae2dfb46a40bde1e9a09cc0fae491d769ef6b823d7029003c38164c9e067cbc3f0918c554c905b5f5af58d9725b8609421a715628f26718b67a0b632ab9dfa7caa4ea0b0306e0dd8705c13b244dec1fe9ec158dea16d99998da5e0ab950bde53b4c419ce6f71c7751b627a441497fe11d8ac20e6de05f4b6e1d971b273bea156bc11a07b8d8bb5ec70788a39d7d96582a39cd30a6803c38d12cf7ae72a5ddbc196dad2a97895a0dc9c1cfe0256b0fa2f36d34fff9f01a6597493c4eae3f20b824faf16ebc81701ada767b31c39519f137a37897af9661707d620bf903b8418a5efd4ff7950db637deeb94959ec70d810ba78432348f8274e60d78308e11f279b15823d4612e19b4dd302efc059cb5226bfbb14e943903d7d47165f40d67d933df02d6a871fef2f37c761914e8a68c2f61e2c2d311c55e1c445b3bebed75215b2cb24970675e20f19e4d623d7279e259ca3af39f2a2e78c063045ede91d2dc73078ef18d458dfe3299afe4f3aaf93bce9f797b2cd87286dd4d5b3e51d0859435f89482b72787a82a55815bc305573cab700e710ffa0423bc4434b26d219f59354c919686ca45cd821e1b32e08c8d4978357b4610279d420430610eb357563b0faa196f5c1b45ba9c675ab2f78d60eccbb057d18a227b3e22f321b4d78fe93738b757dbec6ece") fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x6) kcmp(r0, r1, 0x3, r2, 0xffffffffffffffff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x3b5c, 0x12000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 320.444709ms ago: executing program 0 (id=4327): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70b92c, 0x25dfdbfa, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000080)={0x38, 0x3, 0x0, {0x1, 0x17, 0x0, '\\\x03\x00c(\t\x00\x00\x00\x00\x00\x00\x00\x87d\xd0\x03Z\x88\xdb\xf0\xab0'}}, 0x38) 320.071163ms ago: executing program 6 (id=4328): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x46, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x8, 0x0, 0x0, 0x9}, 0xe) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f00000006c0), 0x7, 0x80001) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = semget$private(0x0, 0x1, 0x656) semctl$SETVAL(r1, 0x3, 0x10, 0x0) listen(r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc0080df33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r5, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x39) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000002540)=ANY=[@ANYBLOB="180000778fd11cad5520a0c8ab07bd36b50300000000000000009520000000e800"/42], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(r6, &(0x7f0000000500)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r8 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 273.877823ms ago: executing program 5 (id=4329): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000380)) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 273.1811ms ago: executing program 6 (id=4330): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x6000, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 272.78254ms ago: executing program 0 (id=4331): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 200.576411ms ago: executing program 0 (id=4332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000010000000000aaff02000000000000000000000000000188"], 0xffe) 200.295461ms ago: executing program 6 (id=4333): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x2, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3}, 0xe) shutdown(r0, 0x1) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000580)=""/206, 0xce}], 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="560395d2b2cf8e0b167617e06482193ea74b2991cfed576400b70e2d0b8e98c9ed6cc1bdeb683424252820203d3d4b4c87f6ac46863e72400c6a0c5453712c668b0e9008efceb61ca0ef00d7d31a2f4365030dab6a2bf5aeb9e530ab5d", 0x5d) 124.3947ms ago: executing program 5 (id=4334): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000800008700fe88a43de1"], 0xfdef) 123.895331ms ago: executing program 6 (id=4335): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000f00", @ANYRES32=0x0, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400ab003700010a000000000000000080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 0s ago: executing program 0 (id=4336): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000f00", @ANYRES32=0x0, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400ab003700010a000000000000000080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) (fail_nth: 1) kernel console output (not intermixed with test programs): 9474][T15670] Call Trace: [ 279.379481][T15670] [ 279.379488][T15670] dump_stack_lvl+0x100/0x190 [ 279.379517][T15670] should_fail_ex.cold+0x5/0xa [ 279.379539][T15670] should_failslab+0xc2/0x120 [ 279.379565][T15670] __kmalloc_node_noprof+0xe6/0x850 [ 279.379586][T15670] ? qdisc_alloc+0xbb/0xb30 [ 279.379616][T15670] qdisc_alloc+0xbb/0xb30 [ 279.379642][T15670] qdisc_create_dflt+0x93/0x4c0 [ 279.379669][T15670] taprio_init+0x48f/0x920 [ 279.379689][T15670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.379712][T15670] ? __pfx_taprio_init+0x10/0x10 [ 279.379734][T15670] ? qdisc_alloc+0x81b/0xb30 [ 279.379758][T15670] ? __pfx_taprio_init+0x10/0x10 [ 279.379778][T15670] qdisc_create+0x47b/0x1090 [ 279.379802][T15670] tc_modify_qdisc+0xdcf/0x2120 [ 279.379825][T15670] ? __mutex_lock+0x26a/0x1b90 [ 279.379845][T15670] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 279.379884][T15670] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 279.379906][T15670] rtnetlink_rcv_msg+0x3c9/0xe90 [ 279.379925][T15670] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.379947][T15670] ? ref_tracker_free+0x37e/0x6c0 [ 279.379974][T15670] netlink_rcv_skb+0x159/0x420 [ 279.379992][T15670] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.380010][T15670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.380036][T15670] ? netlink_deliver_tap+0x1ae/0xcc0 [ 279.380057][T15670] netlink_unicast+0x5aa/0x870 [ 279.380078][T15670] ? __pfx_netlink_unicast+0x10/0x10 [ 279.380105][T15670] netlink_sendmsg+0x8b0/0xda0 [ 279.380126][T15670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.380139][T15670] ? __might_fault+0xa0/0x140 [ 279.380165][T15670] ____sys_sendmsg+0xa54/0xc30 [ 279.380181][T15670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.380202][T15670] ___sys_sendmsg+0x190/0x1e0 [ 279.380218][T15670] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.380250][T15670] __sys_sendmsg+0x170/0x220 [ 279.380261][T15670] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.380281][T15670] do_syscall_64+0x106/0xf80 [ 279.380292][T15670] ? clear_bhb_loop+0x40/0x90 [ 279.380306][T15670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.380318][T15670] RIP: 0033:0x7f23d0b9c799 [ 279.380329][T15670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.380340][T15670] RSP: 002b:00007f23d1aa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.380351][T15670] RAX: ffffffffffffffda RBX: 00007f23d0e15fa0 RCX: 00007f23d0b9c799 [ 279.380359][T15670] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 279.380365][T15670] RBP: 00007f23d1aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 279.380372][T15670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.380379][T15670] R13: 00007f23d0e16038 R14: 00007f23d0e15fa0 R15: 00007ffd741928e8 [ 279.380395][T15670] [ 279.556120][T15625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.564160][T15625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.572447][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.575641][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.587805][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.591144][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.632455][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.635592][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.660555][T15672] syzkaller0: entered promiscuous mode [ 279.662353][T15672] syzkaller0: entered allmulticast mode [ 279.665283][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.669379][T15672] tipc: Enabled bearer , priority 0 [ 279.669926][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.675180][T15671] tipc: Resetting bearer [ 279.690990][T15671] tipc: Disabling bearer [ 279.714510][ T40] audit: type=1400 audit(2000000009.940:548): avc: denied { mounton } for pid=15625 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 279.946592][T15682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.980963][T15682] netlink: 'syz.4.3412': attribute type 4 has an invalid length. [ 280.020162][T15682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=15682 comm=syz.4.3412 [ 280.161311][T15684] tipc: Enabled bearer , priority 0 [ 280.165040][T15683] tipc: Disabling bearer [ 280.368289][T15690] syzkaller1: entered promiscuous mode [ 280.370869][T15690] syzkaller1: entered allmulticast mode [ 280.487126][ T5933] Bluetooth: hci0: command tx timeout [ 280.916800][ T55] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 281.078240][ T55] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 281.080893][ T55] usb 7-1: config 0 has no interface number 0 [ 281.082867][ T55] usb 7-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 281.085841][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.090729][ T55] usb 7-1: config 0 descriptor?? [ 281.294931][T15696] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 281.301389][ T55] usb 7-1: string descriptor 0 read error: -71 [ 281.308650][ T55] usb-storage 7-1:0.168: USB Mass Storage device detected [ 281.316855][ T55] usb-storage 7-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 281.377663][ T55] usb 7-1: USB disconnect, device number 3 [ 282.566800][ T5933] Bluetooth: hci0: command tx timeout [ 282.694994][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'. [ 282.744923][T15707] FAULT_INJECTION: forcing a failure. [ 282.744923][T15707] name failslab, interval 1, probability 0, space 0, times 0 [ 282.749058][T15707] CPU: 0 UID: 0 PID: 15707 Comm: syz.2.3423 Not tainted syzkaller #0 PREEMPT(full) [ 282.749074][T15707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 282.749081][T15707] Call Trace: [ 282.749085][T15707] [ 282.749090][T15707] dump_stack_lvl+0x100/0x190 [ 282.749115][T15707] should_fail_ex.cold+0x5/0xa [ 282.749130][T15707] ? taprio_init+0x2ee/0x920 [ 282.749145][T15707] should_failslab+0xc2/0x120 [ 282.749163][T15707] __kmalloc_noprof+0xe0/0x850 [ 282.749181][T15707] taprio_init+0x2ee/0x920 [ 282.749195][T15707] ? do_syscall_64+0x106/0xf80 [ 282.749207][T15707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.749221][T15707] ? lockdep_init_map_type+0x5c/0x250 [ 282.749233][T15707] ? __pfx_taprio_init+0x10/0x10 [ 282.749248][T15707] ? qdisc_alloc+0x81b/0xb30 [ 282.749266][T15707] ? __pfx_taprio_init+0x10/0x10 [ 282.749281][T15707] qdisc_create+0x47b/0x1090 [ 282.749298][T15707] tc_modify_qdisc+0xdcf/0x2120 [ 282.749314][T15707] ? __mutex_lock+0x26a/0x1b90 [ 282.749328][T15707] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 282.749343][T15707] ? __lock_acquire+0x4a5/0x2630 [ 282.749376][T15707] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 282.749391][T15707] rtnetlink_rcv_msg+0x3c9/0xe90 [ 282.749405][T15707] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.749420][T15707] ? ref_tracker_free+0x37e/0x6c0 [ 282.749439][T15707] netlink_rcv_skb+0x159/0x420 [ 282.749452][T15707] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.749465][T15707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.749482][T15707] ? netlink_deliver_tap+0x1ae/0xcc0 [ 282.749497][T15707] netlink_unicast+0x5aa/0x870 [ 282.749512][T15707] ? __pfx_netlink_unicast+0x10/0x10 [ 282.749530][T15707] netlink_sendmsg+0x8b0/0xda0 [ 282.749551][T15707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.749569][T15707] ? __might_fault+0xa0/0x140 [ 282.749600][T15707] ____sys_sendmsg+0xa54/0xc30 [ 282.749621][T15707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.749648][T15707] ___sys_sendmsg+0x190/0x1e0 [ 282.749670][T15707] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.749717][T15707] __sys_sendmsg+0x170/0x220 [ 282.749735][T15707] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.749768][T15707] do_syscall_64+0x106/0xf80 [ 282.749782][T15707] ? clear_bhb_loop+0x40/0x90 [ 282.749801][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.749819][T15707] RIP: 0033:0x7f7205d9c799 [ 282.749834][T15707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.749850][T15707] RSP: 002b:00007f7206cc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.749867][T15707] RAX: ffffffffffffffda RBX: 00007f7206015fa0 RCX: 00007f7205d9c799 [ 282.749877][T15707] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 282.749886][T15707] RBP: 00007f7206cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 282.749895][T15707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.749906][T15707] R13: 00007f7206016038 R14: 00007f7206015fa0 R15: 00007ffc8068b898 [ 282.749927][T15707] [ 282.942623][T15709] SELinux: syz.0.3424 (15709) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 283.132767][T15723] FAULT_INJECTION: forcing a failure. [ 283.132767][T15723] name failslab, interval 1, probability 0, space 0, times 0 [ 283.136950][T15723] CPU: 3 UID: 0 PID: 15723 Comm: syz.2.3427 Not tainted syzkaller #0 PREEMPT(full) [ 283.136970][T15723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.136977][T15723] Call Trace: [ 283.136983][T15723] [ 283.136988][T15723] dump_stack_lvl+0x100/0x190 [ 283.137010][T15723] should_fail_ex.cold+0x5/0xa [ 283.137029][T15723] should_failslab+0xc2/0x120 [ 283.137054][T15723] __kmalloc_node_noprof+0xe6/0x850 [ 283.137075][T15723] ? qdisc_alloc+0xbb/0xb30 [ 283.137099][T15723] ? __pfx_fifo_init+0x10/0x10 [ 283.137120][T15723] qdisc_alloc+0xbb/0xb30 [ 283.137140][T15723] qdisc_create_dflt+0x93/0x4c0 [ 283.137159][T15723] taprio_init+0x48f/0x920 [ 283.137178][T15723] ? __pfx_taprio_init+0x10/0x10 [ 283.137194][T15723] ? qdisc_alloc+0x81b/0xb30 [ 283.137219][T15723] ? __pfx_taprio_init+0x10/0x10 [ 283.137240][T15723] qdisc_create+0x47b/0x1090 [ 283.137264][T15723] tc_modify_qdisc+0xdcf/0x2120 [ 283.137287][T15723] ? __mutex_lock+0x26a/0x1b90 [ 283.137302][T15723] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 283.137317][T15723] ? __lock_acquire+0x4a5/0x2630 [ 283.137345][T15723] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 283.137366][T15723] rtnetlink_rcv_msg+0x3c9/0xe90 [ 283.137380][T15723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.137395][T15723] ? ref_tracker_free+0x37e/0x6c0 [ 283.137414][T15723] netlink_rcv_skb+0x159/0x420 [ 283.137427][T15723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.137439][T15723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.137457][T15723] ? netlink_deliver_tap+0x1ae/0xcc0 [ 283.137471][T15723] netlink_unicast+0x5aa/0x870 [ 283.137486][T15723] ? __pfx_netlink_unicast+0x10/0x10 [ 283.137503][T15723] netlink_sendmsg+0x8b0/0xda0 [ 283.137521][T15723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.137538][T15723] ? __might_fault+0xa0/0x140 [ 283.137558][T15723] ____sys_sendmsg+0xa54/0xc30 [ 283.137574][T15723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.137594][T15723] ___sys_sendmsg+0x190/0x1e0 [ 283.137609][T15723] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.137640][T15723] __sys_sendmsg+0x170/0x220 [ 283.137654][T15723] ? __pfx___sys_sendmsg+0x10/0x10 [ 283.137685][T15723] do_syscall_64+0x106/0xf80 [ 283.137698][T15723] ? clear_bhb_loop+0x40/0x90 [ 283.137712][T15723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.137724][T15723] RIP: 0033:0x7f7205d9c799 [ 283.137734][T15723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.137745][T15723] RSP: 002b:00007f7206cc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.137756][T15723] RAX: ffffffffffffffda RBX: 00007f7206015fa0 RCX: 00007f7205d9c799 [ 283.137763][T15723] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 283.137771][T15723] RBP: 00007f7206cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 283.137777][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 283.137784][T15723] R13: 00007f7206016038 R14: 00007f7206015fa0 R15: 00007ffc8068b898 [ 283.137798][T15723] [ 283.332307][T15725] netlink: 'syz.4.3428': attribute type 11 has an invalid length. [ 283.334990][T15725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3428'. [ 283.443005][T15730] siw: device registration error -23 [ 284.192463][T15764] vcan1: entered allmulticast mode [ 284.238260][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.241819][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.245949][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.250646][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.254106][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.291612][T15767] lo speed is unknown, defaulting to 1000 [ 284.300535][T15776] FAULT_INJECTION: forcing a failure. [ 284.300535][T15776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.304870][T15776] CPU: 1 UID: 0 PID: 15776 Comm: syz.4.3448 Not tainted syzkaller #0 PREEMPT(full) [ 284.304887][T15776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.304895][T15776] Call Trace: [ 284.304900][T15776] [ 284.304905][T15776] dump_stack_lvl+0x100/0x190 [ 284.304928][T15776] should_fail_ex.cold+0x5/0xa [ 284.304943][T15776] _copy_to_user+0x32/0xd0 [ 284.304961][T15776] simple_read_from_buffer+0xcb/0x170 [ 284.304985][T15776] proc_fail_nth_read+0x1af/0x230 [ 284.305009][T15776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.305035][T15776] ? rw_verify_area+0xce/0x6d0 [ 284.305060][T15776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.305079][T15776] vfs_read+0x1e4/0xb30 [ 284.305097][T15776] ? __pfx_vfs_read+0x10/0x10 [ 284.305113][T15776] ? __fget_files+0x215/0x3d0 [ 284.305127][T15776] ? __fget_files+0x21f/0x3d0 [ 284.305141][T15776] ksys_read+0x12a/0x250 [ 284.305162][T15776] ? __pfx_ksys_read+0x10/0x10 [ 284.305182][T15776] do_syscall_64+0x106/0xf80 [ 284.305194][T15776] ? clear_bhb_loop+0x40/0x90 [ 284.305207][T15776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.305219][T15776] RIP: 0033:0x7fdd2515cfce [ 284.305229][T15776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 284.305240][T15776] RSP: 002b:00007fdd26120fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.305251][T15776] RAX: ffffffffffffffda RBX: 00007fdd261216c0 RCX: 00007fdd2515cfce [ 284.305259][T15776] RDX: 000000000000000f RSI: 00007fdd261210a0 RDI: 0000000000000007 [ 284.305266][T15776] RBP: 00007fdd26121090 R08: 0000000000000000 R09: 0000000000000000 [ 284.305272][T15776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.305279][T15776] R13: 00007fdd25416038 R14: 00007fdd25415fa0 R15: 00007ffc04dd92d8 [ 284.305293][T15776] [ 284.337014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.378231][T15767] chnl_net:caif_netlink_parms(): no params data found [ 284.408282][T15787] lo speed is unknown, defaulting to 1000 [ 284.461039][T15793] IPv4: Oversized IP packet from 127.202.26.0 [ 284.498914][T15767] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.501202][T15767] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.503497][T15767] bridge_slave_0: entered allmulticast mode [ 284.512254][T15767] bridge_slave_0: entered promiscuous mode [ 284.515328][T15767] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.517880][T15767] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.520237][T15767] bridge_slave_1: entered allmulticast mode [ 284.522963][T15767] bridge_slave_1: entered promiscuous mode [ 284.545908][T15767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.550788][T15767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.597956][T15767] team0: Port device team_slave_0 added [ 284.600941][T15767] team0: Port device team_slave_1 added [ 284.622607][T15767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.624955][T15767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.636900][T15767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.647227][ T5933] Bluetooth: hci0: command tx timeout [ 284.659605][T15767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.661776][T15767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.668732][T15806] IPv4: Oversized IP packet from 127.202.26.0 [ 284.670231][T15767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.688139][T15804] FAULT_INJECTION: forcing a failure. [ 284.688139][T15804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.696781][T15804] CPU: 0 UID: 0 PID: 15804 Comm: syz.4.3456 Not tainted syzkaller #0 PREEMPT(full) [ 284.696798][T15804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.696805][T15804] Call Trace: [ 284.696809][T15804] [ 284.696814][T15804] dump_stack_lvl+0x100/0x190 [ 284.696837][T15804] should_fail_ex.cold+0x5/0xa [ 284.696851][T15804] _copy_from_iter+0x1f4/0x1690 [ 284.696870][T15804] ? _copy_from_iter+0x270/0x1690 [ 284.696886][T15804] ? __pfx__copy_from_iter+0x10/0x10 [ 284.696903][T15804] ? __pfx__copy_from_iter+0x10/0x10 [ 284.696918][T15804] ? _copy_from_iter+0x270/0x1690 [ 284.696936][T15804] copy_page_from_iter+0xde/0x180 [ 284.696954][T15804] skb_copy_datagram_from_iter+0x399/0x720 [ 284.696976][T15804] tun_get_user+0x1884/0x3e10 [ 284.696995][T15804] ? __pfx_tun_get_user+0x10/0x10 [ 284.697010][T15804] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 284.697031][T15804] ? find_held_lock+0x2b/0x80 [ 284.697046][T15804] ? tun_get+0x191/0x370 [ 284.697057][T15804] ? tun_get+0x191/0x370 [ 284.697072][T15804] tun_chr_write_iter+0xdc/0x200 [ 284.697087][T15804] vfs_write+0x6ac/0x1070 [ 284.697104][T15804] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 284.697119][T15804] ? __pfx_vfs_write+0x10/0x10 [ 284.697134][T15804] ? find_held_lock+0x2b/0x80 [ 284.697156][T15804] ksys_write+0x12a/0x250 [ 284.697173][T15804] ? __pfx_ksys_write+0x10/0x10 [ 284.697198][T15804] do_syscall_64+0x106/0xf80 [ 284.697209][T15804] ? clear_bhb_loop+0x40/0x90 [ 284.697223][T15804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.697235][T15804] RIP: 0033:0x7fdd2519c799 [ 284.697245][T15804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.697256][T15804] RSP: 002b:00007fdd26121028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.697267][T15804] RAX: ffffffffffffffda RBX: 00007fdd25415fa0 RCX: 00007fdd2519c799 [ 284.697274][T15804] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 284.697281][T15804] RBP: 00007fdd26121090 R08: 0000000000000000 R09: 0000000000000000 [ 284.697288][T15804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.697294][T15804] R13: 00007fdd25416038 R14: 00007fdd25415fa0 R15: 00007ffc04dd92d8 [ 284.697307][T15804] [ 284.801446][T15767] hsr_slave_0: entered promiscuous mode [ 284.804237][T15767] hsr_slave_1: entered promiscuous mode [ 284.807953][T15767] debugfs: 'hsr0' already exists in 'hsr' [ 284.808100][T15808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3458'. [ 284.810124][T15767] Cannot create hsr debugfs directory [ 284.896820][T15810] tipc: Enabling of bearer rejected, failed to enable media [ 285.004340][T15824] syzkaller0: entered promiscuous mode [ 285.009522][T15824] syzkaller0: entered allmulticast mode [ 285.181019][ T40] audit: type=1400 audit(2000000015.410:549): avc: denied { setattr } for pid=15829 comm="syz.2.3466" path="socket:[56998]" dev="sockfs" ino=56998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.338382][T15843] syzkaller0: entered promiscuous mode [ 285.340619][T15843] syzkaller0: entered allmulticast mode [ 285.346233][T15843] FAULT_INJECTION: forcing a failure. [ 285.346233][T15843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.350636][T15843] CPU: 0 UID: 0 PID: 15843 Comm: syz.2.3471 Not tainted syzkaller #0 PREEMPT(full) [ 285.350659][T15843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.350670][T15843] Call Trace: [ 285.350677][T15843] [ 285.350684][T15843] dump_stack_lvl+0x100/0x190 [ 285.350715][T15843] should_fail_ex.cold+0x5/0xa [ 285.350738][T15843] _copy_from_iter+0x43a/0x1690 [ 285.350768][T15843] ? __pfx__copy_from_iter+0x10/0x10 [ 285.350791][T15843] ? find_held_lock+0x2b/0x80 [ 285.350813][T15843] ? dev_get_by_index+0x180/0x380 [ 285.350840][T15843] ? dev_get_by_index+0x180/0x380 [ 285.350873][T15843] packet_sendmsg+0x1dbd/0x53c0 [ 285.350898][T15843] ? avc_has_perm+0x5a/0x1e0 [ 285.350924][T15843] ? __pfx_avc_has_perm+0x10/0x10 [ 285.350950][T15843] ? __lock_acquire+0x4a5/0x2630 [ 285.350981][T15843] ? sock_has_perm+0x258/0x2f0 [ 285.351008][T15843] ? __pfx_sock_has_perm+0x10/0x10 [ 285.351036][T15843] ? __pfx_packet_sendmsg+0x10/0x10 [ 285.351071][T15843] ____sys_sendmsg+0xa54/0xc30 [ 285.351096][T15843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.351128][T15843] ___sys_sendmsg+0x190/0x1e0 [ 285.351168][T15843] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.351221][T15843] __sys_sendmsg+0x170/0x220 [ 285.351241][T15843] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.351271][T15843] do_syscall_64+0x106/0xf80 [ 285.351288][T15843] ? clear_bhb_loop+0x40/0x90 [ 285.351310][T15843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.351328][T15843] RIP: 0033:0x7f7205d9c799 [ 285.351344][T15843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.351361][T15843] RSP: 002b:00007f7206cc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.351380][T15843] RAX: ffffffffffffffda RBX: 00007f7206015fa0 RCX: 00007f7205d9c799 [ 285.351391][T15843] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000005 [ 285.351402][T15843] RBP: 00007f7206cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 285.351412][T15843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.351428][T15843] R13: 00007f7206016038 R14: 00007f7206015fa0 R15: 00007ffc8068b898 [ 285.351452][T15843] [ 286.326833][ T5933] Bluetooth: hci3: command tx timeout [ 286.726842][ T5933] Bluetooth: hci0: command tx timeout [ 287.912722][T15814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.918544][T15767] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.929931][T15767] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.940652][T15767] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.945637][T15767] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.209487][T15767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.277128][T15871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=15871 comm=syz.0.3480 [ 288.281940][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 288.294705][T15870] syzkaller0: entered promiscuous mode [ 288.296499][T15870] syzkaller0: entered allmulticast mode [ 288.307884][T15767] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.332462][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.334861][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.341739][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.344052][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.371980][T15767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.375370][T15767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.406810][ T5933] Bluetooth: hci3: command tx timeout [ 288.446068][T15878] syzkaller0: entered promiscuous mode [ 288.448438][T15878] syzkaller0: entered allmulticast mode [ 288.461410][ T40] audit: type=1400 audit(2000000018.690:550): avc: denied { relabelfrom } for pid=15877 comm="syz.4.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 288.483613][ T40] audit: type=1400 audit(2000000018.690:551): avc: denied { relabelto } for pid=15877 comm="syz.4.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 289.498887][T15886] syzkaller1: entered promiscuous mode [ 289.501329][T15886] syzkaller1: entered allmulticast mode [ 289.516866][T15767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.591159][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3486'. [ 289.595158][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3486'. [ 289.601603][T15899] tipc: Started in network mode [ 289.603436][T15899] tipc: Node identity 06f8d4518b22, cluster identity 4711 [ 289.607931][T15899] tipc: Enabled bearer , priority 0 [ 289.612990][T15898] tipc: Disabling bearer [ 289.650016][T15895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.656619][T15894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.681708][T15767] veth0_vlan: entered promiscuous mode [ 289.689281][T15767] veth1_vlan: entered promiscuous mode [ 289.718842][T15767] veth0_macvtap: entered promiscuous mode [ 289.729234][T15767] veth1_macvtap: entered promiscuous mode [ 289.729740][T15906] netlink: 'syz.4.3488': attribute type 1 has an invalid length. [ 289.772376][T15767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.780146][T15767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.787243][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.790641][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.794861][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.798632][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.804251][T15907] netlink: 'syz.4.3488': attribute type 10 has an invalid length. [ 289.807177][T15907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3488'. [ 289.811381][T15907] dummy0: entered promiscuous mode [ 289.848500][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.851201][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.960177][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.963208][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.017056][ T55] IPVS: starting estimator thread 0... [ 290.021626][ T840] hid-generic 0001:0A8C:9A72.0002: item fetching failed at offset 6/7 [ 290.024637][ T840] hid-generic 0001:0A8C:9A72.0002: probe with driver hid-generic failed with error -22 [ 290.071938][T15917] netlink: 'syz.4.3492': attribute type 11 has an invalid length. [ 290.075593][T15917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3492'. [ 290.123463][T15922] QAT: failed to copy from user cfg_data. [ 290.127738][T15912] IPVS: using max 43 ests per chain, 103200 per kthread [ 290.189661][T15925] netlink: 'syz.4.3495': attribute type 1 has an invalid length. [ 290.195069][T15928] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.225700][T15925] bond1: entered promiscuous mode [ 290.228774][T15925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.234815][T15925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15925 comm=syz.4.3495 [ 290.249512][T15935] netlink: 344 bytes leftover after parsing attributes in process `syz.5.3496'. [ 290.457101][ T921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 290.486819][ T5933] Bluetooth: hci3: command tx timeout [ 290.597078][ T921] usb 5-1: device descriptor read/64, error -71 [ 290.622806][T15944] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3500'. [ 290.829607][T15954] syzkaller1: entered promiscuous mode [ 290.831971][T15954] syzkaller1: entered allmulticast mode [ 290.836898][ T921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 290.928791][T15957] netlink: 'syz.4.3503': attribute type 11 has an invalid length. [ 290.931517][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3503'. [ 290.967197][ T921] usb 5-1: device descriptor read/64, error -71 [ 291.048290][T15961] syzkaller0: entered promiscuous mode [ 291.050669][T15961] syzkaller0: entered allmulticast mode [ 291.077337][ T921] usb usb5-port1: attempt power cycle [ 291.122873][T15967] syzkaller1: entered promiscuous mode [ 291.124934][T15967] syzkaller1: entered allmulticast mode [ 291.236729][ T40] audit: type=1400 audit(2000000021.460:552): avc: denied { read } for pid=15968 comm="syz.4.3509" path="socket:[60861]" dev="sockfs" ino=60861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.292280][T15974] fuse: Bad value for 'user_id' [ 291.294244][T15974] fuse: Bad value for 'user_id' [ 291.425663][T15984] [U]  [ 291.448357][ T921] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 291.477973][ T921] usb 5-1: device descriptor read/8, error -71 [ 291.687855][T15992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3518'. [ 291.692251][T15992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3518'. [ 291.724783][T15992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.730688][T15991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.737562][ T921] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 291.759012][ T921] usb 5-1: device descriptor read/8, error -71 [ 291.868186][ T921] usb usb5-port1: unable to enumerate USB device [ 292.115363][T15997] syzkaller0: entered promiscuous mode [ 292.117343][T15997] syzkaller0: entered allmulticast mode [ 292.122371][T15997] TC_ACT_REPEAT abuse ? [ 292.249585][T15999] syzkaller0: entered promiscuous mode [ 292.252024][T15999] syzkaller0: entered allmulticast mode [ 292.257534][T15999] tipc: Enabled bearer , priority 0 [ 292.263965][T15998] tipc: Resetting bearer [ 292.274494][T15998] tipc: Disabling bearer [ 292.371784][ T40] audit: type=1400 audit(2000000022.600:553): avc: denied { mount } for pid=16011 comm="syz.4.3523" name="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 292.381903][ T40] audit: type=1400 audit(2000000022.600:554): avc: denied { search } for pid=16011 comm="syz.4.3523" name="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.390260][ T40] audit: type=1400 audit(2000000022.600:555): avc: denied { search } for pid=16011 comm="syz.4.3523" name="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.400227][ T40] audit: type=1400 audit(2000000022.600:556): avc: denied { read open } for pid=16011 comm="syz.4.3523" path="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.410370][ T40] audit: type=1400 audit(2000000022.600:557): avc: denied { search } for pid=16011 comm="syz.4.3523" name="/" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.506631][ T40] audit: type=1400 audit(2000000022.730:558): avc: denied { append } for pid=16019 comm="syz.5.3527" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 292.507452][T16020] dlm: no locking on control device [ 292.567278][ T5933] Bluetooth: hci3: command tx timeout [ 292.589999][T16024] syzkaller0: entered promiscuous mode [ 292.592431][T16024] syzkaller0: entered allmulticast mode [ 292.620822][T16026] syzkaller1: left promiscuous mode [ 292.622880][T16026] syzkaller1: left allmulticast mode [ 292.657136][T16028] syzkaller0: entered promiscuous mode [ 292.659061][T16028] syzkaller0: entered allmulticast mode [ 292.664761][T16028] tipc: Enabled bearer , priority 0 [ 292.668704][T16027] tipc: Resetting bearer [ 292.677634][T16027] tipc: Disabling bearer [ 292.737758][ T40] audit: type=1400 audit(2000000022.970:559): avc: granted { setsecparam } for pid=16029 comm="syz.4.3532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 292.777630][T16034] comedi: No check for data length of config insn id 63311 is implemented [ 292.777656][T16034] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 292.777666][T16034] comedi: Assuming n=15 is correct [ 293.006761][ T6011] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 293.042337][T16046] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.140842][T16053] syzkaller0: entered promiscuous mode [ 293.142733][T16053] syzkaller0: entered allmulticast mode [ 293.147514][T16053] tipc: Enabled bearer , priority 0 [ 293.151026][T16052] tipc: Resetting bearer [ 293.159719][ T6011] usb 10-1: Using ep0 maxpacket: 16 [ 293.162852][T16052] tipc: Disabling bearer [ 293.168161][ T6011] usb 10-1: unable to get BOS descriptor or descriptor too short [ 293.173560][ T6011] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 293.178467][ T6011] usb 10-1: can't read configurations, error -71 [ 293.287614][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.409549][T16071] __nla_validate_parse: 1 callbacks suppressed [ 293.409562][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3547'. [ 293.506627][T16074] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3548'. [ 293.513927][T16074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.519652][T16074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.523875][T16074] bond0 (unregistering): Released all slaves [ 293.746357][T16084] netlink: zone id is out of range [ 293.753208][ T40] audit: type=1400 audit(2000000023.980:560): avc: denied { create } for pid=16083 comm="syz.4.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 293.764786][ T40] audit: type=1400 audit(2000000023.990:561): avc: denied { connect } for pid=16083 comm="syz.4.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 293.778633][T16084] netlink: 'syz.4.3552': attribute type 12 has an invalid length. [ 293.781114][T16084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'. [ 293.792671][ T114] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.795815][T16084] netlink: 'syz.4.3552': attribute type 12 has an invalid length. [ 293.796932][ T114] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.798864][T16084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'. [ 293.805760][ T114] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.815201][ T114] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.900749][T16091] sctp: [Deprecated]: syz.5.3555 (pid 16091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.900749][T16091] Use struct sctp_sack_info instead [ 294.037258][T16106] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 294.037258][T16106] The task syz.4.3559 (16106) triggered the difference, watch for misbehavior. [ 294.271031][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 294.283347][T16120] siw: device registration error -23 [ 294.299501][T16124] syzkaller0: entered promiscuous mode [ 294.301494][T16124] syzkaller0: entered allmulticast mode [ 294.307275][T16124] TC_ACT_REPEAT abuse ? [ 294.748587][T16140] kvm: kvm [16139]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000081 [ 294.771106][T16140] kvm: kvm [16139]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x700000000 [ 294.774453][T16140] kvm: kvm [16139]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 294.779055][T16140] kvm_intel: kvm [16139]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x700000081 [ 294.788167][T16140] kvm_intel: kvm [16139]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x700000081 [ 294.846784][T16150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16150 comm=syz.2.3576 [ 295.090320][T16153] syzkaller0: entered promiscuous mode [ 295.092643][T16153] syzkaller0: entered allmulticast mode [ 295.096096][T16160] program syz.5.3579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.107951][T16159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.851197][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.222212][T16172] FAULT_INJECTION: forcing a failure. [ 296.222212][T16172] name fail_futex, interval 1, probability 0, space 0, times 1 [ 296.227290][T16172] CPU: 2 UID: 0 PID: 16172 Comm: syz.2.3581 Not tainted syzkaller #0 PREEMPT(full) [ 296.227313][T16172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.227323][T16172] Call Trace: [ 296.227329][T16172] [ 296.227336][T16172] dump_stack_lvl+0x100/0x190 [ 296.227377][T16172] should_fail_ex.cold+0x5/0xa [ 296.227394][T16172] ? __fput+0x68a/0xb40 [ 296.227414][T16172] get_futex_key+0x295/0x1620 [ 296.227441][T16172] ? __pfx_get_futex_key+0x10/0x10 [ 296.227462][T16172] ? lock_acquire+0x1cf/0x380 [ 296.227494][T16172] futex_wake+0xea/0x530 [ 296.227515][T16172] ? __pfx_futex_wake+0x10/0x10 [ 296.227534][T16172] ? exit_mm_release+0x19/0x30 [ 296.227562][T16172] do_futex+0x32b/0x350 [ 296.227579][T16172] ? __pfx_do_futex+0x10/0x10 [ 296.227593][T16172] ? __might_fault+0xc5/0x140 [ 296.227618][T16172] mm_release+0x24a/0x2f0 [ 296.227637][T16172] do_exit+0x675/0x2aa0 [ 296.227658][T16172] ? __pfx___might_resched+0x10/0x10 [ 296.227680][T16172] ? __pfx_do_exit+0x10/0x10 [ 296.227703][T16172] ? do_raw_spin_lock+0x128/0x260 [ 296.227719][T16172] ? find_held_lock+0x2b/0x80 [ 296.227738][T16172] ? get_signal+0x7e0/0x21e0 [ 296.227759][T16172] do_group_exit+0xd5/0x2a0 [ 296.227784][T16172] get_signal+0x1ec7/0x21e0 [ 296.227811][T16172] ? __pfx_get_signal+0x10/0x10 [ 296.227829][T16172] ? __pfx___file_ref_put+0x10/0x10 [ 296.227850][T16172] arch_do_signal_or_restart+0x91/0x7a0 [ 296.227873][T16172] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 296.227906][T16172] exit_to_user_mode_loop+0x86/0x4a0 [ 296.227933][T16172] do_syscall_64+0x67c/0xf80 [ 296.227956][T16172] ? clear_bhb_loop+0x40/0x90 [ 296.227975][T16172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.227992][T16172] RIP: 0033:0x7f7205d9c799 [ 296.228008][T16172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.228023][T16172] RSP: 002b:00007f7206c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.228041][T16172] RAX: 0000000000000038 RBX: 00007f7206016180 RCX: 00007f7205d9c799 [ 296.228056][T16172] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 296.228066][T16172] RBP: 00007f7206c86090 R08: 0000000000000000 R09: 0000000000000000 [ 296.228076][T16172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.228085][T16172] R13: 00007f7206016218 R14: 00007f7206016180 R15: 00007ffc8068b898 [ 296.228107][T16172] [ 296.366932][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 296.366945][ T40] audit: type=1400 audit(2000000026.600:567): avc: denied { append } for pid=16178 comm="syz.4.3583" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.376518][ T40] audit: type=1400 audit(2000000026.600:568): avc: denied { ioctl } for pid=16178 comm="syz.4.3583" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.410972][ T40] audit: type=1400 audit(2000000026.640:569): avc: denied { getopt } for pid=16178 comm="syz.4.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 296.447013][ T40] audit: type=1400 audit(2000000026.680:570): avc: denied { setattr } for pid=16181 comm="syz.2.3584" name="X25" dev="sockfs" ino=61846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 296.450537][T16182] syzkaller0: entered promiscuous mode [ 296.466758][T16182] syzkaller0: entered allmulticast mode [ 296.472780][T16183] syzkaller1: entered promiscuous mode [ 296.474660][T16183] syzkaller1: entered allmulticast mode [ 296.479247][T16182] tipc: Enabled bearer , priority 0 [ 296.487112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.494027][T16180] tipc: Resetting bearer [ 296.508572][T16180] tipc: Disabling bearer [ 296.630860][T16193] FAULT_INJECTION: forcing a failure. [ 296.630860][T16193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.636218][T16193] CPU: 1 UID: 0 PID: 16193 Comm: syz.2.3589 Not tainted syzkaller #0 PREEMPT(full) [ 296.636248][T16193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.636258][T16193] Call Trace: [ 296.636268][T16193] [ 296.636276][T16193] dump_stack_lvl+0x100/0x190 [ 296.636309][T16193] should_fail_ex.cold+0x5/0xa [ 296.636332][T16193] _copy_from_iter+0x1f4/0x1690 [ 296.636373][T16193] ? alloc_pages_mpol+0x25a/0x550 [ 296.636400][T16193] ? __pfx__copy_from_iter+0x10/0x10 [ 296.636421][T16193] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 296.636457][T16193] copy_page_from_iter+0xde/0x180 [ 296.636484][T16193] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 296.636531][T16193] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 296.636551][T16193] ? unwind_get_return_address+0x59/0xa0 [ 296.636573][T16193] ? arch_stack_walk+0xa6/0xf0 [ 296.636607][T16193] ? _kstrtoull+0x13c/0x1f0 [ 296.636624][T16193] ? __pfx__kstrtoull+0x10/0x10 [ 296.636659][T16193] tun_get_user+0x16d0/0x3e10 [ 296.636692][T16193] ? __pfx_tun_get_user+0x10/0x10 [ 296.636714][T16193] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 296.636749][T16193] ? find_held_lock+0x2b/0x80 [ 296.636771][T16193] ? tun_get+0x191/0x370 [ 296.636788][T16193] ? tun_get+0x191/0x370 [ 296.636813][T16193] tun_chr_write_iter+0xdc/0x200 [ 296.636837][T16193] vfs_write+0x6ac/0x1070 [ 296.636863][T16193] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 296.636887][T16193] ? __pfx_vfs_write+0x10/0x10 [ 296.636909][T16193] ? find_held_lock+0x2b/0x80 [ 296.636946][T16193] ksys_write+0x12a/0x250 [ 296.636970][T16193] ? __pfx_ksys_write+0x10/0x10 [ 296.637001][T16193] do_syscall_64+0x106/0xf80 [ 296.637018][T16193] ? clear_bhb_loop+0x40/0x90 [ 296.637040][T16193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.637058][T16193] RIP: 0033:0x7f7205d5cfce [ 296.637073][T16193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.637090][T16193] RSP: 002b:00007f7206cc7fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.637108][T16193] RAX: ffffffffffffffda RBX: 00007f7206cc86c0 RCX: 00007f7205d5cfce [ 296.637120][T16193] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 296.637130][T16193] RBP: 00007f7206cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 296.637141][T16193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.637151][T16193] R13: 00007f7206016038 R14: 00007f7206015fa0 R15: 00007ffc8068b898 [ 296.637175][T16193] [ 296.756866][ T5975] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 296.872648][T16201] loop7: detected capacity change from 0 to 524255232 [ 296.908749][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 296.911929][T16201] netlink: 'syz.2.3593': attribute type 21 has an invalid length. [ 296.918372][ T5975] usb 10-1: config 16 has an invalid interface number: 35 but max is 0 [ 296.924352][ T5975] usb 10-1: config 16 has no interface number 0 [ 296.935545][ T5975] usb 10-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 296.939409][ T5975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.942616][ T5975] usb 10-1: Product: syz [ 296.944231][ T5975] usb 10-1: Manufacturer: syz [ 296.946292][ T5975] usb 10-1: SerialNumber: syz [ 296.953856][T16204] block nbd2: not configured, cannot reconfigure [ 296.956564][ T5975] usb-storage 10-1:16.35: USB Mass Storage device detected [ 296.958129][T16205] ip6t_rpfilter: unknown options [ 296.973554][ T5975] usb-storage 10-1:16.35: Quirks match for vid 04b3 pid 4001: 2000 [ 297.129405][T16210] SELinux: failed to load policy [ 297.200559][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3599'. [ 297.250862][ T40] audit: type=1400 audit(2000000027.480:571): avc: denied { bind } for pid=16220 comm="syz.4.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.259395][ T40] audit: type=1400 audit(2000000027.480:572): avc: denied { listen } for pid=16220 comm="syz.4.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.265390][ T40] audit: type=1400 audit(2000000027.480:573): avc: denied { connect } for pid=16220 comm="syz.4.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.284747][T16223] afs: Unknown parameter 'dp' [ 297.292582][ T40] audit: type=1400 audit(2000000027.520:574): avc: denied { getopt } for pid=16222 comm="syz.0.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 297.371092][ T5975] usb 10-1: USB disconnect, device number 4 [ 297.898756][ T40] audit: type=1400 audit(2000000028.130:575): avc: denied { remount } for pid=16240 comm="syz.2.3608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 298.100842][ T40] audit: type=1400 audit(2000000028.330:576): avc: denied { unmount } for pid=12461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 298.266512][T16254] Bluetooth: MGMT ver 1.23 [ 298.421032][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3617'. [ 298.457360][T16264] IPv4: Oversized IP packet from 127.202.26.0 [ 298.541957][T16273] FAULT_INJECTION: forcing a failure. [ 298.541957][T16273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.552861][T16273] CPU: 1 UID: 0 PID: 16273 Comm: syz.5.3618 Not tainted syzkaller #0 PREEMPT(full) [ 298.552885][T16273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.552894][T16273] Call Trace: [ 298.552900][T16273] [ 298.552907][T16273] dump_stack_lvl+0x100/0x190 [ 298.552938][T16273] should_fail_ex.cold+0x5/0xa [ 298.552960][T16273] _copy_from_iter+0x1f4/0x1690 [ 298.552987][T16273] ? _copy_from_iter+0x270/0x1690 [ 298.553009][T16273] ? __pfx__copy_from_iter+0x10/0x10 [ 298.553095][T16273] ? __pfx__copy_from_iter+0x10/0x10 [ 298.553122][T16273] ? _copy_from_iter+0x270/0x1690 [ 298.553149][T16273] copy_page_from_iter+0xde/0x180 [ 298.553175][T16273] skb_copy_datagram_from_iter+0x399/0x720 [ 298.553206][T16273] packet_sendmsg+0x2476/0x53c0 [ 298.553231][T16273] ? avc_has_perm+0x5a/0x1e0 [ 298.553270][T16273] ? sock_has_perm+0x258/0x2f0 [ 298.553297][T16273] ? __pfx_sock_has_perm+0x10/0x10 [ 298.553325][T16273] ? __pfx_packet_sendmsg+0x10/0x10 [ 298.553361][T16273] __sys_sendto+0x4aa/0x520 [ 298.553389][T16273] ? __pfx___sys_sendto+0x10/0x10 [ 298.553438][T16273] ? ksys_write+0x1ac/0x250 [ 298.553463][T16273] ? __pfx_ksys_write+0x10/0x10 [ 298.553489][T16273] __x64_sys_sendto+0xe0/0x1c0 [ 298.553513][T16273] ? do_syscall_64+0x95/0xf80 [ 298.553530][T16273] ? lockdep_hardirqs_on+0x78/0x100 [ 298.553547][T16273] do_syscall_64+0x106/0xf80 [ 298.553563][T16273] ? clear_bhb_loop+0x40/0x90 [ 298.553584][T16273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.553602][T16273] RIP: 0033:0x7f2f5259c799 [ 298.553617][T16273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.553633][T16273] RSP: 002b:00007f2f53506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 298.553651][T16273] RAX: ffffffffffffffda RBX: 00007f2f52815fa0 RCX: 00007f2f5259c799 [ 298.553662][T16273] RDX: 0000000000010608 RSI: 0000200000000180 RDI: 0000000000000004 [ 298.553673][T16273] RBP: 00007f2f53506090 R08: 0000200000000140 R09: 0000000000000014 [ 298.553684][T16273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.553694][T16273] R13: 00007f2f52816038 R14: 00007f2f52815fa0 R15: 00007ffd2a3506d8 [ 298.553717][T16273] [ 298.643635][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.652858][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.655377][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.662357][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.664757][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.668546][T16276] syzkaller0: entered promiscuous mode [ 298.669047][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.670833][T16276] syzkaller0: entered allmulticast mode [ 298.674445][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.677557][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.678450][T16276] tipc: Started in network mode [ 298.679963][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.681519][T16276] tipc: Node identity 3edacca881c8, cluster identity 4711 [ 298.683887][ T6011] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 298.686325][T16276] tipc: Enabled bearer , priority 0 [ 298.697439][ T6011] hid-generic 0006:0004:0009.0003: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 298.700669][T16275] tipc: Resetting bearer [ 298.711573][T16275] tipc: Disabling bearer [ 298.885854][T16285] syzkaller0: entered promiscuous mode [ 298.888346][T16285] syzkaller0: entered allmulticast mode [ 299.076281][T16292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3626'. [ 299.092860][T16292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3626'. [ 299.147820][T16299] syzkaller0: entered promiscuous mode [ 299.150236][T16299] syzkaller0: entered allmulticast mode [ 299.160221][T16299] tipc: Enabled bearer , priority 0 [ 299.168833][T16297] tipc: Resetting bearer [ 299.190015][T16297] tipc: Disabling bearer [ 299.225974][T16304] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 299.252383][T16304] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.305822][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3631'. [ 299.320761][T16318] syzkaller1: left promiscuous mode [ 299.322535][T16318] syzkaller1: left allmulticast mode [ 299.380813][T16320] input: syz0 as /devices/virtual/input/input9 [ 299.513090][T16339] XFS (nbd2): SB validate failed with error -5. [ 299.572409][T16350] syzkaller0: entered promiscuous mode [ 299.574349][T16350] syzkaller0: entered allmulticast mode [ 299.579237][T16350] tipc: Enabled bearer , priority 0 [ 299.583156][T16349] tipc: Resetting bearer [ 299.593118][T16349] tipc: Disabling bearer [ 299.769433][T16356] JFS: discard option not supported on device [ 299.774621][T16356] Mount JFS Failure: -5 [ 299.910428][T16362] syzkaller0: entered promiscuous mode [ 299.912231][T16362] syzkaller0: entered allmulticast mode [ 299.957050][T16364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5292 sclass=netlink_route_socket pid=16364 comm=syz.2.3646 [ 299.993372][T16366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3647'. [ 300.065673][T16373] syzkaller0: entered promiscuous mode [ 300.071700][T16373] syzkaller0: entered allmulticast mode [ 300.078576][T16373] tipc: Enabled bearer , priority 0 [ 300.082797][T16372] tipc: Resetting bearer [ 300.092408][T16372] tipc: Disabling bearer [ 300.287366][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3656'. [ 300.295912][T16393] vxcan1: entered promiscuous mode [ 300.382556][T16399] syzkaller0: entered promiscuous mode [ 300.384632][T16399] syzkaller0: entered allmulticast mode [ 300.592189][T16405] tipc: Enabled bearer , priority 0 [ 300.596337][T16404] tipc: Disabling bearer [ 300.830858][T16412] vxcan1: entered promiscuous mode [ 300.894342][T16418] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 300.907366][ T830] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 301.015601][T16429] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3668'. [ 301.056765][ T830] usb 10-1: Using ep0 maxpacket: 8 [ 301.060294][ T830] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 301.063463][ T830] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.067734][ T830] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.071007][ T830] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.074333][ T830] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.079452][ T830] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 301.083163][ T830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.135174][T16437] trusted_key: encrypted_key: insufficient parameters specified [ 301.256025][T16450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3676'. [ 301.296801][ T830] usb 10-1: usb_control_msg returned -32 [ 301.300621][ T830] usbtmc 10-1:16.0: can't read capabilities [ 301.306804][ T830] usb 10-1: USB disconnect, device number 5 [ 301.695051][T16476] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 301.776041][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 301.776054][ T40] audit: type=1400 audit(2000000032.000:587): avc: denied { name_bind } for pid=16480 comm="syz.4.3683" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 302.131985][T16488] sp0: Synchronizing with TNC [ 302.132446][T16492] syzkaller0: entered promiscuous mode [ 302.135789][T16492] syzkaller0: entered allmulticast mode [ 302.143021][T16492] tipc: Enabled bearer , priority 0 [ 302.146082][T16491] tipc: Resetting bearer [ 302.159012][T16491] tipc: Disabling bearer [ 302.494274][T16516] siw: device registration error -23 [ 302.858999][T16540] tipc: Enabled bearer , priority 0 [ 302.862656][T16539] tipc: Disabling bearer [ 302.977166][ T40] audit: type=1400 audit(2000000033.209:588): avc: denied { write } for pid=16547 comm="syz.2.3701" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 303.028962][ T40] audit: type=1400 audit(2000000033.259:589): avc: denied { read write } for pid=16552 comm="syz.2.3703" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 303.037258][ T40] audit: type=1400 audit(2000000033.259:590): avc: denied { open } for pid=16552 comm="syz.2.3703" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 303.098069][ T40] audit: type=1400 audit(2000000033.319:591): avc: denied { mounton } for pid=16561 comm="syz.2.3706" path="/387/file0" dev="tmpfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 303.171225][T16566] Set syz1 is full, maxelem 1021 reached [ 303.275154][T16576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.433744][T16593] syzkaller0: entered promiscuous mode [ 303.435567][T16593] syzkaller0: entered allmulticast mode [ 303.439148][T16593] tipc: Disabling bearer [ 303.439389][T16594] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3718'. [ 303.444288][T16594] netlink: 760 bytes leftover after parsing attributes in process `syz.4.3718'. [ 303.447733][T16593] tipc: Enabling of bearer rejected, failed to create discoverer [ 303.800602][ T40] audit: type=1400 audit(2000000034.029:592): avc: denied { read } for pid=16613 comm="syz.5.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 303.856801][ T921] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 304.006942][ T921] usb 5-1: Using ep0 maxpacket: 8 [ 304.010113][ T921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 304.014800][ T921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 304.019315][ T921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.023379][ T921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.028676][ T921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 304.032436][ T921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.247714][ T921] usb 5-1: GET_CAPABILITIES returned 0 [ 304.249505][ T921] usbtmc 5-1:16.0: can't read capabilities [ 304.376831][T16628] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 304.444981][T16638] Mount JFS Failure: -22 [ 304.446716][ T40] audit: type=1400 audit(2000000034.669:593): avc: denied { mounton } for pid=16637 comm="syz.5.3736" path="/77/bus" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 304.492708][T16640] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 304.495215][T16640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.926477][T16668] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 305.164223][T16675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3748'. [ 305.167649][T16675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3748'. [ 305.208551][T16675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.214237][T16674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.725677][ T40] audit: type=1400 audit(2000000035.949:594): avc: denied { mount } for pid=16687 comm="syz.4.3752" name="/" dev="hugetlbfs" ino=63804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 305.991864][T16701] 9p: Bad value for 'rfdno' [ 306.239433][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3761'. [ 306.242376][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3761'. [ 306.272636][T16717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.277995][T16716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.278493][ T40] audit: type=1400 audit(2000000036.509:595): avc: denied { lock } for pid=16722 comm="syz.2.3763" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.278903][T16723] ip6t_srh: unknown srh match flags 4000 [ 306.292294][ T40] audit: type=1400 audit(2000000036.509:596): avc: denied { accept } for pid=16721 comm="syz.4.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 306.568484][ T5642] usb 5-1: USB disconnect, device number 8 [ 306.841898][T16756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3778'. [ 306.844790][T16756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3778'. [ 306.948745][T16765] Sensor A: ================= START STATUS ================= [ 306.948818][T16766] Sensor A: ================= START STATUS ================= [ 306.951605][T16765] Sensor A: Test Pattern: 75% Colorbar [ 306.957899][T16765] Sensor A: Show Information: All [ 306.959677][T16765] Sensor A: Vertical Flip: false [ 306.961446][T16765] Sensor A: Horizontal Flip: false [ 306.963244][T16765] Sensor A: Brightness: 128 [ 306.964916][T16765] Sensor A: Contrast: 128 [ 306.966446][T16765] Sensor A: Hue: 0 [ 306.968846][T16765] Sensor A: Saturation: 128 [ 306.970382][T16765] Sensor A: ================== END STATUS ================== [ 306.970431][T16766] Sensor A: Test Pattern: 75% Colorbar [ 306.974658][T16766] Sensor A: Show Information: All [ 306.976392][T16766] Sensor A: Vertical Flip: false [ 306.978193][T16766] Sensor A: Horizontal Flip: false [ 306.979993][T16766] Sensor A: Brightness: 128 [ 306.981493][T16766] Sensor A: Contrast: 128 [ 306.982930][T16766] Sensor A: Hue: 0 [ 306.984182][T16766] Sensor A: Saturation: 128 [ 306.986000][T16766] Sensor A: ================== END STATUS ================== [ 307.177916][T16774] netlink: 'syz.5.3783': attribute type 3 has an invalid length. [ 307.230326][T16777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3785'. [ 307.233586][T16777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3785'. [ 307.262405][T16777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.267403][T16776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.926755][T16803] siw: device registration error -23 [ 308.047008][T16827] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 308.063445][T16830] tmpfs: Bad value for 'mpol' [ 308.120239][T16838] mmap: syz.5.3799 (16838) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 308.321580][T16858] syzkaller0: entered promiscuous mode [ 308.324041][T16858] syzkaller0: entered allmulticast mode [ 308.486783][ T6011] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 308.649551][ T6011] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.654884][ T6011] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 308.660163][ T6011] usb 10-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 308.664507][ T6011] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.671669][ T6011] usb 10-1: config 0 descriptor?? [ 308.678657][T16850] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.778598][T16865] overlay: Unknown parameter 'dont_hash' [ 308.782851][T16865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.888968][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3805'. [ 308.893639][T16850] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3805'. [ 308.897767][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3805'. [ 308.908426][ T6011] usbhid 10-1:0.0: can't add hid device: -71 [ 308.910527][ T6011] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 308.915093][ T6011] usb 10-1: USB disconnect, device number 6 [ 309.194914][T16872] lo speed is unknown, defaulting to 1000 [ 309.255608][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3815'. [ 309.259980][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3815'. [ 309.451514][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3818'. [ 309.478992][T16887] siw: device registration error -23 [ 310.299443][T16907] syzkaller0: entered promiscuous mode [ 310.301514][T16907] syzkaller0: entered allmulticast mode [ 310.308125][T16907] tipc: Enabled bearer , priority 0 [ 310.311116][T16906] tipc: Resetting bearer [ 310.324808][T16906] tipc: Disabling bearer [ 310.437427][T16924] syzkaller1: entered promiscuous mode [ 310.439313][T16924] syzkaller1: entered allmulticast mode [ 310.577055][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.585073][T16938] siw: device registration error -23 [ 310.622638][ T40] audit: type=1400 audit(2000000040.849:597): avc: denied { mounton } for pid=16931 comm="syz.2.3835" path="/401/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 310.622678][T16940] overlay: Unknown parameter 'smackfsfloor' [ 310.665571][T16945] syzkaller0: entered promiscuous mode [ 310.668277][T16945] syzkaller0: entered allmulticast mode [ 310.673670][T16945] FAULT_INJECTION: forcing a failure. [ 310.673670][T16945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.678819][T16945] CPU: 3 UID: 0 PID: 16945 Comm: syz.0.3839 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.678839][T16945] Tainted: [L]=SOFTLOCKUP [ 310.678843][T16945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.678857][T16945] Call Trace: [ 310.678862][T16945] [ 310.678867][T16945] dump_stack_lvl+0x100/0x190 [ 310.678890][T16945] should_fail_ex.cold+0x5/0xa [ 310.678906][T16945] _copy_from_user+0x2e/0xd0 [ 310.678925][T16945] move_addr_to_kernel+0x65/0x170 [ 310.678949][T16945] copy_msghdr_from_user+0x417/0x4f0 [ 310.678972][T16945] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 310.679008][T16945] ___sys_sendmsg+0x106/0x1e0 [ 310.679035][T16945] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.679086][T16945] __sys_sendmsg+0x170/0x220 [ 310.679101][T16945] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.679122][T16945] do_syscall_64+0x106/0xf80 [ 310.679135][T16945] ? clear_bhb_loop+0x40/0x90 [ 310.679150][T16945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.679162][T16945] RIP: 0033:0x7f23d0b9c799 [ 310.679173][T16945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.679184][T16945] RSP: 002b:00007f23d1aa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.679196][T16945] RAX: ffffffffffffffda RBX: 00007f23d0e15fa0 RCX: 00007f23d0b9c799 [ 310.679203][T16945] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 310.679211][T16945] RBP: 00007f23d1aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 310.679218][T16945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.679239][T16945] R13: 00007f23d0e16038 R14: 00007f23d0e15fa0 R15: 00007ffd741928e8 [ 310.679255][T16945] [ 310.866627][T16951] kvm: kvm [16950]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 310.885232][T16951] kvm: kvm [16950]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 310.888350][T16951] kvm: kvm [16950]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 310.904175][T16951] kvm_intel: kvm [16950]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 310.929151][ T40] audit: type=1400 audit(2000000041.159:598): avc: denied { read } for pid=16958 comm="syz.5.3844" dev="nsfs" ino=4026534051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.936234][ T40] audit: type=1400 audit(2000000041.159:599): avc: denied { open } for pid=16958 comm="syz.5.3844" path="net:[4026534051]" dev="nsfs" ino=4026534051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 311.003213][T16951] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4055050731 (8110101462 ns) > initial count (3992482008 ns). Using initial count to start timer. [ 311.013830][T16951] kvm: kvm [16950]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 311.017342][T16951] kvm: kvm [16950]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 311.060174][T16957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3841'. [ 311.107323][ T40] audit: type=1400 audit(2000000041.339:600): avc: denied { append } for pid=16963 comm="syz.5.3846" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 311.901949][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3851'. [ 311.907009][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3851'. [ 311.953029][ T40] audit: type=1400 audit(2000000042.179:601): avc: denied { ioctl } for pid=16978 comm="syz.5.3851" path="pid:[4026534041]" dev="nsfs" ino=4026534041 ioctlcmd=0x61e2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 311.962271][T16979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.967521][T16978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.982218][T16988] IPVS: nq: FWM 3 0x00000003 - no destination available [ 312.114515][T16995] syzkaller0: entered promiscuous mode [ 312.116410][T16995] syzkaller0: entered allmulticast mode [ 312.127210][ T6023] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 312.309590][ T6023] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 312.312414][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.316836][ T6023] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 312.320116][ T6023] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 312.323119][ T6023] usb 7-1: Manufacturer: syz [ 312.328125][ T6023] usb 7-1: config 0 descriptor?? [ 312.386888][ T6023] rc_core: IR keymap rc-hauppauge not found [ 312.389401][ T6023] Registered IR keymap rc-empty [ 312.394427][ T6023] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 312.400499][ T6023] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 312.438489][ T40] audit: type=1400 audit(2000000042.669:602): avc: denied { accept } for pid=16999 comm="syz.0.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 312.438665][T17000] netlink: 'syz.0.3858': attribute type 9 has an invalid length. [ 312.448849][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3858'. [ 312.503773][ T40] audit: type=1400 audit(2000000042.729:603): avc: denied { map } for pid=17001 comm="syz.5.3859" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 312.534836][ T40] audit: type=1400 audit(2000000042.759:604): avc: denied { ioctl } for pid=16976 comm="syz.2.3850" path="socket:[64430]" dev="sockfs" ino=64430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 312.539243][ T6023] usb 7-1: USB disconnect, device number 4 [ 312.554021][T17006] siw: device registration error -23 [ 313.163774][T17027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.170555][T17025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.439894][T17048] pim6reg99999999: entered allmulticast mode [ 313.699853][T17069] siw: device registration error -23 [ 314.004682][ T40] audit: type=1400 audit(2000000044.229:605): avc: denied { setopt } for pid=17086 comm="syz.5.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 314.096364][ T40] audit: type=1400 audit(2000000044.319:606): avc: denied { setopt } for pid=17093 comm="syz.5.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 314.234136][T17106] __nla_validate_parse: 2 callbacks suppressed [ 314.234149][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3896'. [ 314.493569][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3900'. [ 314.519621][T17128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.638548][T17136] sctp: [Deprecated]: syz.4.3900 (pid 17136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.638548][T17136] Use struct sctp_sack_info instead [ 314.678342][T17136] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3900'. [ 314.763480][T17148] syzkaller1: entered promiscuous mode [ 314.765530][T17148] syzkaller1: entered allmulticast mode [ 315.042366][T17160] syzkaller1: entered promiscuous mode [ 315.044225][T17160] syzkaller1: entered allmulticast mode [ 315.154499][T17166] syzkaller0: entered promiscuous mode [ 315.156774][T17166] syzkaller0: entered allmulticast mode [ 315.161176][T17166] FAULT_INJECTION: forcing a failure. [ 315.161176][T17166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.165571][T17166] CPU: 0 UID: 0 PID: 17166 Comm: syz.5.3913 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.165589][T17166] Tainted: [L]=SOFTLOCKUP [ 315.165593][T17166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.165601][T17166] Call Trace: [ 315.165606][T17166] [ 315.165611][T17166] dump_stack_lvl+0x100/0x190 [ 315.165633][T17166] should_fail_ex.cold+0x5/0xa [ 315.165648][T17166] _copy_from_iter+0x43a/0x1690 [ 315.165668][T17166] ? __pfx__copy_from_iter+0x10/0x10 [ 315.165683][T17166] ? find_held_lock+0x2b/0x80 [ 315.165698][T17166] ? dev_get_by_index+0x180/0x380 [ 315.165716][T17166] ? dev_get_by_index+0x180/0x380 [ 315.165737][T17166] packet_sendmsg+0x1dbd/0x53c0 [ 315.165754][T17166] ? avc_has_perm+0x5a/0x1e0 [ 315.165770][T17166] ? __pfx_avc_has_perm+0x10/0x10 [ 315.165787][T17166] ? __lock_acquire+0x4a5/0x2630 [ 315.165807][T17166] ? sock_has_perm+0x258/0x2f0 [ 315.165825][T17166] ? __pfx_sock_has_perm+0x10/0x10 [ 315.165850][T17166] ? __pfx_packet_sendmsg+0x10/0x10 [ 315.165873][T17166] ____sys_sendmsg+0xa54/0xc30 [ 315.165913][T17166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.165934][T17166] ___sys_sendmsg+0x190/0x1e0 [ 315.165950][T17166] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.165981][T17166] __sys_sendmsg+0x170/0x220 [ 315.165992][T17166] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.166011][T17166] do_syscall_64+0x106/0xf80 [ 315.166023][T17166] ? clear_bhb_loop+0x40/0x90 [ 315.166037][T17166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.166048][T17166] RIP: 0033:0x7f2f5259c799 [ 315.166058][T17166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.166070][T17166] RSP: 002b:00007f2f53506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.166081][T17166] RAX: ffffffffffffffda RBX: 00007f2f52815fa0 RCX: 00007f2f5259c799 [ 315.166088][T17166] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 315.166095][T17166] RBP: 00007f2f53506090 R08: 0000000000000000 R09: 0000000000000000 [ 315.166101][T17166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.166108][T17166] R13: 00007f2f52816038 R14: 00007f2f52815fa0 R15: 00007ffd2a3506d8 [ 315.166121][T17166] [ 315.363779][T17168] syzkaller1: entered promiscuous mode [ 315.365636][T17168] syzkaller1: entered allmulticast mode [ 315.396176][T17170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3914'. [ 315.408497][T17170] bond2 (unregistering): Released all slaves [ 315.567147][T17183] IPv4: Oversized IP packet from 127.202.26.0 [ 315.619758][T17193] xt_l2tp: missing protocol rule (udp|l2tpip) [ 315.640096][T17194] lo speed is unknown, defaulting to 1000 [ 315.670914][ T24] IPVS: starting estimator thread 0... [ 315.685831][T17203] Cannot find add_set index 65532 as target [ 315.742773][T17214] Dead loop on virtual device ip6_vti0, fix it urgently! [ 315.776810][T17201] IPVS: using max 43 ests per chain, 103200 per kthread [ 315.825492][T17224] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 315.835407][T17224] pim6reg99999999: entered allmulticast mode [ 315.966504][T17237] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3936'. [ 315.976802][T17240] syzkaller0: entered promiscuous mode [ 315.978791][T17240] syzkaller0: entered allmulticast mode [ 316.089601][T17248] syzkaller0: entered promiscuous mode [ 316.091566][T17248] syzkaller0: entered allmulticast mode [ 316.198176][T17254] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3943'. [ 316.201063][T17254] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3943'. [ 316.204319][T17254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3943'. [ 316.205536][T17252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=17252 comm=syz.5.3942 [ 316.242959][T17257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3944'. [ 316.247373][T17257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3944'. [ 316.330303][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 316.330320][ T40] audit: type=1400 audit(2000000046.559:610): avc: denied { ioctl } for pid=17265 comm="syz.5.3947" path="socket:[67046]" dev="sockfs" ino=67046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.346312][ T40] audit: type=1400 audit(2000000046.569:611): avc: denied { accept } for pid=17267 comm="syz.2.3948" path="socket:[67841]" dev="sockfs" ino=67841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.384478][ T40] audit: type=1400 audit(2000000046.609:612): avc: denied { lock } for pid=17272 comm="syz.2.3950" path="/434/file0/cpuset.effective_cpus" dev="9p" ino=72614221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 316.636854][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 316.723988][T17279] netlink: 'syz.4.3953': attribute type 15 has an invalid length. [ 316.760930][ T40] audit: type=1400 audit(2000000046.989:613): avc: denied { firmware_load } for pid=17280 comm="syz.4.3954" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 316.772122][ T34] usb 7-1: device descriptor read/64, error -71 [ 316.779498][ T40] audit: type=1400 audit(2000000047.009:614): avc: denied { create } for pid=17280 comm="syz.4.3954" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.806812][ T5642] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 316.831610][ T40] audit: type=1400 audit(2000000047.059:615): avc: denied { unlink } for pid=15625 comm="syz-executor" name="file2" dev="tmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.934891][T17283] syzkaller0: entered promiscuous mode [ 316.939093][T17283] syzkaller0: entered allmulticast mode [ 316.969539][ T5642] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 316.973887][ T5642] usb 10-1: config 0 interface 0 has no altsetting 0 [ 316.978826][ T5642] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 316.982767][ T5642] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 316.986394][ T5642] usb 10-1: Product: syz [ 316.988998][ T5642] usb 10-1: Manufacturer: syz [ 316.991070][ T5642] usb 10-1: SerialNumber: syz [ 317.005787][ T5642] usb 10-1: config 0 descriptor?? [ 317.009513][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 317.014819][ T5642] usb 10-1: selecting invalid altsetting 0 [ 317.137731][ T34] usb 7-1: device descriptor read/64, error -71 [ 317.248451][ T34] usb usb7-port1: attempt power cycle [ 317.586743][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 317.608355][ T34] usb 7-1: device descriptor read/8, error -71 [ 317.850807][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 317.867385][ T34] usb 7-1: device descriptor read/8, error -71 [ 317.977220][ T34] usb usb7-port1: unable to enumerate USB device [ 318.292183][ T40] audit: type=1400 audit(2000000048.519:616): avc: denied { create } for pid=17322 comm="syz.4.3967" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 318.595880][T17350] kernel read not supported for file /policy (pid: 17350 comm: syz.0.3973) [ 318.599561][ T40] audit: type=1400 audit(2000000048.819:617): avc: denied { module_load } for pid=17342 comm="syz.0.3973" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 318.612128][T17350] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 318.695247][ T40] audit: type=1400 audit(2000000048.919:618): avc: denied { accept } for pid=17360 comm="syz.0.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.731304][ T40] audit: type=1400 audit(2000000048.959:619): avc: denied { listen } for pid=17364 comm="syz.0.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 318.940947][T17389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.956016][T17391] (syz.0.3989,17391,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 319.022516][T17395] fuse: Bad value for 'fd' [ 319.380565][T17404] __nla_validate_parse: 13 callbacks suppressed [ 319.380578][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3995'. [ 319.386406][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3995'. [ 319.556068][T12837] usb 10-1: USB disconnect, device number 7 [ 319.621965][T17418] syzkaller1: left promiscuous mode [ 319.623871][T17418] syzkaller1: left allmulticast mode [ 319.776407][T17426] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4005'. [ 319.823872][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 319.885991][T17436] syzkaller0: entered promiscuous mode [ 319.888671][T17436] syzkaller0: entered allmulticast mode [ 319.968730][T17438] netlink: 'syz.5.4011': attribute type 39 has an invalid length. [ 320.177611][T17447] syzkaller0: entered promiscuous mode [ 320.179592][T17447] syzkaller0: entered allmulticast mode [ 320.301637][T17451] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 320.304552][T17451] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 320.322703][T17451] netlink: 'syz.5.4017': attribute type 9 has an invalid length. [ 320.405623][T17464] syzkaller0: entered promiscuous mode [ 320.407919][T17464] syzkaller0: entered allmulticast mode [ 320.509173][T17476] dummy0: entered allmulticast mode [ 320.518541][T17474] dummy0: left allmulticast mode [ 320.722589][T17488] syzkaller0: entered promiscuous mode [ 320.724438][T17488] syzkaller0: entered allmulticast mode [ 320.730557][T17488] tipc: Enabling of bearer rejected, failed to enable media [ 320.806196][T17491] binder: 17490:17491 ioctl c0306201 0 returned -14 [ 320.850253][T17495] FAULT_INJECTION: forcing a failure. [ 320.850253][T17495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.854492][T17495] CPU: 3 UID: 0 PID: 17495 Comm: syz.0.4033 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.854511][T17495] Tainted: [L]=SOFTLOCKUP [ 320.854515][T17495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.854523][T17495] Call Trace: [ 320.854527][T17495] [ 320.854532][T17495] dump_stack_lvl+0x100/0x190 [ 320.854554][T17495] should_fail_ex.cold+0x5/0xa [ 320.854569][T17495] _copy_to_user+0x32/0xd0 [ 320.854586][T17495] simple_read_from_buffer+0xcb/0x170 [ 320.854606][T17495] proc_fail_nth_read+0x1af/0x230 [ 320.854622][T17495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.854638][T17495] ? rw_verify_area+0xce/0x6d0 [ 320.854653][T17495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.854668][T17495] vfs_read+0x1e4/0xb30 [ 320.854686][T17495] ? __pfx_vfs_read+0x10/0x10 [ 320.854701][T17495] ? __fget_files+0x215/0x3d0 [ 320.854715][T17495] ? __fget_files+0x21f/0x3d0 [ 320.854729][T17495] ksys_read+0x12a/0x250 [ 320.854745][T17495] ? __pfx_ksys_read+0x10/0x10 [ 320.854767][T17495] do_syscall_64+0x106/0xf80 [ 320.854778][T17495] ? clear_bhb_loop+0x40/0x90 [ 320.854792][T17495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.854804][T17495] RIP: 0033:0x7f23d0b5cfce [ 320.854814][T17495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 320.854833][T17495] RSP: 002b:00007f23d1aa4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.854849][T17495] RAX: ffffffffffffffda RBX: 00007f23d1aa56c0 RCX: 00007f23d0b5cfce [ 320.854859][T17495] RDX: 000000000000000f RSI: 00007f23d1aa50a0 RDI: 0000000000000008 [ 320.854866][T17495] RBP: 00007f23d1aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 320.854875][T17495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.854884][T17495] R13: 00007f23d0e16038 R14: 00007f23d0e15fa0 R15: 00007ffd741928e8 [ 320.854907][T17495] [ 320.937378][T17499] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4035'. [ 320.946082][T17501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4036'. [ 320.986042][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4036'. [ 321.424168][T17522] syzkaller0: entered promiscuous mode [ 321.425973][T17522] syzkaller0: entered allmulticast mode [ 321.430177][T17522] tipc: Enabling of bearer rejected, failed to enable media [ 321.471489][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'. [ 321.519354][T17526] lo speed is unknown, defaulting to 1000 [ 321.539535][ T24] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 321.699477][ T24] usb 10-1: not running at top speed; connect to a high speed hub [ 321.711415][ T24] usb 10-1: config 1 interface 0 altsetting 105 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 321.715999][ T24] usb 10-1: config 1 interface 0 altsetting 105 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.722354][ T24] usb 10-1: config 1 interface 0 has no altsetting 0 [ 321.726138][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 321.729344][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.736945][ T24] usb 10-1: Product: ᦹꗸ䭚鴃ꈧ뷹㿡㝳퐛뾦뜆辎聥ヶ壘ﺺᐞ烏馊擄퍂⒮む돳婘⻌ꋅ齸钥횭鯋௦쟛䡮㚖핼ρ葇莈椀ẅ촎㩉垡쫎㨑䖣뿤ᗔ䘖騚ᤀ㉿奧氍਻츍ᨯ硲໣耵솝뻞 [ 321.745068][ T24] usb 10-1: Manufacturer: ꨰ윺⯘쬶蝛싾ꎞ쇣㉝ꂸ둵냛쨇䉠ꚨՕᾚ䈨ॴy࠮캽羢뫋蒨ᠨꮡﭾ輈渦ਮ⦮컑⼸莆̂ [ 321.750158][ T24] usb 10-1: SerialNumber: syz [ 321.754088][T17516] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 321.797935][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 321.797947][ T40] audit: type=1400 audit(2000000052.029:630): avc: denied { accept } for pid=17552 comm="syz.2.4052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.806211][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4052'. [ 321.850265][T17556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4053'. [ 321.882589][T17556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.891540][T17555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.101629][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.103863][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.469250][ T24] usb 10-1: USB disconnect, device number 8 [ 322.685610][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.701751][T17594] vxcan1: entered promiscuous mode [ 323.030267][ T40] audit: type=1400 audit(2000000053.259:631): avc: denied { watch watch_reads } for pid=17606 comm="syz.2.4071" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 323.123943][T17616] syzkaller0: entered promiscuous mode [ 323.126318][T17616] syzkaller0: entered allmulticast mode [ 323.242438][T17618] syzkaller0: entered promiscuous mode [ 323.244890][T17618] syzkaller0: entered allmulticast mode [ 323.252457][T17618] 0: reclassify loop, rule prio 0, protocol 700 [ 323.362012][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.366557][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.474254][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.478322][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.490211][ T5931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.495163][ T5931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.500941][ T5931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.504343][ T5931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.509614][ T5931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.531563][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.534861][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.561447][T17623] lo speed is unknown, defaulting to 1000 [ 323.629343][T17632] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17632 comm=syz.0.4082 [ 323.649154][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.653456][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.670571][T17623] chnl_net:caif_netlink_parms(): no params data found [ 323.715769][T17623] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.718348][T17623] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.720682][T17623] bridge_slave_0: entered allmulticast mode [ 323.723571][T17623] bridge_slave_0: entered promiscuous mode [ 323.726853][T17623] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.729440][T17623] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.731829][T17623] bridge_slave_1: entered allmulticast mode [ 323.734823][T17623] bridge_slave_1: entered promiscuous mode [ 323.750495][T17623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.754943][T17623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.814204][T17623] team0: Port device team_slave_0 added [ 323.847637][T17623] team0: Port device team_slave_1 added [ 323.877151][T17623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.879474][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.887658][T17623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.892005][T17623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.894193][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.902213][T17623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.910407][T17643] syzkaller0: entered promiscuous mode [ 323.912213][T17643] syzkaller0: entered allmulticast mode [ 323.915248][ T60] bridge_slave_1: left allmulticast mode [ 323.918212][ T60] bridge_slave_1: left promiscuous mode [ 323.920946][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.924861][ T60] bridge_slave_0: left allmulticast mode [ 323.927229][ T60] bridge_slave_0: left promiscuous mode [ 323.929095][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.231186][ T60] bond1 (unregistering): Released all slaves [ 324.241503][ T60] bond0 (unregistering): Released all slaves [ 324.251699][T17643] tipc: Enabling of bearer rejected, failed to enable media [ 324.306866][T17623] hsr_slave_0: entered promiscuous mode [ 324.309348][T17623] hsr_slave_1: entered promiscuous mode [ 324.312217][T17623] debugfs: 'hsr0' already exists in 'hsr' [ 324.314794][T17623] Cannot create hsr debugfs directory [ 324.340449][ T60] tipc: Left network mode [ 324.453128][ T60] IPVS: stopping backup sync thread 16668 ... [ 324.520809][T17623] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.525261][T17623] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.533352][T17623] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.543045][T17623] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.592172][T17662] virtiofs: Unknown parameter 'discard' [ 324.624587][T17623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.632788][T17623] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.669443][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.671622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.677396][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.680432][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.759274][ T60] hsr_slave_0: left promiscuous mode [ 324.761902][ T60] hsr_slave_1: left promiscuous mode [ 324.763939][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.766259][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.771165][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.773578][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.782228][ T60] veth1_macvtap: left promiscuous mode [ 324.784075][ T60] veth0_macvtap: left promiscuous mode [ 324.785885][ T60] veth1_vlan: left promiscuous mode [ 324.788248][ T60] veth0_vlan: left promiscuous mode [ 324.792130][T17681] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 324.846350][ T60] pim6reg99999999 (unregistering): left allmulticast mode [ 324.944591][ T60] team0 (unregistering): Port device team_slave_1 removed [ 324.951789][ T60] team0 (unregistering): Port device team_slave_0 removed [ 325.016582][T17681] @0: renamed from bond_slave_1 (while UP) [ 325.179937][T17623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.183331][T17691] __nla_validate_parse: 6 callbacks suppressed [ 325.183347][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4095'. [ 325.190817][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4095'. [ 325.250451][T17691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.257113][T17690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.332326][T17623] veth0_vlan: entered promiscuous mode [ 325.339268][T17623] veth1_vlan: entered promiscuous mode [ 325.358773][T17623] veth0_macvtap: entered promiscuous mode [ 325.364494][T17623] veth1_macvtap: entered promiscuous mode [ 325.381317][T17623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.392261][T17623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.400416][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.403278][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.407396][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.410278][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.464356][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.467853][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.480422][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.482929][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.530029][ T5931] Bluetooth: hci0: command tx timeout [ 325.758528][T17723] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 325.843055][T17730] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 325.849014][T17730] netlink: 'syz.5.4101': attribute type 16 has an invalid length. [ 325.851591][T17730] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4101'. [ 325.981305][T17736] syzkaller0: entered promiscuous mode [ 325.983631][T17736] syzkaller0: entered allmulticast mode [ 326.193012][T17749] syzkaller0: entered promiscuous mode [ 326.194881][T17749] syzkaller0: entered allmulticast mode [ 326.338360][T17753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17753 comm=syz.0.4111 [ 326.375075][ T40] audit: type=1400 audit(2000000056.599:632): avc: denied { mount } for pid=17752 comm="syz.0.4111" name="/" dev="autofs" ino=70081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 326.417885][ T6011] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 326.459675][ T40] audit: type=1400 audit(2000000056.689:633): avc: denied { unmount } for pid=12461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 326.564127][T17765] nfs: Unknown parameter '/dev/ndctl0' [ 326.564778][ T40] audit: type=1400 audit(2000000056.789:634): avc: denied { append } for pid=17764 comm="syz.6.4116" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 326.566047][T17765] nfs: Unknown parameter '/dev/ndctl0' [ 326.577401][ T6011] usb 10-1: Using ep0 maxpacket: 8 [ 326.583841][ T6011] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 326.586895][ T6011] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.589440][ T6011] usb 10-1: Product: syz [ 326.590761][ T6011] usb 10-1: Manufacturer: syz [ 326.592137][ T6011] usb 10-1: SerialNumber: syz [ 326.631919][ T40] audit: type=1400 audit(2000000056.859:635): avc: denied { setopt } for pid=17770 comm="syz.6.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 326.780441][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4119'. [ 326.791997][T17774] fuse: Bad value for 'fd' [ 326.799266][ T6011] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 326.837717][ T40] audit: type=1400 audit(2000000057.069:636): avc: denied { create } for pid=17775 comm="syz.6.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.844060][ T40] audit: type=1400 audit(2000000057.069:637): avc: denied { bind } for pid=17775 comm="syz.6.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.850657][ T40] audit: type=1400 audit(2000000057.069:638): avc: denied { setopt } for pid=17775 comm="syz.6.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.859534][ T40] audit: type=1400 audit(2000000057.069:639): avc: denied { accept } for pid=17775 comm="syz.6.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.865999][ T40] audit: type=1400 audit(2000000057.069:640): avc: denied { write } for pid=17775 comm="syz.6.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.872363][ T40] audit: type=1400 audit(2000000057.069:641): avc: denied { read } for pid=17775 comm="syz.6.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.979292][T17783] syzkaller1: entered promiscuous mode [ 326.981283][T17783] syzkaller1: entered allmulticast mode [ 327.000714][ T840] usb 10-1: USB disconnect, device number 9 [ 327.004052][ T40] audit: type=1400 audit(2000000057.229:642): avc: denied { read write } for pid=17745 comm="syz.5.4108" name="lp0" dev="devtmpfs" ino=2967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 327.011232][ T840] usblp0: removed [ 327.015643][ T40] audit: type=1400 audit(2000000057.229:643): avc: denied { open } for pid=17745 comm="syz.5.4108" path="/dev/usb/lp0" dev="devtmpfs" ino=2967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 327.260370][T17791] syzkaller0: entered promiscuous mode [ 327.262768][T17791] syzkaller0: entered allmulticast mode [ 327.278232][T17791] tipc: Enabled bearer , priority 0 [ 327.281554][T17790] tipc: Resetting bearer [ 327.294058][T17790] tipc: Disabling bearer [ 327.406174][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4127'. [ 327.410383][T17794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.422481][T17794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.459172][T17795] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.607141][ T5931] Bluetooth: hci0: command tx timeout [ 327.698813][T17806] syzkaller0: entered promiscuous mode [ 327.700601][T17806] syzkaller0: entered allmulticast mode [ 327.704010][ T60] 0: reclassify loop, rule prio 0, protocol 700 [ 327.761094][T17808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17808 comm=syz.0.4133 [ 327.806603][T17810] syzkaller0: entered promiscuous mode [ 327.808647][T17810] syzkaller0: entered allmulticast mode [ 327.976078][ T40] audit: type=1400 audit(2000000058.199:644): avc: denied { setopt } for pid=17814 comm="syz.5.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 328.023276][T17820] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4138'. [ 328.064196][ T40] audit: type=1400 audit(2000000058.289:645): avc: denied { write } for pid=17823 comm="syz.0.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 328.120274][T17829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4140'. [ 328.124142][T17829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4140'. [ 328.174252][T17829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.180356][T17828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.266023][T17834] syzkaller0: entered promiscuous mode [ 328.269507][T17834] syzkaller0: entered allmulticast mode [ 328.275065][T17836] netlink: 868 bytes leftover after parsing attributes in process `syz.5.4143'. [ 328.382089][T17844] netlink: 'syz.2.4147': attribute type 15 has an invalid length. [ 328.384983][T17844] netlink: 'syz.2.4147': attribute type 64 has an invalid length. [ 328.387672][T17844] netlink: 'syz.2.4147': attribute type 4 has an invalid length. [ 328.390184][T17844] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4147'. [ 328.512733][T17849] netlink: 'syz.5.4149': attribute type 10 has an invalid length. [ 328.521216][T17849] team0: Failed to send options change via netlink (err -105) [ 328.523574][T17849] team0: Port device dummy0 added [ 328.622799][T17856] [syz.5.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 328.702086][T17861] syzkaller1: entered promiscuous mode [ 328.704040][T17861] syzkaller1: entered allmulticast mode [ 328.848116][T17871] syzkaller0: entered promiscuous mode [ 328.849931][T17871] syzkaller0: entered allmulticast mode [ 329.228677][T17889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.235637][T17888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.560844][T17903] openvswitch: netlink: Unknown key attributes 2 [ 329.576578][T17904] blktrace: Concurrent blktraces are not allowed on loop4 [ 329.621422][T17906] syzkaller0: entered promiscuous mode [ 329.623213][T17906] syzkaller0: entered allmulticast mode [ 329.686842][ T5931] Bluetooth: hci0: command tx timeout [ 329.766361][T17908] bond1: option downdelay: invalid value (18446744073709551615) [ 329.769954][T17908] bond1: option downdelay: allowed values 0 - 2147483647 [ 329.774247][T17908] bond1 (unregistering): Released all slaves [ 329.891311][T17915] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 330.438360][T17935] __nla_validate_parse: 2 callbacks suppressed [ 330.438376][T17935] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4178'. [ 330.444917][T17935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4178'. [ 330.449338][T17935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4178'. [ 330.465400][T17936] SELinux: syz.0.4178 (17936) set checkreqprot to 1. This is no longer supported. [ 330.475935][T17935] SELinux: syz.0.4178 (17935) set checkreqprot to 1. This is no longer supported. [ 330.556388][T17941] xt_hashlimit: size too large, truncated to 1048576 [ 330.568400][T17944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'. [ 330.609925][T17947] syzkaller0: entered promiscuous mode [ 330.612125][T17947] syzkaller0: entered allmulticast mode [ 330.807395][T17961] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4188'. [ 330.810450][T17961] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4188'. [ 330.862186][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4191'. [ 330.948068][ T6011] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 331.016929][T17974] syzkaller1: entered promiscuous mode [ 331.018899][T17974] syzkaller1: entered allmulticast mode [ 331.106782][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 331.110433][ T6011] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 331.115333][ T6011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 331.120197][ T6011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.124127][ T6011] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.130876][ T6011] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.135006][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.143016][T17976] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4194'. [ 331.150921][T17976] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4194'. [ 331.345657][ T6011] usb 5-1: GET_CAPABILITIES returned 0 [ 331.349012][ T6011] usbtmc 5-1:16.0: can't read capabilities [ 331.472640][T17978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.475362][T17978] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 331.523017][T17978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.525527][T17978] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 331.584412][T17951] syzkaller0: entered promiscuous mode [ 331.587113][T17951] syzkaller0: entered allmulticast mode [ 331.595781][ T6011] usb 5-1: USB disconnect, device number 9 [ 331.750515][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4199'. [ 331.935529][T18020] syzkaller1: left promiscuous mode [ 331.937846][T18020] syzkaller1: left allmulticast mode [ 332.088556][T18031] kvm: user requested TSC rate below hardware speed [ 332.225190][T18039] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 332.231349][T18039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18039 comm=syz.0.4212 [ 332.367158][T18048] syzkaller0: entered promiscuous mode [ 332.369534][T18048] syzkaller0: entered allmulticast mode [ 332.420315][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 332.420328][ T40] audit: type=1400 audit(2000000062.649:649): avc: denied { ioctl } for pid=18049 comm="syz.5.4216" path="socket:[72591]" dev="sockfs" ino=72591 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 332.603781][ T40] audit: type=1400 audit(2000000062.829:650): avc: denied { map } for pid=18058 comm="syz.5.4220" path="/205/file0/cgroup.kill" dev="9p" ino=72614225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 332.635372][ T40] audit: type=1804 audit(2000000062.859:651): pid=18059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.4220" name="/newroot/205/file0/file0" dev="9p" ino=72614031 res=1 errno=0 [ 333.000350][T18075] dummy0: entered allmulticast mode [ 333.003348][T18072] dummy0: left allmulticast mode [ 333.046886][T18078] syzkaller0: entered promiscuous mode [ 333.049327][T18078] syzkaller0: entered allmulticast mode [ 333.058051][T18082] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.193358][T18091] syzkaller1: entered promiscuous mode [ 333.195664][T18091] syzkaller1: entered allmulticast mode [ 333.236432][T18098] syzkaller1: left promiscuous mode [ 333.241205][T18098] syzkaller1: left allmulticast mode [ 333.299419][ T40] audit: type=1400 audit(2000000063.529:652): avc: denied { ioctl } for pid=18101 comm="syz.2.4238" path="socket:[72657]" dev="sockfs" ino=72657 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 333.390649][T18106] syzkaller0: entered promiscuous mode [ 333.392384][T18106] syzkaller0: entered allmulticast mode [ 333.542529][T18113] syzkaller0: entered promiscuous mode [ 333.545179][T18113] syzkaller0: entered allmulticast mode [ 333.821302][T18125] overlay: ./file1 is not a directory [ 334.070957][T18141] syzkaller0: entered promiscuous mode [ 334.073187][T18141] syzkaller0: entered allmulticast mode [ 334.244804][T18155] bond1: (slave bond_slave_1): Device is not our slave [ 334.249463][T18155] bond1: option active_slave: invalid value (bond_slave_1) [ 334.260382][T18155] bond1 (unregistering): Released all slaves [ 334.359762][T18155] bond1: (slave bond_slave_1): Device is not our slave [ 334.362392][T18155] bond1: option active_slave: invalid value (bond_slave_1) [ 334.366353][T18155] bond1 (unregistering): Released all slaves [ 334.381783][T18162] lo speed is unknown, defaulting to 1000 [ 334.454796][T18155] bond1: (slave bond_slave_1): Device is not our slave [ 334.457532][T18155] bond1: option active_slave: invalid value (bond_slave_1) [ 334.460918][T18155] bond1 (unregistering): Released all slaves [ 334.580248][T18155] bond1: (slave bond_slave_1): Device is not our slave [ 334.583228][T18155] bond1: option active_slave: invalid value (bond_slave_1) [ 334.590114][T18155] bond1 (unregistering): Released all slaves [ 334.693889][T18155] bond1: (slave bond_slave_1): Device is not our slave [ 334.696283][T18155] bond1: option active_slave: invalid value (bond_slave_1) [ 334.699743][T18155] bond1 (unregistering): Released all slaves [ 334.813660][T18155] bond1: (slave bond_slave_1): Device is not our slave [ 334.815957][T18155] bond1: option active_slave: invalid value (bond_slave_1) [ 334.824088][T18155] bond1 (unregistering): Released all slaves [ 334.842138][T18198] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.866504][T18198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.960505][T18155] bond1: (slave bond_slave_1): Device is not our slave [ 334.963083][T18155] bond1: option active_slave: invalid value (bond_slave_1) [ 334.969106][T18155] bond1 (unregistering): Released all slaves [ 335.052775][T18155] bond1: (slave bond_slave_1): Device is not our slave [ 335.055080][T18155] bond1: option active_slave: invalid value (bond_slave_1) [ 335.058849][T18155] bond1 (unregistering): Released all slaves [ 335.269061][T18220] syzkaller1: entered promiscuous mode [ 335.271131][T18220] syzkaller1: entered allmulticast mode [ 335.486128][T18236] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 335.493262][T18236] __nla_validate_parse: 6 callbacks suppressed [ 335.493273][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4285'. [ 335.498622][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4285'. [ 335.571803][T18238] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 335.582255][T18245] syzkaller1: entered promiscuous mode [ 335.584280][T18245] syzkaller1: entered allmulticast mode [ 335.589029][T18245] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 335.592424][T18247] syzkaller0: entered promiscuous mode [ 335.594352][T18247] syzkaller0: entered allmulticast mode [ 335.706992][T18254] 9pnet_fd: p9_fd_create_unix (18254): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 335.758006][T18267] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.832928][T18258] tipc: Enabling of bearer rejected, failed to enable media [ 335.852468][T18281] syzkaller0: entered promiscuous mode [ 335.854393][T18281] syzkaller0: entered allmulticast mode [ 335.861821][T18281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18281 comm=syz.5.4299 [ 335.884606][T18283] FAULT_INJECTION: forcing a failure. [ 335.884606][T18283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.889448][T18283] CPU: 1 UID: 0 PID: 18283 Comm: syz.0.4300 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.889468][T18283] Tainted: [L]=SOFTLOCKUP [ 335.889472][T18283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 335.889478][T18283] Call Trace: [ 335.889498][T18283] [ 335.889503][T18283] dump_stack_lvl+0x100/0x190 [ 335.889532][T18283] should_fail_ex.cold+0x5/0xa [ 335.889547][T18283] _copy_from_iter+0x1f4/0x1690 [ 335.889569][T18283] ? __asan_memset+0x23/0x50 [ 335.889584][T18283] ? __pfx__copy_from_iter+0x10/0x10 [ 335.889602][T18283] ? __pfx___alloc_skb+0x10/0x10 [ 335.889631][T18283] netlink_sendmsg+0x808/0xda0 [ 335.889647][T18283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.889659][T18283] ? __might_fault+0xa0/0x140 [ 335.889678][T18283] ____sys_sendmsg+0xa54/0xc30 [ 335.889728][T18283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.889754][T18283] ___sys_sendmsg+0x190/0x1e0 [ 335.889770][T18283] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.889801][T18283] __sys_sendmsg+0x170/0x220 [ 335.889812][T18283] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.889831][T18283] do_syscall_64+0x106/0xf80 [ 335.889842][T18283] ? clear_bhb_loop+0x40/0x90 [ 335.889856][T18283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.889867][T18283] RIP: 0033:0x7f23d0b9c799 [ 335.889877][T18283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.889887][T18283] RSP: 002b:00007f23d1aa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.889899][T18283] RAX: ffffffffffffffda RBX: 00007f23d0e15fa0 RCX: 00007f23d0b9c799 [ 335.889906][T18283] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 335.889913][T18283] RBP: 00007f23d1aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 335.889919][T18283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.889926][T18283] R13: 00007f23d0e16038 R14: 00007f23d0e15fa0 R15: 00007ffd741928e8 [ 335.889940][T18283] [ 335.931505][T18287] sctp: [Deprecated]: syz.6.4301 (pid 18287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.931505][T18287] Use struct sctp_sack_info instead [ 335.952137][T18279] nbd: must specify at least one socket [ 336.021101][T18293] dlm: no local IP address has been set [ 336.023613][T18293] dlm: cannot start dlm midcomms -107 [ 336.240220][T18310] vlan0: entered promiscuous mode [ 336.242247][T18310] vlan0: entered allmulticast mode [ 336.244125][T18310] veth0_vlan: entered allmulticast mode [ 336.332227][T18324] program syz.0.4311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.344943][T18326] program syz.0.4311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.604040][T18345] syzkaller0: entered promiscuous mode [ 336.606082][T18345] syzkaller0: entered allmulticast mode [ 336.662439][T18348] syzkaller1: entered promiscuous mode [ 336.664288][T18348] syzkaller1: entered allmulticast mode [ 336.757529][T18358] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 336.958394][T18369] input: syz1 as /devices/virtual/input/input11 [ 336.972586][T18369] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 336.976411][T18369] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 336.980261][T18369] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 336.983094][T18369] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 337.032875][ T40] audit: type=1400 audit(2000000067.249:653): avc: denied { unmount } for pid=17623 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 337.161095][T18391] syzkaller1: entered promiscuous mode [ 337.163382][T18391] syzkaller1: entered allmulticast mode [ 337.226766][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 337.315548][T18401] FAULT_INJECTION: forcing a failure. [ 337.315548][T18401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.319776][T18401] CPU: 2 UID: 0 PID: 18401 Comm: syz.0.4336 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.319803][T18401] Tainted: [L]=SOFTLOCKUP [ 337.319811][T18401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.319821][T18401] Call Trace: [ 337.319827][T18401] [ 337.319832][T18401] dump_stack_lvl+0x100/0x190 [ 337.319861][T18401] should_fail_ex.cold+0x5/0xa [ 337.319878][T18401] _copy_from_iter+0x1f4/0x1690 [ 337.319901][T18401] ? __pfx__copy_from_iter+0x10/0x10 [ 337.319917][T18401] ? _parse_integer_limit+0x17f/0x1d0 [ 337.319930][T18401] ? _kstrtoull+0x13c/0x1f0 [ 337.319940][T18401] ? __pfx__kstrtoull+0x10/0x10 [ 337.319953][T18401] tun_get_user+0x265/0x3e10 [ 337.319969][T18401] ? __lock_acquire+0x4a5/0x2630 [ 337.319990][T18401] ? __pfx_tun_get_user+0x10/0x10 [ 337.320004][T18401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 337.320027][T18401] ? find_held_lock+0x2b/0x80 [ 337.320041][T18401] ? tun_get+0x191/0x370 [ 337.320052][T18401] ? tun_get+0x191/0x370 [ 337.320067][T18401] tun_chr_write_iter+0xdc/0x200 [ 337.320082][T18401] vfs_write+0x6ac/0x1070 [ 337.320099][T18401] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 337.320114][T18401] ? __pfx_vfs_write+0x10/0x10 [ 337.320129][T18401] ? find_held_lock+0x2b/0x80 [ 337.320152][T18401] ksys_write+0x12a/0x250 [ 337.320168][T18401] ? __pfx_ksys_write+0x10/0x10 [ 337.320188][T18401] do_syscall_64+0x106/0xf80 [ 337.320204][T18401] ? clear_bhb_loop+0x40/0x90 [ 337.320218][T18401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.320230][T18401] RIP: 0033:0x7f23d0b9c799 [ 337.320240][T18401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.320251][T18401] RSP: 002b:00007f23d1aa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 337.320268][T18401] RAX: ffffffffffffffda RBX: 00007f23d0e15fa0 RCX: 00007f23d0b9c799 [ 337.320279][T18401] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 337.320289][T18401] RBP: 00007f23d1aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 337.320299][T18401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.320309][T18401] R13: 00007f23d0e16038 R14: 00007f23d0e15fa0 R15: 00007ffd741928e8 [ 337.320331][T18401] [ 337.378973][ T34] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.418538][ T34] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.432718][ T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.435663][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.449827][T18370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.453977][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.456886][ C2] ------------[ cut here ]------------ [ 337.458992][ C2] ODEBUG: free active (active state 0) object: ffff888021add490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 337.463077][ C2] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#2: syz.5.4326/18373 [ 337.466417][ C2] Modules linked in: [ 337.468318][ C2] CPU: 2 UID: 0 PID: 18373 Comm: syz.5.4326 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.471758][ C2] Tainted: [L]=SOFTLOCKUP [ 337.473109][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.476302][ C2] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 337.478249][ C2] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 48 e6 0b 41 56 48 8b 14 dd e0 02 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 4c 0d dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 337.484203][ C2] RSP: 0018:ffffc90000648a38 EFLAGS: 00010246 [ 337.486148][ C2] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 337.488856][ C2] RDX: ffffffff8c1b0220 RSI: ffffffff8c1afe40 RDI: ffffffff90e3dec0 [ 337.492019][ C2] RBP: 0000000000000001 R08: ffff888021add490 R09: ffffffff8bb2b860 [ 337.494725][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1afe40 [ 337.497722][ C2] R13: ffffffff8bb2b8a0 R14: ffffffff8a7b5bf0 R15: ffffc90000648b38 [ 337.500224][ C2] FS: 00007f2f535066c0(0000) GS:ffff8880d6547000(0000) knlGS:0000000000000000 [ 337.503228][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.505372][ C2] CR2: 00007f2f5264ea7c CR3: 0000000039584000 CR4: 0000000000352ef0 [ 337.508114][ C2] Call Trace: [ 337.509272][ C2] [ 337.510364][ C2] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 337.512153][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 337.514044][ C2] debug_check_no_obj_freed+0x4da/0x630 [ 337.516123][ C2] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 337.518376][ C2] ? mark_held_locks+0x40/0x70 [ 337.519903][ C2] ? kasan_quarantine_put+0x104/0x240 [ 337.521754][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 337.523545][ C2] ? rose_timer_expiry+0x53f/0x630 [ 337.525359][ C2] kfree+0x38f/0x6b0 [ 337.526812][ C2] rose_timer_expiry+0x53f/0x630 [ 337.528432][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.530203][ C2] call_timer_fn+0x19a/0x670 [ 337.531776][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 337.533555][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.535348][ C2] ? mark_held_locks+0x40/0x70 [ 337.537078][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.538895][ C2] __run_timers+0x757/0xb30 [ 337.540374][ C2] ? __pfx___run_timers+0x10/0x10 [ 337.542021][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 337.543774][ C2] run_timer_base+0x114/0x190 [ 337.545552][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 337.547304][ C2] run_timer_softirq+0x1a/0x50 [ 337.548884][ C2] handle_softirqs+0x1eb/0x9e0 [ 337.550747][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 337.552861][ C2] __irq_exit_rcu+0xef/0x150 [ 337.554774][ C2] irq_exit_rcu+0x9/0x30 [ 337.556486][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 337.558804][ C2] [ 337.559982][ C2] [ 337.561132][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.563321][ C2] RIP: 0010:ktime_get_coarse_real_ts64_mg+0xd8/0x300 [ 337.565450][ C2] Code: 48 c7 c7 48 4d 1d 9b e8 76 fd ee ff 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 82 c8 12 00 58 4d 85 e4 0f 85 bf 01 00 00 93 cd 12 00 44 8b 25 0c 7c 27 19 45 89 e5 31 ff 41 83 e5 01 44 [ 337.571586][ C2] RSP: 0018:ffffc90007d56e68 EFLAGS: 00000293 [ 337.573326][ T34] usb 7-1: USB disconnect, device number 9 [ 337.573524][ C2] RAX: 0000000000000000 RBX: ffffc90007d56ef0 RCX: ffffffff81f5d299 [ 337.578061][ C2] RDX: ffff88805ace0000 RSI: ffffffff81f5d2a4 RDI: ffff88805ace0000 [ 337.580567][ C2] RBP: ffffc90007d56eb0 R08: 0000000000000007 R09: 0000000000000000 [ 337.583136][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 337.585669][ C2] R13: 1ffff92000faaddf R14: fffff52000faadde R15: ffffc90007d56ef8 [ 337.588224][ C2] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 337.590222][ C2] ? ktime_get_coarse_real_ts64_mg+0x254/0x300 [ 337.592214][ C2] ? ktime_get_coarse_real_ts64_mg+0x254/0x300 [ 337.594232][ C2] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 337.596084][ C2] current_time+0x8a/0x3b0 [ 337.597607][ C2] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 337.599566][ C2] ? __pfx_current_time+0x10/0x10 [ 337.601165][ C2] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 337.602959][ C2] file_update_time_flags+0xe2/0x500 [ 337.604599][ C2] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 337.606470][ C2] shmem_file_write_iter+0xec/0x140 [ 337.608189][ C2] __kernel_write_iter+0x2ac/0x920 [ 337.609829][ C2] ? __pfx___kernel_write_iter+0x10/0x10 [ 337.611628][ C2] ? __up_read+0x2c5/0x700 [ 337.613064][ C2] ? dump_user_range+0x73b/0xb50 [ 337.614725][ C2] dump_user_range+0x3f9/0xb50 [ 337.616267][ C2] ? __pfx_dump_user_range+0x10/0x10 [ 337.618043][ C2] ? __pfx_writenote+0x10/0x10 [ 337.619596][ C2] elf_core_dump+0x2d5f/0x3d10 [ 337.621149][ C2] ? __pfx_elf_core_dump+0x10/0x10 [ 337.622808][ C2] ? kasan_save_stack+0x3f/0x50 [ 337.624421][ C2] ? kasan_save_stack+0x30/0x50 [ 337.625979][ C2] ? __kasan_kmalloc+0xaa/0xb0 [ 337.627815][ C2] ? __kvmalloc_node_noprof+0x360/0xa00 [ 337.629574][ C2] ? vfs_coredump+0x2105/0x5570 [ 337.631212][ C2] ? asm_exc_page_fault+0x26/0x30 [ 337.633141][ C2] ? 0xffffffffff600000 [ 337.634864][ C2] ? vfs_coredump+0x27bc/0x5570 [ 337.636382][ C2] vfs_coredump+0x27bc/0x5570 [ 337.638006][ C2] ? __pfx_vfs_coredump+0x10/0x10 [ 337.639608][ C2] ? __lock_acquire+0x4a5/0x2630 [ 337.641205][ C2] ? lock_acquire+0x1cf/0x380 [ 337.642740][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 337.644440][ C2] ? bpf_ksym_find+0x128/0x1c0 [ 337.645999][ C2] ? __kernel_text_address+0xd/0x30 [ 337.647729][ C2] ? unwind_get_return_address+0x59/0xa0 [ 337.649522][ C2] ? arch_stack_walk+0xa6/0xf0 [ 337.651147][ C2] ? __sigqueue_free+0xbe/0x2a0 [ 337.652691][ C2] ? stack_trace_save+0x8e/0xc0 [ 337.654258][ C2] ? __pfx_stack_trace_save+0x10/0x10 [ 337.655962][ C2] ? stack_depot_save_flags+0x27/0x9d0 [ 337.657766][ C2] ? __lock_acquire+0x4a5/0x2630 [ 337.659374][ C2] ? proc_coredump_connector+0x2d3/0x4f0 [ 337.661433][ C2] ? __pfx_proc_coredump_connector+0x10/0x10 [ 337.663407][ C2] ? rcu_is_watching+0x12/0xc0 [ 337.665250][ C2] get_signal+0x1f2a/0x21e0 [ 337.667052][ C2] ? __pfx_get_signal+0x10/0x10 [ 337.668822][ C2] arch_do_signal_or_restart+0x91/0x7a0 [ 337.670845][ C2] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 337.672998][ C2] ? do_user_addr_fault+0x8d6/0x12f0 [ 337.674828][ C2] irqentry_exit+0x1f8/0x670 [ 337.676496][ C2] asm_exc_page_fault+0x26/0x30 [ 337.678429][ C2] RIP: 0033:0x0 [ 337.679708][ C2] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 337.682379][ C2] RSP: 002b:00002000000001f8 EFLAGS: 00010217 [ 337.684539][ C2] RAX: 0000000000000000 RBX: 00007f2f52815fa0 RCX: 00007f2f5259c799 [ 337.687336][ C2] RDX: 0000200000000080 RSI: 00002000000001f0 RDI: 0000000008000000 [ 337.689876][ C2] RBP: 00007f2f52632bd9 R08: 0000200000000680 R09: 0000200000000680 [ 337.692415][ C2] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 337.694926][ C2] R13: 00007f2f52816038 R14: 00007f2f52815fa0 R15: 00007ffd2a3506d8 [ 337.697452][ C2] [ 337.698459][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 337.700746][ C2] CPU: 2 UID: 0 PID: 18373 Comm: syz.5.4326 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.704154][ C2] Tainted: [L]=SOFTLOCKUP [ 337.705512][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.708515][ C2] Call Trace: [ 337.709560][ C2] [ 337.710453][ C2] dump_stack_lvl+0x100/0x190 [ 337.711919][ C2] vpanic+0x552/0x970 [ 337.713161][ C2] ? __pfx_vpanic+0x10/0x10 [ 337.714618][ C2] panic+0xd1/0xe0 [ 337.715797][ C2] ? __pfx_panic+0x10/0x10 [ 337.717166][ C2] ? check_panic_on_warn+0x1f/0x90 [ 337.718801][ C2] check_panic_on_warn.cold+0x19/0x34 [ 337.720473][ C2] ? debug_print_object+0x18e/0x2a0 [ 337.722112][ C2] __warn.cold+0x191/0x348 [ 337.723509][ C2] __report_bug+0x296/0x3d0 [ 337.724979][ C2] ? debug_print_object+0x18e/0x2a0 [ 337.726622][ C2] ? __pfx___report_bug+0x10/0x10 [ 337.728340][ C2] ? rose_timer_expiry+0x537/0x630 [ 337.729983][ C2] ? stack_trace_save+0x8e/0xc0 [ 337.731495][ C2] report_bug_entry+0xe1/0x290 [ 337.733026][ C2] ? debug_print_object+0x19b/0x2a0 [ 337.734645][ C2] handle_bug+0x1c9/0x2a0 [ 337.735992][ C2] exc_invalid_op+0x17/0x50 [ 337.737346][ C2] asm_exc_invalid_op+0x1a/0x20 [ 337.739034][ C2] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 337.741053][ C2] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 48 e6 0b 41 56 48 8b 14 dd e0 02 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 4c 0d dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 337.747402][ C2] RSP: 0018:ffffc90000648a38 EFLAGS: 00010246 [ 337.749291][ C2] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 337.751739][ C2] RDX: ffffffff8c1b0220 RSI: ffffffff8c1afe40 RDI: ffffffff90e3dec0 [ 337.754241][ C2] RBP: 0000000000000001 R08: ffff888021add490 R09: ffffffff8bb2b860 [ 337.757046][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1afe40 [ 337.759815][ C2] R13: ffffffff8bb2b8a0 R14: ffffffff8a7b5bf0 R15: ffffc90000648b38 [ 337.762381][ C2] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 337.764287][ C2] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 337.766116][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 337.767959][ C2] debug_check_no_obj_freed+0x4da/0x630 [ 337.769779][ C2] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 337.771721][ C2] ? mark_held_locks+0x40/0x70 [ 337.773269][ C2] ? kasan_quarantine_put+0x104/0x240 [ 337.775008][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 337.776658][ C2] ? rose_timer_expiry+0x53f/0x630 [ 337.778352][ C2] kfree+0x38f/0x6b0 [ 337.779645][ C2] rose_timer_expiry+0x53f/0x630 [ 337.781234][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.782998][ C2] call_timer_fn+0x19a/0x670 [ 337.784512][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 337.786150][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.787885][ C2] ? mark_held_locks+0x40/0x70 [ 337.789411][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.791170][ C2] __run_timers+0x757/0xb30 [ 337.792629][ C2] ? __pfx___run_timers+0x10/0x10 [ 337.794292][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 337.795903][ C2] run_timer_base+0x114/0x190 [ 337.797421][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 337.799105][ C2] run_timer_softirq+0x1a/0x50 [ 337.800636][ C2] handle_softirqs+0x1eb/0x9e0 [ 337.802199][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 337.803891][ C2] __irq_exit_rcu+0xef/0x150 [ 337.805399][ C2] irq_exit_rcu+0x9/0x30 [ 337.806788][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 337.808589][ C2] [ 337.809562][ C2] [ 337.810605][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.812522][ C2] RIP: 0010:ktime_get_coarse_real_ts64_mg+0xd8/0x300 [ 337.814674][ C2] Code: 48 c7 c7 48 4d 1d 9b e8 76 fd ee ff 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 82 c8 12 00 58 4d 85 e4 0f 85 bf 01 00 00 93 cd 12 00 44 8b 25 0c 7c 27 19 45 89 e5 31 ff 41 83 e5 01 44 [ 337.820706][ C2] RSP: 0018:ffffc90007d56e68 EFLAGS: 00000293 [ 337.822638][ C2] RAX: 0000000000000000 RBX: ffffc90007d56ef0 RCX: ffffffff81f5d299 [ 337.825165][ C2] RDX: ffff88805ace0000 RSI: ffffffff81f5d2a4 RDI: ffff88805ace0000 [ 337.827634][ C2] RBP: ffffc90007d56eb0 R08: 0000000000000007 R09: 0000000000000000 [ 337.830167][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 337.832682][ C2] R13: 1ffff92000faaddf R14: fffff52000faadde R15: ffffc90007d56ef8 [ 337.835219][ C2] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 337.837315][ C2] ? ktime_get_coarse_real_ts64_mg+0x254/0x300 [ 337.839311][ C2] ? ktime_get_coarse_real_ts64_mg+0x254/0x300 [ 337.841273][ C2] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 337.843166][ C2] current_time+0x8a/0x3b0 [ 337.844636][ C2] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 337.846546][ C2] ? __pfx_current_time+0x10/0x10 [ 337.848159][ C2] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 337.850049][ C2] file_update_time_flags+0xe2/0x500 [ 337.851736][ C2] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 337.853614][ C2] shmem_file_write_iter+0xec/0x140 [ 337.855319][ C2] __kernel_write_iter+0x2ac/0x920 [ 337.857188][ C2] ? __pfx___kernel_write_iter+0x10/0x10 [ 337.859425][ C2] ? __up_read+0x2c5/0x700 [ 337.861212][ C2] ? dump_user_range+0x73b/0xb50 [ 337.863204][ C2] dump_user_range+0x3f9/0xb50 [ 337.864849][ C2] ? __pfx_dump_user_range+0x10/0x10 [ 337.866549][ C2] ? __pfx_writenote+0x10/0x10 [ 337.868072][ C2] elf_core_dump+0x2d5f/0x3d10 [ 337.869621][ C2] ? __pfx_elf_core_dump+0x10/0x10 [ 337.871269][ C2] ? kasan_save_stack+0x3f/0x50 [ 337.873177][ C2] ? kasan_save_stack+0x30/0x50 [ 337.875170][ C2] ? __kasan_kmalloc+0xaa/0xb0 [ 337.877081][ C2] ? __kvmalloc_node_noprof+0x360/0xa00 [ 337.879287][ C2] ? vfs_coredump+0x2105/0x5570 [ 337.881233][ C2] ? asm_exc_page_fault+0x26/0x30 [ 337.883233][ C2] ? 0xffffffffff600000 [ 337.885051][ C2] ? vfs_coredump+0x27bc/0x5570 [ 337.887019][ C2] vfs_coredump+0x27bc/0x5570 [ 337.888530][ C2] ? __pfx_vfs_coredump+0x10/0x10 [ 337.890174][ C2] ? __lock_acquire+0x4a5/0x2630 [ 337.891766][ C2] ? lock_acquire+0x1cf/0x380 [ 337.893337][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 337.895353][ C2] ? bpf_ksym_find+0x128/0x1c0 [ 337.897095][ C2] ? __kernel_text_address+0xd/0x30 [ 337.898768][ C2] ? unwind_get_return_address+0x59/0xa0 [ 337.900554][ C2] ? arch_stack_walk+0xa6/0xf0 [ 337.902177][ C2] ? __sigqueue_free+0xbe/0x2a0 [ 337.903756][ C2] ? stack_trace_save+0x8e/0xc0 [ 337.905402][ C2] ? __pfx_stack_trace_save+0x10/0x10 [ 337.907133][ C2] ? stack_depot_save_flags+0x27/0x9d0 [ 337.908866][ C2] ? __lock_acquire+0x4a5/0x2630 [ 337.910492][ C2] ? proc_coredump_connector+0x2d3/0x4f0 [ 337.912307][ C2] ? __pfx_proc_coredump_connector+0x10/0x10 [ 337.914263][ C2] ? rcu_is_watching+0x12/0xc0 [ 337.915807][ C2] get_signal+0x1f2a/0x21e0 [ 337.917351][ C2] ? __pfx_get_signal+0x10/0x10 [ 337.919086][ C2] arch_do_signal_or_restart+0x91/0x7a0 [ 337.921139][ C2] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 337.923451][ C2] ? do_user_addr_fault+0x8d6/0x12f0 [ 337.925423][ C2] irqentry_exit+0x1f8/0x670 [ 337.927133][ C2] asm_exc_page_fault+0x26/0x30 [ 337.928765][ C2] RIP: 0033:0x0 [ 337.929936][ C2] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 337.932261][ C2] RSP: 002b:00002000000001f8 EFLAGS: 00010217 [ 337.934240][ C2] RAX: 0000000000000000 RBX: 00007f2f52815fa0 RCX: 00007f2f5259c799 [ 337.936710][ C2] RDX: 0000200000000080 RSI: 00002000000001f0 RDI: 0000000008000000 [ 337.939224][ C2] RBP: 00007f2f52632bd9 R08: 0000200000000680 R09: 0000200000000680 [ 337.941707][ C2] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 337.944225][ C2] R13: 00007f2f52816038 R14: 00007f2f52815fa0 R15: 00007ffd2a3506d8 [ 337.946816][ C2] [ 337.948460][ C2] Kernel Offset: disabled [ 337.949880][ C2] Rebooting in 86400 seconds..