last executing test programs: 3m12.916870045s ago: executing program 1 (id=34): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x0, 0x1, 0x7}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000900)={0xa, 0x4e22, 0x9c062915, @loopback, 0x6}, 0x1c) sendmsg(r4, &(0x7f0000000940)={0x0, 0x9533, &(0x7f0000000980)=[{&(0x7f00000009c0)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42, 0x5c}) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), 0x0, 0x10, &(0x7f0000001800), 0xfffffffffffffd00}, 0x48) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x80800}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000200)=0x78, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x0, 0x1, 0x7}, 0x10) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0xa, 0x3, 0xff) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) connect$inet6(r4, &(0x7f0000000900)={0xa, 0x4e22, 0x9c062915, @loopback, 0x6}, 0x1c) (async) sendmsg(r4, &(0x7f0000000940)={0x0, 0x9533, &(0x7f0000000980)=[{&(0x7f00000009c0)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42, 0x5c}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), 0x0, 0x10, &(0x7f0000001800), 0xfffffffffffffd00}, 0x48) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x80800}, &(0x7f00000001c0)=0xc) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000200)=0x78, 0x4) (async) 3m12.587013598s ago: executing program 1 (id=35): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000580)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000680)={r1, &(0x7f00000006c0), &(0x7f0000000700)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000680)={r1, &(0x7f00000006c0), &(0x7f0000000700)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000780), &(0x7f00000007c0)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r1, &(0x7f0000000840), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r1, &(0x7f0000000840), 0x0}, 0x20) write(r0, &(0x7f00000005c0)="09000300010001", 0x7) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)=0x1) (async) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)=0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x2, 0x33, 0x0, @private=0xa010102, @loopback}, "62fb5338591f8e40"}}}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 3m12.027864557s ago: executing program 1 (id=36): r0 = socket$inet6(0xa, 0x3, 0x3c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x21, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3m12.027358867s ago: executing program 1 (id=37): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='uid', &(0x7f0000000180)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00'/316, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000128290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 3m11.87697603s ago: executing program 1 (id=38): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xfa) mount(0x0, &(0x7f0000000180)='./mydev\x00', 0x0, 0x0, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) write$sysctl(r1, &(0x7f00000001c0)='5', 0x1) socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x23, 0x2c, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x4, 0x37}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 3m11.807084892s ago: executing program 1 (id=39): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5c8}}, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x4) futimesat(r1, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={{0x77359400}, {0x77359400}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000b00)=""/1, 0x1) r3 = fsopen(&(0x7f0000000b40)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000bc0)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000c00)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r4, &(0x7f0000000c40)=ANY=[@ANYBLOB="034888a8ae000500"], 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00"/12], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000cc0)='mountinfo\x00') pread64(r6, &(0x7f0000000d00)=""/4093, 0x1049, 0xfffffffd) getsockname$packet(r3, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d40)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0200f66edd4c3bae000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="fdffffff00"/20, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r8 = openat$cgroup_subtree(r2, &(0x7f0000001e80), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000001ec0)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="300000004a0001002dbd700001dcdf250a008000", @ANYRES32=0x0, @ANYBLOB="dba838fc1400010000000000000000000000ffffac1414"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3m11.295859375s ago: executing program 0 (id=43): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffe, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 3m11.225886698s ago: executing program 0 (id=44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x13, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000002700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001fff00000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000004000000280012800900010076657468000008000000028014000100000000001eee5c5a208b7c1a623057635dbf9884e0306b2cfa9a7f3a", @ANYRES32=0x0, @ANYBLOB="0003020001020100"], 0x48}}, 0x4040004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x3, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe1f5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x81}}]}, {}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) 3m11.094735059s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r2, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000080)=""/231, 0xe7, 0x10020, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x3a}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write(r1, &(0x7f0000000240)='1\x00', 0x1) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x10b081) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000440)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000480)=0xd, 0x12) mkdirat$cgroup(r5, &(0x7f0000000800)='syz0\x00', 0x1ff) ioctl$FS_IOC_GETFSLABEL(r4, 0x8946, &(0x7f0000000100)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000b80), 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x26, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x7, 0x0, 0xa, 0x1, 0x2, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x3, 0x2, 0x4, 0x7, 0x7457bcf106940912, 0x4}, @call={0x85, 0x0, 0x0, 0xa8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xa, 0xa, 0xb, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x4d, &(0x7f0000000840)=""/77, 0x1e00, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r3, 0x5, 0x0, &(0x7f0000000cc0)=[{0x3, 0x3, 0xf, 0x1}, {0x4, 0x4}, {0x1, 0x1, 0xa, 0x1}, {0x1, 0x3, 0xa}, {0x4, 0x1, 0x5, 0x7}], 0x10, 0xe6b}, 0x94) write(r7, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000340)='devtmpfs\x00', 0x1040000, 0x0) 3m10.24743455s ago: executing program 0 (id=46): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x28c032, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='smaps\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000540)=""/182, 0xb6}], 0x37, 0xd6c40391, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000280)="e8700e", 0x3}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/81, 0x51}], 0x1}, 0x0) r4 = io_uring_setup(0x8, &(0x7f00000006c0)={0x0, 0xfffffffe, 0x0, 0x40, 0xfffffffc}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000010401010000000000000000010004000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000210401040a000000000000000500000042f3c4270761b95741a5de84d1c5f8697f0fa095e54f92181adb4b99005ee8feb8a1c6d38b0f3bcb93beb7eab1fb80b3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000740)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000780)={0x3c, 0xb, 0x1, '\x00', 0x9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000007c0)={0x95, 0x6, 0x2, '\x00', 0x7e9}, 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x10, 0xffffffffffffffff, 0x96f96000) setreuid(0x0, 0xee00) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000600)=""/173) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) 3m10.017892437s ago: executing program 0 (id=47): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xfa) mount(0x0, &(0x7f0000000180)='./mydev\x00', 0x0, 0x0, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) write$sysctl(r1, &(0x7f00000001c0)='5', 0x1) socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x23, 0x2c, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x4, 0x37}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 3m9.967806477s ago: executing program 0 (id=48): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) fcntl$getown(r0, 0x9) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001440), 0xfffffffffffffe8a, 0x10, &(0x7f0000001480), 0xfffffffffffffd27}, 0x48) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000140)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r5) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010022bd7000fcdbdf251a000000200001801400020076657468315f766c616e00000000000008000400", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) socket$inet6(0xa, 0x6, 0xc) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000400)='./file0\x00', r8}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x2c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000014c0), 0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x41, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000004c0)=0x19) write(r9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x9, &(0x7f0000000500)=[{0x100, 0x4, 0x38, 0x40}, {0x1000, 0x8, 0xff, 0xb744}, {0x8, 0x5, 0x46, 0x80}, {0x9, 0x9, 0x9, 0xef}, {0x9, 0x7, 0x6, 0x4}, {0x8, 0xf4, 0x4, 0x7}, {0x5, 0x0, 0xd, 0x10001}, {0x0, 0x4, 0x9, 0x3}, {0x6, 0x61, 0x0, 0x10}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000300)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 3m1.635539681s ago: executing program 32 (id=12): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0xe44, 0x1f400, 0x8, 0xc1}) syz_open_dev$rtc(0x0, 0xfffffffffffffff7, 0x440c2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x109ac0, 0xa1) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 2m56.774825901s ago: executing program 33 (id=39): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5c8}}, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x4) futimesat(r1, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={{0x77359400}, {0x77359400}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000b00)=""/1, 0x1) r3 = fsopen(&(0x7f0000000b40)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000bc0)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000c00)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r4, &(0x7f0000000c40)=ANY=[@ANYBLOB="034888a8ae000500"], 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00"/12], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000cc0)='mountinfo\x00') pread64(r6, &(0x7f0000000d00)=""/4093, 0x1049, 0xfffffffd) getsockname$packet(r3, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d40)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0200f66edd4c3bae000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="fdffffff00"/20, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r8 = openat$cgroup_subtree(r2, &(0x7f0000001e80), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000001ec0)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="300000004a0001002dbd700001dcdf250a008000", @ANYRES32=0x0, @ANYBLOB="dba838fc1400010000000000000000000000ffffac1414"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2m54.869539355s ago: executing program 34 (id=48): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) fcntl$getown(r0, 0x9) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001440), 0xfffffffffffffe8a, 0x10, &(0x7f0000001480), 0xfffffffffffffd27}, 0x48) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000140)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r5) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010022bd7000fcdbdf251a000000200001801400020076657468315f766c616e00000000000008000400", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) socket$inet6(0xa, 0x6, 0xc) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000400)='./file0\x00', r8}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x2c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000014c0), 0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x41, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000004c0)=0x19) write(r9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x9, &(0x7f0000000500)=[{0x100, 0x4, 0x38, 0x40}, {0x1000, 0x8, 0xff, 0xb744}, {0x8, 0x5, 0x46, 0x80}, {0x9, 0x9, 0x9, 0xef}, {0x9, 0x7, 0x6, 0x4}, {0x8, 0xf4, 0x4, 0x7}, {0x5, 0x0, 0xd, 0x10001}, {0x0, 0x4, 0x9, 0x3}, {0x6, 0x61, 0x0, 0x10}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000300)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 2m53.817393547s ago: executing program 4 (id=125): setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005100)={0x1, 0x4, &(0x7f00000051c0)=ANY=[@ANYBLOB="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"], &(0x7f0000005300)='GPL\x00', 0x5, 0xfd90, &(0x7f0000005340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005400), 0x1f3, 0x10, &(0x7f0000005440), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a) 2m53.746836273s ago: executing program 4 (id=126): mkdir(&(0x7f0000000140)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000340)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x8000000000001000, 0x4, 0x1b3f, 0x5, 0x42000000000001a, 0x6, 0x6, 0xb, 0x8}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) mknodat$md(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x6180, 0x0) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x2, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000000c0)=0x49d) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ff80bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) 2m53.662453459s ago: executing program 4 (id=128): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./tracing\x00', 0x0) (async) mount(0x0, &(0x7f00000005c0)='./tracing\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing/events/sched/filter\x00', 0x1, 0x15d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x161) (async) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000001a80)=0x3) (async) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000001ac0)) read$dsp(r8, &(0x7f0000001b00)=""/79, 0x4f) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000001800)={0xbb4761e307fe2111, 0x0, @ioapic={0xb000, 0x7, 0x5, 0x6, 0x0, [{0x1, 0x6, 0xf9, '\x00', 0x1}, {0x2, 0x1, 0x4, '\x00', 0x7}, {0x9, 0x6, 0x0, '\x00', 0x7f}, {0x9, 0x9, 0x3, '\x00', 0x6}, {0xb, 0xf, 0xc, '\x00', 0x6}, {0xc, 0x3, 0x8, '\x00', 0x2}, {0x1, 0x5, 0x7, '\x00', 0xcb}, {0x3, 0x3, 0x2, '\x00', 0x9}, {0x1f, 0x2, 0x73, '\x00', 0x80}, {0x8, 0x5, 0x6, '\x00', 0xb}, {0x3, 0x3, 0x1, '\x00', 0x8}, {0x9, 0x6, 0x4, '\x00', 0x9}, {0x5d, 0x0, 0x1, '\x00', 0xc7}, {0x1, 0x7, 0xfe, '\x00', 0x5}, {0x5, 0xfa, 0x9, '\x00', 0x1}, {0x8, 0x7, 0x5, '\x00', 0xdf}, {0x5, 0x7, 0x6, '\x00', 0x5}, {0x6, 0x4, 0x9, '\x00', 0x7}, {0x9, 0x5, 0xee, '\x00', 0x6}, {0xf, 0x10, 0xa, '\x00', 0xda}, {0x2, 0xe, 0x4, '\x00', 0x66}, {0x1, 0x3, 0x0, '\x00', 0x8}, {0x4, 0x6, 0x3, '\x00', 0xe}, {0x6, 0x7, 0xf, '\x00', 0xff}]}}) (async) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x4000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000780)='10', 0x2) (async) write(r7, 0x0, 0x0) (async) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000540)={r10, 0xffff}, &(0x7f0000000580)=0x8) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000280)={{0x3000, 0x1, 0xa, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x2, 0x80}, {0xfff9ffff, 0x3000, 0xb, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0xeeee8000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xa, 0x7, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xa000, 0x8000000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x11, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3ff8, 0xe, 0xa0, 0xb1, 0xff, 0x7, 0xa0, 0x82, 0x2f, 0x4, 0x7}, {0x54000, 0x3000, 0xd, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x84, 0x40, 0x70}, {0x8000000, 0xffe, 0x8, 0x5, 0xcd, 0x1b, 0x1, 0x9, 0x4, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x0, 0x7}, 0x80000031, 0x0, 0x2ffc, 0x2004, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m53.214070409s ago: executing program 4 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80802, &(0x7f0000000600)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000000680)='./file0/file3\x00', &(0x7f00000006c0)=""/151, 0x97) syz_fuse_handle_req(r5, &(0x7f0000000780)="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", 0x2000, &(0x7f0000002780)={&(0x7f0000002840)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x40802140, 0xa, 0x8, 0x7, 0xcdd, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000028c0)="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", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)={0x90, 0x0, 0x6, {0x6, 0x2, 0x5, 0xfffffffffffffff9, 0x400, 0xc, {0x0, 0xb, 0x7, 0x1, 0x1, 0x4, 0x9, 0x0, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) close_range(r4, 0xffffffffffffffff, 0x0) (rerun: 64) r6 = socket(0x2, 0x3, 0xff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040041) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1001}) write$tun(r8, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000140)={[0x56, 0x100000000, 0x800000, 0x7f, 0x100000, 0x1000, 0x2004c8, 0x7fff, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x200000, 0x200}) (async) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f0000000240)=0x8000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x8994, &(0x7f0000000440)={'veth0_to_team\x00', @ifru_names='veth0_vlan\x00'}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m53.104886506s ago: executing program 4 (id=130): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) (async) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x4) (async) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 64) write(r0, &(0x7f0000000040)="46000000130001000242424242424242424242424242424242", 0x19) (rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="02032614c3bf333200020c0000000000000000450000000200080010000000d788000000000000030006000000000002004e20ac1414000000000c00000000020001000000000000000600ff00ffff030005000097d99467138b12740000000000000000000002ad06759ec2a454850d8c3772afb26541e9a04a3818248d443b1141edbd75f1f81262c00195ce5fb1361ee026e9bc4ec2c3fa318ec5589fddf65b98aae91cfd664ebc"], 0x60}, 0x1, 0x7}, 0x0) 2m52.005333512s ago: executing program 4 (id=135): r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$media(&(0x7f0000000040), 0x3, 0x20000) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/vhci\x00', 0x8002, 0x0) write(r3, &(0x7f00000002c0)="ff80", 0x2) close(r3) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000003c0)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x2, 0x1, 0xffffd4c3, 0x1, 0x7ff, 0x5, 0x2, 0x2, 0x6, 0x40008000, 0x6, 0x9, 0x4, 0x504, 0x7fff, 0x5, 0x1, 0x7, 0x0, 0xff, 0x4, 0x80000000, 0x8000, 0x5, 0x9, 0x3, 0x4ba7ee9a, 0x6, 0x9, 0x0, 0x2]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, &(0x7f0000000240)) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x5, [0x7, 0x8]}, {r4, 0x0, 0x9354b75fd55a9410, [0x6, 0xfffffff8]}, 0x2, [0x207, 0x2]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x1e}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x88900, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r7, 0x3b88, &(0x7f0000000480)={0xc}) 2m39.536546526s ago: executing program 6 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f00000198c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x3) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x9) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019880), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000007c0)={0x10200, 0x3, 0x2000, 0x2000, &(0x7f0000f89000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000019900)=[@text64={0x40, &(0x7f0000019940)="660f2885af00000066baf80cb84077ad8fef66bafc0ced64670fde0966ba410066edf244a7660f3881a900280000c4a2bbf53500300000f2d9f9f36667470f30450fc718", 0x44}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)={0x8}) r6 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0xc, 0x0, 0xfec00000}) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000780)={0x0, &(0x7f00000199c0)=[@code={0xa, 0x30, {"b80000e2fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000800)='net/ip_vs_stats\x00') pread64(r8, &(0x7f0000000840)=""/102400, 0x19000, 0x100008) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="66b838010f00d0450f011a0f3565660f7ee1b9800000c00f3235002000000f3066baf80cb866097387ef66bafc0cec0f75a8cd4e00000fc7b300000000b9800800000f32c463f916f6e9", 0x4a}], 0x1, 0x1e, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000019840)={0x200, 0x0, 0xb000, 0x1000, &(0x7f0000ca0000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000140)={0x10004, 0x0, &(0x7f0000ffa000/0x4000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m39.215823718s ago: executing program 6 (id=219): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000380)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 2m39.215501619s ago: executing program 6 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0000101, 0x0, 0x5}]}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe2(0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r4, 0x4422}, {r3, 0x12}, {r3, 0x61}], 0x3, &(0x7f00000000c0)={r5, r6+60000000}, &(0x7f0000000100)={[0x4]}, 0x8) r7 = openat$dm_control(0xffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000000ac0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000001100)={0x4, 0x0, 0x0, 0x1f8, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r8}, [@crypt={0x0, 0x3450, 0x0, 0xc0, 'crypt\x00', {'capi:authenc(hmac(sha256),xts(aes))-random', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '1024'}, ' 1 integrity:32:aead'}}]}) 2m38.30513644s ago: executing program 6 (id=226): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000001c0)={0x7, 0x1fef, 0x1e, 0x9, 0x3}) (async) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) mkdirat(0xffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ed) (async) r2 = syz_open_dev$loop(&(0x7f0000000400), 0x7, 0x103482) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000007c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) (async) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591) (async) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) write$cgroup_int(r4, &(0x7f0000000340)=0x1, 0x12) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x4000, 0x0, 0x0, @by_dev={r6}, [@writecache={0x0, 0x4c0, 0x0, 0x60, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '512', 0x20, '2 start_sector 8'}}]}) 2m38.186642627s ago: executing program 6 (id=227): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xfa) mount(0x0, &(0x7f0000000180)='./mydev\x00', 0x0, 0x0, 0x0) write$sysctl(r1, &(0x7f00000001c0)='5', 0x1) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x23, 0x2c, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x4, 0x37}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 2m38.107693441s ago: executing program 6 (id=229): syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x474082, 0x5c, 0x8}, 0x18) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) 2m36.806915034s ago: executing program 35 (id=135): r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$media(&(0x7f0000000040), 0x3, 0x20000) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f00000004c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/vhci\x00', 0x8002, 0x0) write(r3, &(0x7f00000002c0)="ff80", 0x2) close(r3) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000003c0)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x2, 0x1, 0xffffd4c3, 0x1, 0x7ff, 0x5, 0x2, 0x2, 0x6, 0x40008000, 0x6, 0x9, 0x4, 0x504, 0x7fff, 0x5, 0x1, 0x7, 0x0, 0xff, 0x4, 0x80000000, 0x8000, 0x5, 0x9, 0x3, 0x4ba7ee9a, 0x6, 0x9, 0x0, 0x2]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, &(0x7f0000000240)) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x5, [0x7, 0x8]}, {r4, 0x0, 0x9354b75fd55a9410, [0x6, 0xfffffff8]}, 0x2, [0x207, 0x2]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x1e}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x88900, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r7, 0x3b88, &(0x7f0000000480)={0xc}) 2m22.741182376s ago: executing program 36 (id=229): syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x474082, 0x5c, 0x8}, 0x18) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) 2m17.542324876s ago: executing program 5 (id=386): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01010000000000000000070000090900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80200001800a00010071756f7461000000100002800c0001400000020000000000340001800a0001006c696d6974000000240002800c00024000000000000000000c000140", @ANYRES32=r2], 0x12c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x102, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000480)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000004c0)="120000001c0014010011223344556600060101010101010101010101010101010100", 0x22) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x6101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x326d00, 0x0) close(r8) syz_emit_ethernet(0xcc, &(0x7f0000000340)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x8e, 0xfc, "bc9e", "25cf6b73733306dc83409cf8a85dd9c27d3779707bdd457e575654fe3031e8d1a46a7ae6f33b84666bdf36d70b87162909f04fb587cde079efb6b900ca5f9c43248580c94027bda9d5112e6727f1ea92aee07936d21bd61a3a435d8fabda63fdc5f806cc32b26d46b4b23e372469f5078f5da97bca1d0b5d7a716b46b21bb76b4c821905fc6f006cfd83ef21c163830e0322f975066ff7c736a76ee70d7ef3212c629a802a795ab78d1e63afbb308ebe6b059ff3b01380c33f44"}}}}}, &(0x7f0000000440)={0x1, 0x2, [0x540, 0x1ca, 0x113, 0x778]}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @link_local}) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)='9\x00\x00\x00', 0x4}], 0x1) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f00000009c0)=0x501e, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000a00)={'bridge0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000a40)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000a80)={0x11, 0x3, r11, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x4000, 0x1000003, 0x14852, r0, 0x8000000) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000580)={'veth0_to_bridge\x00', &(0x7f0000000500)=@ethtool_gfeatures={0x3a, 0x6, [{}, {}, {}, {}, {}, {}]}}) 2m16.204574009s ago: executing program 5 (id=388): setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005100)={0x1, 0x4, &(0x7f00000051c0)=ANY=[@ANYBLOB="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"], &(0x7f0000005300)='GPL\x00', 0x5, 0xfd90, &(0x7f0000005340)=""/188, 0x1000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005400), 0x1f3, 0x10, &(0x7f0000005440), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a) 2m16.204055131s ago: executing program 5 (id=390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000081, 0x0, 0x1}]}) memfd_create(&(0x7f0000000b40)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x0}) (async) r3 = syz_create_resource$futex(&(0x7f0000000400)=0x1) futex(r0, 0x3, 0x0, &(0x7f00000003c0)={r1, r2+60000000}, r3, 0x1) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2d, 0x0, 0x0, 0x3e}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000580)=0x80000000001, 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000600)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000700)=0x40) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000480)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000180), 0x8) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xfff, 0x3, r9}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000092c000/0x2000)=nil, &(0x7f0000630000/0x4000)=nil, &(0x7f0000d04000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000048d000/0x3000)=nil, &(0x7f0000600000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000d80000/0x1000)=nil, &(0x7f00006e4000/0x1000)=nil, &(0x7f0000732000/0x2000)=nil, 0x0}, 0x66) syz_create_resource$futex(&(0x7f0000000200)=0x2) (async) io_uring_setup(0x4d, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1}) (async) fsopen(&(0x7f0000000300)='nfsd\x00', 0x1) openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000240)=0xa) 2m15.945231704s ago: executing program 5 (id=395): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./mydev\x00', 0x0, 0x0, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) write$sysctl(r1, &(0x7f00000001c0)='5', 0x1) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x23, 0x2c, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x4, 0x37}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 2m15.876424943s ago: executing program 5 (id=397): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0xfe, 0x7fff7ffc}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0xfe, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) 2m0.714472011s ago: executing program 37 (id=397): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0xfe, 0x7fff7ffc}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0xfe, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) 1m56.211222515s ago: executing program 9 (id=556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$kcm(r2, &(0x7f00000006c0)={&(0x7f0000000340)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)="7f308802df0c7bc54b38c866917b1b12e3ce9e0b782d83aa2bb7be3fb60613ba717fe2bd65dda3d5bf1b1db7", 0x2c}, {&(0x7f0000000400)="813167d402a4adca24bcb665fd8399483d99df12108223d0c9e4f9458ff8cf5b080cd0e12b84b14763edc2a513d3500c2dc66f2862ffc790bf6e5ae2b44862845a03be375419e0be4c88c8ab9f7a49c0bdaec21444fc1266828ef4b1cde942ea56ee22588de7f68899b76bca68d73d34c9ee4820b8c68a4cf43f0ffceac33d7fb1c9f6e46f43dd0a28616256861309a6c3099c2c8c02041550ea30f8631a1d4bc8927b88ebbb63c5c8d7", 0xaa}, {&(0x7f00000004c0)="41f0707b3b19e3907875b73201c28e83f1f4dad16500596887299487c0783a714e00abfeec3092ae90c4d14e03fb546217b9811b954e0e93d111730dea5972a70e1d3ce9a072b446094a81802c31af1fffb3f533d5b7c4cc8bc75d2b0078bd5d7633e8af68ea39c67b892838d163", 0x6e}, {&(0x7f0000000540)="d4bf21aca80a28d28ecf1151350686e11c4bec7f7525162fa0c9606c77bcfdf393bcd7192d628d7c73cde01eb0c50fe2ea74f1ba3d", 0x35}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="600000000000000800010000ff0f0000815facfa21c1f39b4d727ae14d6b4b9504dca92102747be0182a565c5b36e312f5088f6c28281e73db4694ef64e3504b4e97b795782fbe6f9be48a4fcf38a63ecbe5d3fc455ee780a75500000000000070000000000000000b01000006000000c163682abddf40dfc6ff81ec7293e74447b4e76fa6f9b1272329425a7841036c82e24499e49b575595be316f0738a82654b5d7fd2791b2398bea3cb84af3a4fdab61b229c9d904320988cca24a23a390a83b9e4c6191c4368000000000531b49"], 0xd0}, 0x400c880) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) r3 = accept4$inet_tcp(r2, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000700)=0x10, 0x0) getsockname$inet(r3, &(0x7f0000000740)={0x2, 0x0, @initdev}, &(0x7f00000008c0)=0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x4a, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r4, 0x0, 0xe, 0x0, &(0x7f0000000b00)="58f47a07c4ab0000000000000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x4c) 1m56.06385657s ago: executing program 9 (id=558): setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005100)={0x1, 0x4, &(0x7f00000051c0)=ANY=[@ANYBLOB="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"], &(0x7f0000005300)='GPL\x00', 0x5, 0xfd90, &(0x7f0000005340)=""/188, 0xffffffff, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005400), 0x1f3, 0x10, &(0x7f0000005440), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a) 1m56.01094856s ago: executing program 9 (id=561): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x3, 0xffe5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000001}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0000420c00008100000086db60fec00000303a00fc000000000000000000000000000000ff02000000000000000000000000000102009078000000006018b0880000000000000000000000000000000000000000ff020000000000000000000000000001"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001100)="fdec1cecb0e5080df35041dfe5c1d45a64389314fee674ffccea54d7832bf329318b01fe9dd7e5471cf25d0b460097119a5bf19187df480fa3095bb9cb1f4e1cde044786e15beda35332a698348de7fe8ebb085cabe18f0d2928f6ecbbfeaa7c5c83c854e456ff51348edbb7078658768ac7feba94d601d6b27b28442663bb23c67c7c236b520e65e34ccce864ce5efd2b978c54e06958a9cacf778696ca453f160544b2d0ed20c031b93136f8f8cb049e09a7bac2da115aab", 0xb9) getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, &(0x7f0000000c00)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}}, &(0x7f00000009c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000b40)={0x48, 0x8, r5, 0x0, 0x4, 0x0, 0x0, 0x4}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xa8, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc04d}, 0x40000c0) r9 = socket$inet(0x2, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x2c, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008820}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@getqdisc={0x38, 0x26, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xd}, {0xfff1, 0xb}, {0x7, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0x800, 0x6, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0x2}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4042010}, 0x0) write$tun(r2, &(0x7f0000000500)=ANY=[], 0x9dd7) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000c40)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x2000000008c0, 0x0, 0x0, 0x2000000008f0, 0x200000000920], 0x0, 0x0, &(0x7f0000000cc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x0, 0x8035, 'gretap0\x00', 'macvlan0\x00', 'geneve1\x00', 'veth0_macvtap\x00', @random="665b4563cf6f", [0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, [0x0, 0xff, 0xff], 0x0, 0xd0, 0xd0, 0x108, [@arp={{'arp\x00', 0x0, 0x38}, {{0x17, 0x16, 0x4, @empty, 0x807fff00, @local, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0xff, 0xff], 0x54, 0xc3}}}], [], @snat={'snat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}]}]}, 0x210) sendmsg$kcm(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="d21c5883c98033ed2632175063990d0833e07e35de147619ad356d62f8ebaf7c4fe897cae138293d403bdd1a7460b5364cbc7eada51a8902a56f147f5d4caf2335a014e9ff288745353a0c996e44a89f1a315467adcfc7b4ea07603596a84b4a82a9df2e7997c92ac4364187c2f9a4526fb709bf6b60ca0040e749120bf3ba934d975b1bc3cdf4a3b717169f4f7dd9df4e68bf0dbda0c5006d11703017e36737ec4ff9596483d5dde49ef1996a8ca67ab6a48e36", 0xb4}], 0x1, &(0x7f0000000680)=[{0x70, 0x118, 0x4, "1deefd51ca76b563778d7bb816bc798e91c18ac82e43b2ad421090b85a67c5fc37a095f33ddef67749840910990c8844409897d20d123a5bc934461c36f813e778e4ece7e1c63e4eca03f9ed9bc3df3819e7ae14667515bb1de6cf43b036a8"}, {0x50, 0x115, 0x8000, "b1b840007938d02069775e0e4b339d2e7ece28f0e3df7a452ec4c1931f971b9888c85dcc72c358a4a06de8dc27b2a3b5167af4bcb352a1ad5fbcf84b5959"}, {0x108, 0x10d, 0x7fff, "ed34d78d1aab4b1d04fef85dfe71e0cadf6103dee26277ba48e62c386849ffcaab363d368bc66796e7a3158fbb65c574e7bc4aca27dfeb8160f353ce85d80d43ae4524c77bf2ef3c11929503d31a8cc6018370543d0ae521d5edfd37a32e6d549f442187d5a3dfb7036ae856f66e6a70c6712b40eb84f8599b2a7ecde6a99c06da3e92021f6081841d882cefd2077bdf6e9a3b549f25a6d8bb4d4978a6612d8ce311ccd127892385b0d079d49682d2b8dc17aa8df44d218b23027700bf1918707e621f1474f0250ca6feba97d1f644cace8b7f4be8c0e94929a3beb630890dbe6cc67e05c7b2ef747d30e9cb462225d35a0e"}], 0x1c8}, 0x40800) 1m55.82471367s ago: executing program 9 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019400), 0x200800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa6) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = creat(0x0, 0xc9a9c042ad77c5e5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000180)='2', 0xfdef, 0xc00) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0x2}) r4 = pidfd_getfd(r3, r3, 0x0) openat(r4, &(0x7f0000019440)='./dev\x00', 0x0, 0x80) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknodat$null(r2, &(0x7f0000000280)='./file0\x00', 0x8, 0x103) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ram0\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='pagemap\x00') pread64(r7, &(0x7f0000000400)=""/102400, 0x19000, 0x1000000300) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m55.497215189s ago: executing program 9 (id=564): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_out(r1, 0x5460, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x103, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000400)="36650f380ae20f21ddba6100ed6766c7442400695e00006766c7442402a5c9f6dd6766c744240600000000670f011424f20f78d200c3c54c090f20d90fc79e4a6bda302e260fc43d00", 0x49}], 0x1, 0x49, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r6, 0x1}}, 0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7f, &(0x7f0000000700)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000880)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value, &(0x7f0000000900)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0xfffffffb) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x2) 1m54.846262689s ago: executing program 9 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x331, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000380), 0x4) sendmsg$key(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) dup3(r5, r6, 0x80000) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000640)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r7, &(0x7f0000000680)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) connect$inet6(r5, &(0x7f0000000580)={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000480000042dbd7000fbdbdf250a002000", @ANYRES32=r1, @ANYBLOB="03000000080002000700000014000100ff0100000000000000000000000000010800020004000000080002000b0000d2090000000000000000000000000000000000000114000100fc010000000000000000000000000000000002000c00000014000100ff020000000000000000000000000001"], 0x8c}, 0x1, 0x0, 0x0, 0x2c0400c0}, 0x20008000) 1m54.736017211s ago: executing program 38 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x331, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000380), 0x4) sendmsg$key(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) dup3(r5, r6, 0x80000) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000640)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r7, &(0x7f0000000680)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) connect$inet6(r5, &(0x7f0000000580)={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000480000042dbd7000fbdbdf250a002000", @ANYRES32=r1, @ANYBLOB="03000000080002000700000014000100ff0100000000000000000000000000010800020004000000080002000b0000d2090000000000000000000000000000000000000114000100fc010000000000000000000000000000000002000c00000014000100ff020000000000000000000000000001"], 0x8c}, 0x1, 0x0, 0x0, 0x2c0400c0}, 0x20008000) 4.820459934s ago: executing program 8 (id=1474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0x64, 0x4, 0x320, 0x100000c, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0x7f7fffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x4}, {{0x42}, 0x5a}, {{0x4}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xd0ffffff}}, &(0x7f0000000740)='syzkaller\x00', 0x5}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) sched_setaffinity(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000800)={0xa, 0x4e22, 0xa, @loopback, 0x800002}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000840)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x4e20, 0x0, 0x0, 0x100, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) (async, rerun: 64) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000c40), 0x400000000a882, 0x0) dup(r5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x2000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xd, 0xc, &(0x7f0000000d40)=ANY=[], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="000800000000000005020008070800000000000000807f3391de5c12ebab4032a39ef1696a1edb"], 0x50) (rerun: 64) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)='A', 0x1}], 0x1}}], 0x1, 0x4000801) (async) recvmmsg(r1, &(0x7f0000006500)=[{{&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/147, 0x93}, 0x5}, {{&(0x7f0000000340)=@phonet, 0x80, &(0x7f0000002700)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/157, 0x9d}], 0x2, &(0x7f0000002740)=""/190, 0xbe}, 0x800}, {{0x0, 0x0, &(0x7f0000003b80)=[{0x0, 0x12}], 0x1}, 0xf60d}], 0x3, 0x0, 0x0) 3.773351517s ago: executing program 8 (id=1492): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000007c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x14, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}]}, 0x24}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000840)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000008c0)='4', 0x1}], 0x1}}], 0x1, 0x24000804) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x129240, 0x0) setns(0xc9, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x12) (rerun: 32) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="390000001100054700bb65e1c3e4ffff0100b2a1010000055600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async, rerun: 32) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) (async) syz_usb_connect(0x6, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca743300090503034d00ff99290805", @ANYRES16=r8], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = dup3(r9, r10, 0x80000) write$9p(r11, &(0x7f0000000180)="80", 0x1) (async) close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7}) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r12, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000380)={0x28, 0x3, r13, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000003c0)}) (async, rerun: 64) r14 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r14) (async) sendmsg$TIPC_NL_NET_SET(r14, 0x0, 0x0) 2.566689672s ago: executing program 7 (id=1503): mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x2040040, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2.536833051s ago: executing program 7 (id=1505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1c1341, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pimreg1\x00', 0x84aebfbd6349b7f2}) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1a2deb9a353120b7) 2.422045859s ago: executing program 7 (id=1510): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xe) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0002029}) epoll_pwait(r7, &(0x7f0000000080)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) bind$netlink(r4, &(0x7f0000002040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002080)={0x0, 0xff98, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073397a32000020001c000480180001800d00010073796e70726f78790000000004000280140000001100010000e7120100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4630, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) 2.275243408s ago: executing program 8 (id=1511): openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf258300000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f00000004c0)="82e35f5435ba4861000000000000000000000000e9ff00000f") 1.390418909s ago: executing program 7 (id=1517): arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000012c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000001300)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000001340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000001380)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f00000013c0)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) close(r3) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)='X', 0x34000, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setuid(r0) 1.344966262s ago: executing program 8 (id=1518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "0cc03592ad80de6414cb5f1ea9bc4536a03e846684e91c584a4f8e8988dd895b", "8613f03624287a60976cc07d626f7f24", {"2f1fb84fe747dd7e9fd217e0aff3ecc5", "35d399a8064c0f48b25e6f10e4847f10"}}}}}, 0x86) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 1.21876559s ago: executing program 8 (id=1519): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x10) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x10) r1 = openat$ipvtap(0xffffffffffffff9c, &(0x7f0000000000), 0x480200, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) (async) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) read(r2, &(0x7f00000005c0)=""/143, 0x8f) (async) read(r2, &(0x7f00000005c0)=""/143, 0x8f) writev(r1, &(0x7f0000002640)=[{&(0x7f0000000080)="1ca9c5c56cf15af5bea86dca9fa155adb921d9aaf3a4b521f20facc98029aa7085dff3375a57adfebec3e29f5ee3749350b11af3ba7aeba767863132358305503f42d13bfa59a2f7f0e9691fc5e92f263bda2683f74e66fcef3c7ef593626c0646a6ee284225f6386cf4e12a5d5e3a2dcf87012850d2f2d2173ff7bbb4ac5fef9b6e1e1f6778596f269f4dd1b6a35c732c0c09dd768973686b1ad1e15b72c211f64c5119602205238e621212eeb86d901017ee487067c080cedf44e32d721a7d9079fd59325376a56fda8d2e77ab86098b086b2ab67880b4", 0xd8}, {&(0x7f0000000180)="b66ba915aaaaeb753de413a669", 0xd}, {&(0x7f00000001c0)="78ac7d058786ee2be674ea6b2f3be00eb042688101581a075378c4ef900463b4558ca60da17f721193646663f0018d1449bfc89e9d73bc2dcdf122a0ab14b40c0916dcb727af131b0e3d0df20fd3144fa9a23f708cb71ad9983711ae911accd12f9d345785b5266d0a207b98318be969ff31a57a321a171ceabdbe40c43660eda85b74828157f07ee6cc9b0cc84bb60f50d196ce4b0a2b799e1748fc0e68c663387815456cbf311f7396b7ab65b532df6ba9e08692c5149c2b6d81ca6c175ea9dac2e8ec928d2c8c345f5cb7cd08", 0xce}, {&(0x7f00000002c0)="f970147d8143590503f760440ab4ce0e27f04fa60dc51e4a5c4bfdaa3af83ab3c6b1f4218b92a9214bafe5ed0e7850b8fb56bbd4c124082cf04e935898b9a837794a778430", 0x45}, {&(0x7f0000000340)="13c2881145a1b8a2f477f399f03152bb24ab72865524f1ed9871a691ab7c570ecad973e66840a787ea1697adc6d157", 0x2f}, {&(0x7f0000000380)="ba432721ea2eab1be92e988a4d8bde8b972a5ac296c7077a9428546276280465fbe007ae295ef9320c732f7aebd9fc7a7057d9f8b308a087533354f4c10f8f72df33d3e3296dd205e508614a27d83e799acb8c2e556e33452a1efc251f331902f064959af999bb7d6685ae916d19cd38ae9b4f1f52a555d907c26ceb98937ad37eb9a896533c3d2eef32397b54ce5a569423c2ea2254a3339de304836ca9d8f6c97784026f82ba86e0eb142be585c3b5bb234987caf15722", 0xb8}, {&(0x7f0000000440)="957020abbf185107e059ac2abd67b120133d684ff57122bbaacb97f0e6da879b1e1bf397d44256f08a84e6140f", 0x2d}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="1847bbf24a164b0d398da2ea3dcc92c4e45f6b9cefbcc9edb7a22b567cc150614e0ee0d17e31c498eceb3937d379fa9e9cd9b5a2b4190891167ac0a25be61b09cdf040ceef54639512fc4fdac6e64b416d6a4873737f6fb65077aa", 0x5b}], 0xa) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000480)=[{0x0, 0x85fd, 0x1000}], 0x1) (async) semop(r3, &(0x7f0000000480)=[{0x0, 0x85fd, 0x1000}], 0x1) semop(r3, &(0x7f00000004c0)=[{0x4, 0xffff, 0x1000}, {0x2, 0x8001, 0x800}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000740)="88", 0x1}], 0x1}, 0x4048043) (async) sendmsg$inet6(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000740)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000780)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000780)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000007c0)={0x4, 0x1, 0x2, 0x1, 0x2c45, 0x4, 0x0, 0x10, 0x2}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000007c0)={0x4, 0x1, 0x2, 0x1, 0x2c45, 0x4, 0x0, 0x10, 0x2}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000900)={0x1, 0x200, 0x99e, 0x8}, 0x10) sendmmsg$inet(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)='R', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040040) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) semop(r3, &(0x7f0000000500)=[{0x4, 0x741d}], 0x1) flock(r0, 0x2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 871.506684ms ago: executing program 2 (id=1521): r0 = socket$inet_smc(0x2b, 0x1, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x2b, 0x6, 0x0, {0x5, 0x3, 0x2, 0x0, '[-'}}, 0x2b) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0xccb, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x11) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x106, 0x8}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYBLOB="88bf32f04932ca15233e6f6163e3f9ae1881a7ca2f1ead0b1c761715917980e5b66af7824a4f474c94e8f7b228b4101d45156c822236525ef964b1d29d5a43d97d94bbbda3a5f096513a7da0704851478e87864ed9c1171e7be9dcf526b51833933f16bd1e93d358c6", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0xc, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x4, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x20, 0x0, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x5, 0x0, @void}}}}}}}, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x418103, 0xa, 0xf}, 0x18) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x30, 0x0) r4 = fanotify_init(0x0, 0x0) r5 = dup(r4) fanotify_mark(r4, 0x401, 0x1018, r5, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r5, 0x0) landlock_restrict_self(r3, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@bridge_newneigh={0x1b, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, 0x0, 0x40, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) rmdir(&(0x7f00000004c0)='./file0\x00') pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r9, 0xfffffffffffffc01, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000680)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) tkill(r7, 0x33) 747.881019ms ago: executing program 2 (id=1522): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='fd', 0x0, r0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r2 = syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$ITER_CREATE(0xb, &(0x7f0000001480), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000015c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d86e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b9004d564bb800100000ba000000000f300f01c20f01df0f001366ba38f8ffef66bafc0ceeb9d80900000f32b8010000000f01d9ad34b6d0b6d00000c0d741e88fe88f0400000f300f01c866baf80cb8dcfd4f8aef66bafc0cb80f000000ef", 0x5f}], 0x1, 0x41, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x40, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r10, 0x40246f4c, &(0x7f0000000240)={0x30a32c0, 0x1, @vsb={0x99063a4a1cd41c7}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r11, 0x2, 0x70bd25, 0x8, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) setns(0xc9, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)={0x1c, 0x31, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 652.41757ms ago: executing program 3 (id=1523): mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000c00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x8850) 605.289216ms ago: executing program 3 (id=1524): setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005100)={0x1, 0x4, &(0x7f00000051c0)=ANY=[@ANYBLOB="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"], &(0x7f0000005300)='GPL\x00', 0x5, 0xfd90, &(0x7f0000005340)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005400), 0x1f3, 0x10, &(0x7f0000005440)={0x0, 0x0, 0x0, 0x500}, 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a) 527.947154ms ago: executing program 3 (id=1525): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x10, 0x78c7, 0x5, 0x0, {{0x26, 0x4, 0x3, 0x38, 0x98, 0x67, 0x0, 0x6, 0x4, 0x0, @empty, @empty, {[@end, @timestamp_addr={0x44, 0x1c, 0xa4, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010102, 0x9}, {@loopback, 0x6}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x609f}, {@local, 0xf2}]}, @timestamp_addr={0x44, 0x4c, 0xd, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xdda}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x2}, {@multicast2, 0x4}, {@loopback, 0x1a6}, {@loopback, 0x9}, {@rand_addr=0x64010101, 0x2}, {@empty, 0x8}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x31c, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[#\'-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':@.#+!&\xa3\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x704e}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "1beefb1d4e11fb1aba78dbbb1e1ea395aeb352fb80df2719302f913e242f6ab05694bafaff1f4e89349f1938a6d5425a18f4e4ba3696edb3227b64f4055ad734a44ea39c937d26afb2b5b0527bb7b8b4b1ddd1c38fbe1c6c94a5200b9834fb40d837a63aeaa8c7ad57b15bc2fe69aca9275b8e5902091fef5810b3669cc89f87923180217d220171a1af86fbabd8a2ba23ddaaad010f4979e281d63221139bc468388989fc"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x46b3}]}, @ETHTOOL_A_WOL_MODES={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xef, 0x5, "9ae82509f07fe25d83acaaf6b6162f93476442b0ef94f3dea16552b33100473f1e87de410d80ee2a98a2de9a465c70bba27c45d1aa24027e5b519ebe21ef22166b2ff74d02a33b00c50f5e7e978c4fdf5dec1706e2c9d7a8ee824bde5018025f9b2cceb7af951f1ce54b873c266a3ca0420f486263009f48f2956506341181455101f489564e882293ca8aba8186b9955dc7e23dc2455a74bbff5acaf1f4532c1fc8bb142d04483d927b8e32144d1a932f5d21503ff34a4532db78f011526ecea329b11748863220a73cf5d31598e4bd155f0e9d477eef9d10cc9e7c91f4a7ddc81df34cdb036583e9654b"}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x44000}, 0x4020) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001100)={0x0, 0x3c, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 398.288457ms ago: executing program 7 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0x10000078c}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000580)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") (async) ioctl(r5, 0xc138fd09, &(0x7f00000005c0)="0400000000000000000000006e0100003801000001") setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000600)=0x8000, 0x4) (async, rerun: 64) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) (rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000440)='27', 0x2) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x4f, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 271.981989ms ago: executing program 8 (id=1527): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11fa80, 0x80) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x3c080, 0x80) close_range(r1, r0, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x4, 0x40) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f00000001c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) lseek(r5, 0xfffffffffffffffb, 0x0) read(r3, &(0x7f0000000240)=""/99, 0x63) write$binfmt_register(r1, &(0x7f00000002c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, ').', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x4f, 0x43, 0x4f, 0x50, 0x46, 0x4f, 0x46]}, 0x32) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x440240, 0x0) read$dsp(r6, &(0x7f0000000340)=""/245, 0xf5) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000440)={0x0, 0x8, [0x3, 0x5, 0x7fff, 0x744, 0x6, 0x8]}) connect(r4, &(0x7f0000000480)=@x25, 0x80) read$alg(r1, &(0x7f0000000500)=""/20, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000740)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000800)={0x200000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0x2f}, &(0x7f0000000640)=""/156, 0x9c, &(0x7f0000000700)=""/32, &(0x7f00000007c0)=[r7, 0xffffffffffffffff], 0x2, {r1}}, 0x58) faccessat2(r1, &(0x7f0000000880)='./file0\x00', 0xebe6d320d442a1be, 0x300) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000c80)={{r5, &(0x7f00000008c0)=').', 0x92400, &(0x7f0000000900)={@_ha_fsid={[0x9, 0x8001]}, {0x6, 0x9, 0x6, 0x6}}, 0x1, &(0x7f0000000940), &(0x7f0000000980)=0x8cd}, 0x3, &(0x7f0000000c00)=[{0x1, 0x4, &(0x7f00000009c0)='M', &(0x7f0000000a00)="fad0dfba9923c625df9d0510b8f845fa29bc3df2a25f10bd867dbe067bcb18e0196a2daa516e55ef3a44adb4746bd2997482daf4151b9382b52077bbe05ff6dbc24741", 0x43, 0x2}, {0xe5477da383218302, 0x7fff, &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)="65853c155c652627257b1cb62ebcd9ff19e0e8da70c761eb85b0ee86ea2898e44ba4f73052e2826feb5b6299ff9732c2b1692fe966bf2a6fbc847e04e7b13fb32db6d754106558e8f9ceee70713ee737f37b189bd2adf99f9964e16b17f866519d4b289d55b3b8ab1f9ef7d246", 0x6d}, {0x2, 0x80, &(0x7f0000000b40)='#\x00', &(0x7f0000000b80)="de778334039b01ec55393db1583b0d2a77e1cfae3e27ba320ceb46b9bd989ef7d2c0000dd081a95bd183ed049285a2fb30764e88b58c78ed876e3909645f4ca92957e04aa892a4887d6048ca6efee3a194dee449e98c8796cdb2268c742d182fca92636477f28588aea48d419553014737d600c82f9e3b", 0x77, 0x30}]}) socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r8) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000e80), 0x640441, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f40), 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r10, 0x4058587a, &(0x7f0000001140)={{r11, &(0x7f0000000f80)='\x00', 0x80800, &(0x7f0000000fc0)={@_ha_fsid={[0xae93032, 0x7c168d0c]}, {0xb118, 0xdc0, 0x100, 0xb6}}, 0x5, &(0x7f0000001000), &(0x7f0000001040)=0x976}, {[0x8b, 0x6f, 0x0, 0xb]}, 0x4, 0x93, &(0x7f0000001080)=""/147}) 258.125399ms ago: executing program 3 (id=1528): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x5) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10140, 0x0) 194.339298ms ago: executing program 2 (id=1529): r0 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001240)={0x6, [[0x80000022, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0xfffeffff, 0xfffff9ff], [0x39a0, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff8, 0x5], [0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0x1, 0xe8e1, 0xffffffff, 0x400]], '\x00', [{0x8, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a1, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1020, 0x0, 0x0, 0x1}, {0x2, 0xd6, 0x0, 0x0, 0x1}, {0x2710, 0x8f4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x204000, 0x0, 0x0, 0x1}, {0x5, 0x200f4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000009500000500000a70000000060a010400000000000000000a00000144000480400001800b0001007461726765740000300002800800024000000002140003007339f2179455afb9fdd672ba010000000d000100434f4e4e4d41524b000000000900020073797a32000000000900010073797a31"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f00000014c0)={0x1, 0x7, 0x1, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x7, 0x341, 0x5}) (async) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 162.494938ms ago: executing program 3 (id=1530): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000580)='./cgroup\x00', &(0x7f00000005c0)='gfs2\x00', 0x4090, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x2, @local}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000400)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000280)={0x2, 0x0, 0x5, 0x0, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x14, r3, 0x0, r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x800, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000580)='./cgroup\x00', &(0x7f00000005c0)='gfs2\x00', 0x4090, 0x0) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x2, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000400)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000280)={0x2, 0x0, 0x5, 0x0, 0x2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x14, r3, 0x0, r2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x800, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) 109.405775ms ago: executing program 2 (id=1531): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x791}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20061090}, 0xd0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@ipv6_newnexthop={0x5c, 0x68, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x34, 0x8, 0x0, 0x1, @ip6=[@LWTUNNEL_IP6_SRC={0x14, 0x3, @mcast1}, @LWTUNNEL_IP6_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x2}}}, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x7f}]}]}, 0x5c}}, 0xc880) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x791}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20061090}, 0xd0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002140)={'wg2\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@ipv6_newnexthop={0x5c, 0x68, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x34, 0x8, 0x0, 0x1, @ip6=[@LWTUNNEL_IP6_SRC={0x14, 0x3, @mcast1}, @LWTUNNEL_IP6_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x2}}}, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x7f}]}]}, 0x5c}}, 0xc880) (async) 75.528851ms ago: executing program 7 (id=1532): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8001, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0x6, 0x21b, 0xbbf, 0x7ff, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x10, 0x16, 0x10, 0x5, 0x401, 0xffff0e3e, 0x405, 0xa, 0x81, 0x9, 0x7ff, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x7, 0x3, 0x9, 0x9, 0x4, 0x1, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x2, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x9, 0xfffffff8, 0x401, 0x46, 0xf1, 0xd, 0xab00060, 0x5, 0x6, 0x2, 0xfffffffd, 0x80000001, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x1, 0xb1, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x3e, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x0, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x5, 0x7f, 0x10000, 0x1, 0x2, 0x2, 0x0, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x8000006, 0x10000, 0xfffffffd, 0x9b9, 0x1], [0xa772, 0x6, 0x6, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x2, 0x7, 0x1e, 0x9, 0x81, 0x10, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x777b, 0x3, 0x4, 0x400100, 0xd8cc, 0x7fffffff, 0x100009, 0xe, 0xfffffffd, 0x3, 0x1ff, 0x2000c03, 0x2, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26b, 0x6, 0x0, 0x4, 0xfffffff9, 0x1009, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async, rerun: 64) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f0000000380)={0x1, 0x7ab0715dca68fed7, 0x4, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000400)='batadv_slave_1\x00', 0x10) (async, rerun: 32) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0xfffd, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x4004010) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd8}, 0x2004c084) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) setrlimit(0x2, &(0x7f0000000100)={0x3, 0x2}) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 56.133158ms ago: executing program 3 (id=1533): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) write(r1, &(0x7f00000004c0)="a02ec85e363584621c3f872d476158fb6b516a25de3b5685c85527d4afc8d6b93d7a75ce35439a43a13f41eb55c043c4281eed20a446dfa915a9abd7075db5ea8fe000b494bb25cb5c4147cde2e31e6b591f3132cdeec82bd92fbdfb5ecb0512b41a1e46", 0x64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x2, &(0x7f0000000440)=[{0x0, 0x3, 0x0, 0x3}, {0xce7e, 0x6, 0x8, 0x7}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl(r5, 0xc048aeca, &(0x7f0000000480)) (async) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001540), 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth/file0\x00', 0x200000, 0x111) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth/file0\x00', 0x40000, 0x41) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x93}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20060000}, 0x4000000) (async, rerun: 64) write(r8, &(0x7f0000000040)='27', 0x2) (async, rerun: 64) r10 = syz_io_uring_setup(0x18d6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x2, &(0x7f0000000680), 0xfe) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_FILES(r10, 0x3, 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1ff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x2, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11}, 0x94) 54.99224ms ago: executing program 2 (id=1534): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x88480, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a9050000004074640001", 0xa}, {&(0x7f0000000100)="736ab5c685154eb9e0f0143a3d10dbe10207a46e7dc0f467d0f0d083762559b0a684", 0x22}], 0x2}}], 0x1, 0x840) syz_open_dev$video4linux(&(0x7f0000000e40), 0x3f, 0x8e241) 0s ago: executing program 2 (id=1535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='memory.swap.high\x00', 0x2, 0x0) fcntl$setlease(r3, 0x400, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff58, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x2f, 0x5, 0xe5, 0x3, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x0, 0x7}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./drv\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./drv/unbind\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='0000:00:1f.3', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000980)="06302bc5ac0281e73220e8fd56f0c519ce60eb1887bb0451142afc981b553188fb59ea875a69cbe49262b261732d4f8177125633b3492c42aa523ef35dec0ecc3e442d71bf2bb3b2", 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./drv/bind\x00', 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r8) write(r7, &(0x7f00000008c0)='0000:00:1f.3', 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800880014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000072ca001000010000000000000000000500000a300000000c0a01010000000000000000000000060900020073797a31000000000900010073797a310000000004000380140000001100010000000000000000000100000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) kernel console output (not intermixed with test programs): ber 20 using dummy_hcd [ 188.075235][ T10] usb 7-1: device descriptor read/8, error -71 [ 188.084873][ T43] audit: type=1400 audit(2000000040.622:1337): avc: denied { write } for pid=10563 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.192360][ T43] audit: type=1400 audit(2000000040.725:1338): avc: denied { read } for pid=10568 comm="syz.7.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.219791][T10571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=157 sclass=netlink_xfrm_socket pid=10571 comm=syz.7.984 [ 188.219842][T10572] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=157 sclass=netlink_xfrm_socket pid=10572 comm=syz.7.984 [ 188.243121][T10572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10572 comm=syz.7.984 [ 188.243233][T10571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10571 comm=syz.7.984 [ 188.330190][ T1048] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 188.330330][ T10] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 188.352193][ T10] usb 7-1: device descriptor read/8, error -71 [ 188.352371][ T1048] usb 8-1: device descriptor read/8, error -71 [ 188.469245][ T10] usb usb7-port1: unable to enumerate USB device [ 188.607944][ T1048] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 188.629899][ T1048] usb 8-1: device descriptor read/8, error -71 [ 188.722026][T10590] 9p: Bad value for 'rfdno' [ 188.743713][T10592] netlink: 'syz.7.991': attribute type 3 has an invalid length. [ 188.743726][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.7.991'. [ 188.746997][ T1048] usb usb8-port1: unable to enumerate USB device [ 188.950465][T10598] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.971269][ T5778] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 188.995938][ T1048] usb 13-1: USB disconnect, device number 16 [ 189.058721][ T43] audit: type=1400 audit(2000000041.530:1339): avc: denied { execute } for pid=10599 comm="syz.7.994" path="/dev/audio1" dev="devtmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 189.268817][T10606] overlayfs: failed to resolve './file0/file1': -2 [ 189.580494][ T7921] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 189.742061][ T7921] usb 13-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 189.742885][ T7921] usb 13-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 189.742923][ T7921] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.962670][ T7921] cdc_acm 13-1:1.0: ttyACM0: USB ACM device [ 189.973218][ T7921] usb 13-1: USB disconnect, device number 17 [ 190.038393][ T43] audit: type=1400 audit(2000000042.447:1340): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.172879][T10612] syz.8.998 (10612): drop_caches: 2 [ 190.264362][T10632] overlayfs: failed to resolve 'lower1': -2 [ 190.511406][T10649] can0: slcan on ttynull. [ 190.590242][T10649] block nbd2: shutting down sockets [ 190.656768][T10648] can0 (unregistered): slcan off ttynull. [ 191.011665][T10689] 9pnet_virtio: no channels available for device 127.0.0.1 [ 191.012157][T10689] FAULT_INJECTION: forcing a failure. [ 191.012157][T10689] name failslab, interval 1, probability 0, space 0, times 0 [ 191.012172][T10689] CPU: 2 UID: 0 PID: 10689 Comm: syz.2.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.012186][T10689] Tainted: [L]=SOFTLOCKUP [ 191.012190][T10689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.012195][T10689] Call Trace: [ 191.012217][T10689] [ 191.012223][T10689] dump_stack_lvl+0x100/0x190 [ 191.012254][T10689] should_fail_ex.cold+0x5/0xa [ 191.012271][T10689] should_failslab+0xc2/0x120 [ 191.012288][T10689] kmem_cache_alloc_noprof+0x92/0x6a0 [ 191.012309][T10689] ? __fget_files+0x215/0x3d0 [ 191.012323][T10689] ? create_new_namespaces+0x30/0xac0 [ 191.012341][T10689] create_new_namespaces+0x30/0xac0 [ 191.012360][T10689] __do_sys_setns+0x20f/0x1f90 [ 191.012375][T10689] ? __x64_sys_futex+0x358/0x4d0 [ 191.012390][T10689] ? __pfx___do_sys_setns+0x10/0x10 [ 191.012411][T10689] do_syscall_64+0x123/0x7b0 [ 191.012451][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.012463][T10689] RIP: 0033:0x7fb625fa8f19 [ 191.012474][T10689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.012485][T10689] RSP: 002b:00007fb626e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 191.012497][T10689] RAX: ffffffffffffffda RBX: 00007fb626225fa0 RCX: 00007fb625fa8f19 [ 191.012504][T10689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 191.012510][T10689] RBP: 00007fb626037f6d R08: 0000000000000000 R09: 0000000000000000 [ 191.012516][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.012523][T10689] R13: 00007fb626226038 R14: 00007fb626225fa0 R15: 00007ffe6f7ba638 [ 191.012537][T10689] [ 191.216044][T10690] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1013'. [ 191.387800][ T1048] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 191.431294][T10714] FAULT_INJECTION: forcing a failure. [ 191.431294][T10714] name failslab, interval 1, probability 0, space 0, times 0 [ 191.431315][T10714] CPU: 3 UID: 0 PID: 10714 Comm: syz.3.1021 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.431329][T10714] Tainted: [L]=SOFTLOCKUP [ 191.431333][T10714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.431339][T10714] Call Trace: [ 191.431343][T10714] [ 191.431347][T10714] dump_stack_lvl+0x100/0x190 [ 191.431369][T10714] should_fail_ex.cold+0x5/0xa [ 191.431386][T10714] should_failslab+0xc2/0x120 [ 191.431400][T10714] kmem_cache_alloc_noprof+0x92/0x6a0 [ 191.431416][T10714] ? d_instantiate+0x8a/0xb0 [ 191.431431][T10714] ? alloc_empty_file+0x5b/0x1c0 [ 191.431447][T10714] alloc_empty_file+0x5b/0x1c0 [ 191.431462][T10714] alloc_file_pseudo+0x17e/0x290 [ 191.431479][T10714] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 191.431498][T10714] ioctx_alloc+0x5d6/0x21d0 [ 191.431512][T10714] ? __might_fault+0xc5/0x140 [ 191.431525][T10714] ? find_held_lock+0x2b/0x80 [ 191.431537][T10714] ? __pfx_ioctx_alloc+0x10/0x10 [ 191.431550][T10714] __x64_sys_io_setup+0xc9/0x220 [ 191.431561][T10714] do_syscall_64+0x123/0x7b0 [ 191.431575][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.431586][T10714] RIP: 0033:0x7fb5fdfa8f19 [ 191.431595][T10714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.431605][T10714] RSP: 002b:00007fb5fee6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 191.431616][T10714] RAX: ffffffffffffffda RBX: 00007fb5fe225fa0 RCX: 00007fb5fdfa8f19 [ 191.431622][T10714] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 191.431628][T10714] RBP: 00007fb5fe037f6d R08: 0000000000000000 R09: 0000000000000000 [ 191.431634][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.431640][T10714] R13: 00007fb5fe226038 R14: 00007fb5fe225fa0 R15: 00007ffdb2cab008 [ 191.431653][T10714] [ 191.445825][T10716] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 191.468266][T10718] program syz.8.1023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.468311][T10718] ata1.00: invalid transfer count 0 [ 191.511930][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1024'. [ 191.525236][ T1048] usb 12-1: device descriptor read/64, error -71 [ 191.530673][T10724] gadgetfs: bound to dummy_udc driver [ 191.561980][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 191.561992][ T43] audit: type=1400 audit(2000000043.869:1361): avc: denied { block_suspend } for pid=10723 comm="syz.2.1025" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.632899][T10738] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 191.636367][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1028'. [ 191.782640][ T1048] usb 12-1: new full-speed USB device number 10 using dummy_hcd [ 191.829349][T10753] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 191.830156][T10749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.875392][ T43] audit: type=1400 audit(2000000044.160:1362): avc: denied { mount } for pid=10757 comm="syz.8.1034" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 191.877201][ T43] audit: type=1400 audit(2000000044.160:1363): avc: denied { mounton } for pid=10757 comm="syz.8.1034" path="/176/sec" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 191.897468][ T43] audit: type=1400 audit(2000000044.188:1364): avc: denied { unmount } for pid=7546 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 191.920623][ T1048] usb 12-1: device descriptor read/64, error -71 [ 191.926055][T10764] overlayfs: failed lookup in lower (newroot/177, name='bus', err=-40): overlapping layers [ 191.929260][T10764] overlayfs: failed lookup in lower (newroot/177, name='bus', err=-40): overlapping layers [ 191.929393][T10764] overlayfs: failed lookup in lower (newroot/177, name='file0', err=-40): overlapping layers [ 191.929627][T10765] overlayfs: failed lookup in lower (newroot/177, name='file0', err=-40): overlapping layers [ 191.929808][T10764] overlayfs: failed lookup in lower (newroot/177, name='file0', err=-40): overlapping layers [ 191.929935][T10765] overlayfs: failed lookup in lower (newroot/177, name='file0', err=-40): overlapping layers [ 191.931404][T10764] overlayfs: failed lookup in lower (newroot/177, name='file0', err=-40): overlapping layers [ 191.934142][T10764] geneve1: entered allmulticast mode [ 191.959409][T10767] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 192.039636][ T1048] usb usb12-port1: attempt power cycle [ 192.044903][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 192.045509][ T43] audit: type=1400 audit(2000000044.328:1365): avc: denied { watch } for pid=10768 comm="syz.8.1037" path="/178/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 192.047387][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 192.113883][T10778] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1041'. [ 192.113900][T10778] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1041'. [ 192.116073][ T43] audit: type=1400 audit(2000000044.393:1366): avc: denied { listen } for pid=10779 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.132144][ T43] audit: type=1400 audit(2000000044.403:1367): avc: denied { write } for pid=10779 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.171264][T10787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1038'. [ 192.375329][ T43] audit: type=1400 audit(2000000044.637:1368): avc: denied { mounton } for pid=10792 comm="syz.8.1043" path="/181/file0" dev="tmpfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 192.401608][ T1048] usb 12-1: new full-speed USB device number 11 using dummy_hcd [ 192.423510][ T1048] usb 12-1: device descriptor read/8, error -71 [ 192.432072][ T43] audit: type=1400 audit(2000000044.684:1369): avc: denied { mounton } for pid=10794 comm="syz.3.1045" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 192.432746][T10795] FAT-fs (nullb0): bogus number of reserved sectors [ 192.432757][T10795] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 192.519041][ T7921] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 192.519186][ T9565] IPVS: starting estimator thread 0... [ 192.636605][T10799] IPVS: using max 48 ests per chain, 115200 per kthread [ 192.681224][ T1048] usb 12-1: new full-speed USB device number 12 using dummy_hcd [ 192.695800][ T7921] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 192.695824][ T7921] usb 7-1: no configurations [ 192.695830][ T7921] usb 7-1: can't read configurations, error -22 [ 192.701546][ T1048] usb 12-1: device descriptor read/8, error -71 [ 192.818594][ T1048] usb usb12-port1: unable to enumerate USB device [ 192.839661][ T7921] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 192.943378][ T43] audit: type=1400 audit(2000000045.161:1370): avc: denied { mount } for pid=10815 comm="syz.3.1050" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 193.011052][ T7921] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 193.011076][ T7921] usb 7-1: no configurations [ 193.011082][ T7921] usb 7-1: can't read configurations, error -22 [ 193.012696][ T7921] usb usb7-port1: attempt power cycle [ 193.384787][ T7921] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 193.409275][ T7921] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 193.409298][ T7921] usb 7-1: no configurations [ 193.409304][ T7921] usb 7-1: can't read configurations, error -22 [ 193.532053][T10830] xt_nfacct: accounting object `' does not exist [ 193.545053][ T7921] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 193.567459][ T7921] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 193.567482][ T7921] usb 7-1: no configurations [ 193.567488][ T7921] usb 7-1: can't read configurations, error -22 [ 193.567601][ T7921] usb usb7-port1: unable to enumerate USB device [ 193.583569][T10832] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 193.583584][T10832] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.591366][T10832] vhci_hcd vhci_hcd.0: Device attached [ 193.651830][T10833] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0 [ 193.658287][ T6615] vhci_hcd vhci_hcd.8: stop threads [ 193.658299][ T6615] vhci_hcd vhci_hcd.8: release socket [ 193.658310][ T6615] vhci_hcd vhci_hcd.8: disconnect device [ 194.095005][T10837] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1056'. [ 194.117864][T10840] jffs2: notice: (10840) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 194.374388][T10858] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1061'. [ 194.661674][T10870] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6.7.2688553868), cmd(9) [ 195.110818][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 195.122453][T10872] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 195.124212][T10872] VFS: Can't find a romfs filesystem on dev nullb0. [ 195.124212][T10872] [ 195.900470][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.900520][ T1449] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.789251][T10866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.793962][T10905] netlink: 'syz.2.1073': attribute type 3 has an invalid length. [ 197.793977][T10905] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 197.793984][T10905] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1073'. [ 197.793993][T10905] NCSI netlink: No device for ifindex 0 [ 197.826375][T10909] netlink: 'syz.2.1074': attribute type 4 has an invalid length. [ 197.887649][T10914] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1076'. [ 197.926471][T10916] loop0: detected capacity change from 4096 to 4095 [ 197.997162][T10923] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 198.058095][T10914] FAULT_INJECTION: forcing a failure. [ 198.058095][T10914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.058115][T10914] CPU: 0 UID: 0 PID: 10914 Comm: syz.8.1076 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.058129][T10914] Tainted: [L]=SOFTLOCKUP [ 198.058133][T10914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.058138][T10914] Call Trace: [ 198.058148][T10914] [ 198.058152][T10914] dump_stack_lvl+0x100/0x190 [ 198.058181][T10914] should_fail_ex.cold+0x5/0xa [ 198.058199][T10914] strncpy_from_user+0x3b/0x2d0 [ 198.058221][T10914] __do_sys_add_key+0xd4/0x460 [ 198.058235][T10914] ? __pfx___do_sys_add_key+0x10/0x10 [ 198.058252][T10914] do_syscall_64+0x123/0x7b0 [ 198.058277][T10914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.058288][T10914] RIP: 0033:0x7f63201a8f19 [ 198.058307][T10914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.058317][T10914] RSP: 002b:00007f632111c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 198.058329][T10914] RAX: ffffffffffffffda RBX: 00007f6320425fa0 RCX: 00007f63201a8f19 [ 198.058336][T10914] RDX: 0000000000000000 RSI: 0000200000000ec0 RDI: 0000200000000e80 [ 198.058342][T10914] RBP: 00007f6320237f6d R08: fffffffffffffffe R09: 0000000000000000 [ 198.058348][T10914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.058355][T10914] R13: 00007f6320426038 R14: 00007f6320425fa0 R15: 00007ffd12cc1d18 [ 198.058370][T10914] [ 198.059177][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 198.059187][ T43] audit: type=1400 audit(2000000049.952:1386): avc: denied { read } for pid=10911 comm="syz.8.1076" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 198.059211][ T43] audit: type=1400 audit(2000000049.952:1387): avc: denied { open } for pid=10911 comm="syz.8.1076" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 198.060852][ T43] audit: type=1400 audit(2000000049.952:1388): avc: denied { ioctl } for pid=10911 comm="syz.8.1076" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 198.262332][T10951] input: syz0 as /devices/virtual/input/input24 [ 198.268345][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1087'. [ 198.270793][ T43] audit: type=1400 audit(2000000050.158:1389): avc: denied { listen } for pid=10952 comm="syz.7.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.271128][ T43] audit: type=1400 audit(2000000050.158:1390): avc: denied { accept } for pid=10952 comm="syz.7.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.411806][T10960] loop2: detected capacity change from 0 to 7 [ 198.417591][T10960] Dev loop2: unable to read RDB block 7 [ 198.417612][T10960] loop2: unable to read partition table [ 198.417802][T10960] loop2: partition table beyond EOD, truncated [ 198.417828][T10960] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.485209][T10962] netlink: 'syz.8.1091': attribute type 23 has an invalid length. [ 198.613125][ T43] audit: type=1400 audit(2000000050.476:1391): avc: denied { ioctl } for pid=10964 comm="syz.8.1092" path="/macvtap0" dev="tmpfs" ino=13 ioctlcmd=0x400454d4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 198.617425][T10965] Bluetooth: hci0: unsupported parameter 5135 [ 198.617450][T10965] Bluetooth: hci0: invalid len left 14, exp >= 258 [ 198.674634][T10969] MTD: Couldn't look up './cgroup': -15 [ 198.727401][ T43] audit: type=1400 audit(2000000050.570:1392): avc: denied { bind } for pid=10970 comm="syz.8.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.729895][ T43] audit: type=1400 audit(2000000050.588:1393): avc: denied { listen } for pid=10970 comm="syz.8.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.764997][T10971] block device autoloading is deprecated and will be removed. [ 198.771365][T10971] block device autoloading is deprecated and will be removed. [ 198.771629][T10971] device-mapper: table: 248:12: cache: Error opening origin device (-ENOENT) [ 198.771642][T10971] device-mapper: ioctl: error adding target to table [ 198.777531][ T43] audit: type=1400 audit(2000000050.626:1394): avc: denied { write } for pid=10970 comm="syz.8.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.827356][T10973] netlink: 'syz.8.1096': attribute type 29 has an invalid length. [ 198.828524][T10973] FAULT_INJECTION: forcing a failure. [ 198.828524][T10973] name failslab, interval 1, probability 0, space 0, times 0 [ 198.828570][T10973] CPU: 2 UID: 0 PID: 10973 Comm: syz.8.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.828587][T10973] Tainted: [L]=SOFTLOCKUP [ 198.828591][T10973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.828597][T10973] Call Trace: [ 198.828606][T10973] [ 198.828611][T10973] dump_stack_lvl+0x100/0x190 [ 198.828644][T10973] should_fail_ex.cold+0x5/0xa [ 198.828662][T10973] should_failslab+0xc2/0x120 [ 198.828680][T10973] __kmalloc_cache_noprof+0x91/0x6d0 [ 198.828695][T10973] ? inode_doinit_with_dentry+0x70b/0x1340 [ 198.828713][T10973] ? inode_doinit_with_dentry+0x7b1/0x1340 [ 198.828732][T10973] inode_doinit_with_dentry+0x7b1/0x1340 [ 198.828749][T10973] ? lockdep_unregister_key+0x198/0x2a0 [ 198.828764][T10973] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 198.828780][T10973] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 198.828796][T10973] selinux_d_instantiate+0x26/0x40 [ 198.828806][T10973] security_d_instantiate+0x14c/0x1b0 [ 198.828820][T10973] d_splice_alias_ops+0xd6/0x1350 [ 198.828832][T10973] ? rcu_is_watching+0x13/0xc0 [ 198.828844][T10973] ? __up_read+0x333/0x980 [ 198.828855][T10973] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 198.828866][T10973] ? kernfs_iop_lookup+0x234/0x2d0 [ 198.828877][T10973] ? kernfs_iop_lookup+0x234/0x2d0 [ 198.828890][T10973] kernfs_iop_lookup+0x23f/0x2d0 [ 198.828902][T10973] __lookup_slow+0x155/0x320 [ 198.828919][T10973] lookup_slow+0x54/0x80 [ 198.828936][T10973] link_path_walk+0x1551/0x1bd0 [ 198.828952][T10973] path_openat+0x1a7/0x23f0 [ 198.828968][T10973] ? __pfx_path_openat+0x10/0x10 [ 198.828986][T10973] do_file_open+0x20e/0x430 [ 198.829008][T10973] ? __pfx_do_file_open+0x10/0x10 [ 198.829043][T10973] ? _raw_spin_unlock+0x28/0x50 [ 198.829071][T10973] ? alloc_fd+0x471/0x7a0 [ 198.829090][T10973] do_sys_openat2+0x163/0x1d0 [ 198.829107][T10973] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.829124][T10973] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.829145][T10973] __x64_sys_openat+0x12d/0x210 [ 198.829160][T10973] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.829181][T10973] do_syscall_64+0x123/0x7b0 [ 198.829195][T10973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.829206][T10973] RIP: 0033:0x7f63201a8f19 [ 198.829225][T10973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.829236][T10973] RSP: 002b:00007f632111c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.829248][T10973] RAX: ffffffffffffffda RBX: 00007f6320425fa0 RCX: 00007f63201a8f19 [ 198.829256][T10973] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 198.829263][T10973] RBP: 00007f6320237f6d R08: 0000000000000000 R09: 0000000000000000 [ 198.829270][T10973] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 198.829277][T10973] R13: 00007f6320426038 R14: 00007f6320425fa0 R15: 00007ffd12cc1d18 [ 198.829293][T10973] [ 198.904252][T10975] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 198.904345][ T43] audit: type=1400 audit(2000000050.748:1395): avc: denied { mounton } for pid=10974 comm="syz.3.1097" path="/121/file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 198.996558][T10977] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1098'. [ 199.005109][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1098'. [ 199.151158][T10987] Mount JFS Failure: -22 [ 199.151169][T10987] jfs_mount failed w/return code = -22 [ 199.376881][T11022] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.429515][T11027] input: syz0 as /devices/virtual/input/input25 [ 199.661588][T11033] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1115'. [ 199.932040][T11061] loop7: detected capacity change from 0 to 7 [ 199.937786][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.937842][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.946688][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.946726][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.946806][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.946833][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.946878][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.946906][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.947618][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.947655][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.947712][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.947737][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.947842][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.947887][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.947911][T11061] ldm_validate_partition_table(): Disk read failed. [ 199.947968][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.947994][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.948101][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.948128][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.948190][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.948217][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 199.948306][T11061] Dev loop7: unable to read RDB block 0 [ 199.948654][T11061] loop7: unable to read partition table [ 199.948749][T11061] loop7: partition table beyond EOD, truncated [ 199.948774][T11061] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 200.012523][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1120'. [ 200.132445][T11074] rxe_eth0 speed is unknown, defaulting to 1000 [ 200.306968][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1127'. [ 200.307068][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1127'. [ 200.307152][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1127'. [ 200.307235][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1127'. [ 200.307316][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1127'. [ 200.307396][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1127'. [ 200.307798][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1127'. [ 200.307886][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1127'. [ 200.367169][T11089] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 200.620726][T11103] FAULT_INJECTION: forcing a failure. [ 200.620726][T11103] name failslab, interval 1, probability 0, space 0, times 0 [ 200.620751][T11103] CPU: 2 UID: 0 PID: 11103 Comm: syz.3.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.620766][T11103] Tainted: [L]=SOFTLOCKUP [ 200.620770][T11103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.620777][T11103] Call Trace: [ 200.620780][T11103] [ 200.620785][T11103] dump_stack_lvl+0x100/0x190 [ 200.620810][T11103] should_fail_ex.cold+0x5/0xa [ 200.620827][T11103] should_failslab+0xc2/0x120 [ 200.620841][T11103] kmem_cache_alloc_noprof+0x92/0x6a0 [ 200.620857][T11103] ? __pfx_map_id_range_down+0x10/0x10 [ 200.620876][T11103] ? security_inode_alloc+0x3b/0x2c0 [ 200.620895][T11103] security_inode_alloc+0x3b/0x2c0 [ 200.620910][T11103] inode_init_always_gfp+0xc75/0xfb0 [ 200.620926][T11103] alloc_inode+0x8e/0x250 [ 200.620937][T11103] new_inode+0x22/0x1c0 [ 200.620948][T11103] shmem_get_inode+0x1e3/0xff0 [ 200.620964][T11103] ? __pfx_shmem_get_inode+0x10/0x10 [ 200.620982][T11103] shmem_fill_super+0xb49/0x1410 [ 200.620996][T11103] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 200.621013][T11103] ? __pfx_shmem_fill_super+0x10/0x10 [ 200.621030][T11103] ? cap_capable+0x107/0x430 [ 200.621045][T11103] ? __pfx_shmem_fill_super+0x10/0x10 [ 200.621059][T11103] get_tree_nodev+0xe3/0x190 [ 200.621071][T11103] vfs_get_tree+0x92/0x320 [ 200.621087][T11103] path_mount+0x7d0/0x2850 [ 200.621108][T11103] ? __pfx_path_mount+0x10/0x10 [ 200.621127][T11103] ? lockdep_hardirqs_on+0x7d/0x110 [ 200.621149][T11103] ? putname+0xb1/0x110 [ 200.621167][T11103] ? kmem_cache_free+0x127/0x6c0 [ 200.621187][T11103] ? __x64_sys_mount+0x293/0x310 [ 200.621202][T11103] __x64_sys_mount+0x293/0x310 [ 200.621218][T11103] ? __pfx___x64_sys_mount+0x10/0x10 [ 200.621237][T11103] do_syscall_64+0x123/0x7b0 [ 200.621251][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.621261][T11103] RIP: 0033:0x7fb5fdfa8f19 [ 200.621271][T11103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.621280][T11103] RSP: 002b:00007fb5fee6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.621291][T11103] RAX: ffffffffffffffda RBX: 00007fb5fe225fa0 RCX: 00007fb5fdfa8f19 [ 200.621297][T11103] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 200.621303][T11103] RBP: 00007fb5fe037f6d R08: 0000000000000000 R09: 0000000000000000 [ 200.621310][T11103] R10: 0000000000800001 R11: 0000000000000246 R12: 0000000000000000 [ 200.621315][T11103] R13: 00007fb5fe226038 R14: 00007fb5fe225fa0 R15: 00007ffdb2cab008 [ 200.621329][T11103] [ 200.975363][T11118] xt_ipcomp: unknown flags 1D [ 201.566348][T11130] device-mapper: raid: Choosing default region size of 4MiB [ 201.566898][T11130] device-mapper: table: 248:16: raid: Component device(s) too small (-EINVAL) [ 201.566909][T11130] device-mapper: ioctl: error adding target to table [ 201.626848][T11132] fuse-io-uring is disabled by module parameter [ 202.257466][T11138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.258221][T11148] netlink: 'syz.3.1145': attribute type 12 has an invalid length. [ 202.258399][T11146] team0: entered allmulticast mode [ 202.258411][T11146] team_slave_0: entered allmulticast mode [ 202.258420][T11146] team_slave_1: entered allmulticast mode [ 202.260092][T11146] FAULT_INJECTION: forcing a failure. [ 202.260092][T11146] name failslab, interval 1, probability 0, space 0, times 0 [ 202.260110][T11146] CPU: 2 UID: 0 PID: 11146 Comm: syz.7.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.260124][T11146] Tainted: [L]=SOFTLOCKUP [ 202.260133][T11146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.260139][T11146] Call Trace: [ 202.260142][T11146] [ 202.260147][T11146] dump_stack_lvl+0x100/0x190 [ 202.260169][T11146] should_fail_ex.cold+0x5/0xa [ 202.260185][T11146] should_failslab+0xc2/0x120 [ 202.260199][T11146] kmem_cache_alloc_noprof+0x92/0x6a0 [ 202.260216][T11146] ? prepare_creds+0x2c/0x950 [ 202.260232][T11146] prepare_creds+0x2c/0x950 [ 202.260245][T11146] __sys_setresuid+0x3e0/0x1310 [ 202.260261][T11146] do_syscall_64+0x123/0x7b0 [ 202.260275][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.260285][T11146] RIP: 0033:0x7fbbc25a8f19 [ 202.260295][T11146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.260305][T11146] RSP: 002b:00007fbbc3402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 202.260316][T11146] RAX: ffffffffffffffda RBX: 00007fbbc2825fa0 RCX: 00007fbbc25a8f19 [ 202.260322][T11146] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 202.260328][T11146] RBP: 00007fbbc2637f6d R08: 0000000000000000 R09: 0000000000000000 [ 202.260334][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.260340][T11146] R13: 00007fbbc2826038 R14: 00007fbbc2825fa0 R15: 00007ffe71b6b338 [ 202.260354][T11146] [ 202.261376][T11146] netlink: 'syz.7.1146': attribute type 1 has an invalid length. [ 202.315974][T11152] netlink: Unknown conntrack attr (0) [ 202.316668][T11152] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 202.316722][T11152] SELinux: failed to load policy [ 202.355342][T11157] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 202.481921][T11170] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 202.481936][T11170] block device autoloading is deprecated and will be removed. [ 202.510208][T11167] evm: overlay not supported [ 202.614927][T11175] md/raid1:md2: active with 1 out of 1027 mirrors [ 202.615500][T11175] md2: detected capacity change from 0 to 5884 [ 202.705805][T11170] md: could not open device unknown-block(1,4). [ 202.705857][T11170] md: md_import_device returned -16 [ 202.878803][T11189] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 202.888783][T11192] overlayfs: failed to resolve './file2': -2 [ 202.891864][T11189] bond3: entered promiscuous mode [ 202.892067][T11189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.897740][T11189] bridge0: port 1(syz_tun) entered blocking state [ 202.897820][T11189] bridge0: port 1(syz_tun) entered disabled state [ 202.897915][T11189] syz_tun: entered allmulticast mode [ 202.898597][T11189] syz_tun: entered promiscuous mode [ 203.118752][T11210] bond1: entered promiscuous mode [ 203.119023][T11210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.204157][T11214] tmpfs: Bad value for 'mpol' [ 203.215234][T11214] xfrm1: entered promiscuous mode [ 203.215246][T11214] xfrm1: entered allmulticast mode [ 203.285108][T11218] ip_tables: iptables: counters copy to user failed while replacing table [ 203.622009][ T7921] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 203.783893][ T7921] usb 8-1: not running at top speed; connect to a high speed hub [ 203.783913][ T7921] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 203.784918][ T7921] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.784945][ T7921] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.784956][ T7921] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.784976][ T7921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.793497][ T7921] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 203.802621][ T7921] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 203.802741][ T7921] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 203.808513][ T7921] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 203.817469][ T7921] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 203.817519][ T7921] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 203.820099][ T7921] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 204.071042][ T5889] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 204.125130][T11256] erspan0: entered promiscuous mode [ 204.150643][ T7316] usb 8-1: USB disconnect, device number 10 [ 204.158283][ T7316] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 204.163500][ T7316] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 204.163850][ T7316] keyspan 8-1:1.0: device disconnected [ 204.239479][T11267] ip_tables: iptables: counters copy to user failed while replacing table [ 204.241701][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 204.242293][ T5889] usb 7-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 204.242871][ T5889] usb 7-1: config 0 has no interfaces? [ 204.242896][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.245610][ T5889] usb 7-1: config 0 descriptor?? [ 204.464870][T11236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.465254][T11236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.478451][ T7316] usb 7-1: USB disconnect, device number 26 [ 204.514595][T11278] geneve2: entered promiscuous mode [ 204.709209][T11293] tipc: Started in network mode [ 204.709223][T11293] tipc: Node identity 1001001, cluster identity 4711 [ 204.709230][T11293] tipc: Node number set to 16781313 [ 204.914945][ T5889] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 204.916674][T11295] FAULT_INJECTION: forcing a failure. [ 204.916674][T11295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.916704][T11295] CPU: 2 UID: 0 PID: 11295 Comm: syz.8.1187 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.916719][T11295] Tainted: [L]=SOFTLOCKUP [ 204.916723][T11295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.916729][T11295] Call Trace: [ 204.916737][T11295] [ 204.916741][T11295] dump_stack_lvl+0x100/0x190 [ 204.916772][T11295] should_fail_ex.cold+0x5/0xa [ 204.916789][T11295] copy_fpstate_to_sigframe+0x871/0xb60 [ 204.916803][T11295] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 204.916819][T11295] ? x86_task_fpu+0x5f/0x90 [ 204.916836][T11295] get_sigframe+0x3fb/0x940 [ 204.916849][T11295] ? __pfx_get_sigframe+0x10/0x10 [ 204.916858][T11295] ? rcu_is_watching+0x13/0xc0 [ 204.916874][T11295] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.916896][T11295] ? get_signal+0x173/0x22e0 [ 204.916911][T11295] x64_setup_rt_frame+0x12f/0xce0 [ 204.916925][T11295] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 204.916940][T11295] arch_do_signal_or_restart+0x5ee/0x7e0 [ 204.916952][T11295] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 204.916962][T11295] ? __pfx_restore_altstack+0x10/0x10 [ 204.916985][T11295] exit_to_user_mode_loop+0x139/0x700 [ 204.916995][T11295] ? rcu_is_watching+0x13/0xc0 [ 204.917007][T11295] do_syscall_64+0x661/0x7b0 [ 204.917022][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.917033][T11295] RIP: 0033:0x7f63201a8f19 [ 204.917050][T11295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.917060][T11295] RSP: 002b:00007f63210da0e8 EFLAGS: 00000246 [ 204.917069][T11295] RAX: fffffffffffffffc RBX: 00007f6320426188 RCX: 00007f63201a8f19 [ 204.917076][T11295] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6320426188 [ 204.917081][T11295] RBP: 00007f6320426180 R08: 0000000000000000 R09: 0000000000000000 [ 204.917088][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.917093][T11295] R13: 00007f6320426218 R14: 00007ffd12cc1c30 R15: 00007ffd12cc1d18 [ 204.917107][T11295] [ 204.976065][T11308] No control pipe specified [ 205.085861][ T5889] usb 12-1: Using ep0 maxpacket: 8 [ 205.086342][ T5889] usb 12-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.087222][ T5889] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 205.087255][ T5889] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.087266][ T5889] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.087276][ T5889] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.087287][ T5889] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.087309][ T5889] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.306247][ T5889] usb 12-1: usb_control_msg returned -32 [ 205.306270][ T5889] usbtmc 12-1:16.0: can't read capabilities [ 205.326602][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 205.326619][ T43] audit: type=1400 audit(2000000056.755:1417): avc: denied { ioctl } for pid=11331 comm="syz.8.1196" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 205.326863][ T43] audit: type=1400 audit(2000000056.755:1418): avc: denied { setopt } for pid=11333 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.338190][ T43] audit: type=1400 audit(2000000056.765:1419): avc: denied { bind } for pid=11333 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.338680][ T43] audit: type=1400 audit(2000000056.765:1420): avc: denied { write } for pid=11333 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.409216][T11339] ip_tables: iptables: counters copy to user failed while replacing table [ 205.409998][T11339] ip_tables: iptables: counters copy to user failed while replacing table [ 205.410137][T11339] ip_tables: iptables: counters copy to user failed while replacing table [ 205.410290][T11339] ip_tables: iptables: counters copy to user failed while replacing table [ 205.410833][T11339] ip_tables: iptables: counters copy to user failed while replacing table [ 205.410991][T11339] ip_tables: iptables: counters copy to user failed while replacing table [ 205.411124][T11339] ip_tables: iptables: counters copy to user failed while replacing table [ 205.413680][T11344] fuse: Unknown parameter '00000000000000000004' [ 205.430763][T11340] __nla_validate_parse: 68 callbacks suppressed [ 205.430775][T11340] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1198'. [ 205.464429][T11334] vivid-001: ================= START STATUS ================= [ 205.464458][T11334] vivid-001: Radio HW Seek Mode: Bounded [ 205.464470][T11334] vivid-001: Radio Programmable HW Seek: false [ 205.464480][T11334] vivid-001: RDS Rx I/O Mode: Block I/O [ 205.464489][T11334] vivid-001: Generate RBDS Instead of RDS: false [ 205.464498][T11334] vivid-001: RDS Reception: true [ 205.464506][T11334] vivid-001: RDS Program Type: 0 inactive [ 205.464522][T11334] vivid-001: RDS PS Name: inactive [ 205.464536][T11334] vivid-001: RDS Radio Text: inactive [ 205.464546][T11334] vivid-001: RDS Traffic Announcement: false inactive [ 205.464557][T11334] vivid-001: RDS Traffic Program: false inactive [ 205.464567][T11334] vivid-001: RDS Music: false inactive [ 205.464578][T11334] vivid-001: ================== END STATUS ================== [ 205.542681][T11352] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1200'. [ 205.542693][T11352] tipc: Invalid UDP bearer configuration [ 205.542745][T11352] tipc: Enabling of bearer rejected, failed to enable media [ 206.106634][T11358] xt_hashlimit: size too large, truncated to 1048576 [ 206.165654][ T43] audit: type=1400 audit(2000000057.541:1421): avc: denied { getopt } for pid=11357 comm="syz.3.1202" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.166649][T11360] nvme_fabrics: unknown parameter or missing value 'transport' in ctrl creation request [ 206.167018][T11361] all: renamed from lapb4 (while UP) [ 206.372284][ T43] audit: type=1400 audit(2000000057.738:1422): avc: denied { write } for pid=11366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.467656][ T43] audit: type=1400 audit(2000000057.822:1423): avc: denied { write } for pid=11370 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.763136][T11375] xt_REDIRECT: bad rangesize 26624. [ 207.415570][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 207.575670][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 207.576850][ T10] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.577717][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 207.577740][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.577752][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.577764][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.577775][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.577795][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.713763][ T43] audit: type=1400 audit(2000000058.983:1424): avc: denied { connect } for pid=11392 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 207.775326][ T5839] usb 12-1: USB disconnect, device number 13 [ 207.799693][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.799970][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.803929][T11398] syzkaller0: entered promiscuous mode [ 207.803940][T11398] syzkaller0: entered allmulticast mode [ 207.809107][T11398] tipc: Started in network mode [ 207.809122][T11398] tipc: Node identity 5e9926a80eb6, cluster identity 4711 [ 207.817138][T11398] tipc: Enabled bearer , priority 0 [ 207.835217][ T43] audit: type=1400 audit(2000000059.104:1425): avc: denied { write } for pid=11387 comm="syz.3.1208" name="functions" dev="configfs" ino=20345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.977916][ T43] audit: type=1400 audit(2000000059.235:1426): avc: denied { bind } for pid=11406 comm="syz.7.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 208.060240][T11414] syz.2.1213 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 208.080269][T11408] device-mapper: ioctl: can't change device type (old=2 vs new=1) after initial table load. [ 208.207586][T11407] FAULT_INJECTION: forcing a failure. [ 208.207586][T11407] name failslab, interval 1, probability 0, space 0, times 0 [ 208.207607][T11407] CPU: 3 UID: 0 PID: 11407 Comm: syz.7.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.207620][T11407] Tainted: [L]=SOFTLOCKUP [ 208.207624][T11407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.207630][T11407] Call Trace: [ 208.207633][T11407] [ 208.207638][T11407] dump_stack_lvl+0x100/0x190 [ 208.207659][T11407] should_fail_ex.cold+0x5/0xa [ 208.207676][T11407] should_failslab+0xc2/0x120 [ 208.207689][T11407] __kmalloc_cache_noprof+0x91/0x6d0 [ 208.207708][T11407] ? snd_pcm_oss_open+0x5c5/0x1400 [ 208.207738][T11407] snd_pcm_oss_open+0x5c5/0x1400 [ 208.207761][T11407] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 208.207780][T11407] ? __pfx_default_wake_function+0x10/0x10 [ 208.207806][T11407] ? __lock_acquire+0x5c0/0x1f40 [ 208.207834][T11407] ? do_raw_spin_lock+0x128/0x260 [ 208.207852][T11407] ? soundcore_open+0x231/0x5a0 [ 208.207871][T11407] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 208.207891][T11407] soundcore_open+0x2e3/0x5a0 [ 208.207911][T11407] ? __pfx_soundcore_open+0x10/0x10 [ 208.207927][T11407] chrdev_open+0x234/0x6a0 [ 208.207950][T11407] ? __pfx_chrdev_open+0x10/0x10 [ 208.207973][T11407] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 208.207996][T11407] do_dentry_open+0x674/0x1470 [ 208.208151][T11407] ? __pfx_chrdev_open+0x10/0x10 [ 208.208176][T11407] vfs_open_consume+0xcc/0x460 [ 208.208203][T11407] path_openat+0x1547/0x23f0 [ 208.208230][T11407] ? __pfx_path_openat+0x10/0x10 [ 208.208258][T11407] do_file_open+0x20e/0x430 [ 208.208278][T11407] ? __pfx_do_file_open+0x10/0x10 [ 208.208308][T11407] ? _raw_spin_unlock+0x28/0x50 [ 208.208318][T11407] ? alloc_fd+0x471/0x7a0 [ 208.208336][T11407] do_sys_openat2+0x163/0x1d0 [ 208.208351][T11407] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.208366][T11407] ? find_held_lock+0x2b/0x80 [ 208.208381][T11407] __x64_sys_openat+0x12d/0x210 [ 208.208397][T11407] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.208417][T11407] do_syscall_64+0x123/0x7b0 [ 208.208431][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.208442][T11407] RIP: 0033:0x7fbbc25a8f19 [ 208.208452][T11407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.208461][T11407] RSP: 002b:00007fbbc3402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.208473][T11407] RAX: ffffffffffffffda RBX: 00007fbbc2825fa0 RCX: 00007fbbc25a8f19 [ 208.208480][T11407] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 208.208486][T11407] RBP: 00007fbbc2637f6d R08: 0000000000000000 R09: 0000000000000000 [ 208.208492][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.208497][T11407] R13: 00007fbbc2826038 R14: 00007fbbc2825fa0 R15: 00007ffe71b6b338 [ 208.208511][T11407] [ 208.356103][T11410] device-mapper: ioctl: can't change device type (old=2 vs new=1) after initial table load. [ 208.506487][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1218'. [ 209.015549][ T5839] tipc: Node number set to 1345267368 [ 209.109884][T11455] net_ratelimit: 27 callbacks suppressed [ 209.109904][T11455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.497957][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1230'. [ 209.659580][ T5839] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 209.830999][ T5839] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.831908][ T5839] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.831923][ T5839] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.831934][ T5839] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 209.831944][ T5839] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.833679][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.833696][ T5839] usb 7-1: Product: syz [ 209.833703][ T5839] usb 7-1: Manufacturer: syz [ 209.833709][ T5839] usb 7-1: SerialNumber: syz [ 209.835079][ T5839] usb 7-1: config 0 descriptor?? [ 209.837845][ T5839] usb 7-1: selecting invalid altsetting 0 [ 210.053613][ T25] usb 7-1: USB disconnect, device number 27 [ 210.165525][T11483] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1233'. [ 210.200119][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.200275][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.200391][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.200495][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.200596][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.200698][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.200800][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.200900][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.201006][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.201112][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.8.1234 [ 210.370608][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1236'. [ 210.372461][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1236'. [ 210.388643][ T10] usb 8-1: usb_control_msg returned -71 [ 210.388665][ T10] usbtmc 8-1:16.0: can't read capabilities [ 210.417159][ T10] usb 8-1: USB disconnect, device number 11 [ 210.436329][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'. [ 210.436341][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'. [ 210.441320][T11501] pimreg9: entered allmulticast mode [ 210.562908][T11510] FAULT_INJECTION: forcing a failure. [ 210.562908][T11510] name failslab, interval 1, probability 0, space 0, times 0 [ 210.562927][T11510] CPU: 2 UID: 0 PID: 11510 Comm: syz.7.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.562941][T11510] Tainted: [L]=SOFTLOCKUP [ 210.562944][T11510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.562950][T11510] Call Trace: [ 210.562954][T11510] [ 210.562958][T11510] dump_stack_lvl+0x100/0x190 [ 210.562980][T11510] should_fail_ex.cold+0x5/0xa [ 210.562996][T11510] should_failslab+0xc2/0x120 [ 210.563010][T11510] __kmalloc_noprof+0xfc/0x840 [ 210.563020][T11510] ? __register_sysctl_table+0xac/0x1650 [ 210.563034][T11510] __register_sysctl_table+0xac/0x1650 [ 210.563044][T11510] ? trace_kmalloc+0xeb/0x110 [ 210.563055][T11510] ? __kasan_kmalloc+0xaa/0xb0 [ 210.563067][T11510] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 210.563079][T11510] ? __pfx___register_sysctl_table+0x10/0x10 [ 210.563089][T11510] ? setup_ipc_sysctls+0x5e/0x300 [ 210.563103][T11510] ? __asan_memcpy+0x3c/0x60 [ 210.563119][T11510] setup_ipc_sysctls+0x1aa/0x300 [ 210.563133][T11510] copy_ipcs+0x575/0x7e0 [ 210.563149][T11510] create_new_namespaces+0x20a/0xac0 [ 210.563165][T11510] ? security_capable+0x80/0x260 [ 210.563180][T11510] unshare_nsproxy_namespaces+0xf6/0x210 [ 210.563195][T11510] ksys_unshare+0x44f/0x980 [ 210.563209][T11510] ? __pfx_ksys_unshare+0x10/0x10 [ 210.563228][T11510] __x64_sys_unshare+0x31/0x40 [ 210.563247][T11510] do_syscall_64+0x123/0x7b0 [ 210.563264][T11510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.563275][T11510] RIP: 0033:0x7fbbc25a8f19 [ 210.563285][T11510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.563296][T11510] RSP: 002b:00007fbbc3402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 210.563308][T11510] RAX: ffffffffffffffda RBX: 00007fbbc2825fa0 RCX: 00007fbbc25a8f19 [ 210.563314][T11510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 210.563320][T11510] RBP: 00007fbbc2637f6d R08: 0000000000000000 R09: 0000000000000000 [ 210.563327][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.563334][T11510] R13: 00007fbbc2826038 R14: 00007fbbc2825fa0 R15: 00007ffe71b6b338 [ 210.563350][T11510] [ 210.824364][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 210.857930][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 210.857942][ T43] audit: type=1400 audit(2000000061.930:1434): avc: denied { setopt } for pid=11514 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.984586][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 210.985447][ T10] usb 8-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 210.986441][ T10] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 210.986454][ T10] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 210.986465][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 210.986493][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.986504][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 210.986517][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 210.986536][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.995806][ T10] usb 8-1: config 0 descriptor?? [ 211.193179][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1246'. [ 211.226358][ T10] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 211.237052][ T10] usb 8-1: USB disconnect, device number 12 [ 211.242385][ T10] usblp0: removed [ 211.344555][T11533] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 211.344585][T11533] ALSA: mixer_oss: invalid index 137438 [ 211.344639][T11533] ALSA: mixer_oss: invalid OSS volume '' [ 211.344644][T11533] ALSA: mixer_oss: invalid OSS volume '' [ 211.344659][T11533] ALSA: mixer_oss: invalid OSS volume '' [ 211.344978][T11533] ALSA: mixer_oss: invalid OSS volume '' [ 211.633498][T11546] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1249'. [ 211.689816][ T7935] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 211.822480][T11552] FAULT_INJECTION: forcing a failure. [ 211.822480][T11552] name failslab, interval 1, probability 0, space 0, times 0 [ 211.822510][T11552] CPU: 0 UID: 0 PID: 11552 Comm: syz.8.1250 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.822524][T11552] Tainted: [L]=SOFTLOCKUP [ 211.822528][T11552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.822534][T11552] Call Trace: [ 211.822542][T11552] [ 211.822546][T11552] dump_stack_lvl+0x100/0x190 [ 211.822574][T11552] should_fail_ex.cold+0x5/0xa [ 211.822590][T11552] should_failslab+0xc2/0x120 [ 211.822612][T11552] __kmalloc_noprof+0xfc/0x840 [ 211.822623][T11552] ? __register_sysctl_table+0xbc8/0x1650 [ 211.822635][T11552] ? __register_sysctl_table+0xbe4/0x1650 [ 211.822649][T11552] __register_sysctl_table+0xbe4/0x1650 [ 211.822664][T11552] ? __pfx___register_sysctl_table+0x10/0x10 [ 211.822675][T11552] ? setup_ipc_sysctls+0x5e/0x300 [ 211.822689][T11552] ? __asan_memcpy+0x3c/0x60 [ 211.822707][T11552] setup_ipc_sysctls+0x1aa/0x300 [ 211.822722][T11552] copy_ipcs+0x575/0x7e0 [ 211.822738][T11552] create_new_namespaces+0x20a/0xac0 [ 211.822753][T11552] ? security_capable+0x80/0x260 [ 211.822768][T11552] unshare_nsproxy_namespaces+0xf6/0x210 [ 211.822784][T11552] ksys_unshare+0x44f/0x980 [ 211.822796][T11552] ? __pfx_ksys_unshare+0x10/0x10 [ 211.822816][T11552] __x64_sys_unshare+0x31/0x40 [ 211.822829][T11552] do_syscall_64+0x123/0x7b0 [ 211.822854][T11552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.822865][T11552] RIP: 0033:0x7f63201a8f19 [ 211.822884][T11552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.822894][T11552] RSP: 002b:00007f632111c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 211.822905][T11552] RAX: ffffffffffffffda RBX: 00007f6320425fa0 RCX: 00007f63201a8f19 [ 211.822912][T11552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 211.822918][T11552] RBP: 00007f6320237f6d R08: 0000000000000000 R09: 0000000000000000 [ 211.822925][T11552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.822931][T11552] R13: 00007f6320426038 R14: 00007f6320425fa0 R15: 00007ffd12cc1d18 [ 211.822945][T11552] [ 211.822950][T11552] sysctl could not get directory: /kernel -12 [ 211.850135][ T7935] usb 8-1: Using ep0 maxpacket: 32 [ 211.852884][ T7935] usb 8-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 211.857691][ T7935] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 211.857705][ T7935] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 211.857716][ T7935] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 211.857736][ T7935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.857747][ T7935] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.857792][ T7935] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 211.857813][ T7935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.859055][ T7935] usb 8-1: config 0 descriptor?? [ 211.981991][T11557] netlink: 'syz.8.1254': attribute type 11 has an invalid length. [ 212.053576][T11558] bond4: option downdelay: invalid value (18446744073709551615) [ 212.053591][T11558] bond4: option downdelay: allowed values 0 - 2147483647 [ 212.054721][T11558] bond4 (unregistering): Released all slaves [ 212.084636][ T7935] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 212.119341][T11570] CIFS: bad ip= option (ÛÚyñU£~+1) [ 212.156593][T11569] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 212.156593][T11569] [ 212.156810][T11569] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 212.156956][T11569] CIFS: Attempting to mount //172.20.20.170/share [ 212.214020][ T43] audit: type=1400 audit(2000000063.194:1435): avc: denied { write } for pid=11573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.266435][ T43] audit: type=1400 audit(2000000063.240:1436): avc: denied { view } for pid=11576 comm="syz.7.1257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 212.282281][ T43] audit: type=1400 audit(2000000063.269:1437): avc: denied { write } for pid=11578 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.317734][ T7935] usb 8-1: USB disconnect, device number 13 [ 212.333926][ T7935] usblp0: removed [ 212.436756][ T43] audit: type=1400 audit(2000000063.400:1438): avc: denied { write } for pid=11585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.506903][ T43] audit: type=1400 audit(2000000063.474:1439): avc: denied { write } for pid=11588 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.581184][ T43] audit: type=1400 audit(2000000063.540:1440): avc: denied { write } for pid=11590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.625087][ T43] audit: type=1400 audit(2000000063.587:1441): avc: denied { write } for pid=11593 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.712856][ T43] audit: type=1400 audit(2000000063.662:1442): avc: denied { write } for pid=11595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.779349][ T43] audit: type=1400 audit(2000000063.727:1443): avc: denied { write } for pid=11598 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.943628][T11569] CIFS: VFS: Error connecting to socket. Aborting operation. [ 212.943696][T11569] CIFS: VFS: cifs_mount failed w/return code = -4 [ 212.988932][T11616] overlayfs: invalid origin (0000) [ 213.054199][T11621] FAULT_INJECTION: forcing a failure. [ 213.054199][T11621] name failslab, interval 1, probability 0, space 0, times 0 [ 213.054222][T11621] CPU: 2 UID: 0 PID: 11621 Comm: syz.2.1263 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.054236][T11621] Tainted: [L]=SOFTLOCKUP [ 213.054240][T11621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.054245][T11621] Call Trace: [ 213.054249][T11621] [ 213.054254][T11621] dump_stack_lvl+0x100/0x190 [ 213.054275][T11621] should_fail_ex.cold+0x5/0xa [ 213.054292][T11621] should_failslab+0xc2/0x120 [ 213.054305][T11621] __kmalloc_noprof+0xfc/0x840 [ 213.054315][T11621] ? __register_sysctl_table+0xbc8/0x1650 [ 213.054327][T11621] ? __register_sysctl_table+0xbe4/0x1650 [ 213.054340][T11621] __register_sysctl_table+0xbe4/0x1650 [ 213.054354][T11621] ? __pfx___register_sysctl_table+0x10/0x10 [ 213.054365][T11621] ? setup_ipc_sysctls+0x5e/0x300 [ 213.054381][T11621] ? __asan_memcpy+0x3c/0x60 [ 213.054397][T11621] setup_ipc_sysctls+0x1aa/0x300 [ 213.054411][T11621] copy_ipcs+0x575/0x7e0 [ 213.054427][T11621] create_new_namespaces+0x20a/0xac0 [ 213.054442][T11621] ? security_capable+0x80/0x260 [ 213.054458][T11621] unshare_nsproxy_namespaces+0xf6/0x210 [ 213.054473][T11621] ksys_unshare+0x44f/0x980 [ 213.054486][T11621] ? __pfx_ksys_unshare+0x10/0x10 [ 213.054506][T11621] __x64_sys_unshare+0x31/0x40 [ 213.054519][T11621] do_syscall_64+0x123/0x7b0 [ 213.054532][T11621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.054543][T11621] RIP: 0033:0x7fb625fa8f19 [ 213.054552][T11621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.054562][T11621] RSP: 002b:00007fb626e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 213.054572][T11621] RAX: ffffffffffffffda RBX: 00007fb626225fa0 RCX: 00007fb625fa8f19 [ 213.054578][T11621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 213.054584][T11621] RBP: 00007fb626037f6d R08: 0000000000000000 R09: 0000000000000000 [ 213.054590][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.054595][T11621] R13: 00007fb626226038 R14: 00007fb626225fa0 R15: 00007ffe6f7ba638 [ 213.054609][T11621] [ 213.054613][T11621] sysctl could not get directory: /kernel -12 [ 214.390741][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 214.392462][T11659] fuse: Bad value for 'fd' [ 214.562477][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802882d000: rx timeout, send abort [ 214.562655][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802882d000: 0x2f002: (3) A timeout occurred and this is the connection abort to close the session. [ 214.620731][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880299fb800: rx timeout, send abort [ 214.620895][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880299fb800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 214.884158][T11681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.884173][T11681] IPv6: NLM_F_CREATE should be set when creating new route [ 215.088333][T11686] overlayfs: failed to resolve './file7': -2 [ 215.132439][T11681] tipc: Resetting bearer [ 215.136644][T11681] batman_adv: batadv0: Interface deactivated: gretap1 [ 215.175099][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.175122][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.175142][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.175156][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.175172][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.175185][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.175202][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.177187][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.232985][T11691] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 215.378960][T11700] No control pipe specified [ 215.515598][ T25] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 215.718622][ T5861] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 215.736000][ T25] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 215.736663][ T25] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 215.736686][ T25] usb 7-1: can't read configurations, error -71 [ 215.889631][ T5861] usb 13-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 215.890798][ T5861] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.890819][ T5861] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 215.890834][ T5861] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.890868][ T5861] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 215.890890][ T5861] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 215.893107][ T5861] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.893119][ T5861] usb 13-1: Product: syz [ 215.893126][ T5861] usb 13-1: Manufacturer: syz [ 215.903676][ T5861] cdc_wdm 13-1:1.0: skipping garbage [ 215.903694][ T5861] cdc_wdm 13-1:1.0: skipping garbage [ 215.933972][ T5861] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 215.933990][ T5861] cdc_wdm 13-1:1.0: Unknown control protocol [ 215.959309][T11714] virt_wifi0: mtu greater than device maximum [ 216.031375][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1292'. [ 216.134663][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1290'. [ 216.337173][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 216.337240][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 216.337297][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 216.337352][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 216.337405][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 216.354039][T11724] selinux_netlink_send: 60 callbacks suppressed [ 216.354050][T11724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11724 comm=syz.2.1294 [ 216.442275][T11726] ip_tables: iptables: counters copy to user failed while replacing table [ 216.447335][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 216.447347][ T43] audit: type=1400 audit(2000000004.232:1451): avc: denied { append } for pid=11725 comm="syz.3.1295" name="cpu_dma_latency" dev="devtmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 216.447545][ T43] audit: type=1400 audit(2000000004.232:1452): avc: denied { open } for pid=11725 comm="syz.3.1295" path="/161/dev/cpu_dma_latency" dev="devtmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 216.501636][T11734] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 216.825763][ T43] audit: type=1400 audit(2000000004.588:1453): avc: denied { read } for pid=11758 comm="syz.2.1306" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 216.880974][T11763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11763 comm=syz.2.1307 [ 216.910906][T11765] xt_hashlimit: overflow, rate too high: 1 [ 216.948452][T11767] device-mapper: ioctl: Empty message received. [ 216.950852][T11771] device-mapper: ioctl: Empty message received. [ 217.016731][T11780] netlink: 'syz.2.1319': attribute type 39 has an invalid length. [ 217.088518][ T43] audit: type=1400 audit(2000000004.840:1454): avc: denied { write } for pid=11779 comm="syz.2.1319" name="target" dev="configfs" ino=5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.090297][ T43] audit: type=1400 audit(2000000004.840:1455): avc: denied { write } for pid=11779 comm="syz.2.1319" name="target" dev="configfs" ino=5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.119907][T11785] FAULT_INJECTION: forcing a failure. [ 217.119907][T11785] name failslab, interval 1, probability 0, space 0, times 0 [ 217.119926][T11785] CPU: 0 UID: 0 PID: 11785 Comm: syz.3.1313 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.119942][T11785] Tainted: [L]=SOFTLOCKUP [ 217.119946][T11785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.119953][T11785] Call Trace: [ 217.119957][T11785] [ 217.119961][T11785] dump_stack_lvl+0x100/0x190 [ 217.120010][T11785] should_fail_ex.cold+0x5/0xa [ 217.120029][T11785] should_failslab+0xc2/0x120 [ 217.120042][T11785] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 217.120053][T11785] ? rcu_is_watching+0x13/0xc0 [ 217.120066][T11785] ? kvrealloc_node_align_noprof+0x43/0x120 [ 217.120080][T11785] krealloc_node_align_noprof+0x321/0x3e0 [ 217.120091][T11785] ? trace_kmalloc+0xeb/0x110 [ 217.120103][T11785] kvrealloc_node_align_noprof+0x43/0x120 [ 217.120115][T11785] add_expr+0x5ee/0x8f0 [ 217.120133][T11785] ? __pfx_add_expr+0x10/0x10 [ 217.120146][T11785] ? get_loop_env+0x17e/0x3d0 [ 217.120162][T11785] bpf_compute_scev+0xb72/0x7f60 [ 217.120176][T11785] ? __kasan_kmalloc+0xaa/0xb0 [ 217.120186][T11785] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 217.120196][T11785] ? bpf_check+0x81ce/0xa0f0 [ 217.120204][T11785] ? bpf_prog_load+0x1baf/0x2b20 [ 217.120219][T11785] ? __sys_bpf+0x146f/0x4b60 [ 217.120227][T11785] ? __x64_sys_bpf+0xce/0x140 [ 217.120236][T11785] ? do_syscall_64+0x123/0x7b0 [ 217.120247][T11785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.120280][T11785] ? __pfx_bpf_compute_scev+0x10/0x10 [ 217.120293][T11785] ? bpf_init_scev+0x2f8/0x4d0 [ 217.120312][T11785] bpf_check+0x81f4/0xa0f0 [ 217.120332][T11785] ? __pfx_bpf_check+0x10/0x10 [ 217.120344][T11785] ? find_held_lock+0x2b/0x80 [ 217.120354][T11785] ? bpf_prog_load+0x1af0/0x2b20 [ 217.120372][T11785] ? __asan_memset+0x23/0x50 [ 217.120391][T11785] ? bpf_prog_load+0x1baf/0x2b20 [ 217.120406][T11785] bpf_prog_load+0x1baf/0x2b20 [ 217.120437][T11785] ? avc_has_perm_noaudit+0x11e/0x470 [ 217.120456][T11785] ? __pfx_bpf_prog_load+0x10/0x10 [ 217.120489][T11785] __sys_bpf+0x146f/0x4b60 [ 217.120504][T11785] ? __pfx___sys_bpf+0x10/0x10 [ 217.120513][T11785] ? find_held_lock+0x2b/0x80 [ 217.120525][T11785] ? futex_wake+0x4ea/0x5e0 [ 217.120557][T11785] ? putname+0xb1/0x110 [ 217.120570][T11785] ? kmem_cache_free+0x127/0x6c0 [ 217.120599][T11785] ? __x64_sys_futex+0x34f/0x4d0 [ 217.120611][T11785] ? __x64_sys_futex+0x358/0x4d0 [ 217.120624][T11785] ? __x64_sys_openat+0x12d/0x210 [ 217.120640][T11785] ? xfd_validate_state+0x129/0x190 [ 217.120657][T11785] ? __x64_sys_bpf+0xce/0x140 [ 217.120667][T11785] __x64_sys_bpf+0xce/0x140 [ 217.120678][T11785] ? do_syscall_64+0xae/0x7b0 [ 217.120691][T11785] do_syscall_64+0x123/0x7b0 [ 217.120705][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.120715][T11785] RIP: 0033:0x7fb5fdfa8f19 [ 217.120724][T11785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.120734][T11785] RSP: 002b:00007fb5fee6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.120744][T11785] RAX: ffffffffffffffda RBX: 00007fb5fe225fa0 RCX: 00007fb5fdfa8f19 [ 217.120751][T11785] RDX: 0000000000000094 RSI: 0000200000002ac0 RDI: 0000000000000005 [ 217.120757][T11785] RBP: 00007fb5fe037f6d R08: 0000000000000000 R09: 0000000000000000 [ 217.120762][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.120768][T11785] R13: 00007fb5fe226038 R14: 00007fb5fe225fa0 R15: 00007ffdb2cab008 [ 217.120783][T11785] [ 217.361227][ T43] audit: type=1400 audit(2000000005.083:1456): avc: denied { mounton } for pid=11792 comm="syz.3.1316" path="/164/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 217.434782][ T43] audit: type=1400 audit(2000000005.158:1457): avc: denied { read write } for pid=11800 comm="syz.2.1318" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 217.434941][ T43] audit: type=1400 audit(2000000005.158:1458): avc: denied { open } for pid=11800 comm="syz.2.1318" path="/364/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 217.439380][ T43] audit: type=1400 audit(2000000005.168:1459): avc: denied { ioctl } for pid=11800 comm="syz.2.1318" path="/364/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0xc0184d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 217.529242][T11809] virtio-fs: tag not found [ 217.571511][ T43] audit: type=1400 audit(2000000005.289:1460): avc: denied { write } for pid=11810 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 217.736094][T11815] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 217.736111][T11815] overlayfs: failed to set xattr on upper [ 217.736115][T11815] overlayfs: ...falling back to redirect_dir=nofollow. [ 217.736118][T11815] overlayfs: ...falling back to index=off. [ 217.736122][T11815] overlayfs: ...falling back to uuid=null. [ 217.736125][T11815] overlayfs: ...falling back to xino=off. [ 217.872737][T11822] __nla_validate_parse: 60 callbacks suppressed [ 217.872751][T11822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1324'. [ 218.139513][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 218.147572][T11828] vlan2: entered promiscuous mode [ 218.147587][T11828] hsr0: entered promiscuous mode [ 218.148711][T11828] vlan2: entered allmulticast mode [ 218.148719][T11828] hsr0: entered allmulticast mode [ 218.148725][T11828] hsr_slave_0: entered allmulticast mode [ 218.148733][T11828] hsr_slave_1: entered allmulticast mode [ 218.149798][T11830] hsr_slave_0: left promiscuous mode [ 218.150514][T11830] hsr_slave_1: left promiscuous mode [ 218.200037][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 218.200095][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 218.200139][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 218.200182][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 218.200225][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 218.200269][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 218.200311][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 218.200356][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 218.406476][T11837] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 218.533675][T11847] nfs4: Bad value for 'source' [ 218.679869][ T7921] usb 13-1: USB disconnect, device number 18 [ 218.950704][T11871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.950716][T11871] IPv6: NLM_F_CREATE should be set when creating new route [ 218.969489][T11871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.981543][T11873] syzkaller0: left promiscuous mode [ 218.981566][T11873] syzkaller0: left allmulticast mode [ 219.028522][T11873] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 219.028543][T11873] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 219.028557][T11873] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 219.028566][T11873] One or more global auth toks could not properly register; rc = [-22] [ 219.028596][T11873] Error validating options; rc = [-22] [ 220.154355][T11915] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 220.154371][T11915] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 220.163339][ T6615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.163495][ T6615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.185442][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.270810][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.521364][T11944] overlayfs: failed to get inode (-116) [ 220.521455][T11944] overlayfs: failed to get inode (-116) [ 220.606908][T11946] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 221.044727][T11983] FAULT_INJECTION: forcing a failure. [ 221.044727][T11983] name failslab, interval 1, probability 0, space 0, times 0 [ 221.044748][T11983] CPU: 0 UID: 0 PID: 11983 Comm: syz.7.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.044763][T11983] Tainted: [L]=SOFTLOCKUP [ 221.044767][T11983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.044773][T11983] Call Trace: [ 221.044787][T11983] [ 221.044791][T11983] dump_stack_lvl+0x100/0x190 [ 221.044820][T11983] should_fail_ex.cold+0x5/0xa [ 221.044839][T11983] should_failslab+0xc2/0x120 [ 221.044856][T11983] kmem_cache_alloc_noprof+0x92/0x6a0 [ 221.044873][T11983] ? mas_preallocate+0xc22/0xee0 [ 221.044905][T11983] mas_preallocate+0xc22/0xee0 [ 221.044923][T11983] ? __pfx_mas_preallocate+0x10/0x10 [ 221.044937][T11983] ? mt_find+0x136/0x9b0 [ 221.044955][T11983] ? lock_acquire+0x1d1/0x380 [ 221.044970][T11983] ? avc_has_perm_noaudit+0x56/0x470 [ 221.044986][T11983] vma_link+0x14a/0x8c0 [ 221.045001][T11983] ? __pfx_vma_link+0x10/0x10 [ 221.045018][T11983] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 221.045031][T11983] ? mmap_validate_vma_flags+0x1bd/0x240 [ 221.045044][T11983] ? rcu_is_watching+0x13/0xc0 [ 221.045055][T11983] ? percpu_counter_add_batch+0xb9/0x230 [ 221.045077][T11983] insert_vm_struct+0x21a/0xe10 [ 221.045096][T11983] create_init_stack_vma+0x830/0xd60 [ 221.045114][T11983] ? __pfx_create_init_stack_vma+0x10/0x10 [ 221.045131][T11983] ? lock_acquire+0x1d1/0x380 [ 221.045145][T11983] ? do_raw_spin_lock+0x128/0x260 [ 221.045155][T11983] ? alloc_bprm+0x549/0x9d0 [ 221.045166][T11983] ? alloc_bprm+0x549/0x9d0 [ 221.045179][T11983] alloc_bprm+0x576/0x9d0 [ 221.045192][T11983] do_execveat_common.isra.0+0x194/0x580 [ 221.045204][T11983] ? do_getname+0x191/0x390 [ 221.045220][T11983] __x64_sys_execveat+0xdf/0x130 [ 221.045233][T11983] do_syscall_64+0x123/0x7b0 [ 221.045247][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.045258][T11983] RIP: 0033:0x7fbbc25a8f19 [ 221.045278][T11983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.045290][T11983] RSP: 002b:00007fbbc3402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 221.045302][T11983] RAX: ffffffffffffffda RBX: 00007fbbc2825fa0 RCX: 00007fbbc25a8f19 [ 221.045309][T11983] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 000000000000000c [ 221.045317][T11983] RBP: 00007fbbc2637f6d R08: 0000000000001000 R09: 0000000000000000 [ 221.045324][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.045331][T11983] R13: 00007fbbc2826038 R14: 00007fbbc2825fa0 R15: 00007ffe71b6b338 [ 221.045346][T11983] [ 221.884378][ T5861] input: syz0 as /devices/virtual/misc/uhid/0003:1B1E:0C13.0005/input/input26 [ 221.892682][ T5861] hid-generic 0003:1B1E:0C13.0005: input,hidraw1: USB HID v0.07 Device [syz0] on syz0 [ 221.958946][T12023] FAULT_INJECTION: forcing a failure. [ 221.958946][T12023] name failslab, interval 1, probability 0, space 0, times 0 [ 221.958967][T12023] CPU: 2 UID: 0 PID: 12023 Comm: syz.2.1380 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.958983][T12023] Tainted: [L]=SOFTLOCKUP [ 221.958987][T12023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.958993][T12023] Call Trace: [ 221.958997][T12023] [ 221.959002][T12023] dump_stack_lvl+0x100/0x190 [ 221.959042][T12023] should_fail_ex.cold+0x5/0xa [ 221.959060][T12023] should_failslab+0xc2/0x120 [ 221.959074][T12023] kmem_cache_alloc_noprof+0x92/0x6a0 [ 221.959090][T12023] ? __fget_files+0x215/0x3d0 [ 221.959104][T12023] ? create_new_namespaces+0x30/0xac0 [ 221.959121][T12023] create_new_namespaces+0x30/0xac0 [ 221.959139][T12023] __do_sys_setns+0x20f/0x1f90 [ 221.959153][T12023] ? __x64_sys_futex+0x358/0x4d0 [ 221.959166][T12023] ? __pfx___do_sys_setns+0x10/0x10 [ 221.959186][T12023] do_syscall_64+0x123/0x7b0 [ 221.959200][T12023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.959211][T12023] RIP: 0033:0x7fb625fa8f19 [ 221.959220][T12023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.959229][T12023] RSP: 002b:00007fb626e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 221.959240][T12023] RAX: ffffffffffffffda RBX: 00007fb626225fa0 RCX: 00007fb625fa8f19 [ 221.959246][T12023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 221.959252][T12023] RBP: 00007fb626037f6d R08: 0000000000000000 R09: 0000000000000000 [ 221.959258][T12023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.959264][T12023] R13: 00007fb626226038 R14: 00007fb626225fa0 R15: 00007ffe6f7ba638 [ 221.959278][T12023] [ 221.975434][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 221.975449][ T43] audit: type=1326 audit(2000000009.407:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.8.1381" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63201a8f19 code=0x0 [ 222.031296][T12036] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 222.047407][T12032] device-mapper: table: 248:11: multipath: unknown path selector type (-EINVAL) [ 222.047434][T12032] device-mapper: ioctl: error adding target to table [ 222.066859][ T6352] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 222.136202][T12043] netlink: 'syz.7.1384': attribute type 1 has an invalid length. [ 222.189924][T12045] Bluetooth: Error in BCSP hdr checksum [ 222.227695][ T6352] usb 8-1: Using ep0 maxpacket: 8 [ 222.228622][ T6352] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.231174][ T6352] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 222.231202][ T6352] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 222.231223][ T6352] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.231243][ T6352] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.231277][ T6352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.463441][ T6352] usb 8-1: GET_CAPABILITIES returned 0 [ 222.463466][ T6352] usbtmc 8-1:16.0: can't read capabilities [ 223.003817][T12056] syzkaller0: entered promiscuous mode [ 223.003831][T12056] syzkaller0: entered allmulticast mode [ 223.157899][T12060] tmpfs: Bad value for 'mpol' [ 223.258165][T12062] ip_tables: iptables: counters copy to user failed while replacing table [ 223.260703][T12062] trusted_key: encrypted_key: insufficient parameters specified [ 223.318809][ T43] audit: type=1400 audit(2000000010.670:1472): avc: denied { append } for pid=12068 comm="syz.8.1394" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 223.685155][ T43] audit: type=1400 audit(2000000011.007:1473): avc: denied { map } for pid=12079 comm="syz.8.1397" path="socket:[52634]" dev="sockfs" ino=52634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.685378][ T43] audit: type=1400 audit(2000000011.007:1474): avc: denied { read } for pid=12079 comm="syz.8.1397" path="socket:[52634]" dev="sockfs" ino=52634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.753874][ T43] audit: type=1326 audit(2000000011.063:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.8.1398" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63201a8f19 code=0x50000 [ 223.753905][ T43] audit: type=1326 audit(2000000011.063:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.8.1398" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63201a8f19 code=0x50000 [ 223.753925][ T43] audit: type=1326 audit(2000000011.063:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.8.1398" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63201a8f19 code=0x50000 [ 223.753946][ T43] audit: type=1326 audit(2000000011.063:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.8.1398" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63201a8f19 code=0x50000 [ 223.753965][ T43] audit: type=1326 audit(2000000011.063:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.8.1398" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63201a8f19 code=0x50000 [ 223.753985][ T43] audit: type=1326 audit(2000000011.063:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.8.1398" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63201a8f19 code=0x50000 [ 224.363519][ T5791] Bluetooth: hci3: command 0x1003 tx timeout [ 224.363598][ T5778] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 224.914532][T12088] overlayfs: maximum fs stacking depth exceeded [ 225.018734][ T6352] usb 8-1: USB disconnect, device number 14 [ 225.318192][T12087] bond0: (slave netdevsim0): Releasing backup interface [ 225.345712][T12096] bond0: entered promiscuous mode [ 225.345729][T12096] bond_slave_1: entered promiscuous mode [ 225.683653][T12104] fuse: Unknown parameter '°M5' [ 225.706731][T12106] ubi0: attaching mtd0 [ 225.708361][T12106] ubi0: scanning is finished [ 225.708397][T12106] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 225.772208][T12107] overlayfs: workdir and upperdir must reside under the same mount [ 225.827119][T12106] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 226.013742][T12113] netlink: 'syz.2.1410': attribute type 10 has an invalid length. [ 226.013757][T12113] __nla_validate_parse: 41 callbacks suppressed [ 226.013763][T12113] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1410'. [ 226.108011][T12114] FAULT_INJECTION: forcing a failure. [ 226.108011][T12114] name failslab, interval 1, probability 0, space 0, times 0 [ 226.108045][T12114] CPU: 3 UID: 0 PID: 12114 Comm: syz.2.1410 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.108059][T12114] Tainted: [L]=SOFTLOCKUP [ 226.108063][T12114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.108069][T12114] Call Trace: [ 226.108077][T12114] [ 226.108081][T12114] dump_stack_lvl+0x100/0x190 [ 226.108104][T12114] should_fail_ex.cold+0x5/0xa [ 226.108121][T12114] should_failslab+0xc2/0x120 [ 226.108138][T12114] kmem_cache_alloc_noprof+0x92/0x6a0 [ 226.108170][T12114] ? lock_acquire+0x1d1/0x380 [ 226.108185][T12114] ? __kernfs_new_node+0xd2/0xa10 [ 226.108199][T12114] __kernfs_new_node+0xd2/0xa10 [ 226.108212][T12114] ? __pfx___kernfs_new_node+0x10/0x10 [ 226.108226][T12114] ? lock_acquire+0x1d1/0x380 [ 226.108240][T12114] ? kernfs_root+0x23/0x2a0 [ 226.108257][T12114] ? find_held_lock+0x2b/0x80 [ 226.108267][T12114] ? kernfs_root+0xee/0x2a0 [ 226.108281][T12114] ? kernfs_root+0xee/0x2a0 [ 226.108300][T12114] kernfs_new_node+0x194/0x200 [ 226.108312][T12114] ? __pfx_kernfs_new_node+0x10/0x10 [ 226.108324][T12114] ? lock_acquire+0x1d1/0x380 [ 226.108337][T12114] ? kernfs_root+0x23/0x2a0 [ 226.108354][T12114] __kernfs_create_file+0x53/0x350 [ 226.108370][T12114] sysfs_add_file_mode_ns+0x207/0x3c0 [ 226.108389][T12114] internal_create_group+0x593/0xfb0 [ 226.108408][T12114] ? kernfs_create_dir_ns+0x16d/0x2b0 [ 226.108419][T12114] ? __pfx_internal_create_group+0x10/0x10 [ 226.108436][T12114] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 226.108451][T12114] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 226.108465][T12114] ? find_held_lock+0x2b/0x80 [ 226.108475][T12114] ? kobject_add_internal+0x25f/0x930 [ 226.108512][T12114] internal_create_groups+0x9d/0x150 [ 226.108530][T12114] kobject_add_internal+0x317/0x930 [ 226.108549][T12114] kobject_init_and_add+0x121/0x180 [ 226.108560][T12114] ? __pfx_kobject_init_and_add+0x10/0x10 [ 226.108572][T12114] ? __kasan_kmalloc+0xaa/0xb0 [ 226.108584][T12114] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 226.108600][T12114] ? rpc_sysfs_xprt_setup+0xe1/0x300 [ 226.108623][T12114] rpc_sysfs_xprt_setup+0x187/0x300 [ 226.108637][T12114] xprt_switch_alloc+0x2ce/0x3c0 [ 226.108659][T12114] rpc_create_xprt+0x2dc/0x440 [ 226.108675][T12114] rpc_create+0x4a0/0x840 [ 226.108690][T12114] ? __pfx_rpc_create+0x10/0x10 [ 226.108704][T12114] ? rcu_is_watching+0x13/0xc0 [ 226.108737][T12114] ? rcu_is_watching+0x13/0xc0 [ 226.108749][T12114] ? trace_contention_end+0x126/0x160 [ 226.108767][T12114] gssp_rpc_create+0xf5/0x1a0 [ 226.108779][T12114] ? __pfx_gssp_rpc_create+0x10/0x10 [ 226.108797][T12114] ? net_generic+0xea/0x2a0 [ 226.108806][T12114] ? net_generic+0xea/0x2a0 [ 226.108820][T12114] set_gssp_clnt+0xc3/0x1b0 [ 226.108830][T12114] ? __pfx_set_gssp_clnt+0x10/0x10 [ 226.108845][T12114] write_gssp+0x387/0x9a0 [ 226.108861][T12114] ? __pfx_write_gssp+0x10/0x10 [ 226.108880][T12114] ? lock_acquire+0x1d1/0x380 [ 226.108894][T12114] ? ksys_write+0x12a/0x250 [ 226.108906][T12114] ? __pfx_write_gssp+0x10/0x10 [ 226.108921][T12114] proc_reg_write+0x240/0x330 [ 226.108933][T12114] vfs_write+0x2aa/0x1040 [ 226.108944][T12114] ? __pfx_proc_reg_write+0x10/0x10 [ 226.108954][T12114] ? lock_acquire+0x1d1/0x380 [ 226.108967][T12114] ? __fget_files+0x34/0x3d0 [ 226.108980][T12114] ? __pfx_vfs_write+0x10/0x10 [ 226.108990][T12114] ? find_held_lock+0x2b/0x80 [ 226.109001][T12114] ? __fget_files+0x215/0x3d0 [ 226.109017][T12114] ? __fget_files+0x21f/0x3d0 [ 226.109034][T12114] ksys_write+0x12a/0x250 [ 226.109045][T12114] ? __pfx_ksys_write+0x10/0x10 [ 226.109060][T12114] do_syscall_64+0x123/0x7b0 [ 226.109074][T12114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.109085][T12114] RIP: 0033:0x7fb625fa8f19 [ 226.109104][T12114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.109115][T12114] RSP: 002b:00007fb626e7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.109126][T12114] RAX: ffffffffffffffda RBX: 00007fb626226090 RCX: 00007fb625fa8f19 [ 226.109133][T12114] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 226.109140][T12114] RBP: 00007fb626037f6d R08: 0000000000000000 R09: 0000000000000000 [ 226.109146][T12114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.109153][T12114] R13: 00007fb626226128 R14: 00007fb626226090 R15: 00007ffe6f7ba638 [ 226.109168][T12114] [ 226.110475][T12114] kobject: kobject_add_internal failed for xprt-0-local (error: -12 parent: switch-0) [ 226.502499][T12120] debugfs: Bad value for 'uid' [ 226.502510][T12120] debugfs: Bad value for 'uid' [ 227.012094][T12144] tipc: Enabling of bearer rejected, already enabled [ 227.320438][T12174] bond0: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 227.452088][ T5839] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 227.494076][T12183] netlink: 'syz.8.1426': attribute type 39 has an invalid length. [ 227.551714][T12185] netlink: 'syz.7.1428': attribute type 10 has an invalid length. [ 227.551735][T12185] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1428'. [ 227.562590][T12185] wg2: entered allmulticast mode [ 227.562627][T12185] team0: Device wg2 is of different type [ 227.634019][ T5839] usb 7-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 227.638527][T12183] netlink: 'syz.8.1426': attribute type 39 has an invalid length. [ 227.639825][T12188] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 227.639843][T12188] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 227.639966][T12188] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 227.640466][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.640478][ T5839] usb 7-1: Product: syz [ 227.640485][ T5839] usb 7-1: Manufacturer: syz [ 227.640492][ T5839] usb 7-1: SerialNumber: syz [ 227.659018][T12183] netlink: 'syz.8.1426': attribute type 39 has an invalid length. [ 227.659123][T12183] netlink: 'syz.8.1426': attribute type 39 has an invalid length. [ 227.659678][T12183] netlink: 'syz.8.1426': attribute type 39 has an invalid length. [ 227.659781][T12183] netlink: 'syz.8.1426': attribute type 39 has an invalid length. [ 227.659888][T12183] netlink: 'syz.8.1426': attribute type 39 has an invalid length. [ 227.660078][T12183] netlink: 'syz.8.1426': attribute type 39 has an invalid length. [ 227.660197][T12183] netlink: 'syz.8.1426': attribute type 39 has an invalid length. [ 227.708659][T12190] hfs: can't find a HFS filesystem on dev sr0 [ 227.908046][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.908358][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.908984][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.909444][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.911107][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.911468][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.912095][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.912369][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.912936][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.913260][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.408566][T12197] comedi comedi0: Minor 2208 is invalid! [ 229.104027][ T5839] rtl8150 7-1:1.0: couldn't reset the device [ 229.104344][ T5839] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 230.303499][T12152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.329919][ T5861] usb 7-1: USB disconnect, device number 30 [ 230.462884][T12204] Bluetooth: Error in BCSP hdr checksum [ 230.517351][T12208] nvme_tcp: malformed address passed: 1:8009 [ 230.589782][ T43] kauditd_printk_skb: 18155 callbacks suppressed [ 230.589800][ T43] audit: type=1400 audit(2000000017.464:19636): avc: denied { associate } for pid=12218 comm="syz.2.1437" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 230.698582][T12233] Can't find a SQUASHFS superblock on nullb0 [ 230.914207][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.916043][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.916788][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.917740][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.918175][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.919701][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.921606][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.922461][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.923104][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.923782][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.929226][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.931581][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.935769][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.948797][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.954604][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.962933][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.966065][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.973628][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.976280][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.977172][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.977799][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.978771][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.981051][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.981545][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.984365][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.986973][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.990137][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 230.992920][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.000521][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.001273][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.004165][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.006590][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.009409][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.012828][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.015556][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.019446][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.022203][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.024257][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.026982][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.032468][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.035482][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.038064][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.040819][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.046715][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.047076][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.052429][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.054223][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.056975][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.059667][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.062890][T12258] FAULT_INJECTION: forcing a failure. [ 231.062890][T12258] name failslab, interval 1, probability 0, space 0, times 0 [ 231.062928][T12258] CPU: 2 UID: 0 PID: 12258 Comm: syz.2.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.062949][T12258] Tainted: [L]=SOFTLOCKUP [ 231.062954][T12258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.062964][T12258] Call Trace: [ 231.062976][T12258] [ 231.062984][T12258] dump_stack_lvl+0x100/0x190 [ 231.063024][T12258] should_fail_ex.cold+0x5/0xa [ 231.063049][T12258] should_failslab+0xc2/0x120 [ 231.063074][T12258] kmem_cache_alloc_noprof+0x92/0x6a0 [ 231.063101][T12258] ? do_getname+0x35/0x390 [ 231.063121][T12258] do_getname+0x35/0x390 [ 231.063151][T12258] do_sys_openat2+0xc3/0x1d0 [ 231.063169][T12258] ? __pfx_do_sys_openat2+0x10/0x10 [ 231.063189][T12258] __x64_sys_openat+0x12d/0x210 [ 231.063204][T12258] ? __pfx___x64_sys_openat+0x10/0x10 [ 231.063225][T12258] do_syscall_64+0x123/0x7b0 [ 231.063251][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.063262][T12258] RIP: 0033:0x7fb625f6974e [ 231.063280][T12258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.063290][T12258] RSP: 002b:00007fb626e59ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.063302][T12258] RAX: ffffffffffffffda RBX: 00007fb626e5c6c0 RCX: 00007fb625f6974e [ 231.063308][T12258] RDX: 0000000000000002 RSI: 00007fb6260372b2 RDI: ffffffffffffff9c [ 231.063314][T12258] RBP: 00007fb626037f6d R08: 0000000000000000 R09: 0000000000000000 [ 231.063320][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000072 [ 231.063326][T12258] R13: 0000200000000300 R14: 0000000000000000 R15: 00007ffe6f7ba638 [ 231.063340][T12258] [ 231.063887][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.066500][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.068453][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.070897][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.075926][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.080306][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.082029][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.086739][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.087585][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.088631][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.090503][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.092370][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.094205][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.098161][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.100022][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.101861][T12247] overlayfs: conflicting options: userxattr,metacopy=on [ 231.571578][T12265] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 231.571935][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1451'. [ 231.575154][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1451'. [ 231.702671][T12280] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.710368][ T43] audit: type=1400 audit(2000000018.512:19637): avc: denied { remount } for pid=12278 comm="syz.7.1454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 232.570442][ T5778] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 232.593749][T12302] FAULT_INJECTION: forcing a failure. [ 232.593749][T12302] name fail_futex, interval 1, probability 0, space 0, times 0 [ 232.593770][T12302] CPU: 3 UID: 0 PID: 12302 Comm: syz.2.1460 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.593787][T12302] Tainted: [L]=SOFTLOCKUP [ 232.593791][T12302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.593797][T12302] Call Trace: [ 232.593801][T12302] [ 232.593806][T12302] dump_stack_lvl+0x100/0x190 [ 232.593826][T12302] should_fail_ex.cold+0x5/0xa [ 232.593844][T12302] get_futex_key+0x1c9/0x13e0 [ 232.593858][T12302] ? __pfx_get_futex_key+0x10/0x10 [ 232.593870][T12302] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 232.593884][T12302] futex_wait_setup+0x91/0x540 [ 232.593904][T12302] __futex_wait+0x19f/0x360 [ 232.593920][T12302] ? __pfx___futex_wait+0x10/0x10 [ 232.593934][T12302] ? __pfx_try_to_wake_up+0x10/0x10 [ 232.593948][T12302] ? futex_hash+0x311/0x400 [ 232.593960][T12302] ? __pfx_futex_wake_mark+0x10/0x10 [ 232.593977][T12302] ? find_held_lock+0x2b/0x80 [ 232.593989][T12302] ? futex_wake+0x4ea/0x5e0 [ 232.594006][T12302] futex_wait+0xe6/0x370 [ 232.594021][T12302] ? __pfx_futex_wait+0x10/0x10 [ 232.594039][T12302] ? rcu_read_lock_any_held+0x6a/0x90 [ 232.594059][T12302] ? find_held_lock+0x2b/0x80 [ 232.594070][T12302] ? ksys_write+0x190/0x250 [ 232.594082][T12302] ? ksys_write+0x190/0x250 [ 232.594096][T12302] do_futex+0x265/0x440 [ 232.594109][T12302] ? __pfx_do_futex+0x10/0x10 [ 232.594123][T12302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.594142][T12302] __x64_sys_futex+0x34f/0x4d0 [ 232.594157][T12302] ? __pfx___x64_sys_futex+0x10/0x10 [ 232.594175][T12302] do_syscall_64+0x123/0x7b0 [ 232.594189][T12302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.594200][T12302] RIP: 0033:0x7fb625fa8f19 [ 232.594210][T12302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.594221][T12302] RSP: 002b:00007fb626e9e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.594232][T12302] RAX: ffffffffffffffda RBX: 00007fb626225fa8 RCX: 00007fb625fa8f19 [ 232.594238][T12302] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb626225fa8 [ 232.594244][T12302] RBP: 00007fb626225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 232.594250][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.594256][T12302] R13: 00007fb626226038 R14: 00007ffe6f7ba550 R15: 00007ffe6f7ba638 [ 232.594270][T12302] [ 232.699925][T12305] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 232.702605][ T43] audit: type=1400 audit(2000000019.448:19638): avc: denied { lock } for pid=12307 comm="syz.8.1463" path="socket:[55469]" dev="sockfs" ino=55469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 232.728925][ T43] audit: type=1400 audit(2000000019.467:19639): avc: denied { create } for pid=12303 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 232.738389][ T43] audit: type=1400 audit(2000000019.476:19640): avc: denied { write } for pid=12303 comm="syz.2.1461" path="socket:[53959]" dev="sockfs" ino=53959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 232.786164][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 232.938406][ T43] audit: type=1400 audit(2000000019.663:19641): avc: denied { getopt } for pid=12321 comm="syz.8.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 232.938954][ T43] audit: type=1400 audit(2000000019.663:19642): avc: denied { read } for pid=12321 comm="syz.8.1467" path="socket:[55504]" dev="sockfs" ino=55504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 233.128942][T12327] ./mnt: Can't lookup blockdev [ 233.188761][T12333] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1471'. [ 233.218971][T12335] bridge2: entered allmulticast mode [ 233.292367][T12342] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 233.383589][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'. [ 233.390437][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1476'. [ 233.391678][T12351] Cannot find del_set index 4 as target [ 233.401253][T12369] Cannot find del_set index 4 as target [ 233.420636][ T43] audit: type=1400 audit(2000000020.112:19643): avc: denied { mounton } for pid=12353 comm="syz.2.1478" path="/409/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 233.421839][T12360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.672996][ T43] audit: type=1400 audit(2000000020.356:19644): avc: denied { mounton } for pid=12379 comm="syz.2.1481" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 233.702394][T12380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.702730][T12381] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.704340][T12380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.900868][ T43] audit: type=1400 audit(2000000020.571:19645): avc: denied { ioctl } for pid=12392 comm="syz.2.1485" path="socket:[54825]" dev="sockfs" ino=54825 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 234.116794][ T8732] svc: failed to register nfsdv3 RPC service (errno 5). [ 234.116809][ T8732] failed to unregister tcp with rpcbind [ 234.336764][T12428] ip_tables: iptables: counters copy to user failed while replacing table [ 234.347090][T12430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1491'. [ 234.381599][T12438] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 234.382425][T12438] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 234.399428][T12441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1488'. [ 234.421435][T12438] iommufd_mock iommufd_mock2: Adding to iommu group 12 [ 234.448692][T12428] iommufd_mock iommufd_mock3: Adding to iommu group 13 [ 234.472855][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1488'. [ 234.474975][T12438] iommufd_mock iommufd_mock4: Adding to iommu group 14 [ 234.478441][T12438] iommufd_mock iommufd_mock5: Adding to iommu group 15 [ 234.547350][T12438] iommufd_mock iommufd_mock6: Adding to iommu group 16 [ 234.564454][T12438] iommufd_mock iommufd_mock7: Adding to iommu group 17 [ 234.594892][T12438] iommufd_mock iommufd_mock8: Adding to iommu group 18 [ 234.604485][T12438] iommufd_mock iommufd_mock9: Adding to iommu group 19 [ 234.605325][T12438] iommufd_mock iommufd_mock10: Adding to iommu group 20 [ 234.623244][T12438] iommufd_mock iommufd_mock11: Adding to iommu group 21 [ 234.625631][T12438] iommufd_mock iommufd_mock12: Adding to iommu group 22 [ 234.630427][T12438] iommufd_mock iommufd_mock13: Adding to iommu group 23 [ 234.645664][T12438] iommufd_mock iommufd_mock14: Adding to iommu group 24 [ 234.652734][T12438] iommufd_mock iommufd_mock15: Adding to iommu group 25 [ 234.657000][T12438] iommufd_mock iommufd_mock16: Adding to iommu group 26 [ 234.666492][T12438] iommufd_mock iommufd_mock17: Adding to iommu group 27 [ 234.671827][T12438] iommufd_mock iommufd_mock18: Adding to iommu group 28 [ 234.676607][T12438] iommufd_mock iommufd_mock19: Adding to iommu group 29 [ 234.684311][T12438] iommufd_mock iommufd_mock20: Adding to iommu group 30 [ 234.689658][T12438] iommufd_mock iommufd_mock21: Adding to iommu group 31 [ 234.697139][T12438] iommufd_mock iommufd_mock22: Adding to iommu group 32 [ 234.707011][T12438] iommufd_mock iommufd_mock23: Adding to iommu group 33 [ 234.709897][T12438] iommufd_mock iommufd_mock24: Adding to iommu group 34 [ 234.714575][T12438] iommufd_mock iommufd_mock25: Adding to iommu group 35 [ 234.722373][T12438] iommufd_mock iommufd_mock26: Adding to iommu group 36 [ 234.723252][T12438] iommufd_mock iommufd_mock27: Adding to iommu group 37 [ 234.725473][T12438] iommufd_mock iommufd_mock28: Adding to iommu group 38 [ 234.734552][T12438] iommufd_mock iommufd_mock29: Adding to iommu group 39 [ 234.748290][T12438] iommufd_mock iommufd_mock30: Adding to iommu group 40 [ 234.753006][T12438] iommufd_mock iommufd_mock31: Adding to iommu group 41 [ 234.756507][T12438] iommufd_mock iommufd_mock32: Adding to iommu group 42 [ 234.766269][T12438] iommufd_mock iommufd_mock33: Adding to iommu group 43 [ 234.767069][T12438] iommufd_mock iommufd_mock34: Adding to iommu group 44 [ 234.795555][T12438] iommufd_mock iommufd_mock35: Adding to iommu group 45 [ 234.799046][T12438] iommufd_mock iommufd_mock36: Adding to iommu group 46 [ 234.812119][T12438] iommufd_mock iommufd_mock37: Adding to iommu group 47 [ 234.818057][T12438] iommufd_mock iommufd_mock38: Adding to iommu group 48 [ 234.827020][T12438] iommufd_mock iommufd_mock39: Adding to iommu group 49 [ 234.827770][T12438] iommufd_mock iommufd_mock40: Adding to iommu group 50 [ 234.836771][T12438] iommufd_mock iommufd_mock41: Adding to iommu group 51 [ 234.840457][T12438] iommufd_mock iommufd_mock42: Adding to iommu group 52 [ 234.851487][T12438] iommufd_mock iommufd_mock43: Adding to iommu group 53 [ 234.855996][T12438] iommufd_mock iommufd_mock44: Adding to iommu group 54 [ 234.863726][T12438] iommufd_mock iommufd_mock45: Adding to iommu group 55 [ 234.889988][T12438] iommufd_mock iommufd_mock46: Adding to iommu group 56 [ 234.893127][T12438] iommufd_mock iommufd_mock47: Adding to iommu group 57 [ 234.902985][T12438] iommufd_mock iommufd_mock48: Adding to iommu group 58 [ 234.905874][T12438] iommufd_mock iommufd_mock49: Adding to iommu group 59 [ 234.914606][T12438] iommufd_mock iommufd_mock50: Adding to iommu group 60 [ 234.918386][T12438] iommufd_mock iommufd_mock51: Adding to iommu group 61 [ 234.922179][T12438] iommufd_mock iommufd_mock52: Adding to iommu group 62 [ 234.926872][T12438] iommufd_mock iommufd_mock53: Adding to iommu group 63 [ 234.931740][T12438] iommufd_mock iommufd_mock54: Adding to iommu group 64 [ 234.937429][T12438] iommufd_mock iommufd_mock55: Adding to iommu group 65 [ 234.938310][T12438] iommufd_mock iommufd_mock56: Adding to iommu group 66 [ 234.944814][T12438] iommufd_mock iommufd_mock57: Adding to iommu group 67 [ 234.956422][T12438] iommufd_mock iommufd_mock58: Adding to iommu group 68 [ 234.957587][T12438] iommufd_mock iommufd_mock59: Adding to iommu group 69 [ 234.958608][T12438] iommufd_mock iommufd_mock60: Adding to iommu group 70 [ 234.965708][T12438] iommufd_mock iommufd_mock61: Adding to iommu group 71 [ 234.969351][T12438] iommufd_mock iommufd_mock62: Adding to iommu group 72 [ 234.984668][T12438] iommufd_mock iommufd_mock63: Adding to iommu group 73 [ 235.001237][T12438] iommufd_mock iommufd_mock64: Adding to iommu group 74 [ 235.007470][T12438] iommufd_mock iommufd_mock65: Adding to iommu group 75 [ 235.130025][T12453] syzkaller0: entered promiscuous mode [ 235.130052][T12453] syzkaller0: entered allmulticast mode [ 235.220836][T12456] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 235.239503][T12456] ip6t_srh: unknown srh invflags 7863 [ 235.337369][T12467] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1497'. [ 235.380332][T12461] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 235.380344][T12461] Unsupported pkey algo: 106 [ 235.430064][T12471] block2mtd: parameter too long [ 235.514978][T12482] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 235.555338][T12486] pimreg1: tun_chr_ioctl cmd 1074025677 [ 235.555379][T12486] pimreg1: linktype set to 8375 [ 235.676221][T12502] ebt_among: dst integrity fail: 100 [ 235.682060][T12500] nvme_fcloop: unknown parameter or missing value 'wwn' [ 235.684341][T12505] ebt_among: dst integrity fail: 100 [ 236.305526][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 236.305540][ T43] audit: type=1400 audit(2000000022.817:19660): avc: denied { bind } for pid=12540 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.306634][T12547] fuse: Bad value for 'fd' [ 236.332765][ T43] audit: type=1400 audit(2000000022.845:19661): avc: denied { read } for pid=12549 comm="syz.3.1514" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 236.333016][ T43] audit: type=1400 audit(2000000022.845:19662): avc: denied { open } for pid=12549 comm="syz.3.1514" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 236.334544][ T43] audit: type=1400 audit(2000000022.845:19663): avc: denied { create } for pid=12549 comm="syz.3.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 236.374369][ T43] audit: type=1400 audit(2000000022.882:19664): avc: denied { write } for pid=12549 comm="syz.3.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 236.383256][ T43] audit: type=1400 audit(2000000022.882:19665): avc: denied { ioctl } for pid=12549 comm="syz.3.1514" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0xc018937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 236.383915][T12550] Mount JFS Failure: -22 [ 236.383924][T12550] jfs_mount failed w/return code = -22 [ 236.493048][T12561] af_packet: tpacket_rcv: packet too big, clamped from 32840 to 3944. macoff=96 [ 236.753778][T12579] syzkaller1: entered promiscuous mode [ 236.753792][T12579] syzkaller1: entered allmulticast mode [ 237.175381][ T43] audit: type=1400 audit(2000000023.631:19666): avc: denied { create } for pid=12587 comm="syz.2.1520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 237.223719][T12590] __nla_validate_parse: 3 callbacks suppressed [ 237.223737][T12590] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1521'. [ 237.229636][ T43] audit: type=1400 audit(2000000023.678:19667): avc: denied { bind } for pid=12589 comm="syz.2.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.347820][T12594] ip_tables: iptables: counters copy to user failed while replacing table [ 237.527520][ T43] audit: type=1400 audit(2000000023.959:19668): avc: denied { write } for pid=12600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.611144][ T43] audit: type=1400 audit(2000000024.033:19669): avc: denied { write } for pid=12607 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.834042][T12623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.834268][T12623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.834405][T12623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.834540][T12623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.834672][T12623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.834822][T12623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.834981][T12623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.938120][T12639] gfs2: not a GFS2 filesystem [ 237.941796][T12639] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 237.948166][T12642] gfs2: not a GFS2 filesystem [ 237.950648][T12647] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 238.102829][T12668] ------------[ cut here ]------------ [ 238.102839][T12668] Device '0-0002' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 238.102847][T12668] WARNING: drivers/base/core.c:2642 at device_release+0x1da/0x270, CPU#2: syz.2.1535/12668 [ 238.111974][T12668] Modules linked in: [ 238.114262][T12668] CPU: 2 UID: 0 PID: 12668 Comm: syz.2.1535 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.117768][T12668] Tainted: [L]=SOFTLOCKUP [ 238.119145][T12668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.122325][T12668] RIP: 0010:device_release+0x1dd/0x270 [ 238.124060][T12668] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 8d bd 90 fb 48 8d 3d a6 1c f9 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 74 bd 90 fb 48 89 da 48 b8 00 00 [ 238.130473][T12668] RSP: 0018:ffffc900039ffa38 EFLAGS: 00010287 [ 238.132453][T12668] RAX: 000000000000409f RBX: ffff888024716020 RCX: ffffc90004132000 [ 238.134977][T12668] RDX: 0000000000080000 RSI: ffff88803856e720 RDI: ffffffff9276e020 [ 238.137489][T12668] RBP: ffff88803856e720 R08: 0000000000000000 R09: 0000000000000000 [ 238.140142][T12668] R10: ffff88802471605b R11: 0000000000000000 R12: ffff888040b4b800 [ 238.142854][T12668] R13: dffffc0000000000 R14: ffff88803856e720 R15: 0000000000000000 [ 238.145349][T12668] FS: 00007fb626e9e6c0(0000) GS:ffff8880d4673000(0000) knlGS:0000000000000000 [ 238.148533][T12668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.150695][T12668] CR2: 0000001b2df14ff8 CR3: 000000005d9a3000 CR4: 0000000000352ef0 [ 238.153221][T12668] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 8000000000000000 [ 238.155634][T12668] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 238.158154][T12668] Call Trace: [ 238.159383][T12668] [ 238.160357][T12668] kobject_put+0x1f7/0x640 [ 238.161787][T12668] device_unregister+0x2f/0xe0 [ 238.163306][T12668] i2c_unregister_device+0xf5/0x270 [ 238.164956][T12668] i2c_deregister_clients+0x255/0x460 [ 238.166673][T12668] i2c_del_adapter+0x13a/0x2e0 [ 238.168228][T12668] i801_remove+0xa4/0x3d0 [ 238.169605][T12668] pci_device_remove+0xb2/0x1d0 [ 238.171258][T12668] ? __pfx_pci_device_remove+0x10/0x10 [ 238.172986][T12668] device_remove+0xcb/0x180 [ 238.174428][T12668] device_release_driver_internal+0x441/0x610 [ 238.176363][T12668] unbind_store+0xf8/0x110 [ 238.177772][T12668] ? __pfx_unbind_store+0x10/0x10 [ 238.179358][T12668] drv_attr_store+0x74/0xb0 [ 238.180907][T12668] ? __pfx_drv_attr_store+0x10/0x10 [ 238.182558][T12668] sysfs_kf_write+0xf2/0x150 [ 238.184047][T12668] kernfs_fop_write_iter+0x3e0/0x5f0 [ 238.185711][T12668] ? __pfx_sysfs_kf_write+0x10/0x10 [ 238.187369][T12668] vfs_write+0x6af/0x1040 [ 238.188791][T12668] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 238.190654][T12668] ? __pfx_vfs_write+0x10/0x10 [ 238.192272][T12668] ? find_held_lock+0x2b/0x80 [ 238.193783][T12668] ksys_write+0x12a/0x250 [ 238.195165][T12668] ? __pfx_ksys_write+0x10/0x10 [ 238.196749][T12668] do_syscall_64+0x123/0x7b0 [ 238.198217][T12668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.200111][T12668] RIP: 0033:0x7fb625fa8f19 [ 238.201525][T12668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.208089][T12668] RSP: 002b:00007fb626e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.211021][T12668] RAX: ffffffffffffffda RBX: 00007fb626225fa0 RCX: 00007fb625fa8f19 [ 238.214589][T12668] RDX: 000000000000000c RSI: 00002000000005c0 RDI: 0000000000000004 [ 238.217319][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 238.221398][T12668] RBP: 00007fb626037f6d R08: 0000000000000000 R09: 0000000000000000 [ 238.224694][T12668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.227868][T12668] R13: 00007fb626226038 R14: 00007fb626225fa0 R15: 00007ffe6f7ba638 [ 238.231070][T12668] [ 238.232403][T12668] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.234754][T12668] CPU: 2 UID: 0 PID: 12668 Comm: syz.2.1535 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.239219][T12668] Tainted: [L]=SOFTLOCKUP [ 238.241018][T12668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.245209][T12668] Call Trace: [ 238.246645][T12668] [ 238.247721][T12668] dump_stack_lvl+0x100/0x190 [ 238.249250][T12668] vpanic+0x2dc/0x6f8 [ 238.250744][T12668] panic+0xd1/0xe0 [ 238.252292][T12668] ? __pfx_panic+0x10/0x10 [ 238.253715][T12668] check_panic_on_warn.cold+0x19/0x34 [ 238.255408][T12668] ? device_release+0x1da/0x270 [ 238.257488][T12668] __warn.cold+0x191/0x321 [ 238.259405][T12668] __report_bug+0x30f/0x440 [ 238.261354][T12668] ? device_release+0x1da/0x270 [ 238.263415][T12668] ? __pfx___report_bug+0x10/0x10 [ 238.265478][T12668] ? do_raw_spin_lock+0x128/0x260 [ 238.267493][T12668] ? find_held_lock+0x2b/0x80 [ 238.269360][T12668] ? kobj_kset_leave+0x160/0x210 [ 238.271072][T12668] report_bug_entry+0xe2/0x290 [ 238.272641][T12668] ? device_release+0x1dd/0x270 [ 238.274116][T12668] handle_bug+0x1cd/0x2a0 [ 238.275430][T12668] exc_invalid_op+0x17/0x50 [ 238.277002][T12668] asm_exc_invalid_op+0x1a/0x20 [ 238.278672][T12668] RIP: 0010:device_release+0x1dd/0x270 [ 238.280737][T12668] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 8d bd 90 fb 48 8d 3d a6 1c f9 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 74 bd 90 fb 48 89 da 48 b8 00 00 [ 238.288105][T12668] RSP: 0018:ffffc900039ffa38 EFLAGS: 00010287 [ 238.290558][T12668] RAX: 000000000000409f RBX: ffff888024716020 RCX: ffffc90004132000 [ 238.293801][T12668] RDX: 0000000000080000 RSI: ffff88803856e720 RDI: ffffffff9276e020 [ 238.297042][T12668] RBP: ffff88803856e720 R08: 0000000000000000 R09: 0000000000000000 [ 238.300200][T12668] R10: ffff88802471605b R11: 0000000000000000 R12: ffff888040b4b800 [ 238.302746][T12668] R13: dffffc0000000000 R14: ffff88803856e720 R15: 0000000000000000 [ 238.305548][T12668] ? device_release+0x1d3/0x270 [ 238.307199][T12668] kobject_put+0x1f7/0x640 [ 238.309136][T12668] device_unregister+0x2f/0xe0 [ 238.311128][T12668] i2c_unregister_device+0xf5/0x270 [ 238.313028][T12668] i2c_deregister_clients+0x255/0x460 [ 238.314686][T12668] i2c_del_adapter+0x13a/0x2e0 [ 238.316190][T12668] i801_remove+0xa4/0x3d0 [ 238.317848][T12668] pci_device_remove+0xb2/0x1d0 [ 238.319906][T12668] ? __pfx_pci_device_remove+0x10/0x10 [ 238.321951][T12668] device_remove+0xcb/0x180 [ 238.323801][T12668] device_release_driver_internal+0x441/0x610 [ 238.326252][T12668] unbind_store+0xf8/0x110 [ 238.328109][T12668] ? __pfx_unbind_store+0x10/0x10 [ 238.330053][T12668] drv_attr_store+0x74/0xb0 [ 238.331514][T12668] ? __pfx_drv_attr_store+0x10/0x10 [ 238.333672][T12668] sysfs_kf_write+0xf2/0x150 [ 238.335631][T12668] kernfs_fop_write_iter+0x3e0/0x5f0 [ 238.337887][T12668] ? __pfx_sysfs_kf_write+0x10/0x10 [ 238.340159][T12668] vfs_write+0x6af/0x1040 [ 238.341699][T12668] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 238.343542][T12668] ? __pfx_vfs_write+0x10/0x10 [ 238.345266][T12668] ? find_held_lock+0x2b/0x80 [ 238.347246][T12668] ksys_write+0x12a/0x250 [ 238.349081][T12668] ? __pfx_ksys_write+0x10/0x10 [ 238.351149][T12668] do_syscall_64+0x123/0x7b0 [ 238.353138][T12668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.355619][T12668] RIP: 0033:0x7fb625fa8f19 [ 238.357542][T12668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.364663][T12668] RSP: 002b:00007fb626e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.367525][T12668] RAX: ffffffffffffffda RBX: 00007fb626225fa0 RCX: 00007fb625fa8f19 [ 238.370820][T12668] RDX: 000000000000000c RSI: 00002000000005c0 RDI: 0000000000000004 [ 238.373814][T12668] RBP: 00007fb626037f6d R08: 0000000000000000 R09: 0000000000000000 [ 238.376400][T12668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.379590][T12668] R13: 00007fb626226038 R14: 00007fb626225fa0 R15: 00007ffe6f7ba638 [ 238.382798][T12668] [ 238.384831][T12668] Kernel Offset: disabled [ 238.386679][T12668] Rebooting in 86400 seconds..