last executing test programs: 4m57.840506179s ago: executing program 2 (id=183): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004cc0)={0x1c, 0x1d, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x3ee5, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32], 0x24}}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 4m57.701870948s ago: executing program 2 (id=186): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'vxcan1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/warn_count', 0x88000, 0x1) read$alg(r3, &(0x7f0000000e00)=""/59, 0x3b) write$tun(r3, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x138) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x4a) timer_create(0x4, &(0x7f0000000240)={0x0, 0x34, 0x0, @thr={&(0x7f0000000140)="27bc1f226c7bd65597766c5a2180a55d91de47e95c2396313d906533feac9e93da46a2d3cb1d59d19a7cebdeceec829fa09b9f86887e1505ee9093d480326d9b919ee4fd74c6646e359946a7eb34dfe1f9d959ad958b30647c875038a0fe2095fcec9b16fd911ef9a8c1f5cf691f540b762ef45fc2c2cb4c066a9e72e1b11ce9c4962d9fbbfd808d0a3a567da2cce9cf7016a85be873238134c869ebc7ef857308ecc183caa3fab4fcddbb2eadd74262b226e27d77e5dd6a3b46c9c2", &(0x7f0000000200)="f2644365981559fea03fb3dc7110f55651a18b7dc5693e96b52be8b306c2580de542eb4015757cb6c70c13c8"}}, &(0x7f0000000280)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4bfb, &(0x7f0000000640)=""/4096) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000040)=0x1) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0) 4m57.500836479s ago: executing program 2 (id=191): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec070d04"], 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x800000001, 0x1a002) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0xffffd000) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000700)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86a166ffcb3159162f8503efdbce4b3bc8ebebaaea2c3b657ae0b59b4ab6d26401b11dd8e9ffcb841b0402ac2d709ca854980ea4a1952ea60f0f82d88b3d08f4d61ae17dda042c64e21a7a15b8ab53ff26b9bcd8dc46989f5bf9199627e91fee5a3ff053c2b9097a8efba49b2427f0e8ba1017c7517a35fa36a4e258378e2b68f82a39c928c6d02512d72b427f28199aebe7532793431e8429d84d94c9b16843eec23e30b900f76a7d0a6a03fcc63ff7378298fe4f624610579993d34a20f05716351189dcd4688c5b005724ce90c41f6792962e1c4424b8da7478b0ca31e9dd35411a29169cc1ea2008ae8a61634a70aa875bd39831207c5b664cf65ba0f283281ff78d7702660c067ef1c2a7ab5181ace071a5768619bd6e24a43b0778b33f1d06b763336d85e31bfa83d679fea9abefd146695b9586abf829b44cb4094c82e23d81a7d9962180899cc0a7b2ee7df234bc5f7cbf53d2b1819075e5143e6744d14e0080000000000000c593bed0f799886824ff41f499b6812850273d04ed44cea50d3e7019ada5b6342ea378df700fe826b1e918538f1d98a73503b6aff148de6c454d0de9080000005298e38d41a0a35472632144c53738b271d19671f962c8084319da96b0533dca42527e88942bef8c19a14cce1338828e4fc8b729b0503b182641db69f91d4d8d83a3636ba1e56564f43b71a0aaea82937ee5c84eb9af29a7a5158bbce2e3ba4026961cf15b47d0e42b9544dd0af0064818096ec48a6c7b26698919e8303daf8d06c5317f92fbd601deb5562247bd3b0a5cfb7c2192ea4ebe06d8d0f093e5e9d838cc5215963df8f315aaeb2e54547cbd651675ab4557c18c4fdcb0adff2a112efd8a30ade408351fb116299570eecf838733a81b45f646e4fdc4f97cd51392e664d4b44e7f9b8531f33c227993c1edeaed5315cc32cda5d643fa352a706cc9242405e5a807029f886b4240f3227e95635c5eedf11ce9615b60a25a8ca788c13b920f262b6745203fd244428fda8c88eb0b7b4457b93ec6b85b2074e8ad246ae1765cfa4835791465bb0b8dd13d0c10cbb45c64620c636fcef73738dfa121052c7d352a95ca06c33a785fabac39faf052b073f059e8a2d13c5063d5a1295799df4626b2e9b025559ae23ae419191be4d121ef471b53e5f70a8d40b7346db768c2663093ad410e45b40afc3470e2170e098ae214f17ba34477e5d752977fd5015d2e0b8cfbc503c6e5318be329603e4717e660bd9d33c72430a2878f283f1cdda0c9f08f3ea2f1ef6f983e7902c858f5cf670cad4b70002521f19bef11f685f5aa4a6913699ee34e364b290e7392b43d18ef57083742dbfee44dfe0111eabc06fd875c9fe18bd36a89ac88df5e79ec576649d17f3fd80dfb546e75bd21ffea75af9cf59398e7d6d66dee5fd624d9f502d627c46ae35295fa36b754ef1b13deb0653e177da828439b2140c9cea9d98b3adf5871f98c5dd24adc150f0ffee9043c43d138071c4974bc72891f760d24b8a6619670d60224c84c97764b340167a79e87358c912c81b7d9337c2eeba2b700354d8bb4e942d7e8b35a3fc7df172b233ea425c1218b255fcfdabbc2e2429dc8ed0acbf395f976eb6d4f35a6da8673aad6e67a26399c45112128f0b0f548692e0ce7b2302d9bb921448968f33bccddc9436673425bc1bf1558c05f709e12fbd60e9da3e33aa21f04ec4078fbaffa779471ffba3f8d313078e5d8d1b85c4ea505b5710bd2bb3afe20fedb5e3eee9190ee50e3edd56202b2c1c5658dac1a68238a4790a31927db0c6c71e6f21d6579f8471299a9410dc32b089a92899ffcc39a5575319ac7cdee7e9d60d17e121c21579eea8b72f048be1690c05b102d1792fd0724318e9a1dbe90b80b7c382e07a2031d710e777352e399ef9d8ff086d16bb40d8cc4bc2cb382b54ab4499a232cbaeb7319121c76ee17161b092ef69c1f3d90640b9a36a834307edc451fcc864f8ae333d63cbdc066fc8f81459e6b40331b3ea7178d4e3d8d6a2ff3532f6da5bbf27cd91124f5bb00f3e00d9ce8cddfe6131f74491867d071664ebbda5c8645a12af625374de4bac99a60bd38b465a89e36899fd38ddd5a087ec06f1ad7c740519ac7a8cd0d67db3ac8e84990fe0080308a81a2e5d5d8981fcc151b5fa9b4c3f84377961cfbcdbc087ee444af4ce4d66b647a0a32cea0a6c969630c936dfc124c84a3f9cf618901109e6dbe756ecdd28091de799ed401218d3d51ae7897327e1b776922e1193465c1e128740aa1766fe65b921f314fbedcb16a614217e12b12c69b395d00000000008250e7c2130563f1a78e760c4807fd64bac032b716c0729b3944", 0x69d}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TIOCCONS(r1, 0x541d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 4m57.16128737s ago: executing program 2 (id=192): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0xfffffffffffffd9a) ioctl(r1, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d") bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r2) (async) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) (async) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x1, 0x5001) (async, rerun: 32) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x1, 0x5004) (rerun: 32) ptrace$getregset(0x4204, r2, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) (async, rerun: 64) ptrace$setregset(0x4205, r2, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) (async, rerun: 64) ptrace(0x11, r2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) (async) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}, 0x8000}], 0x1, 0x2129, 0x0) 4m57.161029027s ago: executing program 2 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000027000400000004cb48dfce181fce97519549cd5f617857934eaa110d000008000000141000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m56.718801526s ago: executing program 2 (id=198): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985793802", 0x18}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b", 0x50}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000010000100adbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="200800000121b3c589d0b1a2656243564084240400140003006e657474657673696d30000000000000300016802c000180280001003f0000000180c200"/89], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x0, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x4}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x80}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, 0x0, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="2c38ce8248c3421474315a7af3", 0xd) r7 = accept4(r5, 0x0, 0x0, 0x800) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x2800, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000740)={{0xd5c70001, 0x10f000, 0x4, 0x7, 0x6, 0x4, 0x4, 0x81, 0xc2, 0xd8, 0x6, 0x3}, {0x25000, 0x70000, 0x3, 0x5, 0xfc, 0xb1, 0x7, 0x2, 0x1, 0x5, 0x7, 0xde}, {0x50000, 0xfee63000, 0xa, 0x1, 0x7, 0x24, 0x4, 0x5, 0x7, 0x80, 0x9, 0x7f}, {0x8080000, 0xb000, 0xb, 0x6d, 0x9, 0x0, 0x3, 0x2, 0x4, 0x1, 0x9, 0x1}, {0x7000, 0x40000, 0xb, 0x6d, 0x8, 0x4, 0x96, 0x8, 0x36, 0x5, 0xc, 0x9}, {0x4000, 0x4, 0x9, 0xc, 0xc3, 0x8, 0x5, 0x8, 0x7f, 0x9, 0x4, 0x3}, {0x60000, 0x200000, 0xe, 0x8, 0xb, 0x3, 0x6, 0x6, 0x6, 0x6c, 0x9, 0x82}, {0x60000, 0x41000, 0x4, 0x2, 0x79, 0x7, 0x7, 0x8, 0xf9, 0x40, 0x1, 0x8}, {0x3000, 0xfff}, {0x6000, 0x1}, 0x80000005, 0x0, 0xffff1000, 0x600041, 0xc, 0xc000, 0xddd95000, [0x8, 0x6, 0x6, 0x7]}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000300)={0x2, 0xfffffffffffffffd}) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4m56.625774193s ago: executing program 32 (id=198): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985793802", 0x18}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b", 0x50}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000010000100adbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="200800000121b3c589d0b1a2656243564084240400140003006e657474657673696d30000000000000300016802c000180280001003f0000000180c200"/89], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x0, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x4}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x80}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, 0x0, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="2c38ce8248c3421474315a7af3", 0xd) r7 = accept4(r5, 0x0, 0x0, 0x800) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x2800, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000740)={{0xd5c70001, 0x10f000, 0x4, 0x7, 0x6, 0x4, 0x4, 0x81, 0xc2, 0xd8, 0x6, 0x3}, {0x25000, 0x70000, 0x3, 0x5, 0xfc, 0xb1, 0x7, 0x2, 0x1, 0x5, 0x7, 0xde}, {0x50000, 0xfee63000, 0xa, 0x1, 0x7, 0x24, 0x4, 0x5, 0x7, 0x80, 0x9, 0x7f}, {0x8080000, 0xb000, 0xb, 0x6d, 0x9, 0x0, 0x3, 0x2, 0x4, 0x1, 0x9, 0x1}, {0x7000, 0x40000, 0xb, 0x6d, 0x8, 0x4, 0x96, 0x8, 0x36, 0x5, 0xc, 0x9}, {0x4000, 0x4, 0x9, 0xc, 0xc3, 0x8, 0x5, 0x8, 0x7f, 0x9, 0x4, 0x3}, {0x60000, 0x200000, 0xe, 0x8, 0xb, 0x3, 0x6, 0x6, 0x6, 0x6c, 0x9, 0x82}, {0x60000, 0x41000, 0x4, 0x2, 0x79, 0x7, 0x7, 0x8, 0xf9, 0x40, 0x1, 0x8}, {0x3000, 0xfff}, {0x6000, 0x1}, 0x80000005, 0x0, 0xffff1000, 0x600041, 0xc, 0xc000, 0xddd95000, [0x8, 0x6, 0x6, 0x7]}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000300)={0x2, 0xfffffffffffffffd}) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4m47.892415575s ago: executing program 4 (id=331): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0x31, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f3e005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) 4m47.734832355s ago: executing program 4 (id=337): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'hsr0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000000) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) close_range(r0, r1, 0x0) r5 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x2) fgetxattr(r6, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @multicast2}, 0x1, 0x3, 0x4}}, 0x26) 4m47.642605965s ago: executing program 4 (id=339): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x7, 0x1, 0x200, &(0x7f0000000200)="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"}) 4m47.642152073s ago: executing program 4 (id=341): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000680)={&(0x7f0000006400)={0x50, 0x0, 0x8000000001ff, {0x7, 0x29, 0x2000f4, 0x4135ed2f1bdbbd72, 0xdcf, 0x6, 0xb, 0x800, 0x0, 0x0, 0x10, 0xfffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000100)='./sys/block/md0/md/dev-ram0/slot\x00') r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='md0', 0x3) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='4', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='4096', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1:0', 0x3) write(r4, &(0x7f0000000500)='1:2', 0x3) lsetxattr(&(0x7f0000000140)='./sys/module/md_mod/parameters/new_array/file0\x00', &(0x7f0000000300)=@known='com.apple.FinderInfo\x00', &(0x7f0000000340)='\x00', 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) recvmsg$inet_nvme(r1, &(0x7f00000015c0)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000001540)=""/91, 0x5b}, 0x2001) unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') 4m47.212266908s ago: executing program 4 (id=349): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x7, 0x1, 0x200, &(0x7f0000000200)="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"}) 4m46.712445091s ago: executing program 4 (id=362): bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000140)=[{0x19, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x0, @uvalue=0xfffffffffffffffd}, {0x3}, {0x0, @svalue=0xd83a}]}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000001c0)) ftruncate(r1, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r7}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) 4m46.668553739s ago: executing program 33 (id=362): bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000140)=[{0x19, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x0, @uvalue=0xfffffffffffffffd}, {0x3}, {0x0, @svalue=0xd83a}]}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000001c0)) ftruncate(r1, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r7}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) 3m30.139745238s ago: executing program 0 (id=1265): socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x60000084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x0, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x402, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x9, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x5, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x2, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x1, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x100005, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x13, 0x8, 0x4, 0x53, 0x6, 0x4, 0x400, 0x6, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd36, 0x9, 0x8000, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x5, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x6]}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000800, 0x9, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x6, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0xe, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd4, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xffff0000, 0x7, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x6, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x739f, 0x4, 0x0, 0x1856, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x409, 0x101, 0xefbc, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3m29.861336485s ago: executing program 0 (id=1270): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x3ee5, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x2], 0x0, 0x1}) 3m29.591318851s ago: executing program 0 (id=1276): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x7, 0x1, 0x200, &(0x7f0000000200)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700030000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98a674e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000400"}) (fail_nth: 1) 3m29.301912174s ago: executing program 0 (id=1283): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x2010000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x8081, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x3c) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a00), r8) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000006bc0)={0x0, 0xffffffffffffff62, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf2544000000080003009ea7115863dfd66702cb2fdc469288c3879303092758a7e2e28be6b177efc98620815587217bdf1b5ccb7aa5502b6e8dd0581bf6a932909cc2d21071a33cce5611969d050579c4fe5df27a87a5c1b0771798", @ANYRES32=r7, @ANYBLOB="0a001800030303030303000041000c0064000000"], 0x30}}, 0x24000800) getsockopt$inet_opts(r5, 0x0, 0xf, &(0x7f0000937fed), &(0x7f00000003c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000240)=[r4, r4], &(0x7f0000000280)=[0x5ea4c147], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000180)={0x0, r4, 0x8005, 0x36fb}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x882, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000180)=""/194, 0xc2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x58) openat(r1, &(0x7f0000000080)='./file0\x00', 0x301243, 0x92) syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x4) ptrace(0x8, r11) 3m29.201780223s ago: executing program 0 (id=1284): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000000000000000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="03"], 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x412003, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000240)={0x5, 0x0, [{0x4, 0x0, 0x3, 0x9, 0x49c, 0x100, 0x4c66dc15}, {0x1, 0x91, 0x3, 0x5, 0x8, 0x1, 0x7}, {0xc0000000, 0x40, 0x7, 0x0, 0x3, 0x2, 0x5}, {0x80000008, 0x7, 0x2, 0x101, 0x80, 0x2, 0x6dc9}, {0xd, 0x800, 0x0, 0xc, 0x5, 0x5, 0xf}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x3f, 0x0, &(0x7f0000000200)={0x11, 0x10, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) 3m29.039433535s ago: executing program 0 (id=1290): r0 = syz_open_dev$video(&(0x7f0000000480), 0x10001, 0xa0200) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000740)=@gcm_256={{0x314}, "3939e0286ea0c77e", "ffc2397ac39cbf398197cba3a2fb57388e5b0a7a9142af7f48d84be28795f4c3", "47d2afcd", "00000200"}, 0x38) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0xa, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r8 = socket(0x28, 0x5, 0x0) recvfrom$inet_nvme(r8, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x9, {0x3, 0x9, 0x8, 0x2d}, {0xda0, 0x7, 0x10000, 0x81}, {0x7, 0x9}}) 3m28.911018246s ago: executing program 34 (id=1290): r0 = syz_open_dev$video(&(0x7f0000000480), 0x10001, 0xa0200) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000740)=@gcm_256={{0x314}, "3939e0286ea0c77e", "ffc2397ac39cbf398197cba3a2fb57388e5b0a7a9142af7f48d84be28795f4c3", "47d2afcd", "00000200"}, 0x38) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0xa, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r8 = socket(0x28, 0x5, 0x0) recvfrom$inet_nvme(r8, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x9, {0x3, 0x9, 0x8, 0x2d}, {0xda0, 0x7, 0x10000, 0x81}, {0x7, 0x9}}) 2m35.651233011s ago: executing program 3 (id=1823): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r1, &(0x7f00000036c0)=[{{&(0x7f0000000200)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000580)="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", 0x5c1}], 0x1}}], 0x2, 0x4a080) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0xf401) 2m35.650483137s ago: executing program 3 (id=1825): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000001040), 0x201, 0x0) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m35.514929136s ago: executing program 3 (id=1827): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x6e6bb7}}, 0xb8}}, 0x814) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000080) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) sendfile(r3, r1, 0x0, 0x9) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close_range(r4, 0xffffffffffffffff, 0x400000000000000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x800009b}, 0x8) 2m35.261591035s ago: executing program 3 (id=1828): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) socket$inet6(0xa, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x393000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x15c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x148, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3596, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x15c}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000deffffff000000000071184000950000000000000037bb4e6601e21e000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x24}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) readv(r4, &(0x7f0000000880)=[{&(0x7f0000000400)=""/184, 0xb8}, {&(0x7f00000004c0)=""/19, 0x13}, {0x0}], 0x3) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r4, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0), 0x4) r6 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) ppoll(&(0x7f0000000000)=[{r6, 0x1100}, {r6, 0xc169}], 0x2, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f043, 0x8}) 2m34.311458298s ago: executing program 3 (id=1836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x880c0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f8000", 0x9) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m34.221011269s ago: executing program 3 (id=1839): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000040)={0x0, 0x5228, 0x80, 0xffffffff, 0x4}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0xe000200f}) 2m34.056608763s ago: executing program 35 (id=1839): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000040)={0x0, 0x5228, 0x80, 0xffffffff, 0x4}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0xe000200f}) 2m0.281567221s ago: executing program 1 (id=2234): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x80010a, 0x1cb681) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000006c0)={r2, 0x400, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "675237604c40f78d2cfc03d805bfa55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x200057ff]}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=0x1, 0xc, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, r2, 0x3d, 0x2018, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2m0.130813865s ago: executing program 1 (id=2238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x6f6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x3000000000000, 0x80}, 0x8) 2m0.040830859s ago: executing program 1 (id=2241): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001b80)=[{0x0}, {&(0x7f0000001c00)=""/4109, 0x100d}, {0x0}, {0x0}], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a98533ebffcb043f72e876d30dc59b400", 0x83, 0xffffffffffffffff) ioctl$KDSIGACCEPT(r0, 0x5607, 0x1) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r2, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xc3) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0xe2) r7 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) syz_usb_disconnect(r7) syz_usb_connect$uac3(0x6, 0x80, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0x4004550a, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) write(r0, &(0x7f0000000000)="a64ab003176c0ad620f4baa759dd24506f32aa09333b21f72742c452011386f0847298a16b399eb88a6d4948d13fd06fea3ef72ce538372d530aefd5b8ced4fe670f026558219e4847", 0x49) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x15c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_NAT_SRC={0xcc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xfe}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3ff}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x480}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x82}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x102}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x84}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xf}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000) 1m59.279388118s ago: executing program 1 (id=2245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="9771"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x3a78, r1, 'id1\x00'}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080027bd7000fadbdf250000000008000700", @ANYRES32=r3, @ANYBLOB='\f\x00', @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4004800) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) splice(r3, &(0x7f0000000200)=0x7, r1, &(0x7f0000000280)=0x1259, 0x7, 0x0) 1m59.231283858s ago: executing program 1 (id=2247): r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000280)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001100010010bd708e251c3a5a7a6f4a71efb9e0e0a9517dfc00", @ANYRES32=0x0, @ANYBLOB="28820100000000000500210010000000"], 0x28}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="01100000000000001c0012800b0001006d616373656300000c00eb7f050007000000000008000500", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4050) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000002080101002204800800014000000009d95f879aa4c2c268"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x400103, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000000000002004e20e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e03ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000430000000000000000000000000000000002004e22ac1414bb00"/400], 0x190) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m56.86192353s ago: executing program 1 (id=2257): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0x2028) 1m56.696711017s ago: executing program 36 (id=2257): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0x2028) 1m11.49018172s ago: executing program 5 (id=2782): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1fb) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x3, 0x1, 0x0, '\x00', 0x0}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000000c0)={0x2, [0x0, 0x3, 0x3, 0xa, 0x8001, 0x40, 0xfff, 0x8, 0x0, 0x9, 0xf801, 0xf000, 0x4, 0x5, 0x3, 0x8, 0x0, 0x6, 0x90e4, 0x6, 0xc, 0x40, 0xe, 0x401, 0x6, 0x8, 0xfffe, 0x56, 0xe, 0x9, 0x0, 0x5, 0x679c, 0xf, 0x7, 0x8, 0x95, 0xe, 0x3, 0x8, 0xf, 0xfffb, 0x80, 0x0, 0x3, 0x5, 0x3, 0x2], 0xb453bb4776a676ca}) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) 1m11.361302456s ago: executing program 5 (id=2783): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000002c0)={0xa, 0xc4, 0x10, 0x4, 0x5}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x26, '\x00', @data=0x1}]}) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000400)={0x30a32c0, 0x2, @qpsk={0x7, 0x1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500003c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800001d12d285b6853bc4dc54c6910c1d66f8841a000060ca8c805b4b33a2e7a002a11287f99ad6d84d777e3221b4a778e67d072374b569f8e9a665705a7f04853d031969f752404d4e1e30ea112e619fbac893907b6e0c8a184dc6936e5b0199cbe57de1812798c4246d38faac1566cabb806777e4781f54b6cdbe5d601a99f2c4704e5c7b2b10d268e1661d589363aa3daf349863bfe7752e8eca3bc4e2f072fed35cc0a2e4cc5b0cd450"], 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x1, 0x87, 0xffffffff, 0x3f}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6b) ioctl$COMEDI_CMDTEST(r3, 0x8050640a, &(0x7f0000000240)={0x3, 0x20, 0x4, 0xd, 0x40, 0x3, 0x2, 0x8001, 0x4, 0x8, 0x80, 0x9, &(0x7f0000000000)=[0x7, 0x8, 0x5, 0x5, 0x25c, 0x1], 0x6, &(0x7f0000000080)="7bf32796570cb92b690cf74dcc7a83480e7cf97989eb553d7e50d2003a8e71ee15509ac3b6a69eadce0c0248d6fb1aa8ddf36f877198234b95e6152dcd6397e78c05405f31446ad7f755139c0d83f6dde99d70523f722784ae843e1dd098dd1778492f0fdc9e6b8ef41a58ab8cfe0a1d648e8c0591574e6b5c3c7d556db8564e536fe03420b260cbc4038fffe5d8b3781e87b189d88abb94055940ddc6e193a8b22c8d64a923851571191a25c39dc4251c8aa3fe81cf9b2f503b536196983c834c6e18c6a416a7c4897103b1e078b551ac53ceb6be1c54ae6d19f344c1ddff154e359532d91717a4c1906cd4cb831b9018194c3800cc6dd4", 0xf8}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newqdisc={0x154, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x18, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x1, 0x1}}]}}]}, 0x154}}, 0x24008010) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4400000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="01100000000000001c0012800b0001006d616373656300000c000280050007000000000008000500", @ANYRES32=r11, @ANYBLOB="a2948a09bb67194c9819990b01330137424cb75e2e21335de8e5bcc91bfc00f7b6a23553eef719f5897e125a2287a2a7a9eff2698bcc9d71e4027a0c99ae526f6bc0ece847469b735e8dd4603b7aab96bc"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4050) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000d40)={0x60, 0x0, 0x705, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x90e0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x90) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00082cbd7000fddbdf2501797a30000000000900030073797a30000000000900010073797a30000000000900030073797a3000"/62], 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x40) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0x8d}]}) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x4, 0xd, 0x10, 0x3, 0x2, 0x2000000, 0x20, 0xfffffffd, 0x0, 0x4, &(0x7f0000000200)=[0x9], 0x400002ec, 0x0}) 1m11.151191825s ago: executing program 5 (id=2790): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x33d, {{0xa, 0x4e24, 0x2, @mcast1, 0x40}}}, 0x90) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x5, 0x10, [0x8001, 0xfffffffa, 0x1c16, 0x1]}) 1m10.98083706s ago: executing program 5 (id=2794): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000001440)=[{&(0x7f0000004b40)="80", 0x1}], 0x1) close(r0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x4, 0x7}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='sys_link/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) lseek(r5, 0x41, 0x3) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r4, &(0x7f0000000040), 0x4003) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@redirect_dir_on}, {@verity_off}]}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0xffffffff, 0x2000401, 0xe, 0xc4d3, 0x7, "0441920887e87fcb367800000000080100", 0xa, 0x200}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000340)=ANY=[], 0x141) 1m10.731242367s ago: executing program 5 (id=2797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x20004800) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010028bd700002d4df24ffe30000", @ANYRES32=r8, @ANYBLOB="984e0600c12a01002c001280110001006272696467655f736c61766500000000140005800500090004000000050008"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) listen(r5, 0xfffffff9) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000000)={0x800, 0x5000}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 1m10.643703914s ago: executing program 5 (id=2800): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4841) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000030000000100000f042000000f00000000000000000000000000000400000000005f00612e30"], &(0x7f0000001fc0)=""/4124, 0x3f, 0x101c, 0x1}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000280)={"0db9c2118c2d32fbe6471bc5dbfe40bc", r6, 0x0, {0x400, 0x718}, {0xff, 0x1}, 0x5, [0x8, 0x3, 0x4, 0xfe45, 0xb, 0x20b, 0x3ff, 0xdb26, 0x0, 0xa547, 0x0, 0x7, 0xfffffffffffffffd, 0x8, 0x7832, 0x69d6]}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r10, &(0x7f0000000180), 0x4000190, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1m10.247402762s ago: executing program 37 (id=2800): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4841) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000030000000100000f042000000f00000000000000000000000000000400000000005f00612e30"], &(0x7f0000001fc0)=""/4124, 0x3f, 0x101c, 0x1}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000280)={"0db9c2118c2d32fbe6471bc5dbfe40bc", r6, 0x0, {0x400, 0x718}, {0xff, 0x1}, 0x5, [0x8, 0x3, 0x4, 0xfe45, 0xb, 0x20b, 0x3ff, 0xdb26, 0x0, 0xa547, 0x0, 0x7, 0xfffffffffffffffd, 0x8, 0x7832, 0x69d6]}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r10, &(0x7f0000000180), 0x4000190, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 4.42916758s ago: executing program 9 (id=3539): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10021afb9701000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000580)="1c0000001d005f0214ffff11000000f9070000000d00000000d432ee", 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r1, 0x40204706, &(0x7f00000000c0)={0x8, 0x1, 0x10000, 0x3f, 0x1a, "3eccd25569e209000400"}) ioctl$KDSIGACCEPT(r0, 0x5607, 0x1) 3.81060271s ago: executing program 9 (id=3541): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x28800, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000040)) syslog(0x9, 0x0, 0x0) setns(0xc9, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002000100070000001c0007800c00018008000140e00000020c000280080001407f00000100"/68], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) shutdown(r6, 0x0) syz_emit_ethernet(0x6f, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000061000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20004005) 3.728883548s ago: executing program 9 (id=3542): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4130, 0x103b}, {&(0x7f0000000a40)=""/4107, 0x100b}], 0x3}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}], 0x3, 0x40000102, 0x0) 3.726114606s ago: executing program 9 (id=3543): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7f, 0x4, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}) setpgid(r0, r1) close(0xffffffffffffffff) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r3 = eventfd(0x400) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x2, 0x0, r4}) inotify_init() ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000180)=0x4) getpid() open$dir(&(0x7f00000001c0)='./file0\x00', 0xc0002, 0x1a2) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x33, 0x9, 0x5, 0x2, 0xfa, 0x3, 0x3e, 0x7, 0x347, 0x40, 0x39f, 0x80000001, 0x10, 0x38, 0x2, 0x7f45, 0x1, 0x101}, [{0x1, 0x1, 0x400, 0x8, 0x153, 0x1, 0x9, 0x5}, {0x4, 0x1, 0x37, 0x32c53efe, 0x4, 0x80000000, 0x1, 0x5ed}], "6e007987815ec11d0bb6d8c34a183226d5f9a2259fc8c92853819be484e150aab4871edb15748ce4c1024e7b3dded116bac7430ed8917135f6ef70f6d84d65d111a4bf1afc9c7a3466c7ad8064924a6d9c29f6820686e4f26e66a53242e4f3755ee9bc200b4c68f7d693f14c59bbd326a760cb29ceede32f0bd2ffbb4da66b69aa6246c9f1b7fda2061a58a30faf578fe68fc42817eb4c0f414458aa6ec1fd6353149d6c527c30703bca8afca517564b4656777880ab115b262c8828a1745e1002023c66d4099ccdc67634022df350533f", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x681) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) connect$rxrpc(r6, &(0x7f0000000900)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) unlink(&(0x7f0000000940)='./file0\x00') ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000980)={0x2, @pix_mp={0x7a, 0x9, 0x42474752, 0x7, 0x8, [{0x8, 0x800}, {0xffffff67, 0x6}, {0x3b, 0xb73b}, {0x8, 0x6}, {0xb, 0x9b0}, {0x7, 0xffffff15}, {0x200, 0x3}, {0x5, 0x18b}], 0x0, 0xd, 0x6, 0x1, 0x1}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000ac0)) mkdirat$cgroup(r2, &(0x7f0000000b40)='syz1\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r4, {0x45d}}, './file0\x00'}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000c00)={0x40, 0x0, &(0x7f0000000bc0)}, 0x0) syz_open_dev$cec(&(0x7f0000000c40), 0x0, 0x36da80) ioctl$KDGKBLED(r7, 0x4b64, &(0x7f0000000c80)) write$FUSE_IOCTL(r7, &(0x7f0000002d00)={0x20, 0xffffffffffffffda, 0x0, {0x7, 0x4, 0x53, 0x7}}, 0x20) 2.389743122s ago: executing program 9 (id=3544): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000100)={'wlan0\x00', @multicast}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf254400000008000300310b5163d51d05bf5193f9e76e790c047174dac0a3f8c0f8e4437f83bc4c30efd54bd75b287a7c5279080fee893b433f0726f0f9c1ee8f8818e8ae8eb18857f3b0500d423110ff3cb21e9e005fe1fd1abf30bd8861f9c6423302f7c22ebf151838efe6fea75d175628ce26b287168925d70c8a76cc83e9d2d31ac097059c2b546ab8a82af31e3eaf506e31ceb1c6de2af1bb00cda1f665d073041cfb354ce5e7ae3014a982fcca5e1e3d51ee3596c8cc998645875f3cd51aa5747075ad7e317df197ddc7edeff3aee2ee69294bb623273a45e328f8438ee351ae462e3aa8a5ff0881f30a", @ANYRES32=0x0, @ANYBLOB="1c00238005001d000000000005001f000100000006000a0056080000"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async, rerun: 64) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x10001}, 0x1c) (rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2081, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) (async, rerun: 64) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000000)={0x11}) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) (async) bind$inet6(r4, 0x0, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x101, 0x0, 0xec, 0x7, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r7, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100"/25) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') 2.258960041s ago: executing program 9 (id=3549): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000003cc0)={0x0, [{0x1, 0x730, 0x9, &(0x7f0000000000)="c39a6218361819124dd8992f4864657cade94657c203fa4ddf2f9650c329b64d27b372849c4e6566841241fc0a042a62a4fe3866a25629c55695cd84c3b330a4730f05932874748e108961e68abe2fb0c94168f7a78de04133f5b7c2baa64af2c75f215b41215bb0827845426cb315f0269ae17e9741f7401ba0a537281a2ce35ce27d12d5362b4b00e9de8ca9bf28a565de872143e12acee920b223cc0a85d82f69f424213706506b1f17556cee97115e9d1f5b49b6ce498063be9957c898f46030b452972c305ce177337ba91ea459e4989ec2e6d08eca32ef56e807602f98128e0b07152d"}, {0x3, 0x288, 0xfffffffb, &(0x7f0000000100)="a3d090eb60324739815116d94e0b170527243f6ca3bbb94e9f73a6c6cf8861cab8d40ba1158aa3d46cc8e686473734937e991b9b311bb497fc3ea144e331137e7f05da6d7810ec2809f224a5a186f13f60"}, {0x3, 0x0, 0xfffffffb, &(0x7f0000000180)}, {0x1, 0x8000, 0xfffff001, &(0x7f0000000800)="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"}, {0x2, 0x230, 0x10001, &(0x7f0000001800)="9931cf890854c79aa37d7b51d40aa4ecfd60831c15030ba7f555beef55e9f039e4036bb1c850b4819470f726070fc6bdf152753e60c7445368d58b43e8ab236397542da3640b"}, {0x1, 0x0, 0x9, &(0x7f0000001880)}, {0x3, 0x40, 0x8000000, &(0x7f00000018c0)="bdac8f3daefbf1c5"}, {0x2, 0x218, 0x6, &(0x7f0000001900)="ab5dbe51fb0aaa2b485208405d1de28b183d8a96cf01d309bfb8ca68875a139772350bb74211c3c282c670902029eaa7a82e3fd6060596a0f3718686e9b3e36db4d958"}, {0x2, 0x8000, 0x2, &(0x7f0000001980)="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"}, {0x0, 0x8000, 0xff, &(0x7f0000002980)="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"}, {0x3, 0x498, 0xcc, &(0x7f0000003980)="9591183e28aeb799d3688a6683d8e256fcbc3b7817386e922047c425d52faffbb961498447fd373d9940f38e72c390394bb2989696df77f112c945b709f8bc797f91ed8dbde4eeb248c77c3e72dc02b98636723d1e555688cf776f8907792d8ed1111248be1f2c713ff24fad30f2ba1409732a87e7d4909604c507e5a24e8c2dd84c88dc99a49ceae03858368b9b36ab96a295"}, {0x2, 0x760, 0x5ad, &(0x7f0000003a40)="141bb3a1b429c320536da49fddaee635745442dda8bc9baef674c1a7d656480c35111d6fe7eb132a9375fa1a0a2ec874b2fbec61d7cb03f49ad853eb169d7a271b95bcc48c8eb7fff15e63bd46a76fa48e21e22f1d34093957225c1ae30399da8ccc183b0f39993d6ee1d8c1b12662d884ee5a23812319dddba82ffd2c0cc9790251dd14e4e97ed60518fbef183252d3d57122e0fc4e730969a6690ae93b5b6f6b541e9a99904f8cb7afbc00506958ba7280e10cbd4ccb6bc1b0df48a1c9221c4cf884ba459432376dc260445ddab7f27981d01cef69e88d5e0e02c186c393a19ec45e6402f1f226dfb5d501"}, {0x0, 0x330, 0xfffff000, &(0x7f0000003b40)="72a11486fe014a3e542e036c1d9480c12de9409007103888aad2bca2c8e64978bde26427d8beb33b83293ab1876f18623fd0ab2aa40b31bbac86dfca287cdb10f927f8e23063f73f297809f71fca1fd9bac9577a8510077f4a2e06706604063ba0a5d2b56716"}, {0x3, 0x28, 0x9, &(0x7f0000003bc0)="85b098d0f3"}, {0x0, 0x0, 0xfffffff8, &(0x7f0000003c00)}, {0x0, 0x360, 0x7ff, &(0x7f0000000180)="5498c2b0081e47de9cde1246d4e2974eadb0eb7ddfb8425686204e010729e3d82b3191b5bc660300e537d8c23f07258a184766d3423a106e3d1c85d5843afde2f8a46e77f9d217055acd3e8d916a75070253d2cf9e472cc43468b286495f7e70d7487890bb4f1a1d554bf1c0"}]}) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x20, 0x21, 0x6f, {0x6f, 0x30, "3d75929563d73da4297cd13388099d106308fd1c9bfecfba992a245aa84545b0634e4cc5792768cb5d8613ac6088a335208d11bbc1b53fda2b068f5e0aba9328aa2f3ff3536b4ce9a46bfb45569e586b353dd824b403a2286dca45c540fb0cf4585b226dda2585a454573a5e4c"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f00000002c0)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4c, "77e7bab0006917ce4c2995e0744801d9"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "6a2221af80f52db9507c9821bc354a45"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd0, 0x0, 0x9, 0x5, "91a8ee58", "e3a3e13c"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x2, 0x79, 0x80, 0x7f, 0xc000, 0xfe}}}, &(0x7f0000003e80)={0x84, &(0x7f0000000440)={0x0, 0x30, 0x1c, "2d7306e66a13b0730ba98007f8fdc570090a43025bab083714bada28"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xe1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x800, 0x84}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x222}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000600)={0x40, 0xb, 0x2, "b42a"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="892872e68409"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "a9d5"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x88a}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001880)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000003c00)={0x40, 0x21, 0x1, 0xb}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffd) ioctl$FS_IOC_GETVERSION(r3, 0x40015b0b, 0x0) r4 = syz_usb_connect$uac2(0x3, 0x100, &(0x7f0000003f40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x8, 0xd0, 0x8, {0x8, 0xb, 0x0, 0x0, 0x1, 0x3, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x101, 0x6, 0x4d, 0x1}, [@source_unit={0x8, 0x24, 0xa, 0x10, 0x1, 0x9, 0x7, 0x6}, @sample_rate={0x11, 0x24, 0xd, 0x1, 0x3, 0x1, [0x2, 0x0, 0x1, 0x2, 0x3]}, @extension_unit={0x9, 0x24, 0x9, 0x4, 0x0, 0x2, "ee89"}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x18, 0x3, 0x8, 0x3, 0x9}, @selector_unit={0xc, 0x24, 0xb, 0xff, 0x7, "03966fc6bde609"}, @extension_unit={0xa, 0x24, 0x9, 0x4, 0x9ce, 0x81, "f1d733"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0xa382, 0xe, 0x80}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x1e}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x39, 0xe, 0xc0, {0x8, 0x25, 0x1, 0x82, 0xf, 0x2c, 0xd0f1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x1, 0x5d, "", "d8"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x6, 0x10, "562dce82e0f83022"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf9, 0x3, 0xe7, 0xff, "252b4e430165"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe0, 0x5, 0xfb}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x5, 0x7, {0x8, 0x25, 0x1, 0x0, 0x6f, 0x0, 0x5}}}}}}}}]}}, &(0x7f0000004500)={0xa, &(0x7f0000004040)={0xa, 0x6, 0x201, 0x6, 0xff, 0xf9, 0x40, 0x3}, 0x8, &(0x7f0000004080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f00000040c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xe7, &(0x7f0000004100)=@string={0xe7, 0x3, "ebdf32e79892f5f1523bbfbb6782acdd6ab8bb278893b9f22d7ef3b9098432f97629e37a797dae0dfc9604cbc4b717eaab6a12f8dc9cea10735d7b2e991257fcaa576fa08ebe939a99d0450b5bb05d69a92b943fe3a43f9d9a1ad9277868966f56e60c4bfea678e4a09ec212acd26f6a950be029a4f2cad1ad0b25eb61eba0ed1653a13e5c3ae156f743c5eb133708ce57c9574de94c0203c988fd577079c4e807e7f8f093a99e597200b8939fce372fa030fbef9b0f3803ecc70b4f82e4d7d90916cf1cbdc0ce400387e05e8735569c1143b4ff35a3ac3fa8e7816b89ea554bfd03e02c19"}}, {0x4, &(0x7f0000004200)=@lang_id={0x4, 0x3, 0x424}}, {0x2, &(0x7f0000004240)=@string={0x2}}, {0xf9, &(0x7f0000004280)=@string={0xf9, 0x3, "4d5a61aa40ed7bab2831a5f1eaeccd711550a7e1fa5c02bb0cbb78e5b8108d3cbe4a5ebadba6b40c51b0929b8c697538eae572b0f269fa7d828b9877b7e137bc4b5e885c34ec6cbeee921937d629002b26db4819aaba09dc3627d90f5178b2ac77a83c5eef584b20e6fa090d6b51100e5bb7fea670f46e5c07a7b6e7e1de290b39145d2e490e613579df1a1dc3aa56ac12dba01e68026575e407d0c1715462d73481c6b957c95a0bd3266885ef0ee959f029d57b963918a49448502d526ba61bde14fb58e5bc3a83fbc1d098ffd0c3728628bd1def30340ec53d73c1db1e55164ec7d6e4d10731112345925c6d9187b580820b93855baf"}}, {0xb5, &(0x7f0000004380)=@string={0xb5, 0x3, "cdebbb661ed6763603c793c0e2bf099c32f2d33769eab7efe99ebc203f7056a775e8fb0c354392af15f6f81480f7334a10d8c800be6bc1f202375897430ec5601b727b9f889d9967b006b99068dfd54dad586fa089795494483f544299cc71b6481e3e3df0e401da6b98618d8f2e96ca52443d57e493103b325041940adb4e7cb5ead60acc35e44ab8989d736116112ce9e057080d85b3920c3c46a465003d9631086e1469a5ee788a2edc5fe1a37e1927be1b"}}, {0x4, &(0x7f0000004440)=@lang_id={0x4, 0x3, 0x414}}, {0x7c, &(0x7f0000004480)=@string={0x7c, 0x3, "a0162ed7c5ef993a7d99d4cd15193154f1cc0db1e79ca851b266ddbb743c865bfc96a893400295dca39c2b1b88ef9d3c5afa262913aff272f755aa01b73ac84bf6fd367d9a2bc45bde026acf0e964fe3acae7c267fb5f3a25e0f6a20d45c3a9378765ed8d4619303325886c627ed8a832c8ff33b7e4ef211db52"}}]}) syz_usb_control_io$uac2(r4, &(0x7f0000004680)={0x14, &(0x7f0000004580)={0x0, 0xa, 0x90, {0x90, 0x0, "a0659f41df3f18af97afb566707e80b4b66f44a6495fe3bd986aa419cc5bede4daffd535bbff6aca7162a034ebb052408be2d4c79b1c994ba67c8362d17a162ff1ca16d8054de5bb6ee9081e600ef4b1a8953d21921bf5ecae88e4ca1814536c0e0fc6f9a80593f81a756d5b089a3a44ee08224538b896087c8d6b9f71c7247bb4212eb29e11809a1f3b421700a7"}}, &(0x7f0000004640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000004980)={0x44, &(0x7f00000046c0)={0x40, 0xb, 0xf8, "0b05829ebcd4dbb0c556ea5942ef7f3c49848a55122161cae89a6811c9a6781b63588095d41f1d65bc6da9141e4b08d8e66547aff478f5ffa978ea5b0f81730ac2069197bd8f3946f6d8a524068a5b15a3b6582199486902b5169da4085fa328e52485870ba23b71dcd632349f8d37ca33eafbf1364cc569649b70cd8f55f7ebb937d7662c1eed5aca5d77513546a5d3c49e9156fb70c172e74a9c4021f4e5f0a1d8cddc1b14cd95b6544b6290e5d722f4016f6f485cab1b895c84bee8ab8e18589bf6b2fbfacb3a5ce0536aa18da800564f1a3b42d204ae6293ac99f97e3b1f59a184d2c7e72cd2cfd2a8f7565a34b6e6717046a8edce17"}, &(0x7f00000047c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000004800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000004840)={0x20, 0x81, 0x1, 'l'}, &(0x7f0000004880)={0x20, 0x82, 0x2, "ced3"}, &(0x7f00000048c0)={0x20, 0x83, 0x2, 'GK'}, &(0x7f0000004900)={0x20, 0x84, 0x3, "71e2ce"}, &(0x7f0000004940)={0x20, 0x85, 0x3, "ddf7c6"}}) 2.09639723s ago: executing program 8 (id=3551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010409000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="003f86dd03000a120000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.950385783s ago: executing program 8 (id=3554): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x18) 1.900277888s ago: executing program 8 (id=3555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$inet(0x2, 0x2, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000006"], 0x4a) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000200)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = syz_io_uring_setup(0x1c79, &(0x7f0000000080)={0x0, 0x87a1, 0x80000, 0x1, 0x1ea}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000007c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x9}}) io_uring_enter(r5, 0x41de, 0xa75f, 0xa1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x3b, 0x2, {0xfc4f, 0x5, 0x101}}}}]}, 0x44}}, 0x810) syz_clone3(&(0x7f0000000640)={0x1000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)=0x0, {0x22}, &(0x7f0000000200)=""/182, 0xb6, &(0x7f0000000540)=""/136, &(0x7f0000000600)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r10 = getpgid(0x0) setpgid(r9, r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r13 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r13, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r14, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0101feffffff000000002b00000008000300", @ANYRES32=r15, @ANYBLOB="04004600050034006eb526db5d386c0f000000080026006c090000200051801c0000ffff000000dba06c89140000000500020003"], 0x50}}, 0x20004800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="000029bd7000ffdbdf254400000008000d0004080000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$FS_IOC_GETVERSION(r14, 0x80087601, &(0x7f00000003c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1", 0xf}], 0x1}, 0x4005) 1.741010955s ago: executing program 8 (id=3556): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4130, 0x103b}, {&(0x7f0000000a40)=""/4107, 0x100b}], 0x3}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}], 0x3, 0x40000102, 0x0) 890.199778ms ago: executing program 6 (id=3563): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x18) 889.656817ms ago: executing program 8 (id=3564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$inet(0x2, 0x2, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000006"], 0x4a) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000200)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = syz_io_uring_setup(0x1c79, &(0x7f0000000080)={0x0, 0x87a1, 0x80000, 0x1, 0x1ea}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000007c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x9}}) io_uring_enter(r5, 0x41de, 0xa75f, 0xa1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x3b, 0x2, {0xfc4f, 0x5, 0x101}}}}]}, 0x44}}, 0x810) syz_clone3(&(0x7f0000000640)={0x1000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)=0x0, {0x22}, &(0x7f0000000200)=""/182, 0xb6, &(0x7f0000000540)=""/136, &(0x7f0000000600)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r10 = getpgid(0x0) setpgid(r9, r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r13 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r13, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r14, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0101feffffff000000002b00000008000300", @ANYRES32=r15, @ANYBLOB="04004600050034006eb526db5d386c0f000000080026006c090000200051801c0000ffff000000dba06c89140000000500020003"], 0x50}}, 0x20004800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="000029bd7000ffdbdf254400000008000d0004080000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$FS_IOC_GETVERSION(r14, 0x80087601, &(0x7f00000003c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1", 0xf}], 0x1}, 0x4005) 820.761712ms ago: executing program 6 (id=3566): bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x440a0) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000140)=[{0x19, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x0, @uvalue=0xfffffffffffffffd}, {0x3}, {0x0, @svalue=0xd83a}]}}]}) 668.59ms ago: executing program 6 (id=3567): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) setns(r1, 0x24020000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000080)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40040, 0x1e9) acct(&(0x7f00000005c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='1\n', 0x2) open_tree(r3, &(0x7f0000000200)='configfs\x00', 0x200) mount$afs(&(0x7f0000000340), &(0x7f0000000380)='./config/nullb/nullb1/power\x00', &(0x7f00000003c0), 0x101006, &(0x7f0000000440)={[{@dyn}, {@flock_openafs}, {@dyn}], [{@appraise}, {@subj_type={'subj_type', 0x3d, 'configfs\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',,&('}}, {@appraise_type}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) ioctl$CDROMRESET(r4, 0x5312) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) chroot(&(0x7f0000000240)='./config/nullb/nullb1/memory_backed\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000100)={r7, 0x2}, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r8, &(0x7f0000000700)='1\n', 0x2) 509.587302ms ago: executing program 6 (id=3568): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000008ffff0f0000000000000000000000000000000074") 439.881404ms ago: executing program 6 (id=3569): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x9, r1, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32, @ANYBLOB="0198000000000000200012800800010073"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r3 = socket(0x8, 0x2, 0x0) setsockopt(r3, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 439.313429ms ago: executing program 8 (id=3570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7eb", 0x15}, {0x0}], 0x2}}], 0x1, 0x40) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, &(0x7f0000000240)="16cb5d9297918da5e8131a56e6967973d3984da3d7ce70c3ccb8d5e8fba65bda4ce8178befcf4fbc82c7881e83c141439cc53dc4eec229384c2963bf34c60fd546d27d71d33cf8db2cadf84b6737d1ccb0a89206577389b537e2098f4d7d83c7b88f82aef87993827bbc747e80e5e291b6230845c19aebefe32db497387b17f18da70d445b", 0x85, 0x1, &(0x7f0000000300)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, 0x1c) 438.688133ms ago: executing program 6 (id=3572): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4130, 0x103b}, {&(0x7f0000000a40)=""/4107, 0x100b}], 0x3}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}], 0x3, 0x40000102, 0x0) 270.199272ms ago: executing program 7 (id=3574): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000426f589e18ed000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/12], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000540)="444fe9b7b1adbd64b0e882b2ff17592d6a222b626f88ce80bc391b66002b0cdbd232e0ad6f32ba94050b67b8d322e273aa56194cf96af8a0c50f11f3ef073c23e2603b82ef29150913ec9e47571ea06ac489ded8cd2db84b31fda64a0f18fa33ac24e46bfdba124e5a98ce4407fde974f166514ba3dda27099072e8e58d0d6f5a90cb90cffbeb815a5e892588db25023b260ce9e387004d9e8c50ef34a1f54540fb1c3f407df52668e5cb211aa0695e3ccce83ed2a88b1de", 0xb8}], 0x1}, 0x40080) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 191.262559ms ago: executing program 7 (id=3575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000047f13f430360c87ff79e343a0104e20000000000000000000200000000000540"], 0x24}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) 67.487316ms ago: executing program 7 (id=3576): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup/file0/file0\x00', 0x104700, 0xe0) setns(r1, 0x20000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) mmap(&(0x7f00005b3000/0x2000)=nil, 0x2000, 0x0, 0x21011, r3, 0x800000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x2f, 0x8, 0x1, 0x1, 0x11, @dev={0xfe, 0x80, '\x00', 0x1f}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x7800, 0x888, 0x7e}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000005600c5a81174bc202e20f10500"/40], &(0x7f0000000000)='GPL\x00'}, 0x80) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0x1, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0x6}, @const={0x2}]}, {0x0, [0x71, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000280)=""/122, 0x3a, 0x7a, 0x1, 0xb, 0x10000, @value=r1}, 0x28) 67.079141ms ago: executing program 7 (id=3577): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r2, 0x2000, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) 1.131735ms ago: executing program 7 (id=3578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x4d, 0xea6, '.\x00'}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0xffffffff, 0x12}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x4d, 0xea6, '.\x00'}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0xffffffff, 0x12}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) (async) 0s ago: executing program 7 (id=3579): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x1c3142, 0x0) dup2(0xffffffffffffffff, r1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/58, 0x3a}, {&(0x7f0000000480)=""/65, 0x41}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/220, 0xdc}, {&(0x7f0000000d00)=""/84, 0x54}], 0x8, &(0x7f0000000e00)=""/131, 0x83}, 0x2002) setns(r5, 0x24020000) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xdc81}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000700)={0x0, 0x0, 0x100, 0xffffffff, 0x2000}, &(0x7f0000000800)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xde1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x10000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaf97, 0x800}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x2, 0x0, 0x0}}, &(0x7f0000000b00)) kernel console output (not intermixed with test programs): u:object_r:device_t tclass=blk_file permissive=1 [ 307.253567][ T43] audit: type=1400 audit(1786645151.853:7636): avc: denied { ioctl } for pid=15517 comm="syz.8.3035" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 307.363416][T15523] __nla_validate_parse: 5 callbacks suppressed [ 307.363440][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3037'. [ 307.406105][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3036'. [ 307.412124][T15521] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3036'. [ 307.422469][T15525] FAULT_INJECTION: forcing a failure. [ 307.422469][T15525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.427146][T15525] CPU: 0 UID: 0 PID: 15525 Comm: syz.9.3038 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.427177][T15525] Tainted: [L]=SOFTLOCKUP [ 307.427184][T15525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.427195][T15525] Call Trace: [ 307.427217][T15525] [ 307.427225][T15525] dump_stack_lvl+0x100/0x190 [ 307.427276][T15525] should_fail_ex.cold+0x5/0xa [ 307.427307][T15525] ? prepare_alloc_pages+0x16d/0x5f0 [ 307.427336][T15525] should_fail_alloc_page+0xeb/0x140 [ 307.427370][T15525] prepare_alloc_pages+0x1f0/0x5f0 [ 307.427400][T15525] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 307.427433][T15525] ? stack_trace_save+0x8e/0xc0 [ 307.427453][T15525] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 307.427477][T15525] ? kasan_save_stack+0x3f/0x50 [ 307.427496][T15525] ? kasan_save_stack+0x30/0x50 [ 307.427514][T15525] ? kasan_save_track+0x14/0x30 [ 307.427532][T15525] ? __kasan_kmalloc+0xaa/0xb0 [ 307.427550][T15525] ? __kmalloc_noprof+0x322/0x820 [ 307.427569][T15525] ? copy_splice_read+0x1a3/0xbb0 [ 307.427592][T15525] ? do_splice_read+0x2bd/0x370 [ 307.427610][T15525] ? splice_direct_to_actor+0x2a1/0xa30 [ 307.427628][T15525] ? do_splice_direct+0x174/0x240 [ 307.427646][T15525] ? do_sendfile+0xadc/0xe20 [ 307.427669][T15525] ? __x64_sys_sendfile64+0x154/0x220 [ 307.427705][T15525] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 307.427734][T15525] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 307.427752][T15525] ? rcu_is_watching+0x12/0xc0 [ 307.427779][T15525] ? trace_kmalloc+0xeb/0x110 [ 307.427801][T15525] ? __kasan_kmalloc+0xaa/0xb0 [ 307.427824][T15525] ? ovl_splice_write+0x360/0x610 [ 307.427841][T15525] ? copy_splice_read+0x1a3/0xbb0 [ 307.427865][T15525] copy_splice_read+0x1e1/0xbb0 [ 307.427887][T15525] ? ovl_splice_write+0x360/0x610 [ 307.427906][T15525] ? __pfx_copy_splice_read+0x10/0x10 [ 307.427924][T15525] ? __pfx_ovl_splice_write+0x10/0x10 [ 307.427943][T15525] ? __pfx_ovl_file_end_write+0x10/0x10 [ 307.427974][T15525] ? find_held_lock+0x2b/0x80 [ 307.427996][T15525] ? __pfx_ovl_splice_read+0x10/0x10 [ 307.428023][T15525] do_splice_read+0x2bd/0x370 [ 307.428047][T15525] splice_direct_to_actor+0x2a1/0xa30 [ 307.428070][T15525] ? __pfx_direct_splice_actor+0x10/0x10 [ 307.428095][T15525] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 307.428124][T15525] do_splice_direct+0x174/0x240 [ 307.428147][T15525] ? __pfx_do_splice_direct+0x10/0x10 [ 307.428166][T15525] ? avc_policy_seqno+0x9/0x20 [ 307.428186][T15525] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 307.428209][T15525] ? rw_verify_area+0xce/0x6d0 [ 307.428235][T15525] do_sendfile+0xadc/0xe20 [ 307.428266][T15525] ? __pfx_do_sendfile+0x10/0x10 [ 307.428299][T15525] __x64_sys_sendfile64+0x154/0x220 [ 307.428320][T15525] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 307.428354][T15525] do_syscall_64+0x115/0x870 [ 307.428437][T15525] ? clear_bhb_loop+0x70/0xc0 [ 307.428462][T15525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.428481][T15525] RIP: 0033:0x7f91a1d9e0d9 [ 307.428498][T15525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.428515][T15525] RSP: 002b:00007f91a2c5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 307.428536][T15525] RAX: ffffffffffffffda RBX: 00007f91a2025fa0 RCX: 00007f91a1d9e0d9 [ 307.428546][T15525] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 307.428556][T15525] RBP: 00007f91a2c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 307.428565][T15525] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 307.428575][T15525] R13: 00007f91a2026038 R14: 00007f91a2025fa0 R15: 00007ffd63f99e38 [ 307.428597][T15525] [ 307.601931][T15530] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 307.604682][T15530] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 307.640981][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3040'. [ 307.650830][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3040'. [ 307.732703][T15534] netlink: 'syz.8.3040': attribute type 1 has an invalid length. [ 307.749376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 307.759446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 308.010461][T15544] null_blk: disk nullb1 created [ 308.092525][T15549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.616707][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3051'. [ 308.752143][ T65] block nbd0: Receive control failed (result -107) [ 308.790430][ T5735] Bluetooth: hci3: command 0x0405 tx timeout [ 309.041579][T15568] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3052'. [ 309.192348][T15574] FAULT_INJECTION: forcing a failure. [ 309.192348][T15574] name failslab, interval 1, probability 0, space 0, times 0 [ 309.208157][T15574] CPU: 0 UID: 0 PID: 15574 Comm: syz.8.3054 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.208189][T15574] Tainted: [L]=SOFTLOCKUP [ 309.208196][T15574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.208207][T15574] Call Trace: [ 309.208214][T15574] [ 309.208221][T15574] dump_stack_lvl+0x100/0x190 [ 309.208272][T15574] should_fail_ex.cold+0x5/0xa [ 309.208297][T15574] should_failslab+0xc2/0x120 [ 309.208323][T15574] __kmalloc_cache_noprof+0x91/0x6c0 [ 309.208348][T15574] ? ____ip_mc_inc_group+0x40b/0x10d0 [ 309.208425][T15574] ____ip_mc_inc_group+0x40b/0x10d0 [ 309.208448][T15574] ? __pfx_____ip_mc_inc_group+0x10/0x10 [ 309.208470][T15574] ? ib_device_get_by_netdev+0x1b2/0x530 [ 309.208521][T15574] ip_mc_up+0x154/0x390 [ 309.208544][T15574] inetdev_event+0x6c3/0x17f0 [ 309.208570][T15574] ? ib_netdevice_event+0xfc/0x330 [ 309.208589][T15574] ? __pfx_inetdev_event+0x10/0x10 [ 309.208612][T15574] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 309.208657][T15574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.208687][T15574] notifier_call_chain+0x99/0x3f0 [ 309.208713][T15574] call_netdevice_notifiers_info+0xbe/0x110 [ 309.208762][T15574] __dev_notify_flags+0x12c/0x2e0 [ 309.208786][T15574] ? __pfx___dev_notify_flags+0x10/0x10 [ 309.208811][T15574] ? __pfx___dev_change_flags+0x10/0x10 [ 309.208832][T15574] ? validate_linkmsg+0x57c/0xba0 [ 309.208855][T15574] ? kernel_text_address+0x8d/0x100 [ 309.208882][T15574] netif_change_flags+0x108/0x160 [ 309.208908][T15574] do_setlink.isra.0+0x1ac4/0x3e60 [ 309.208935][T15574] ? stack_trace_save+0x8e/0xc0 [ 309.208958][T15574] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 309.208987][T15574] ? __lock_acquire+0x49f/0x1a40 [ 309.209020][T15574] ? lock_acquire+0x1b9/0x370 [ 309.209047][T15574] ? rcu_is_watching+0x12/0xc0 [ 309.209075][T15574] ? trace_contention_end+0x126/0x160 [ 309.209100][T15574] ? __mutex_lock+0x26d/0x1bd0 [ 309.209126][T15574] ? rtnl_newlink+0x8bb/0x2380 [ 309.209154][T15574] ? __pfx___mutex_lock+0x10/0x10 [ 309.209178][T15574] ? rcu_is_watching+0x12/0xc0 [ 309.209205][T15574] ? cap_capable+0x107/0x430 [ 309.209233][T15574] ? full_name_hash+0xbc/0x100 [ 309.209258][T15574] ? netdev_name_node_lookup+0x107/0x150 [ 309.209282][T15574] rtnl_newlink+0x11c2/0x2380 [ 309.209316][T15574] ? __pfx_rtnl_newlink+0x10/0x10 [ 309.209338][T15574] ? find_held_lock+0x2b/0x80 [ 309.209359][T15574] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 309.209379][T15574] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 309.209404][T15574] ? avc_has_perm_noaudit+0x145/0x3b0 [ 309.209433][T15574] ? __lock_acquire+0x49f/0x1a40 [ 309.209468][T15574] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 309.209492][T15574] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 309.209542][T15574] ? __pfx_rtnl_newlink+0x10/0x10 [ 309.209568][T15574] rtnetlink_rcv_msg+0x95e/0xe90 [ 309.209596][T15574] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.209629][T15574] ? ref_tracker_free+0x37e/0x6c0 [ 309.209659][T15574] netlink_rcv_skb+0x159/0x420 [ 309.209692][T15574] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.209719][T15574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.209749][T15574] ? netlink_deliver_tap+0x1ae/0xcc0 [ 309.209774][T15574] netlink_unicast+0x585/0x850 [ 309.209798][T15574] ? __pfx_netlink_unicast+0x10/0x10 [ 309.209825][T15574] netlink_sendmsg+0x8b0/0xda0 [ 309.209849][T15574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.209872][T15574] ? selinux_socket_sendmsg+0x198/0x2f0 [ 309.209903][T15574] ____sys_sendmsg+0xa4d/0xbe0 [ 309.209940][T15574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.209962][T15574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.210002][T15574] ___sys_sendmsg+0x190/0x1e0 [ 309.210022][T15574] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.210039][T15574] ? __lock_acquire+0x49f/0x1a40 [ 309.210062][T15574] ? get_pid_task+0x106/0x250 [ 309.210108][T15574] __sys_sendmsg+0x160/0x210 [ 309.210132][T15574] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.210170][T15574] do_syscall_64+0x115/0x870 [ 309.210194][T15574] ? clear_bhb_loop+0x70/0xc0 [ 309.210217][T15574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.210236][T15574] RIP: 0033:0x7f06d399e0d9 [ 309.210253][T15574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.210270][T15574] RSP: 002b:00007f06d47c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.210287][T15574] RAX: ffffffffffffffda RBX: 00007f06d3c25fa0 RCX: 00007f06d399e0d9 [ 309.210299][T15574] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 309.210310][T15574] RBP: 00007f06d47c5090 R08: 0000000000000000 R09: 0000000000000000 [ 309.210320][T15574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.210330][T15574] R13: 00007f06d3c26038 R14: 00007f06d3c25fa0 R15: 00007ffc89dd2718 [ 309.210361][T15574] [ 309.587196][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3058'. [ 309.673628][T15582] overlay: ./file0 is not a directory [ 309.716026][ T5810] usb 12-1: USB disconnect, device number 16 [ 309.773877][T15582] XFS (nbd8): no-recovery mounts must be read-only. [ 309.848722][T15607] /dev/sg0: Can't lookup blockdev [ 310.172211][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3071'. [ 310.362820][T15639] 9pnet_fd: Insufficient options for proto=fd [ 310.476483][T15645] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 310.483403][T15645] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 310.491719][T15645] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 310.494085][T15645] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 310.533139][T15649] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20000 [ 310.770052][T15660] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 310.772106][T15660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 310.778942][T15660] vhci_hcd vhci_hcd.0: Device attached [ 310.788796][T15661] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 310.793080][ T5799] vhci_hcd vhci_hcd.6: stop threads [ 310.794797][ T5799] vhci_hcd vhci_hcd.6: release socket [ 310.796451][ T5799] vhci_hcd vhci_hcd.6: disconnect device [ 311.378507][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3091'. [ 311.806570][T15711] FAULT_INJECTION: forcing a failure. [ 311.806570][T15711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.814148][T15711] CPU: 0 UID: 0 PID: 15711 Comm: syz.7.3101 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.814169][T15711] Tainted: [L]=SOFTLOCKUP [ 311.814174][T15711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 311.814199][T15711] Call Trace: [ 311.814211][T15711] [ 311.814216][T15711] dump_stack_lvl+0x100/0x190 [ 311.814249][T15711] should_fail_ex.cold+0x5/0xa [ 311.814270][T15711] _copy_to_user+0x32/0xd0 [ 311.814291][T15711] simple_read_from_buffer+0xcb/0x170 [ 311.814306][T15711] proc_fail_nth_read+0x1af/0x230 [ 311.814326][T15711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.814346][T15711] ? rw_verify_area+0xce/0x6d0 [ 311.814363][T15711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.814382][T15711] vfs_read+0x1e4/0xb40 [ 311.814402][T15711] ? __pfx_vfs_read+0x10/0x10 [ 311.814420][T15711] ? __fget_files+0x215/0x3d0 [ 311.814435][T15711] ? __fget_files+0x21f/0x3d0 [ 311.814451][T15711] ksys_read+0x12a/0x250 [ 311.814461][T15711] ? __pfx_ksys_read+0x10/0x10 [ 311.814476][T15711] do_syscall_64+0x115/0x870 [ 311.814529][T15711] ? clear_bhb_loop+0x70/0xc0 [ 311.814544][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.814555][T15711] RIP: 0033:0x7fe1f935e90e [ 311.814566][T15711] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.814577][T15711] RSP: 002b:00007fe1f75f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.814600][T15711] RAX: ffffffffffffffda RBX: 00007fe1f75f66c0 RCX: 00007fe1f935e90e [ 311.814608][T15711] RDX: 000000000000000f RSI: 00007fe1f75f60a0 RDI: 000000000000000b [ 311.814615][T15711] RBP: 00007fe1f75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.814622][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.814629][T15711] R13: 00007fe1f9626038 R14: 00007fe1f9625fa0 R15: 00007ffc7bd36508 [ 311.814644][T15711] [ 311.963590][T15715] macvlan0: entered promiscuous mode [ 311.965456][T15715] macvlan0: left allmulticast mode [ 311.979189][ T5810] usb 14-1: new full-speed USB device number 7 using dummy_hcd [ 312.000935][T15718] FAULT_INJECTION: forcing a failure. [ 312.000935][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.006259][T15718] CPU: 2 UID: 0 PID: 15718 Comm: syz.7.3104 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.006286][T15718] Tainted: [L]=SOFTLOCKUP [ 312.006292][T15718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.006302][T15718] Call Trace: [ 312.006310][T15718] [ 312.006318][T15718] dump_stack_lvl+0x100/0x190 [ 312.006344][T15718] should_fail_ex.cold+0x5/0xa [ 312.006366][T15718] _copy_to_user+0x32/0xd0 [ 312.006391][T15718] simple_read_from_buffer+0xcb/0x170 [ 312.006414][T15718] proc_fail_nth_read+0x1af/0x230 [ 312.006441][T15718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.006471][T15718] ? rw_verify_area+0xce/0x6d0 [ 312.006495][T15718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.006524][T15718] vfs_read+0x1e4/0xb40 [ 312.006554][T15718] ? __pfx_vfs_read+0x10/0x10 [ 312.006579][T15718] ? __fget_files+0x215/0x3d0 [ 312.006604][T15718] ? __fget_files+0x21f/0x3d0 [ 312.006630][T15718] ksys_read+0x12a/0x250 [ 312.006648][T15718] ? __pfx_ksys_read+0x10/0x10 [ 312.006689][T15718] do_syscall_64+0x115/0x870 [ 312.006722][T15718] ? clear_bhb_loop+0x70/0xc0 [ 312.006744][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.006763][T15718] RIP: 0033:0x7fe1f935e90e [ 312.006779][T15718] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.006795][T15718] RSP: 002b:00007fe1f75f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.006813][T15718] RAX: ffffffffffffffda RBX: 00007fe1f75f66c0 RCX: 00007fe1f935e90e [ 312.006825][T15718] RDX: 000000000000000f RSI: 00007fe1f75f60a0 RDI: 0000000000000004 [ 312.006835][T15718] RBP: 00007fe1f75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.006846][T15718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.006857][T15718] R13: 00007fe1f9626038 R14: 00007fe1f9625fa0 R15: 00007ffc7bd36508 [ 312.006883][T15718] [ 312.149901][ T5810] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.158716][ T5810] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.165147][ T5810] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.179063][ T5810] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.396085][ T5810] usb 14-1: usb_control_msg returned -32 [ 312.398398][ T43] kauditd_printk_skb: 304 callbacks suppressed [ 312.398415][ T43] audit: type=1400 audit(1786645157.013:7939): avc: denied { create } for pid=15727 comm="syz.6.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 312.403267][ T5810] usbtmc 14-1:16.0: can't read capabilities [ 312.439938][ T43] audit: type=1400 audit(1786645157.013:7940): avc: denied { ioctl } for pid=15727 comm="syz.6.3107" path="socket:[81274]" dev="sockfs" ino=81274 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 312.468290][ T43] audit: type=1400 audit(1786645157.013:7941): avc: denied { module_request } for pid=15727 comm="syz.6.3107" kmod="atm-device-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 312.494928][ T43] audit: type=1400 audit(1786645157.043:7942): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38390 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 312.514194][ T43] audit: type=1400 audit(1786645157.103:7943): avc: denied { read write } for pid=12926 comm="syz-executor" name="loop8" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.543422][ T43] audit: type=1400 audit(1786645157.113:7944): avc: denied { open } for pid=12926 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.571062][ T43] audit: type=1400 audit(1786645157.113:7945): avc: denied { ioctl } for pid=12926 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.589383][ T43] audit: type=1400 audit(1786645157.193:7946): avc: denied { read } for pid=15731 comm="syz.8.3108" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 312.609159][ T43] audit: type=1400 audit(1786645157.193:7947): avc: denied { open } for pid=15731 comm="syz.8.3108" path="/dev/input/event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 312.639194][ T43] audit: type=1400 audit(1786645157.253:7948): avc: denied { allowed } for pid=15735 comm="syz.6.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 313.019203][ T5737] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 313.029371][ T5781] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 313.172526][ T5737] usb 12-1: Using ep0 maxpacket: 8 [ 313.183641][ T5737] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.188421][ T5737] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 313.193068][ T5737] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.197086][ T5737] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.201803][ T5737] usb 12-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.207294][ T5737] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.207727][ T5781] usb 13-1: unable to get BOS descriptor or descriptor too short [ 313.217913][ T5737] usbtmc 12-1:16.0: bulk endpoints not found [ 313.220880][ T5781] usb 13-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 313.220915][ T5781] usb 13-1: no configurations [ 313.220928][ T5781] usb 13-1: can't read configurations, error -22 [ 313.771746][T15759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.775644][T15759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.437037][T15767] __nla_validate_parse: 8 callbacks suppressed [ 314.437049][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3123'. [ 314.741870][ T5737] usb 14-1: USB disconnect, device number 7 [ 314.842583][T15786] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 314.845059][T15786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.849223][T15786] vhci_hcd vhci_hcd.0: Device attached [ 314.852895][T15787] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 314.855780][ T12] vhci_hcd vhci_hcd.9: stop threads [ 314.858224][ T12] vhci_hcd vhci_hcd.9: release socket [ 314.863798][ T12] vhci_hcd vhci_hcd.9: disconnect device [ 315.000052][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3131'. [ 315.127187][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3132'. [ 315.664103][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3135'. [ 315.820063][ T5781] usb 12-1: USB disconnect, device number 17 [ 316.029107][ T5810] usb 13-1: new full-speed USB device number 14 using dummy_hcd [ 316.203812][ T5810] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 316.214584][ T5810] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.229062][ T5810] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.233465][ T5810] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.262655][T15845] netlink: 'syz.7.3149': attribute type 1 has an invalid length. [ 316.285597][T15845] gretap2: entered allmulticast mode [ 316.288139][T15848] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 316.295082][T15845] bond2: (slave gretap2): making interface the new active one [ 316.300782][T15845] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 316.314942][T15845] syzkaller1: entered promiscuous mode [ 316.317082][T15845] syzkaller1: entered allmulticast mode [ 316.369758][T15851] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3150'. [ 316.446555][ T5810] usb 13-1: usb_control_msg returned -32 [ 316.448277][ T5810] usbtmc 13-1:16.0: can't read capabilities [ 316.472694][T15855] netlink: 'syz.7.3152': attribute type 21 has an invalid length. [ 316.530081][T15857] FAULT_INJECTION: forcing a failure. [ 316.530081][T15857] name failslab, interval 1, probability 0, space 0, times 0 [ 316.535132][T15857] CPU: 0 UID: 0 PID: 15857 Comm: syz.7.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.535161][T15857] Tainted: [L]=SOFTLOCKUP [ 316.535170][T15857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 316.535182][T15857] Call Trace: [ 316.535191][T15857] [ 316.535201][T15857] dump_stack_lvl+0x100/0x190 [ 316.535232][T15857] should_fail_ex.cold+0x5/0xa [ 316.535260][T15857] should_failslab+0xc2/0x120 [ 316.535286][T15857] kmem_cache_alloc_noprof+0x91/0x6a0 [ 316.535312][T15857] ? skb_clone+0x190/0x400 [ 316.535393][T15857] skb_clone+0x190/0x400 [ 316.535418][T15857] bpf_clone_redirect+0x166/0x500 [ 316.535458][T15857] ? __pfx___cant_migrate+0x10/0x10 [ 316.535482][T15857] bpf_prog_9aed3a937bd8d0ba+0x22/0x2a [ 316.535501][T15857] bpf_test_run+0x4e2/0xa40 [ 316.535554][T15857] ? bpf_test_run+0x1c6/0xa40 [ 316.535587][T15857] ? __pfx_bpf_test_run+0x10/0x10 [ 316.535625][T15857] ? do_csum+0x1e5/0x380 [ 316.535661][T15857] bpf_prog_test_run_skb+0x15c4/0x3540 [ 316.535700][T15857] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 316.535725][T15857] ? fput+0x79/0x100 [ 316.535752][T15857] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 316.535778][T15857] __sys_bpf+0x2a12/0x4e80 [ 316.535807][T15857] ? __pfx___sys_bpf+0x10/0x10 [ 316.535828][T15857] ? find_held_lock+0x2b/0x80 [ 316.535848][T15857] ? get_pid_task+0xfc/0x250 [ 316.535865][T15857] ? get_pid_task+0xfc/0x250 [ 316.535893][T15857] ? find_held_lock+0x2b/0x80 [ 316.535916][T15857] ? rcu_read_lock_any_held+0x6a/0xa0 [ 316.535936][T15857] ? find_held_lock+0x2b/0x80 [ 316.535955][T15857] ? ksys_write+0x190/0x250 [ 316.535973][T15857] ? ksys_write+0x190/0x250 [ 316.536011][T15857] ? fput+0x79/0x100 [ 316.536040][T15857] ? __x64_sys_bpf+0xce/0x140 [ 316.536060][T15857] __x64_sys_bpf+0xce/0x140 [ 316.536082][T15857] ? do_syscall_64+0x90/0x870 [ 316.536113][T15857] do_syscall_64+0x115/0x870 [ 316.536137][T15857] ? clear_bhb_loop+0x70/0xc0 [ 316.536161][T15857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.536181][T15857] RIP: 0033:0x7fe1f939e0d9 [ 316.536199][T15857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.536216][T15857] RSP: 002b:00007fe1f75f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.536236][T15857] RAX: ffffffffffffffda RBX: 00007fe1f9625fa0 RCX: 00007fe1f939e0d9 [ 316.536249][T15857] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 316.536261][T15857] RBP: 00007fe1f75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.536272][T15857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.536284][T15857] R13: 00007fe1f9626038 R14: 00007fe1f9625fa0 R15: 00007ffc7bd36508 [ 316.536310][T15857] [ 316.919896][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3156'. [ 317.010176][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3158'. [ 317.014660][T15869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.038665][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.041224][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.175552][T15878] ip_tables: iptables: counters copy to user failed while replacing table [ 317.184773][T15878] netlink: 'syz.6.3163': attribute type 13 has an invalid length. [ 317.296342][T15885] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3164'. [ 317.298398][T15867] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 317.310490][T15867] device-mapper: ioctl: error adding target to table [ 317.383775][T15898] netlink: 'syz.6.3167': attribute type 1 has an invalid length. [ 317.415792][ T43] kauditd_printk_skb: 263 callbacks suppressed [ 317.415809][ T43] audit: type=1400 audit(1786645162.033:8212): avc: denied { module_request } for pid=15894 comm="syz.7.3166" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 317.431607][T15898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.469604][ T43] audit: type=1400 audit(1786645162.053:8213): avc: denied { ioctl } for pid=15894 comm="syz.7.3166" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 317.482043][ T43] audit: type=1400 audit(1786645162.053:8214): avc: denied { read } for pid=15896 comm="syz.6.3167" dev="nsfs" ino=4026532867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 317.482939][T15898] vlan4: entered allmulticast mode [ 317.491963][ T43] audit: type=1400 audit(1786645162.063:8215): avc: denied { open } for pid=15896 comm="syz.6.3167" path="pid:[4026532867]" dev="nsfs" ino=4026532867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 317.506829][ T43] audit: type=1400 audit(1786645162.063:8216): avc: denied { setopt } for pid=15894 comm="syz.7.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.515567][ T43] audit: type=1400 audit(1786645162.063:8217): avc: denied { write } for pid=15894 comm="syz.7.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.528095][ T43] audit: type=1400 audit(1786645162.143:8218): avc: denied { mounton } for pid=15896 comm="syz.6.3167" path="/587/dev" dev="tmpfs" ino=3184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 317.539625][T15898] bond1: (slave vlan4): Error -34 calling dev_set_mtu [ 317.559545][ T43] audit: type=1400 audit(1786645162.143:8219): avc: denied { mount } for pid=15896 comm="syz.6.3167" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 317.609125][ T43] audit: type=1400 audit(1786645162.163:8220): avc: denied { mount } for pid=15896 comm="syz.6.3167" name="/" dev="configfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 317.620140][ T43] audit: type=1400 audit(1786645162.163:8221): avc: denied { create } for pid=15907 comm="syz.7.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 317.861399][T15922] /dev/nullb0: Can't lookup blockdev [ 317.889181][T15918] size and base must be multiples of 4 kiB [ 317.891862][T15918] CPU: 2 UID: 0 PID: 15918 Comm: syz.9.3175 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.891893][T15918] Tainted: [L]=SOFTLOCKUP [ 317.891900][T15918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.891911][T15918] Call Trace: [ 317.891932][T15918] [ 317.891940][T15918] dump_stack_lvl+0x100/0x190 [ 317.891986][T15918] mtrr_add.cold+0x74/0x87 [ 317.892010][T15918] mtrr_ioctl+0x25a/0xcf0 [ 317.892038][T15918] ? __pfx_mtrr_ioctl+0x10/0x10 [ 317.892079][T15918] ? __pfx_mtrr_ioctl+0x10/0x10 [ 317.892105][T15918] proc_reg_unlocked_ioctl+0x229/0x320 [ 317.892134][T15918] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 317.892161][T15918] __x64_sys_ioctl+0x18e/0x210 [ 317.892195][T15918] do_syscall_64+0x115/0x870 [ 317.892282][T15918] ? clear_bhb_loop+0x70/0xc0 [ 317.892314][T15918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.892334][T15918] RIP: 0033:0x7f91a1d9e0d9 [ 317.892352][T15918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.892373][T15918] RSP: 002b:00007f91a2c5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.892394][T15918] RAX: ffffffffffffffda RBX: 00007f91a2025fa0 RCX: 00007f91a1d9e0d9 [ 317.892408][T15918] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000006 [ 317.892422][T15918] RBP: 00007f91a1e35024 R08: 0000000000000000 R09: 0000000000000000 [ 317.892434][T15918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.892446][T15918] R13: 00007f91a2026038 R14: 00007f91a2025fa0 R15: 00007ffd63f99e38 [ 317.892473][T15918] [ 317.997312][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3179'. [ 318.781825][ T7110] usb 13-1: USB disconnect, device number 14 [ 319.007373][T15960] FAULT_INJECTION: forcing a failure. [ 319.007373][T15960] name failslab, interval 1, probability 0, space 0, times 0 [ 319.014379][T15958] netlink: 'syz.8.3188': attribute type 4 has an invalid length. [ 319.017419][T15958] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3188'. [ 319.019060][T15960] CPU: 3 UID: 0 PID: 15960 Comm: syz.9.3187 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.019086][T15960] Tainted: [L]=SOFTLOCKUP [ 319.019092][T15960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.019103][T15960] Call Trace: [ 319.019109][T15960] [ 319.019116][T15960] dump_stack_lvl+0x100/0x190 [ 319.019143][T15960] should_fail_ex.cold+0x5/0xa [ 319.019165][T15960] should_failslab+0xc2/0x120 [ 319.019188][T15960] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 319.019214][T15960] ? __alloc_skb+0x5b7/0x710 [ 319.019280][T15960] ? __alloc_skb+0x140/0x710 [ 319.019303][T15960] __alloc_skb+0x140/0x710 [ 319.019321][T15960] ? __alloc_skb+0x5b7/0x710 [ 319.019339][T15960] ? __pfx___alloc_skb+0x10/0x10 [ 319.019357][T15960] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 319.019382][T15960] ? sock_has_perm+0x25a/0x2f0 [ 319.019403][T15960] ? __pfx_sock_has_perm+0x10/0x10 [ 319.019426][T15960] netlink_alloc_large_skb+0x69/0x150 [ 319.019465][T15960] netlink_sendmsg+0x680/0xda0 [ 319.019485][T15960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.019505][T15960] ? selinux_socket_sendmsg+0x198/0x2f0 [ 319.019532][T15960] ____sys_sendmsg+0xa4d/0xbe0 [ 319.019566][T15960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.019586][T15960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.019621][T15960] ___sys_sendmsg+0x190/0x1e0 [ 319.019639][T15960] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.019654][T15960] ? __lock_acquire+0x49f/0x1a40 [ 319.019675][T15960] ? get_pid_task+0x106/0x250 [ 319.019715][T15960] __sys_sendmsg+0x160/0x210 [ 319.019737][T15960] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.019771][T15960] do_syscall_64+0x115/0x870 [ 319.019794][T15960] ? clear_bhb_loop+0x70/0xc0 [ 319.019814][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.019831][T15960] RIP: 0033:0x7f91a1d9e0d9 [ 319.019847][T15960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.019863][T15960] RSP: 002b:00007f91a2c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.019878][T15960] RAX: ffffffffffffffda RBX: 00007f91a2025fa0 RCX: 00007f91a1d9e0d9 [ 319.019889][T15960] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 319.019899][T15960] RBP: 00007f91a2c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 319.019909][T15960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.019918][T15960] R13: 00007f91a2026038 R14: 00007f91a2025fa0 R15: 00007ffd63f99e38 [ 319.019942][T15960] [ 319.023274][T15960] netlink: 'syz.9.3187': attribute type 64 has an invalid length. [ 319.637565][T15990] __nla_validate_parse: 3 callbacks suppressed [ 319.637577][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3194'. [ 319.643585][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3194'. [ 320.358487][T16017] macvlan0: left promiscuous mode [ 320.360353][T16017] macvlan0: entered allmulticast mode [ 320.366796][T16017] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 320.373200][T16017] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 320.378248][T16017] bridge0: entered allmulticast mode [ 320.385219][T16017] bond1: entered allmulticast mode [ 320.390708][T16017] mac80211_hwsim hwsim25 wlan2: entered allmulticast mode [ 320.400918][T16017] @: entered allmulticast mode [ 320.413494][T16017] mac80211_hwsim hwsim28 wlan3: entered allmulticast mode [ 320.426820][T16017] batadv1: entered allmulticast mode [ 320.433270][T16020] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 320.452664][T16017] bridge1: entered allmulticast mode [ 320.470316][T16017] gretap1: entered allmulticast mode [ 320.472702][T16017] bond2: entered allmulticast mode [ 320.477667][T16017] bond3: entered allmulticast mode [ 320.489419][ T5774] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 320.495803][ T5774] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 320.502703][ T5774] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 320.510994][ T5774] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 320.590521][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3203'. [ 320.594534][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3203'. [ 320.995569][T16043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3599605440 (3599605440 ns) > initial count (3285526220 ns). Using initial count to start timer. [ 321.053890][ T5726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.063668][ T5726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.072775][ T5726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.079411][ T5726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.102112][ T5726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.309500][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802baf4000: rx timeout, send abort [ 321.345872][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3213'. [ 321.374841][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3213'. [ 321.785262][T16075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=16075 comm=syz.7.3215 [ 321.809792][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802baf4400: rx timeout, send abort [ 321.814961][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802baf4000: abort rx timeout. Force session deactivation [ 321.912150][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3218'. [ 321.915089][T16086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3218'. [ 322.177288][T16096] overlayfs: overlapping lowerdir path [ 322.312880][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802baf4400: abort rx timeout. Force session deactivation [ 322.351588][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.366644][T16048] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.383161][T16048] bridge_slave_0: entered allmulticast mode [ 322.403064][T16048] bridge_slave_0: entered promiscuous mode [ 322.426440][T16048] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.434954][T16048] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.438371][T16048] bridge_slave_1: entered allmulticast mode [ 322.440597][ T43] kauditd_printk_skb: 242 callbacks suppressed [ 322.440610][ T43] audit: type=1400 audit(1786645167.063:8464): avc: denied { create } for pid=16107 comm="syz.8.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 322.443273][T16048] bridge_slave_1: entered promiscuous mode [ 322.447727][ T43] audit: type=1400 audit(1786645167.063:8465): avc: denied { execmem } for pid=16107 comm="syz.8.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 322.493080][T16109] FAULT_INJECTION: forcing a failure. [ 322.493080][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 322.512137][T16109] CPU: 0 UID: 0 PID: 16109 Comm: syz.9.3224 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.512168][T16109] Tainted: [L]=SOFTLOCKUP [ 322.512176][T16109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.512186][T16109] Call Trace: [ 322.512193][T16109] [ 322.512201][T16109] dump_stack_lvl+0x100/0x190 [ 322.512230][T16109] should_fail_ex.cold+0x5/0xa [ 322.512259][T16109] should_failslab+0xc2/0x120 [ 322.512285][T16109] kmem_cache_alloc_noprof+0x91/0x6a0 [ 322.512308][T16109] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 322.512337][T16109] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 322.512367][T16109] mmu_topup_memory_caches+0x25/0x170 [ 322.512394][T16109] kvm_mmu_load+0xe2/0x2570 [ 322.512419][T16109] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 322.512437][T16109] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 322.512461][T16109] ? __pfx_kvm_mmu_load+0x10/0x10 [ 322.512485][T16109] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 322.512508][T16109] ? kvm_check_and_inject_events+0x873/0x12a0 [ 322.512535][T16109] ? record_steal_time+0x3a0/0xbb0 [ 322.512558][T16109] vcpu_run+0x3aaa/0x5de0 [ 322.512583][T16109] ? mark_held_locks+0x40/0x70 [ 322.512616][T16109] ? __pfx_vcpu_run+0x10/0x10 [ 322.512651][T16109] ? rcu_is_watching+0x12/0xc0 [ 322.512681][T16109] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 322.512708][T16109] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 322.512741][T16109] kvm_vcpu_ioctl+0x730/0x1700 [ 322.512764][T16109] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 322.512785][T16109] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.512809][T16109] ? do_vfs_ioctl+0x226/0x13e0 [ 322.512836][T16109] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 322.512864][T16109] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 322.512900][T16109] ? __fget_files+0x215/0x3d0 [ 322.512919][T16109] ? hook_file_ioctl_common+0x140/0x440 [ 322.512945][T16109] ? selinux_file_ioctl+0x13b/0x290 [ 322.512972][T16109] ? selinux_file_ioctl+0xb6/0x290 [ 322.513001][T16109] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 322.513022][T16109] __x64_sys_ioctl+0x18e/0x210 [ 322.513052][T16109] do_syscall_64+0x115/0x870 [ 322.513077][T16109] ? clear_bhb_loop+0x70/0xc0 [ 322.513099][T16109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.513134][T16109] RIP: 0033:0x7f91a1d9e0d9 [ 322.513152][T16109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.513168][T16109] RSP: 002b:00007f91a2c3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.513186][T16109] RAX: ffffffffffffffda RBX: 00007f91a2026090 RCX: 00007f91a1d9e0d9 [ 322.513201][T16109] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 322.513212][T16109] RBP: 00007f91a2c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 322.513223][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.513234][T16109] R13: 00007f91a2026128 R14: 00007f91a2026090 R15: 00007ffd63f99e38 [ 322.513267][T16109] [ 322.625742][ T43] audit: type=1400 audit(1786645167.243:8466): avc: denied { setopt } for pid=16107 comm="syz.8.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 322.662968][ T43] audit: type=1400 audit(1786645167.273:8467): avc: denied { prog_run } for pid=16107 comm="syz.8.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 322.707289][T16048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.712332][ T43] audit: type=1400 audit(1786645167.323:8468): avc: denied { append } for pid=16112 comm="syz.7.3226" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.725652][T16048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.808408][T16048] team0: Port device team_slave_0 added [ 322.827882][ T43] audit: type=1400 audit(1786645167.443:8469): avc: denied { ioctl } for pid=16114 comm="syz.7.3227" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=84182 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 322.828297][T16048] team0: Port device team_slave_1 added [ 322.926647][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3229'. [ 322.934435][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3229'. [ 322.972839][T16048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.977870][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.994150][T16048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.001935][T16048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.005128][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.015854][T16048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.024117][ T43] audit: type=1400 audit(1786645167.643:8470): avc: denied { ioctl } for pid=16120 comm="syz.7.3230" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.045085][ T43] audit: type=1400 audit(1786645167.653:8471): avc: denied { create } for pid=16122 comm="syz.8.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.054108][ T43] audit: type=1400 audit(1786645167.663:8472): avc: denied { recv } for pid=16120 comm="syz.7.3230" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38390 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 323.087455][ T43] audit: type=1400 audit(1786645167.683:8473): avc: denied { create } for pid=16120 comm="syz.7.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 323.179692][ T5735] Bluetooth: hci4: command tx timeout [ 323.294470][T16048] hsr_slave_0: entered promiscuous mode [ 323.304948][T16048] hsr_slave_1: entered promiscuous mode [ 323.379451][ T5781] usb 13-1: new full-speed USB device number 15 using dummy_hcd [ 323.482843][ T5774] bridge_slave_0: left promiscuous mode [ 323.484800][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.552152][ T5781] usb 13-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 323.560818][ T5781] usb 13-1: config 1 interface 0 has no altsetting 0 [ 323.564649][ T5781] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.570257][ T5781] usb 13-1: Product: syz [ 323.571583][ T5781] usb 13-1: Manufacturer: syz [ 323.579384][ T5781] usb 13-1: SerialNumber: syz [ 323.595071][ T7110] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 323.690756][ T5774] team0: Port device bridge1 removed [ 323.698753][ T5774] bond0 (unregistering): Released all slaves [ 323.708147][ T5774] bond1 (unregistering): Released all slaves [ 323.794949][ T7110] usb 12-1: Using ep0 maxpacket: 32 [ 323.802624][ T7110] usb 12-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 323.827986][ T7110] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 323.831792][ T7110] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 323.833217][ T5774] : left promiscuous mode [ 323.843782][ T7110] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.846450][ T7110] usb 12-1: Product: ȇ䥲㾗薤㻹䴰钡䶜鑛孓ਡ餛ꣀ⬸ê…竤挩å°ï´‹ã£·î­ã°¾æ‡ê¢ì¸‡åº­è‘²ã‚¡ê¢†ã–ᴠꆵ黥ë¾á›•ê°¬å¡¿æ¾šãµ½ì‡’⚕㓦㹋៘ﲛ㛺î€ì‹¿ã¢”캲驩笞ç¦äŸœè»´â¸žä¤¸å¬’ä´¶æ¹ïƒ°èž›ã£†á´ƒæ—¿ì¡«ë„ç›î ¿à­´äº½éµ”◹缌Òâ¦ê»‚甴賫‫➃Ἥ갔葀夸㾮笼﷩粤ꢸê´ëƒŒ [ 323.869458][ T7110] usb 12-1: Manufacturer: Ñ‹ [ 323.870961][ T7110] usb 12-1: SerialNumber: ìŽë’ˆèŽì‰¶äŽŽî ¶î¢‘ [ 323.877007][T16133] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 324.113650][ T5438] 8021q: adding VLAN 0 to HW filter on device eth27 [ 324.277999][ T5781] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 324.306561][ T7110] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.336804][ T5781] usb 13-1: USB disconnect, device number 15 [ 324.352808][ T5781] usblp0: removed [ 324.496261][ T5774] hsr_slave_0: left promiscuous mode [ 324.506055][T16133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.510850][ T5774] hsr_slave_1: left promiscuous mode [ 324.517638][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.525588][T16133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.533147][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.557502][T16133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.582054][T16133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.587312][ T7110] usb 12-1: USB disconnect, device number 18 [ 324.873917][ T5774] team0 (unregistering): Port device team_slave_0 removed [ 324.959649][T14947] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 325.119146][T14947] usb 14-1: Using ep0 maxpacket: 16 [ 325.139445][T14947] usb 14-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 325.165314][T14947] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 325.177621][T14947] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.186909][T14947] usb 14-1: Product: syz [ 325.188669][T14947] usb 14-1: Manufacturer: syz [ 325.195305][T14947] usb 14-1: SerialNumber: syz [ 325.203162][T14947] usb 14-1: config 0 descriptor?? [ 325.225864][T14947] em28xx 14-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 325.230008][T14947] em28xx 14-1:0.0: DVB interface 0 found: bulk [ 325.261102][ T5735] Bluetooth: hci4: command tx timeout [ 325.412020][ T7110] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 325.609557][ T7110] usb 12-1: Using ep0 maxpacket: 8 [ 325.616101][ T7110] usb 12-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 325.617386][T16048] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 325.631244][T16048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.643022][T16048] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 325.646707][ T7110] usb 12-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.656741][T16048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.658029][ T7110] usb 12-1: config 1 interface 0 has no altsetting 0 [ 325.660487][T16048] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 325.667132][T16048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.671499][T16048] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.671526][ T7110] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.678662][T16048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.681396][T16168] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 325.683163][ T7110] usb 12-1: Product: syz [ 325.683642][T16168] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 325.685409][ T7110] usb 12-1: Manufacturer: syz [ 325.690420][ T5774] IPVS: stop unused estimator thread 0... [ 325.694402][ T7110] usb 12-1: SerialNumber: syz [ 325.696157][T16168] vhci_hcd vhci_hcd.0: Device attached [ 325.724960][T16169] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 325.737148][ T12] vhci_hcd vhci_hcd.8: stop threads [ 325.739596][ T12] vhci_hcd vhci_hcd.8: release socket [ 325.743505][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 325.848195][T16048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.851523][T14947] em28xx 14-1:0.0: unknown em28xx chip ID (0) [ 325.862461][T16048] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.867970][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.870475][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.878574][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.880944][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.914459][T16161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.926990][T16161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.966220][ T7110] usbhid 12-1:1.0: can't add hid device: -71 [ 325.968463][ T7110] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 325.977673][ T7110] usb 12-1: USB disconnect, device number 19 [ 326.250494][T16048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.281065][T14947] em28xx 14-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 326.288186][T14947] em28xx 14-1:0.0: board has no eeprom [ 326.509489][T16205] veth1_macvtap: left promiscuous mode [ 326.511721][T16205] macsec0: entered promiscuous mode [ 326.513875][T16205] macsec0: entered allmulticast mode [ 326.528168][T16205] veth1_macvtap: entered promiscuous mode [ 326.530571][T16205] veth1_macvtap: entered allmulticast mode [ 326.533143][T16205] macsec0: left promiscuous mode [ 326.535262][T16205] macsec0: left allmulticast mode [ 326.537278][T16205] veth1_macvtap: left allmulticast mode [ 326.557594][T16048] veth0_vlan: entered promiscuous mode [ 326.560852][T14947] em28xx 14-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 326.570748][T14947] em28xx 14-1:0.0: dvb set to bulk mode. [ 326.573345][T13123] em28xx 14-1:0.0: Binding DVB extension [ 326.596774][T16048] veth1_vlan: entered promiscuous mode [ 326.611948][T14947] usb 14-1: USB disconnect, device number 8 [ 326.666743][T16048] veth0_macvtap: entered promiscuous mode [ 326.680443][T13123] em28xx 14-1:0.0: Registering input extension [ 326.689798][T16048] veth1_macvtap: entered promiscuous mode [ 326.694910][T14947] em28xx 14-1:0.0: Disconnecting em28xx [ 326.702671][T14947] em28xx 14-1:0.0: Closing input extension [ 326.760953][T16048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.777806][T16048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.781783][T14947] em28xx 14-1:0.0: Freeing device [ 326.860477][T15996] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.873558][T15996] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.899717][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.914279][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.971835][ T6178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.981403][ T6178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.005623][T16224] FAULT_INJECTION: forcing a failure. [ 327.005623][T16224] name failslab, interval 1, probability 0, space 0, times 0 [ 327.006939][T16219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.011702][T16224] CPU: 0 UID: 0 PID: 16224 Comm: syz.8.3251 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.011736][T16224] Tainted: [L]=SOFTLOCKUP [ 327.011743][T16224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 327.011754][T16224] Call Trace: [ 327.011760][T16224] [ 327.011767][T16224] dump_stack_lvl+0x100/0x190 [ 327.011796][T16224] should_fail_ex.cold+0x5/0xa [ 327.011821][T16224] should_failslab+0xc2/0x120 [ 327.011846][T16224] kmem_cache_alloc_noprof+0x91/0x6a0 [ 327.011870][T16224] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 327.011896][T16224] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 327.011924][T16224] mmu_topup_memory_caches+0x25/0x170 [ 327.011950][T16224] kvm_mmu_load+0xe2/0x2570 [ 327.011975][T16224] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 327.011994][T16224] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 327.012013][T16224] ? __pfx_kvm_mmu_load+0x10/0x10 [ 327.012035][T16224] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 327.012056][T16224] ? kvm_check_and_inject_events+0x873/0x12a0 [ 327.012079][T16224] ? record_steal_time+0x3a0/0xbb0 [ 327.012099][T16224] vcpu_run+0x3aaa/0x5de0 [ 327.012154][T16224] ? __pfx_vcpu_run+0x10/0x10 [ 327.012190][T16224] ? rcu_is_watching+0x12/0xc0 [ 327.012221][T16224] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 327.012247][T16224] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 327.012280][T16224] kvm_vcpu_ioctl+0x730/0x1700 [ 327.012304][T16224] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 327.012325][T16224] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 327.012348][T16224] ? do_vfs_ioctl+0x226/0x13e0 [ 327.012375][T16224] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 327.012401][T16224] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 327.012437][T16224] ? __fget_files+0x215/0x3d0 [ 327.012454][T16224] ? hook_file_ioctl_common+0x140/0x440 [ 327.012481][T16224] ? selinux_file_ioctl+0x13b/0x290 [ 327.012506][T16224] ? selinux_file_ioctl+0xb6/0x290 [ 327.012532][T16224] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 327.012555][T16224] __x64_sys_ioctl+0x18e/0x210 [ 327.012584][T16224] do_syscall_64+0x115/0x870 [ 327.012611][T16224] ? clear_bhb_loop+0x70/0xc0 [ 327.012635][T16224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.012654][T16224] RIP: 0033:0x7f06d399e0d9 [ 327.012671][T16224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.012689][T16224] RSP: 002b:00007f06d47c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.012714][T16224] RAX: ffffffffffffffda RBX: 00007f06d3c25fa0 RCX: 00007f06d399e0d9 [ 327.012726][T16224] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 327.012737][T16224] RBP: 00007f06d47c5090 R08: 0000000000000000 R09: 0000000000000000 [ 327.012748][T16224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.012758][T16224] R13: 00007f06d3c26038 R14: 00007f06d3c25fa0 R15: 00007ffc89dd2718 [ 327.012784][T16224] [ 327.092528][ T6085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.152317][ T6085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.339283][ T5726] Bluetooth: hci4: command tx timeout [ 327.396235][T16236] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 327.420498][T16236] romfs: unable to set blocksize [ 327.420498][T16236] [ 327.445022][T16236] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3254'. [ 327.489698][ T43] kauditd_printk_skb: 214 callbacks suppressed [ 327.489719][ T43] audit: type=1400 audit(1786645172.103:8688): avc: denied { bind } for pid=16237 comm="syz.8.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 327.521492][ T43] audit: type=1400 audit(1786645172.133:8689): avc: denied { map_create } for pid=16239 comm="syz.8.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 327.532645][ T43] audit: type=1400 audit(1786645172.143:8690): avc: denied { map_read map_write } for pid=16239 comm="syz.8.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 327.544155][ T43] audit: type=1400 audit(1786645172.143:8691): avc: denied { perfmon } for pid=16239 comm="syz.8.3256" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 327.554710][ T43] audit: type=1400 audit(1786645172.163:8692): avc: denied { read } for pid=16239 comm="syz.8.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.593637][ T43] audit: type=1400 audit(1786645172.213:8693): avc: denied { ioctl } for pid=16241 comm="syz.8.3257" path="socket:[85022]" dev="sockfs" ino=85022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.638620][ T43] audit: type=1400 audit(1786645172.253:8694): avc: denied { read } for pid=16243 comm="syz.8.3258" dev="nsfs" ino=4026533737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 327.647261][ T43] audit: type=1400 audit(1786645172.253:8695): avc: denied { open } for pid=16243 comm="syz.8.3258" path="net:[4026533737]" dev="nsfs" ino=4026533737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 327.666659][ T43] audit: type=1400 audit(1786645172.283:8696): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=38390 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 327.770981][ T43] audit: type=1400 audit(1786645172.393:8697): avc: denied { unmount } for pid=11650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 327.811648][T16248] syzkaller0: entered promiscuous mode [ 327.814082][T16248] syzkaller0: entered allmulticast mode [ 327.924121][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3261'. [ 327.927708][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3261'. [ 328.076129][T16257] syzkaller0: entered promiscuous mode [ 328.078154][T16257] syzkaller0: entered allmulticast mode [ 328.085685][T16257] tipc: Enabled bearer , priority 0 [ 328.090771][T16256] tipc: Resetting bearer [ 328.105711][T16256] tipc: Disabling bearer [ 328.209831][T16261] FAULT_INJECTION: forcing a failure. [ 328.209831][T16261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.214020][T16261] CPU: 3 UID: 0 PID: 16261 Comm: syz.9.3264 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.214039][T16261] Tainted: [L]=SOFTLOCKUP [ 328.214043][T16261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.214050][T16261] Call Trace: [ 328.214056][T16261] [ 328.214061][T16261] dump_stack_lvl+0x100/0x190 [ 328.214081][T16261] should_fail_ex.cold+0x5/0xa [ 328.214096][T16261] _copy_from_user+0x2e/0xd0 [ 328.214113][T16261] copy_msghdr_from_user+0x9f/0x4c0 [ 328.214127][T16261] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 328.214141][T16261] ? rcu_is_watching+0x12/0xc0 [ 328.214159][T16261] ? ___sys_recvmsg+0x177/0x1a0 [ 328.214169][T16261] ? kfree+0x1e5/0x6c0 [ 328.214182][T16261] ___sys_recvmsg+0xdd/0x1a0 [ 328.214194][T16261] ? __pfx____sys_recvmsg+0x10/0x10 [ 328.214212][T16261] ? __pfx___might_resched+0x10/0x10 [ 328.214232][T16261] do_recvmmsg+0x2f3/0x740 [ 328.214245][T16261] ? __pfx_do_recvmmsg+0x10/0x10 [ 328.214259][T16261] ? __mutex_unlock_slowpath+0x35d/0x930 [ 328.214281][T16261] ? __fget_files+0x21f/0x3d0 [ 328.214297][T16261] __x64_sys_recvmmsg+0x22a/0x280 [ 328.214314][T16261] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 328.214334][T16261] do_syscall_64+0x115/0x870 [ 328.214351][T16261] ? clear_bhb_loop+0x70/0xc0 [ 328.214366][T16261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.214378][T16261] RIP: 0033:0x7f91a1d9e0d9 [ 328.214388][T16261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.214400][T16261] RSP: 002b:00007f91a2c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 328.214411][T16261] RAX: ffffffffffffffda RBX: 00007f91a2025fa0 RCX: 00007f91a1d9e0d9 [ 328.214419][T16261] RDX: 000000000000049f RSI: 0000200000006100 RDI: 0000000000000004 [ 328.214426][T16261] RBP: 00007f91a2c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 328.214432][T16261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.214439][T16261] R13: 00007f91a2026038 R14: 00007f91a2025fa0 R15: 00007ffd63f99e38 [ 328.214453][T16261] [ 328.374870][T16269] netlink: 'syz.7.3268': attribute type 1 has an invalid length. [ 328.387870][T16269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.404660][T16269] vlan2: entered allmulticast mode [ 328.407622][T16269] bond5: (slave vlan2): Error -34 calling dev_set_mtu [ 328.488117][T16276] binder: 16275:16276 ioctl c0306201 200000000080 returned -14 [ 328.497211][T16277] binder_alloc: binder_alloc_mmap_handler: 16275 200000ffd000-200001000000 already mapped failed -16 [ 328.501383][T16276] binder: BINDER_SET_CONTEXT_MGR already set [ 328.504223][T16277] binder_alloc: binder_alloc_mmap_handler: 16275 200000ffd000-200001000000 already mapped failed -16 [ 328.513180][T16279] binder: 16275:16279 ioctl c0306201 2000000003c0 returned -14 [ 328.516791][T16277] binder_alloc: binder_alloc_mmap_handler: 16275 200000ffd000-200001000000 already mapped failed -16 [ 328.524206][T16276] binder: 16275:16276 ioctl 4018620d 200000000040 returned -16 [ 328.524412][T16280] Cannot find set identified by id 0 to match [ 328.533958][T16282] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.3272' sets config #0 [ 328.612735][T16288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.628269][T16288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.642917][T16291] netlink: 'syz.9.3276': attribute type 2 has an invalid length. [ 328.687371][T16295] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 328.689596][T16295] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 328.691700][T16287] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3273'. [ 328.695319][T16295] vhci_hcd vhci_hcd.0: Device attached [ 328.717712][T16298] netlink: 'syz.9.3276': attribute type 1 has an invalid length. [ 328.849129][T14731] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 328.940725][T16179] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 328.959634][ T7110] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 329.120072][ T7110] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 329.128321][ T7110] usb 11-1: config index 0 descriptor too short (expected 12336, got 45) [ 329.133722][ T7110] usb 11-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 329.137740][ T7110] usb 11-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 329.145062][ T7110] usb 11-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 329.149174][ T7110] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.364914][ T7110] usb 11-1: string descriptor 0 read error: -71 [ 329.367894][T16296] vhci_hcd: connection closed [ 329.368162][ T5774] vhci_hcd vhci_hcd.6: stop threads [ 329.368188][ T5774] vhci_hcd vhci_hcd.6: release socket [ 329.368230][ T5774] vhci_hcd vhci_hcd.6: disconnect device [ 329.371631][ T7110] usb 11-1: USB disconnect, device number 9 [ 329.381396][T16326] syzkaller0: entered promiscuous mode [ 329.381439][T16326] syzkaller0: entered allmulticast mode [ 329.421517][ T5735] Bluetooth: hci4: command 0x0419 tx timeout [ 329.441589][T16179] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 329.546574][T16329] cgroup: subsys name conflicts with all [ 329.989477][ T6090] Bluetooth: hci5: Frame reassembly failed (-84) [ 330.051600][T16355] bond0: entered promiscuous mode [ 330.053307][T16355] bond_slave_0: entered promiscuous mode [ 330.055172][T16355] bond_slave_1: entered promiscuous mode [ 330.058258][T16355] batadv_slave_0: entered promiscuous mode [ 330.061898][T16355] batadv_slave_0: left promiscuous mode [ 330.064164][T16355] bond0: left promiscuous mode [ 330.066025][T16355] bond_slave_0: left promiscuous mode [ 330.067903][T16355] bond_slave_1: left promiscuous mode [ 330.100050][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3295'. [ 330.102977][T16356] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3295'. [ 330.106291][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3295'. [ 330.109872][T16356] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3295'. [ 330.175590][T16358] syzkaller0: entered promiscuous mode [ 330.177708][T16358] syzkaller0: entered allmulticast mode [ 330.188531][T16358] FAULT_INJECTION: forcing a failure. [ 330.188531][T16358] name failslab, interval 1, probability 0, space 0, times 0 [ 330.192902][T16358] CPU: 3 UID: 0 PID: 16358 Comm: syz.8.3296 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.192929][T16358] Tainted: [L]=SOFTLOCKUP [ 330.192935][T16358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.192945][T16358] Call Trace: [ 330.192952][T16358] [ 330.192958][T16358] dump_stack_lvl+0x100/0x190 [ 330.192984][T16358] should_fail_ex.cold+0x5/0xa [ 330.193008][T16358] should_failslab+0xc2/0x120 [ 330.193033][T16358] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 330.193057][T16358] ? __alloc_skb+0x5b7/0x710 [ 330.193079][T16358] ? __alloc_skb+0x140/0x710 [ 330.193104][T16358] __alloc_skb+0x140/0x710 [ 330.193122][T16358] ? __alloc_skb+0x5b7/0x710 [ 330.193143][T16358] ? __pfx___alloc_skb+0x10/0x10 [ 330.193172][T16358] netlink_alloc_large_skb+0x69/0x150 [ 330.193197][T16358] netlink_sendmsg+0x680/0xda0 [ 330.193222][T16358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.193245][T16358] ? selinux_socket_sendmsg+0x198/0x2f0 [ 330.193275][T16358] ____sys_sendmsg+0xa4d/0xbe0 [ 330.193302][T16358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.193323][T16358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.193362][T16358] ___sys_sendmsg+0x190/0x1e0 [ 330.193383][T16358] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.193399][T16358] ? __lock_acquire+0x49f/0x1a40 [ 330.193446][T16358] ? get_pid_task+0x106/0x250 [ 330.193480][T16358] __sys_sendmsg+0x160/0x210 [ 330.193499][T16358] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.193528][T16358] do_syscall_64+0x115/0x870 [ 330.193549][T16358] ? clear_bhb_loop+0x70/0xc0 [ 330.193567][T16358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.193581][T16358] RIP: 0033:0x7f06d399e0d9 [ 330.193594][T16358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.193608][T16358] RSP: 002b:00007f06d47c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.193622][T16358] RAX: ffffffffffffffda RBX: 00007f06d3c25fa0 RCX: 00007f06d399e0d9 [ 330.193631][T16358] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 330.193640][T16358] RBP: 00007f06d47c5090 R08: 0000000000000000 R09: 0000000000000000 [ 330.193654][T16358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.193663][T16358] R13: 00007f06d3c26038 R14: 00007f06d3c25fa0 R15: 00007ffc89dd2718 [ 330.193682][T16358] [ 330.429528][T16362] syzkaller1: entered promiscuous mode [ 330.431406][T16362] syzkaller1: entered allmulticast mode [ 330.570671][T16366] syzkaller0: entered promiscuous mode [ 330.572833][T16366] syzkaller0: entered allmulticast mode [ 330.783001][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3305'. [ 330.933375][T16390] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.3309'. [ 330.980152][T16393] netlink: 'syz.9.3310': attribute type 1 has an invalid length. [ 330.992615][T16393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.006597][T16393] vlan2: entered allmulticast mode [ 331.008196][T16393] macsec0: entered allmulticast mode [ 331.012273][T16393] veth1_macvtap: entered allmulticast mode [ 331.014892][T16393] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 331.110637][ T5737] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 331.261978][ T5737] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.269801][ T5737] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.273115][ T5737] usb 13-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 331.276378][ T5737] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.279594][ T5737] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.283221][ T5737] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 331.286726][ T5737] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 331.291991][ T5737] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.294624][ T5737] usb 13-1: Product: syz [ 331.295914][ T5737] usb 13-1: Manufacturer: syz [ 331.302453][T16386] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 331.308893][ T5737] cdc_wdm 13-1:1.0: skipping garbage [ 331.311528][ T5737] cdc_wdm 13-1:1.0: skipping garbage [ 331.315311][ T5737] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 331.317906][ T5737] cdc_wdm 13-1:1.0: Unknown control protocol [ 331.499272][ T64] Bluetooth: hci4: command 0x0419 tx timeout [ 331.538166][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.541142][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.545619][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.548395][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.551135][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.553812][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.556478][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.559235][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.562005][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.564778][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.567569][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.570224][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.573065][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.575815][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.578859][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.581615][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.584643][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.587495][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.590266][ C3] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 331.593014][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 331.610134][ T5737] usb 13-1: USB disconnect, device number 16 [ 331.613087][ C3] cdc_wdm 13-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 331.618508][T16386] cdc_wdm 13-1:1.0: Tx URB error: -19 [ 331.820535][ T64] Bluetooth: hci0: command 0x1003 tx timeout [ 331.821651][ T5735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 332.059209][ T5735] Bluetooth: hci5: command 0x1003 tx timeout [ 332.065809][ T5726] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 332.095801][ T5726] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 332.387754][T16427] ublk_ctrl_add_dev: dev id not match 4294967295 210 [ 332.390421][T16425] bridge_slave_1: left allmulticast mode [ 332.390441][T16425] bridge_slave_1: left promiscuous mode [ 332.390555][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.408296][T16425] bridge_slave_0: left allmulticast mode [ 332.410480][T16425] bridge_slave_0: left promiscuous mode [ 332.413679][T16425] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.437556][ T5726] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 332.481713][T16426] dlm: no locking on control device [ 332.491822][T16426] syz_tun: entered allmulticast mode [ 332.494475][T16426] syz_tun: left allmulticast mode [ 332.516187][T16426] bridge0: port 3(syz_tun) entered blocking state [ 332.518559][T16426] bridge0: port 3(syz_tun) entered disabled state [ 332.521201][T16426] syz_tun: entered allmulticast mode [ 332.534372][T16426] syz_tun: entered promiscuous mode [ 332.536318][ T43] kauditd_printk_skb: 264 callbacks suppressed [ 332.536329][ T43] audit: type=1400 audit(1786645177.153:8962): avc: denied { mounton } for pid=16437 comm="syz.7.3324" path="/359/file0" dev="tmpfs" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 332.546750][T16426] bridge0: port 3(syz_tun) entered blocking state [ 332.549137][T16426] bridge0: port 3(syz_tun) entered forwarding state [ 332.560744][ T43] audit: type=1400 audit(1786645177.153:8963): avc: denied { ioctl } for pid=16437 comm="syz.7.3324" path="/dev/swradio4" dev="devtmpfs" ino=1030 ioctlcmd=0x561d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 332.570380][ T43] audit: type=1400 audit(1786645177.173:8964): avc: denied { create } for pid=16437 comm="syz.7.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.576997][ T43] audit: type=1400 audit(1786645177.173:8965): avc: denied { read } for pid=16435 comm="syz.8.3323" dev="nsfs" ino=4026533737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 332.584786][ T43] audit: type=1400 audit(1786645177.173:8966): avc: denied { map } for pid=16437 comm="syz.7.3324" path="socket:[86197]" dev="sockfs" ino=86197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.592708][ T43] audit: type=1400 audit(1786645177.173:8967): avc: denied { open } for pid=16435 comm="syz.8.3323" path="net:[4026533737]" dev="nsfs" ino=4026533737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 332.604357][ T43] audit: type=1400 audit(1786645177.173:8968): avc: denied { read } for pid=16437 comm="syz.7.3324" path="socket:[86197]" dev="sockfs" ino=86197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.607575][T16440] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 332.612165][ T43] audit: type=1400 audit(1786645177.173:8969): avc: denied { create } for pid=16435 comm="syz.8.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.623979][ T43] audit: type=1400 audit(1786645177.193:8970): avc: denied { bpf } for pid=16435 comm="syz.8.3323" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 332.631241][ T43] audit: type=1400 audit(1786645177.193:8971): avc: denied { perfmon } for pid=16435 comm="syz.8.3323" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 332.741891][T16449] __nla_validate_parse: 3 callbacks suppressed [ 332.741908][T16449] netlink: 45 bytes leftover after parsing attributes in process `syz.7.3329'. [ 332.780190][ T5774] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.787877][ T5774] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.796472][ T5774] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.839236][ T5774] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.973514][T16458] syzkaller0: entered promiscuous mode [ 332.975845][T16458] syzkaller0: entered allmulticast mode [ 333.235164][T16473] openvswitch: netlink: Duplicate key (type 6). [ 333.244001][T16473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=16473 comm=syz.8.3339 [ 333.251872][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3339'. [ 333.258244][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3339'. [ 333.262678][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3339'. [ 333.266191][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3339'. [ 333.284532][T16476] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3341'. [ 333.294935][T16479] FAULT_INJECTION: forcing a failure. [ 333.294935][T16479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.302839][T16479] CPU: 0 UID: 0 PID: 16479 Comm: syz.8.3342 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.302857][T16479] Tainted: [L]=SOFTLOCKUP [ 333.302862][T16479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.302869][T16479] Call Trace: [ 333.302874][T16479] [ 333.302879][T16479] dump_stack_lvl+0x100/0x190 [ 333.302898][T16479] should_fail_ex.cold+0x5/0xa [ 333.302914][T16479] _copy_from_user+0x2e/0xd0 [ 333.302931][T16479] kstrtouint_from_user+0xd6/0x1d0 [ 333.302942][T16479] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 333.302954][T16479] ? __lock_acquire+0x49f/0x1a40 [ 333.302975][T16479] proc_fail_nth_write+0x83/0x220 [ 333.302987][T16479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 333.303002][T16479] vfs_write+0x2aa/0x1050 [ 333.303013][T16479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 333.303026][T16479] ? __pfx_vfs_write+0x10/0x10 [ 333.303036][T16479] ? __fget_files+0x215/0x3d0 [ 333.303051][T16479] ? __fget_files+0x21f/0x3d0 [ 333.303067][T16479] ksys_write+0x12a/0x250 [ 333.303078][T16479] ? __pfx_ksys_write+0x10/0x10 [ 333.303093][T16479] do_syscall_64+0x115/0x870 [ 333.303124][T16479] ? clear_bhb_loop+0x70/0xc0 [ 333.303140][T16479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.303152][T16479] RIP: 0033:0x7f06d395e90e [ 333.303163][T16479] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.303174][T16479] RSP: 002b:00007f06d47c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.303185][T16479] RAX: ffffffffffffffda RBX: 00007f06d47c56c0 RCX: 00007f06d395e90e [ 333.303192][T16479] RDX: 0000000000000001 RSI: 00007f06d47c50a0 RDI: 0000000000000003 [ 333.303199][T16479] RBP: 00007f06d47c5090 R08: 0000000000000000 R09: 0000000000000000 [ 333.303206][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.303213][T16479] R13: 00007f06d3c26038 R14: 00007f06d3c25fa0 R15: 00007ffc89dd2718 [ 333.303228][T16479] [ 333.425603][T16490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.441080][T16483] cgroup: Setting release_agent not allowed [ 333.522324][T16490] overlayfs: invalid origin (0000) [ 333.562108][T16500] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 333.618808][T16504] netlink: 'syz.7.3350': attribute type 1 has an invalid length. [ 333.737158][T16504] 8021q: adding VLAN 0 to HW filter on device bond6 [ 333.762301][T16505] vlan2: entered allmulticast mode [ 333.764708][T16505] bond6: (slave vlan2): Error -34 calling dev_set_mtu [ 333.955513][T16516] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 333.958159][T16516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 333.961568][T16516] vhci_hcd vhci_hcd.0: Device attached [ 334.219254][ T5728] usb 55-1: new low-speed USB device number 2 using vhci_hcd [ 334.222641][ T5737] usb 14-1: new low-speed USB device number 9 using dummy_hcd [ 334.263186][T16532] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 334.280408][T16532] Can't find a SQUASHFS superblock on nullb0 [ 334.340445][T16535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.380068][ T5737] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.384930][ T5737] usb 14-1: config index 0 descriptor too short (expected 12336, got 45) [ 334.388243][ T5737] usb 14-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 334.394509][ T5737] usb 14-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 334.398581][ T5737] usb 14-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 334.407797][ T5737] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.441574][T16538] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3362'. [ 334.643627][ T5737] usb 14-1: string descriptor 0 read error: -71 [ 334.644448][T16518] vhci_hcd: connection closed [ 334.663815][ T5737] usb 14-1: USB disconnect, device number 9 [ 334.676225][T16002] vhci_hcd vhci_hcd.9: stop threads [ 334.678211][T16002] vhci_hcd vhci_hcd.9: release socket [ 334.710585][T16002] vhci_hcd vhci_hcd.9: disconnect device [ 334.752546][T16545] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3365'. [ 334.790646][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3365'. [ 334.953555][T16545] team0: Port device team_slave_0 removed [ 335.107922][T16564] netlink: 'syz.6.3370': attribute type 1 has an invalid length. [ 335.235038][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3373'. [ 335.243827][T16573] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 335.462433][T16582] bridge0: port 3(syz_tun) entered disabled state [ 335.485208][T16582] syz_tun (unregistering): left allmulticast mode [ 335.489126][T16582] syz_tun (unregistering): left promiscuous mode [ 335.491346][T16582] bridge0: port 3(syz_tun) entered disabled state [ 335.529222][T16585] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 335.700054][T16592] netlink: 'syz.9.3380': attribute type 8 has an invalid length. [ 335.761709][T16594] FAULT_INJECTION: forcing a failure. [ 335.761709][T16594] name failslab, interval 1, probability 0, space 0, times 0 [ 335.766609][T16594] CPU: 3 UID: 0 PID: 16594 Comm: syz.9.3381 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.766635][T16594] Tainted: [L]=SOFTLOCKUP [ 335.766642][T16594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 335.766651][T16594] Call Trace: [ 335.766658][T16594] [ 335.766665][T16594] dump_stack_lvl+0x100/0x190 [ 335.766691][T16594] should_fail_ex.cold+0x5/0xa [ 335.766712][T16594] should_failslab+0xc2/0x120 [ 335.766734][T16594] kmem_cache_alloc_noprof+0x91/0x6a0 [ 335.766754][T16594] ? skb_clone+0x190/0x400 [ 335.766778][T16594] skb_clone+0x190/0x400 [ 335.766799][T16594] bpf_clone_redirect+0x166/0x500 [ 335.766837][T16594] ? __pfx___cant_migrate+0x10/0x10 [ 335.766857][T16594] bpf_prog_8ff70e0fde320577+0x22/0x2a [ 335.766873][T16594] bpf_test_run+0x4e2/0xa40 [ 335.766899][T16594] ? bpf_test_run+0x1c6/0xa40 [ 335.766926][T16594] ? __pfx_bpf_test_run+0x10/0x10 [ 335.766958][T16594] ? do_csum+0x1e5/0x380 [ 335.766986][T16594] bpf_prog_test_run_skb+0x15c4/0x3540 [ 335.767018][T16594] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 335.767037][T16594] ? fput+0x79/0x100 [ 335.767059][T16594] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 335.767075][T16594] __sys_bpf+0x2a12/0x4e80 [ 335.767100][T16594] ? __pfx___sys_bpf+0x10/0x10 [ 335.767120][T16594] ? find_held_lock+0x2b/0x80 [ 335.767135][T16594] ? get_pid_task+0xfc/0x250 [ 335.767150][T16594] ? get_pid_task+0xfc/0x250 [ 335.767173][T16594] ? find_held_lock+0x2b/0x80 [ 335.767192][T16594] ? rcu_read_lock_any_held+0x6a/0xa0 [ 335.767209][T16594] ? find_held_lock+0x2b/0x80 [ 335.767223][T16594] ? ksys_write+0x190/0x250 [ 335.767238][T16594] ? ksys_write+0x190/0x250 [ 335.767269][T16594] ? fput+0x79/0x100 [ 335.767290][T16594] ? __x64_sys_bpf+0xce/0x140 [ 335.767306][T16594] __x64_sys_bpf+0xce/0x140 [ 335.767323][T16594] ? do_syscall_64+0x90/0x870 [ 335.767348][T16594] do_syscall_64+0x115/0x870 [ 335.767368][T16594] ? clear_bhb_loop+0x70/0xc0 [ 335.767387][T16594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.767404][T16594] RIP: 0033:0x7f91a1d9e0d9 [ 335.767417][T16594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.767432][T16594] RSP: 002b:00007f91a2c5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.767450][T16594] RAX: ffffffffffffffda RBX: 00007f91a2025fa0 RCX: 00007f91a1d9e0d9 [ 335.767460][T16594] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 335.767469][T16594] RBP: 00007f91a2c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 335.767479][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.767489][T16594] R13: 00007f91a2026038 R14: 00007f91a2025fa0 R15: 00007ffd63f99e38 [ 335.767511][T16594] [ 336.175224][T16606] openvswitch: netlink: Unknown key attributes 1 [ 336.232926][T16607] netlink: 'syz.6.3386': attribute type 2 has an invalid length. [ 336.236290][T16607] netlink: 'syz.6.3386': attribute type 2 has an invalid length. [ 336.329492][ T5810] usb 14-1: new full-speed USB device number 10 using dummy_hcd [ 336.496405][ T5810] usb 14-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 336.501876][ T5810] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 336.507133][ T5810] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 336.507593][T16614] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 336.513992][ T5810] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.517220][ T5810] usb 14-1: Product: syz [ 336.518913][ T5810] usb 14-1: Manufacturer: syz [ 336.520242][T16614] overlayfs: failed to set xattr on upper [ 336.521112][ T5810] usb 14-1: SerialNumber: syz [ 336.522585][T16614] overlayfs: ...falling back to redirect_dir=nofollow. [ 336.522594][T16614] overlayfs: ...falling back to metacopy=off. [ 336.522599][T16614] overlayfs: ...falling back to index=off. [ 336.532609][T16614] overlayfs: ...falling back to uuid=null. [ 336.533019][ T5810] usb 14-1: config 0 descriptor?? [ 336.549360][ T5810] hub 14-1:0.0: bad descriptor, ignoring hub [ 336.552179][ T5810] hub 14-1:0.0: probe with driver hub failed with error -5 [ 336.556509][ T5810] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input32 [ 337.547643][ T43] kauditd_printk_skb: 267 callbacks suppressed [ 337.547659][ T43] audit: type=1400 audit(1786645182.163:9239): avc: denied { unmount } for pid=12926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 337.607942][ T43] audit: type=1400 audit(1786645182.203:9240): avc: denied { create } for pid=16639 comm="syz.7.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.650571][ T43] audit: type=1400 audit(1786645182.203:9241): avc: denied { ioctl } for pid=16639 comm="syz.7.3395" path="socket:[87532]" dev="sockfs" ino=87532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.694509][ T43] audit: type=1400 audit(1786645182.203:9242): avc: denied { allowed } for pid=16639 comm="syz.7.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 337.694555][ T43] audit: type=1400 audit(1786645182.223:9243): avc: denied { create } for pid=16639 comm="syz.7.3395" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 337.694593][ T43] audit: type=1400 audit(1786645182.223:9244): avc: denied { map } for pid=16639 comm="syz.7.3395" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 337.694628][ T43] audit: type=1400 audit(1786645182.223:9245): avc: denied { read write } for pid=16639 comm="syz.7.3395" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 337.694669][ T43] audit: type=1400 audit(1786645182.233:9246): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38390 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 337.694708][ T43] audit: type=1400 audit(1786645182.273:9247): avc: denied { read } for pid=16641 comm="syz.8.3396" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.694745][ T43] audit: type=1400 audit(1786645182.273:9248): avc: denied { open } for pid=16641 comm="syz.8.3396" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.751512][T16649] __nla_validate_parse: 5 callbacks suppressed [ 337.751524][T16649] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3399'. [ 337.853098][T16644] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3397'. [ 337.860458][T16644] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3397'. [ 337.871423][T16655] netlink: 778 bytes leftover after parsing attributes in process `syz.6.3400'. [ 338.192023][T16673] syzkaller0: entered promiscuous mode [ 338.200721][T16673] syzkaller0: entered allmulticast mode [ 338.224801][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3409'. [ 338.228455][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3409'. [ 338.231723][T16678] netlink: 'syz.9.3409': attribute type 7 has an invalid length. [ 338.292204][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3412'. [ 338.299136][T16688] FAULT_INJECTION: forcing a failure. [ 338.299136][T16688] name failslab, interval 1, probability 0, space 0, times 0 [ 338.305798][T16688] CPU: 3 UID: 0 PID: 16688 Comm: syz.8.3412 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.305817][T16688] Tainted: [L]=SOFTLOCKUP [ 338.305821][T16688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.305828][T16688] Call Trace: [ 338.305840][T16688] [ 338.305844][T16688] dump_stack_lvl+0x100/0x190 [ 338.305876][T16688] should_fail_ex.cold+0x5/0xa [ 338.305892][T16688] should_failslab+0xc2/0x120 [ 338.305908][T16688] __kmalloc_noprof+0xfc/0x820 [ 338.305922][T16688] ? fib6_info_alloc+0x40/0x160 [ 338.305973][T16688] fib6_info_alloc+0x40/0x160 [ 338.305986][T16688] ip6_route_info_create+0x14c/0xad0 [ 338.306003][T16688] ip6_route_add+0x4b/0x1d0 [ 338.306022][T16688] inet6_rtm_newroute+0x157/0x160 [ 338.306033][T16688] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 338.306053][T16688] ? find_held_lock+0x2b/0x80 [ 338.306063][T16688] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 338.306093][T16688] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 338.306109][T16688] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 338.306122][T16688] rtnetlink_rcv_msg+0x95e/0xe90 [ 338.306139][T16688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.306159][T16688] ? ref_tracker_free+0x37e/0x6c0 [ 338.306182][T16688] netlink_rcv_skb+0x159/0x420 [ 338.306204][T16688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.306221][T16688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.306239][T16688] ? netlink_deliver_tap+0x1ae/0xcc0 [ 338.306254][T16688] netlink_unicast+0x585/0x850 [ 338.306269][T16688] ? __pfx_netlink_unicast+0x10/0x10 [ 338.306281][T16688] ? __pfx_sock_has_perm+0x10/0x10 [ 338.306300][T16688] netlink_sendmsg+0x8b0/0xda0 [ 338.306315][T16688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.306328][T16688] ? selinux_socket_sendmsg+0x198/0x2f0 [ 338.306347][T16688] ____sys_sendmsg+0xa4d/0xbe0 [ 338.306373][T16688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.306387][T16688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.306407][T16688] ? rcu_is_watching+0x12/0xc0 [ 338.306424][T16688] ? ___sys_sendmsg+0x19d/0x1e0 [ 338.306448][T16688] ? kfree+0x1e5/0x6c0 [ 338.306462][T16688] ___sys_sendmsg+0x190/0x1e0 [ 338.306475][T16688] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.306499][T16688] ? __pfx___might_resched+0x10/0x10 [ 338.306516][T16688] __sys_sendmmsg+0x20c/0x440 [ 338.306534][T16688] ? __pfx___sys_sendmmsg+0x10/0x10 [ 338.306548][T16688] ? ksys_write+0x190/0x250 [ 338.306570][T16688] ? fput+0x79/0x100 [ 338.306587][T16688] ? ksys_write+0x1ac/0x250 [ 338.306597][T16688] ? __pfx_ksys_write+0x10/0x10 [ 338.306610][T16688] __x64_sys_sendmmsg+0x9c/0x100 [ 338.306626][T16688] ? lockdep_hardirqs_on+0x78/0x100 [ 338.306679][T16688] do_syscall_64+0x115/0x870 [ 338.306700][T16688] ? clear_bhb_loop+0x70/0xc0 [ 338.306714][T16688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.306726][T16688] RIP: 0033:0x7f06d399e0d9 [ 338.306738][T16688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.306749][T16688] RSP: 002b:00007f06d47c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 338.306761][T16688] RAX: ffffffffffffffda RBX: 00007f06d3c25fa0 RCX: 00007f06d399e0d9 [ 338.306768][T16688] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000003 [ 338.306775][T16688] RBP: 00007f06d47c5090 R08: 0000000000000000 R09: 0000000000000000 [ 338.306781][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.306788][T16688] R13: 00007f06d3c26038 R14: 00007f06d3c25fa0 R15: 00007ffc89dd2718 [ 338.306803][T16688] [ 338.584447][T16700] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 338.929279][ T5737] usb 12-1: new full-speed USB device number 21 using dummy_hcd [ 339.081319][ T5737] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.086098][ T5737] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 339.092229][ T5737] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.098798][ T5737] usb 12-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 339.106888][ T5737] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.124421][ T5737] usbtmc 12-1:16.0: bulk endpoints not found [ 339.460406][T16179] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 339.464233][T16179] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 339.467494][T16179] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 339.471902][T16179] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 339.474941][T16179] rtc rtc0: __rtc_set_alarm: err=-22 [ 339.610879][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3425'. [ 340.442017][T14947] usb 14-1: USB disconnect, device number 10 [ 341.686505][ T34] usb 12-1: USB disconnect, device number 21 [ 342.058208][T16710] syzkaller0: entered promiscuous mode [ 342.060693][T16710] syzkaller0: entered allmulticast mode [ 342.524995][T16757] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3434'. [ 342.549173][T16758] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 342.552152][T16758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 342.557746][T16758] vhci_hcd vhci_hcd.0: Device attached [ 342.571115][ T43] kauditd_printk_skb: 153 callbacks suppressed [ 342.571139][ T43] audit: type=1400 audit(1786645187.193:9402): avc: denied { read write } for pid=16751 comm="syz.6.3432" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.585801][ T43] audit: type=1400 audit(1786645187.193:9403): avc: denied { open } for pid=16751 comm="syz.6.3432" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.624758][ T43] audit: type=1400 audit(1786645187.243:9404): avc: denied { kexec_image_load } for pid=16756 comm="syz.7.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 342.638053][ T43] audit: type=1400 audit(1786645187.253:9405): avc: denied { create } for pid=16756 comm="syz.7.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.650278][ T43] audit: type=1400 audit(1786645187.263:9406): avc: denied { bind } for pid=16756 comm="syz.7.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.656126][ T43] audit: type=1400 audit(1786645187.263:9407): avc: denied { setopt } for pid=16756 comm="syz.7.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.662316][ T43] audit: type=1400 audit(1786645187.263:9408): avc: denied { accept } for pid=16756 comm="syz.7.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.789229][T16179] usb 49-1: new low-speed USB device number 3 using vhci_hcd [ 342.809341][ T7110] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 342.960928][ T7110] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.966293][ T7110] usb 11-1: config index 0 descriptor too short (expected 12336, got 45) [ 342.970016][ T7110] usb 11-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 342.973852][ T7110] usb 11-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 342.978327][ T7110] usb 11-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 342.982522][ T7110] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.200291][T16759] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 343.203927][T16000] vhci_hcd vhci_hcd.6: stop threads [ 343.206469][T16000] vhci_hcd vhci_hcd.6: release socket [ 343.208972][T16000] vhci_hcd vhci_hcd.6: disconnect device [ 344.927887][T16755] FAULT_INJECTION: forcing a failure. [ 344.927887][T16755] name failslab, interval 1, probability 0, space 0, times 0 [ 344.929769][ T7110] usb 11-1: string descriptor 0 read error: -71 [ 344.932136][T16755] CPU: 2 UID: 0 PID: 16755 Comm: syz.9.3433 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.932158][T16755] Tainted: [L]=SOFTLOCKUP [ 344.932162][T16755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.932169][T16755] Call Trace: [ 344.932175][T16755] [ 344.932180][T16755] dump_stack_lvl+0x100/0x190 [ 344.932200][T16755] should_fail_ex.cold+0x5/0xa [ 344.932216][T16755] should_failslab+0xc2/0x120 [ 344.932232][T16755] __kmalloc_cache_noprof+0x91/0x6c0 [ 344.932243][T16755] ? lockdep_init_map_type+0x50/0x250 [ 344.932260][T16755] ? alloc_netdev_mqs+0xe3c/0x15c0 [ 344.932280][T16755] alloc_netdev_mqs+0xe3c/0x15c0 [ 344.932299][T16755] rtnl_create_link+0xc13/0xf80 [ 344.932317][T16755] rtnl_newlink+0x13bd/0x2380 [ 344.932338][T16755] ? __pfx_rtnl_newlink+0x10/0x10 [ 344.932353][T16755] ? find_held_lock+0x2b/0x80 [ 344.932363][T16755] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 344.932377][T16755] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 344.932392][T16755] ? avc_has_perm_noaudit+0x145/0x3b0 [ 344.932417][T16755] ? find_held_lock+0x2b/0x80 [ 344.932428][T16755] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 344.932443][T16755] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 344.932460][T16755] ? __pfx_rtnl_newlink+0x10/0x10 [ 344.932476][T16755] rtnetlink_rcv_msg+0x95e/0xe90 [ 344.932494][T16755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 344.932513][T16755] ? ref_tracker_free+0x37e/0x6c0 [ 344.932532][T16755] netlink_rcv_skb+0x159/0x420 [ 344.932546][T16755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 344.932563][T16755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.932580][T16755] ? netlink_deliver_tap+0x1ae/0xcc0 [ 344.932595][T16755] netlink_unicast+0x585/0x850 [ 344.932610][T16755] ? __pfx_netlink_unicast+0x10/0x10 [ 344.932627][T16755] netlink_sendmsg+0x8b0/0xda0 [ 344.932641][T16755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.932655][T16755] ? selinux_socket_sendmsg+0x198/0x2f0 [ 344.932675][T16755] ____sys_sendmsg+0xa4d/0xbe0 [ 344.932693][T16755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.932707][T16755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.932731][T16755] ___sys_sendmsg+0x190/0x1e0 [ 344.932744][T16755] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.932754][T16755] ? __lock_acquire+0x49f/0x1a40 [ 344.932769][T16755] ? get_pid_task+0x106/0x250 [ 344.932795][T16755] __sys_sendmsg+0x160/0x210 [ 344.932811][T16755] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.932834][T16755] do_syscall_64+0x115/0x870 [ 344.932851][T16755] ? clear_bhb_loop+0x70/0xc0 [ 344.932865][T16755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.932877][T16755] RIP: 0033:0x7f91a1d9e0d9 [ 344.932888][T16755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.932899][T16755] RSP: 002b:00007f91a2c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.932910][T16755] RAX: ffffffffffffffda RBX: 00007f91a2025fa0 RCX: 00007f91a1d9e0d9 [ 344.932917][T16755] RDX: 0000000028044806 RSI: 00002000000000c0 RDI: 0000000000000003 [ 344.932924][T16755] RBP: 00007f91a2c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 344.932930][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.932937][T16755] R13: 00007f91a2026038 R14: 00007f91a2025fa0 R15: 00007ffd63f99e38 [ 344.932952][T16755] [ 345.011259][ T43] audit: type=1400 audit(1786645189.633:9409): avc: denied { create } for pid=16765 comm="syz.9.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.016358][ T7110] usb 11-1: USB disconnect, device number 10 [ 345.017652][ T43] audit: type=1400 audit(1786645189.633:9411): avc: denied { create } for pid=16764 comm="syz.7.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 345.076070][ T43] audit: type=1400 audit(1786645189.633:9410): avc: denied { listen } for pid=16765 comm="syz.9.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.321680][T16784] fuse: Invalid rootmode [ 345.820379][T16823] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 345.823113][T16823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.827872][T16823] vhci_hcd vhci_hcd.0: Device attached [ 346.069206][T14947] usb 51-1: new low-speed USB device number 4 using vhci_hcd [ 346.071727][ T5728] usb 12-1: new low-speed USB device number 22 using dummy_hcd [ 346.102273][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802c763c00: rx timeout, send abort [ 346.231689][ T5728] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.236275][ T5728] usb 12-1: config index 0 descriptor too short (expected 12336, got 45) [ 346.240274][ T5728] usb 12-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 346.243747][ T5728] usb 12-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 346.249883][ T5728] usb 12-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 346.257296][ T5728] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.476069][T16826] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 346.481304][ T5728] usb 12-1: string descriptor 0 read error: -71 [ 346.483271][T16003] vhci_hcd vhci_hcd.7: stop threads [ 346.483289][T16003] vhci_hcd vhci_hcd.7: release socket [ 346.486995][T16003] vhci_hcd vhci_hcd.7: disconnect device [ 346.492613][ T5728] usb 12-1: USB disconnect, device number 22 [ 346.602331][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802c761800: rx timeout, send abort [ 346.608732][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802c763c00: abort rx timeout. Force session deactivation [ 346.623714][T16853] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3469'. [ 346.631500][T16853] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3469'. [ 346.634536][T16853] netlink: 'syz.8.3469': attribute type 6 has an invalid length. [ 346.637230][T16853] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3469'. [ 346.784255][ T5728] IPVS: starting estimator thread 0... [ 346.876360][T16867] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3473'. [ 346.879364][T16868] IPVS: using max 43 ests per chain, 103200 per kthread [ 346.889703][T14731] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 347.019295][T14731] usb 13-1: device descriptor read/64, error -71 [ 347.105184][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802c761800: abort rx timeout. Force session deactivation [ 347.259316][T14731] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 347.343404][T16883] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3478'. [ 347.390518][T14731] usb 13-1: device descriptor read/64, error -71 [ 347.499990][T14731] usb usb13-port1: attempt power cycle [ 347.585893][T16894] binfmt_misc: register: failed to install interpreter file ./file1 [ 347.598219][ T43] kauditd_printk_skb: 201 callbacks suppressed [ 347.598236][ T43] audit: type=1400 audit(1786645192.213:9613): avc: denied { create } for pid=16892 comm="syz.9.3481" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 347.608544][ T43] audit: type=1400 audit(1786645192.213:9614): avc: denied { ioctl } for pid=16892 comm="syz.9.3481" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=86942 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 347.644387][ T43] audit: type=1400 audit(1786645192.263:9615): avc: denied { create } for pid=16895 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 347.650756][ T43] audit: type=1400 audit(1786645192.263:9616): avc: denied { bind } for pid=16895 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 347.656821][ T43] audit: type=1400 audit(1786645192.263:9617): avc: denied { create } for pid=16895 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 347.664151][ T43] audit: type=1400 audit(1786645192.263:9618): avc: denied { setopt } for pid=16895 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 347.671072][ T43] audit: type=1400 audit(1786645192.263:9619): avc: denied { connect } for pid=16895 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 347.679933][ T43] audit: type=1400 audit(1786645192.303:9620): avc: denied { setopt } for pid=16895 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 347.686344][ T43] audit: type=1400 audit(1786645192.303:9621): avc: denied { accept } for pid=16895 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 347.692621][ T43] audit: type=1400 audit(1786645192.303:9622): avc: denied { write } for pid=16895 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 347.859189][T14731] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 347.885424][T16898] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3483'. [ 347.890260][T16179] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 347.895409][T14731] usb 13-1: device descriptor read/8, error -71 [ 348.126261][T16910] overlayfs: upper fs does not support file handles, falling back to index=off. [ 348.131112][T16910] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 348.139234][T14731] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 348.161416][T14731] usb 13-1: device descriptor read/8, error -71 [ 348.279385][T14731] usb usb13-port1: unable to enumerate USB device [ 348.597649][T16931] tmpfs: Bad value for 'mpol' [ 348.794796][T16938] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3497'. [ 349.035014][T16949] FAULT_INJECTION: forcing a failure. [ 349.035014][T16949] name failslab, interval 1, probability 0, space 0, times 0 [ 349.044461][T16949] CPU: 2 UID: 0 PID: 16949 Comm: syz.7.3503 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.044488][T16949] Tainted: [L]=SOFTLOCKUP [ 349.044494][T16949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.044504][T16949] Call Trace: [ 349.044511][T16949] [ 349.044518][T16949] dump_stack_lvl+0x100/0x190 [ 349.044544][T16949] should_fail_ex.cold+0x5/0xa [ 349.044565][T16949] should_failslab+0xc2/0x120 [ 349.044590][T16949] __kmalloc_cache_noprof+0x91/0x6c0 [ 349.044629][T16949] ? io_queue_sqe_fallback.cold+0x62/0x3b2 [ 349.044662][T16949] io_queue_sqe_fallback.cold+0x62/0x3b2 [ 349.044689][T16949] io_submit_sqes+0x165c/0x2480 [ 349.044726][T16949] __do_sys_io_uring_enter+0xa88/0x1b10 [ 349.044757][T16949] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.044786][T16949] ? __fget_files+0x21f/0x3d0 [ 349.044804][T16949] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 349.044832][T16949] ? fput+0x79/0x100 [ 349.044851][T16949] ? ksys_write+0x1ac/0x250 [ 349.044865][T16949] ? __pfx_ksys_write+0x10/0x10 [ 349.044889][T16949] do_syscall_64+0x115/0x870 [ 349.044915][T16949] ? clear_bhb_loop+0x70/0xc0 [ 349.044938][T16949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.044954][T16949] RIP: 0033:0x7fe1f939e0d9 [ 349.044968][T16949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.044983][T16949] RSP: 002b:00007fe1f75f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 349.044999][T16949] RAX: ffffffffffffffda RBX: 00007fe1f9625fa0 RCX: 00007fe1f939e0d9 [ 349.045009][T16949] RDX: 00000000ffffffdc RSI: 000000000000012a RDI: 0000000000000000 [ 349.045019][T16949] RBP: 00007fe1f75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.045028][T16949] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000002 [ 349.045038][T16949] R13: 00007fe1f9626038 R14: 00007fe1f9625fa0 R15: 00007ffc7bd36508 [ 349.045066][T16949] [ 349.748915][T16989] ip_tables: iptables: counters copy to user failed while replacing table [ 349.839420][ T34] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 349.883940][T17001] comedi comedi2: dt2817: I/O base address or length out of range [ 349.989391][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 350.000283][ T34] usb 12-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 350.010499][ T34] usb 12-1: config 0 has an invalid interface number: 186 but max is 0 [ 350.013045][ T34] usb 12-1: config 0 has no interface number 0 [ 350.014992][ T34] usb 12-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.021709][ T34] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 350.028403][ T34] usb 12-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 350.039493][ T34] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 350.045179][ T34] usb 12-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.057848][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.068024][ T34] usb 12-1: Product: syz [ 350.070187][ T34] usb 12-1: Manufacturer: syz [ 350.071769][ T34] usb 12-1: SerialNumber: syz [ 350.078273][ T34] usb 12-1: config 0 descriptor?? [ 350.209344][ T5831] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 350.284810][ T34] iowarrior 12-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 350.382202][ T5831] usb 11-1: unable to get BOS descriptor or descriptor too short [ 350.384810][ T5831] usb 11-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 350.388672][ T5831] usb 11-1: config 4 has an invalid interface number: 13 but max is 0 [ 350.391617][ T5831] usb 11-1: config 4 has no interface number 0 [ 350.393749][ T5831] usb 11-1: config 4 interface 13 has no altsetting 0 [ 350.397670][ T5831] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.400250][ T5831] usb 11-1: Product: syz [ 350.401712][ T5831] usb 11-1: Manufacturer: syz [ 350.403291][ T5831] usb 11-1: SerialNumber: syz [ 350.500228][ C3] iowarrior 12-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 350.507205][ T34] usb 12-1: USB disconnect, device number 23 [ 351.169566][T14947] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 351.238522][T17025] vhci_hcd vhci_hcd.0: failed to lookup sock [ 351.316237][T17030] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3525'. [ 351.320907][T17030] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3525'. [ 351.323759][T17030] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 351.455509][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3528'. [ 351.468850][T17037] FAULT_INJECTION: forcing a failure. [ 351.468850][T17037] name failslab, interval 1, probability 0, space 0, times 0 [ 351.475841][T17037] CPU: 2 UID: 0 PID: 17037 Comm: syz.8.3527 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.475872][T17037] Tainted: [L]=SOFTLOCKUP [ 351.475880][T17037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.475893][T17037] Call Trace: [ 351.475900][T17037] [ 351.475908][T17037] dump_stack_lvl+0x100/0x190 [ 351.475939][T17037] should_fail_ex.cold+0x5/0xa [ 351.475967][T17037] should_failslab+0xc2/0x120 [ 351.475993][T17037] kmem_cache_alloc_noprof+0x91/0x6a0 [ 351.476019][T17037] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 351.476050][T17037] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 351.476082][T17037] mmu_topup_memory_caches+0x25/0x170 [ 351.476112][T17037] kvm_mmu_load+0xe2/0x2570 [ 351.476139][T17037] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 351.476161][T17037] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 351.476182][T17037] ? __pfx_kvm_mmu_load+0x10/0x10 [ 351.476207][T17037] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 351.476230][T17037] ? kvm_check_and_inject_events+0x873/0x12a0 [ 351.476258][T17037] ? record_steal_time+0x3a0/0xbb0 [ 351.476280][T17037] vcpu_run+0x3aaa/0x5de0 [ 351.476306][T17037] ? mark_held_locks+0x40/0x70 [ 351.476339][T17037] ? __pfx_vcpu_run+0x10/0x10 [ 351.476377][T17037] ? rcu_is_watching+0x12/0xc0 [ 351.476410][T17037] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 351.476439][T17037] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 351.476474][T17037] kvm_vcpu_ioctl+0x730/0x1700 [ 351.476500][T17037] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 351.476524][T17037] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.476550][T17037] ? do_vfs_ioctl+0x226/0x13e0 [ 351.476586][T17037] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 351.476631][T17037] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 351.476672][T17037] ? __fget_files+0x215/0x3d0 [ 351.476691][T17037] ? hook_file_ioctl_common+0x140/0x440 [ 351.476721][T17037] ? selinux_file_ioctl+0x13b/0x290 [ 351.476750][T17037] ? selinux_file_ioctl+0xb6/0x290 [ 351.476780][T17037] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 351.476804][T17037] __x64_sys_ioctl+0x18e/0x210 [ 351.476835][T17037] do_syscall_64+0x115/0x870 [ 351.476862][T17037] ? clear_bhb_loop+0x70/0xc0 [ 351.476887][T17037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.476908][T17037] RIP: 0033:0x7f06d399e0d9 [ 351.476927][T17037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.476946][T17037] RSP: 002b:00007f06d47c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.476966][T17037] RAX: ffffffffffffffda RBX: 00007f06d3c25fa0 RCX: 00007f06d399e0d9 [ 351.476979][T17037] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 351.476990][T17037] RBP: 00007f06d47c5090 R08: 0000000000000000 R09: 0000000000000000 [ 351.477003][T17037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.477015][T17037] R13: 00007f06d3c26038 R14: 00007f06d3c25fa0 R15: 00007ffc89dd2718 [ 351.477042][T17037] [ 352.710421][ T43] kauditd_printk_skb: 269 callbacks suppressed [ 352.710434][ T43] audit: type=1400 audit(1786645197.333:9892): avc: denied { connect } for pid=17064 comm="syz.9.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.719781][ T43] audit: type=1400 audit(1786645197.343:9893): avc: denied { allowed } for pid=17064 comm="syz.9.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 352.726602][ T43] audit: type=1400 audit(1786645197.343:9894): avc: denied { create } for pid=17064 comm="syz.9.3534" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.735717][T17065] unsupported nla_type 4111 [ 352.736707][ T43] audit: type=1400 audit(1786645197.343:9895): avc: denied { map } for pid=17064 comm="syz.9.3534" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.745707][ T43] audit: type=1400 audit(1786645197.343:9896): avc: denied { read write } for pid=17064 comm="syz.9.3534" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.753578][ T43] audit: type=1400 audit(1786645197.353:9897): avc: denied { write } for pid=17064 comm="syz.9.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 352.760080][ T43] audit: type=1400 audit(1786645197.353:9898): avc: denied { nlmsg_write } for pid=17064 comm="syz.9.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 352.766832][ T43] audit: type=1400 audit(1786645197.383:9899): avc: denied { read write } for pid=14645 comm="syz-executor" name="loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.774348][ T43] audit: type=1400 audit(1786645197.383:9900): avc: denied { open } for pid=14645 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.781774][ T43] audit: type=1400 audit(1786645197.383:9901): avc: denied { ioctl } for pid=14645 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.894662][T17069] binder: 17068:17069 ioctl c0306201 200000000180 returned -14 [ 352.954880][ T5831] ums-realtek 11-1:4.13: USB Mass Storage device detected [ 353.227056][ T5831] usb 11-1: USB disconnect, device number 11 [ 353.704102][T17101] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3541'. [ 355.066260][T17055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.125291][T17109] mac80211_hwsim hwsim26 »»»»»»: renamed from wlan0 (while UP) [ 355.200094][T17118] input: syz0 as /devices/virtual/input/input33 [ 355.228417][T17123] syzkaller0: entered promiscuous mode [ 355.233527][T17123] syzkaller0: entered allmulticast mode [ 355.255851][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3550'. [ 355.395551][T17130] syzkaller1: entered promiscuous mode [ 355.397913][T17130] syzkaller1: entered allmulticast mode [ 355.529860][T16179] usb 14-1: new full-speed USB device number 11 using dummy_hcd [ 355.642944][T17140] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3555'. [ 355.699844][T16179] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.704144][T16179] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.707472][T16179] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.712004][T16179] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.922739][T16179] usb 14-1: usb_control_msg returned -32 [ 355.925159][T16179] usbtmc 14-1:16.0: can't read capabilities [ 356.368279][T17151] xt_l2tp: v2 doesn't support IP mode [ 356.664725][T17169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.676041][T17169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.715283][T17175] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 356.810486][T17170] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3564'. [ 356.880762][ T24] logitech-hidpp-device 0005:046D:B012.0008: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 356.911948][T17183] fido_id[17183]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 356.956487][T17182] Process accounting resumed [ 357.122322][T17199] syzkaller1: entered promiscuous mode [ 357.124139][T17199] syzkaller1: entered allmulticast mode [ 357.235295][ T5726] Bluetooth: hci2: unexpected event for opcode 0x080d [ 357.274383][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3574'. [ 357.314888][T17206] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3575'. [ 357.474668][T17214] netlink: 'syz.7.3578': attribute type 5 has an invalid length. [ 357.482492][T17214] ip6erspan0: entered promiscuous mode [ 357.486087][T17214] netlink: 'syz.7.3578': attribute type 5 has an invalid length. [ 357.527633][T14947] [ 357.528737][T14947] ============================================ [ 357.531302][T14947] WARNING: possible recursive locking detected [ 357.533821][T14947] syzkaller #0 Tainted: G L [ 357.536399][T14947] -------------------------------------------- [ 357.538964][T14947] kworker/2:6/14947 is trying to acquire lock: [ 357.541525][T14947] ffff888034ac9128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 357.545525][T14947] [ 357.545525][T14947] but task is already holding lock: [ 357.548533][T14947] ffff88805930c928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 357.552584][T14947] [ 357.552584][T14947] other info that might help us debug this: [ 357.555907][T14947] Possible unsafe locking scenario: [ 357.555907][T14947] [ 357.558981][T14947] CPU0 [ 357.560356][T14947] ---- [ 357.561748][T14947] lock(&grp->list_lock); [ 357.563591][T14947] lock(&grp->list_lock); [ 357.565439][T14947] [ 357.565439][T14947] *** DEADLOCK *** [ 357.565439][T14947] [ 357.568738][T14947] May be due to missing lock nesting notation [ 357.568738][T14947] [ 357.572124][T14947] 3 locks held by kworker/2:6/14947: [ 357.574327][T14947] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 357.578622][T14947] #1: ffffc90003dcfd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 357.583554][T14947] #2: ffff88805930c928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 357.587707][T14947] [ 357.587707][T14947] stack backtrace: [ 357.590188][T14947] CPU: 2 UID: 0 PID: 14947 Comm: kworker/2:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.590218][T14947] Tainted: [L]=SOFTLOCKUP [ 357.590225][T14947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.590238][T14947] Workqueue: events snd_rawmidi_input_event_work [ 357.590272][T14947] Call Trace: [ 357.590280][T14947] [ 357.590287][T14947] dump_stack_lvl+0x100/0x190 [ 357.590309][T14947] print_deadlock_bug.cold+0xbd/0xca [ 357.590337][T14947] __lock_acquire+0x1256/0x1a40 [ 357.590362][T14947] lock_acquire+0x1b9/0x370 [ 357.590382][T14947] ? snd_seq_deliver_event+0x230/0x860 [ 357.590412][T14947] ? do_raw_read_unlock+0x3f/0x70 [ 357.590439][T14947] _raw_read_lock+0x5f/0x70 [ 357.590462][T14947] ? snd_seq_deliver_event+0x230/0x860 [ 357.590487][T14947] snd_seq_deliver_event+0x230/0x860 [ 357.590512][T14947] ? do_raw_spin_lock+0x128/0x260 [ 357.590537][T14947] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 357.590562][T14947] ? mark_held_locks+0x40/0x70 [ 357.590582][T14947] ? lockdep_hardirqs_on+0x78/0x100 [ 357.590605][T14947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.590626][T14947] ? client_use_ptr+0x107/0x4b0 [ 357.590651][T14947] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 357.590680][T14947] queue_broadcast_event.isra.0+0x143/0x1b0 [ 357.590699][T14947] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 357.590719][T14947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.590739][T14947] ? snd_seq_timer_start+0x1f0/0x2a0 [ 357.590774][T14947] snd_seq_control_queue+0x709/0xb70 [ 357.590794][T14947] ? __pfx_event_input_timer+0x10/0x10 [ 357.590817][T14947] __snd_seq_deliver_single_event+0x127/0x1c0 [ 357.590846][T14947] snd_seq_deliver_single_event+0x31f/0x8c0 [ 357.590873][T14947] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 357.590900][T14947] ? __lock_acquire+0x49f/0x1a40 [ 357.590924][T14947] snd_seq_deliver_event+0x44b/0x860 [ 357.590948][T14947] ? do_raw_spin_lock+0x128/0x260 [ 357.590970][T14947] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 357.590993][T14947] ? mark_held_locks+0x40/0x70 [ 357.591017][T14947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.591037][T14947] ? lockdep_hardirqs_on+0x78/0x100 [ 357.591058][T14947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.591078][T14947] ? client_use_ptr+0x107/0x4b0 [ 357.591101][T14947] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 357.591123][T14947] send_timer_event.isra.0+0x130/0x190 [ 357.591146][T14947] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 357.591172][T14947] ? lockdep_hardirqs_on+0x78/0x100 [ 357.591194][T14947] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 357.591216][T14947] snd_seq_oss_timer_start+0x1db/0x320 [ 357.591242][T14947] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 357.591268][T14947] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 357.591291][T14947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.591312][T14947] ? find_slot+0x166/0x1b0 [ 357.591330][T14947] snd_seq_oss_midi_input+0x467/0xa30 [ 357.591350][T14947] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 357.591371][T14947] ? find_held_lock+0x2b/0x80 [ 357.591386][T14947] ? snd_seq_port_use_ptr+0x128/0x190 [ 357.591410][T14947] snd_seq_oss_event_input+0x194/0x250 [ 357.591426][T14947] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 357.591443][T14947] __snd_seq_deliver_single_event+0x127/0x1c0 [ 357.591471][T14947] snd_seq_deliver_single_event+0x31f/0x8c0 [ 357.591498][T14947] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 357.591522][T14947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.591543][T14947] ? lockdep_hardirqs_on+0x78/0x100 [ 357.591564][T14947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.591584][T14947] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 357.591609][T14947] snd_seq_deliver_event+0x2c1/0x860 [ 357.591637][T14947] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 357.591662][T14947] ? mark_held_locks+0x40/0x70 [ 357.591683][T14947] ? lockdep_hardirqs_on+0x78/0x100 [ 357.591705][T14947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.591727][T14947] ? client_use_ptr+0x107/0x4b0 [ 357.591750][T14947] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 357.591779][T14947] snd_midi_input_event+0x32f/0x470 [ 357.591802][T14947] ? __pfx_snd_midi_input_event+0x10/0x10 [ 357.591828][T14947] ? __pfx_snd_midi_input_event+0x10/0x10 [ 357.591851][T14947] snd_rawmidi_input_event_work+0x61/0x80 [ 357.591878][T14947] process_one_work+0xa23/0x1940 [ 357.591900][T14947] ? __pfx_process_one_work+0x10/0x10 [ 357.591921][T14947] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 357.591948][T14947] worker_thread+0x5ef/0xe50 [ 357.591972][T14947] ? kthread+0x13a/0x450 [ 357.591989][T14947] ? __pfx_worker_thread+0x10/0x10 [ 357.592007][T14947] kthread+0x370/0x450 [ 357.592027][T14947] ? __pfx_kthread+0x10/0x10 [ 357.592044][T14947] ret_from_fork+0x72b/0xd50 [ 357.592069][T14947] ? __pfx_ret_from_fork+0x10/0x10 [ 357.592092][T14947] ? rcu_is_watching+0x12/0xc0 [ 357.592117][T14947] ? __switch_to+0x800/0x10f0 [ 357.592135][T14947] ? __pfx_kthread+0x10/0x10 [ 357.592152][T14947] ret_from_fork_asm+0x1a/0x30 [ 357.592183][T14947] [ 357.794777][ T43] kauditd_printk_skb: 276 callbacks suppressed [ 357.794788][ T43] audit: type=1400 audit(1786645202.413:10178): avc: denied { allowed } for pid=17217 comm="syz.7.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 357.804306][ T43] audit: type=1400 audit(1786645202.423:10179): avc: denied { create } for pid=17217 comm="syz.7.3579" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 357.815632][ T43] audit: type=1400 audit(1786645202.423:10180): avc: denied { map } for pid=17217 comm="syz.7.3579" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 357.825076][ T43] audit: type=1400 audit(1786645202.423:10181): avc: denied { read write } for pid=17217 comm="syz.7.3579" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 357.834357][ T43] audit: type=1400 audit(1786645202.423:10182): avc: denied { cmd } for pid=17217 comm="syz.7.3579" path="/newroot/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 358.282680][T14947] usb 14-1: USB disconnect, device number 11 [ 361.269450][ T5726] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 361.272262][ T5726] Bluetooth: hci2: Injecting HCI hardware error event [ 361.274563][ T5726] Bluetooth: hci2: hardware error 0x00 [ 363.349077][ T5726] Bluetooth: hci2: Opcode 0x0c03 failed: -110