last executing test programs: 3m3.599739945s ago: executing program 3 (id=52): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) 3m3.428262139s ago: executing program 3 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0xf}}]}, 0x48}}, 0x0) 3m3.345132814s ago: executing program 3 (id=60): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d2", 0x9}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000121) 3m2.844044852s ago: executing program 2 (id=80): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xb, 0x100000, 0x1}}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) 3m2.472933467s ago: executing program 3 (id=90): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20004804) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40) 3m2.472648847s ago: executing program 2 (id=91): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000002200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002480), 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xa, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}) 3m2.392380465s ago: executing program 2 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x6c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m2.392059447s ago: executing program 2 (id=94): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, &(0x7f0000000440)=0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) 3m2.343922125s ago: executing program 2 (id=95): socket$igmp(0x2, 0x3, 0x2) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x4, 0x0, &(0x7f0000000000)) 3m2.3436879s ago: executing program 3 (id=96): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x102, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x20008004) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x3000c000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 3m1.991602928s ago: executing program 2 (id=99): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="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", 0x179}, {&(0x7f0000003380)="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", 0x114}, {&(0x7f0000000c80)="331e8c48b2ab8236fae299aaccebe171a2f9d28c12776d4c6a9fd8f28ae9a98c16964f5ce289f029d188f72f8eced9", 0x2f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ec0)="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", 0x31f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="01081d4f08d5fadbaf4c7c276eff5bee77be5b8bd77045f280ef2dc1ebea25375c3422f53407b922dea5113341087e1b39ee02b6d3a0289773776ae650ec62d7894ab6c501be6705c19a9a336a4895f8c713adb5cb9a43d6fc6184a24682db41a5b8c6e9a9c1d51eb6130acf0e6561f7eb7dd43fd002c3c99dae0ee4f53b99215d60c1902cdcf7ee2e", 0x89}, {&(0x7f0000000380)="f4395e6221e4160c2217a6f8b263e60db8165f8255fefe1294d42db03509b75c5adfccbdd257f49ec125babe70bdd804016f9f04c5590a9e847eb036ec73b8dce7de66c205b1cd627e8e45bab4b910ff8e225c744578be6f22ec9b2910d7c8", 0x5f}, {&(0x7f0000001200)="c426c2046b02f135bbcce6bc11f468de77bba89a40b61c2bc843ad3e0f7723a463c0899e36926bc27a21144c5905c0dc63960ffa99111d830fec780152dd8cb8755db34785246f44c518a60182c3da2e13924e41f0d2f2add3934d1c6cc6503d63048b41c6646ac5ad4cb502ab41018f84da4f09a1bc7b7f21e79b3fab75d3c5e4c1f249b3cbba7cd1401b6236b774f85e598b38031063be746d13fdeac0e12c6875cb174f7856d64fdcdd2ea26e5303febe31c867d84671296790d8c8be861886f99ca29bbf50f78b1e9a037addf9172dff4f61896b6051f2b81a08042d5a80d7cdc2087ba49762ff55f8c2d48f18c8483d834c81d428cc70bd487b4792bcc1bf11dfd2f0f5ce132d30717077b65d82fc892b6accb766a1ace19ecd41c059e15df3bf565a91614ea2417b406d5aca39d2d1931a7bc3978467b6eda95c174703e8804f4296ee91850135f09133b66ab9cd5903da5383361d297137fcda011e6757291268e32b9092fc60389411271d60c6650ca990ce3a64a15d98322a19415d7efb99ab94782cc072a1d6c800965ff8fc41f6143ee7d2749fafe62c9677bff31398478eefd7b18c56e7e57de33aad4303f2c082dc5136bedb107678620cb7e8fbc6d1df7e3272894825c8147a0f40615a2cb2628b448025164231a4d389425a0e197c23a05a6e241b8f6629edf968f3a2342d8398a7808e502e6dc222c9c9772b69219a58a4eccfc422202e8800a91c43150fdee584cafbc4623a28ccd1962a3fcfe11f088edd205f1c9f76d24330f9e6224ccaf5df1012858eb5331d553930fbd883617dfa52dc3e1b6ffea8ea39a3782ef80db2b8db2cae120cb824e7fa2fe08f5e6edc44b9f2ea102d49f042df952300c4521eff5659d5a99f470c35cc81215004433bfc90b486b5a9f137eaf6a4f48ef632bcb2fc3baceaa228a68d4fd456b0897c38ae2c988d45b169ef70a5d38561da3861e185841fa4035144347811488f3386e74717e40a911221b9649c3bc24acf739bf9b29470e364738a4ed425234c75652e46c0516631a5685c4781a1b39a527f340419e2912e8c50eace25d1696e4b7dfcef7dd06b2e5d103175ccc8355d3289729f16153655fbe9ec0f193015dfb7ab9d357c561a5e66b405c5e9c4298e306b8b68dfcfd87a25a3a32cc307c6a92bc86e8c4110677d5189c3361e816d7f250536a5c7c29a8797b79164abf8b55700e80381cc085d1f82846f8269f6b90bfa2a2642e665d388de6f094a243d88e2571fe47f4ef99a50ea0da2d66f9f53b56a8006d281f86b735f05087feedf2443d08c204d37fe719c7cd6de10461d2e598adcff6fcc5509c4418b6a0dd7fdfd97c9bd64f27482e55738157962943e775538c45422abb841a2c43c3bfbc11a375bf564ecc8ba243647ab650aea46d1671a60b44c01bb60004d5e3bdf1b3a9539fb284156e59070c977ab708b971229c329f028ce33ad59e0e1a6bf1ce95dc78e073db0bbe5285e3aff6a76f82d71735cc84243f01d5b92994c03393d4720f8dea5b2d1c5f98cfa5f3fa3129c0c20653cf42dc46fef1b923ed54073528cad4aeb8f197eaa22758ce4bab620b73a80ef0ec535e56dcd7d906b97474f5506aca8c69a2b03b80463458272ffb0b239430a60d5ac4cfef491d38750840863db076b78d616e77a58afc013db7207f04222660d1c508345fb7ae5107d55a1bdd84026ac8dc76621b861b766360d32ce49a3fbfdc1eae8bdba4b492c859f454b46e3b68e7b9874c1e4d6316dea94fb2732a0b6a82e8eb217e903660fd96f51f259bf9c81f0969863789948a5b2b64eab85efc0f613338923dc6ab014cdc9f0a403a85ab8f6b0d870e517b7ebf2035f24b92520125e7bd8aa6e7998419f73f5c4cc5395bfd22d718ab16fc1c43eb46081bfe9d3923025e6d5dfdc1e28eb908ee1c2dd89d4887129b3edbf86c09ce571e91f54e3a81e188c1dc037abe1dfa3a32fd06a96cfc670d21ae92497efd14c4d153fcbd636f605b66b98d33bc0a715a3dc75410ab48b9d1bd94004f951d9d9473e815d75ea9ddb4c8d411a4947ab93036c9b3ad7be0d0553041104d7059301c52326cff931a7b7eda9071e354045a5177df2872cde54e1ce680bb3e69a1792411bbae6366bf9fb9e4742dd42a5ccf09d7b1611c4f979bbae004ee774038caf4e623976edf60bcd960830cea20ce73d205c8382ec57c0d0977b975e4f084de3435239421faff1bb04fa1b9d595aaf2f3f5be6d35d7c08c368a16493b0e0ed057ddf0a9ebaaf1f867a724511700f2279947bbb5422cfba727ccb664fa696d45c1b25f3eba0b3c4b03f5c6146a068665c025b47e7e3eae5ced471451e72ab4c559bd0a043c75f120960f0767cbde3f30a8a953637a97ce8c8cbb0f892327b64b9b2affddb7dfee14f0d0bf5d243ce914c2cd4eccc4905041b856f02cdff04fdcb4a3eed8b499cf3f3722181a1706f4de357cbd0ce95945caa70f10c4da0a73ff55851c1fde7018ba1dfc3f9df3b361e1ff51d22255e0d81e076f6f702f01e17d4e0df9d7c1ee149fc00aa7a34f8f2592d6c27a25f237abe72ee4f69e735d91a1a0b6aff7e80ae41a88e52c7e18ad4a7922e8935efd19b47657ce9d14d0b44eeab5771fb9c7c8b0abbda51a5cba2894f3ef8d79ea71fab46b8eaf30b8db622c57124196b7b4b3603449658351764735fc4011fce4da397639d2025741932936cc680bb8067f94165be7942ebde60121e421968243603998d8393115f3840fb98538c497e09c9daa1cf9eab8c17bb1e0bf29a748c86b0056f0a03facb7c93dfb403354b29cf74671d903946a6aeafdea7a1fa1ba9845a0f0dc60e5b46199141bb9af89696a6058c9a131508c5470d47bde2d2ce92cbb1729fa67a20c8f3301410665e777a9710fce9ce6eb81141499cb11b407c1a753a2ce69d0111af52398cf31e5092f79c91ca32ab1bf56e9e277b7f3297fef22b5cd48f10109906ad7ba166e8aee86f6c5bca97e6adbec614f3d8348b266d82c095f546b9bb283919cf2e389ea1314d8c9e2b78ddc01ac2ae9a9e60e6cda79c57d30b079ac02db6851fb257a2163b62eefc955268973cc3cd73e1c2ab21668fdde40205cd5fded59bbe4d179b212407dee5232008f5d823cf4763742ccf479da1d9844c1e9a04fb33ae8f7b27188e602d3a75b6af6764416be4f93cb65e7c320dba5a36f2017e651859fc3443729b5f70e36c186eb784d703fd844c452f2ece4023ee5466c40e9bf8c372016f92cfaa0fca92c2adb26ff30bc2c2613d3b4b43c39c14176e3e718610454767fc592e0763122e2058bf83b320c2866f4bea20618d30ee74a39d27420e466771d78358fbd92de7756fd30a7842e49ac05c05d00ece79ddab0ddca4c1b7320aac146bc4e9a1a1dff24664365d310c285ba4c6449171075c9d662d2a01f888b4b86c51cd251c0514b495ed870f415ac645852c4c2b338a44fbcf52698ace11628c1a1d1c030b69efbddf1f04a978240e8c0f72bfcc268a2cdc0bfc0166daf20dd498463ac3e8d7dcc9e277d01c60a60d537c47e7db04c49e12d7d5db7d73ff51bfbc72dfe42c4f2019af35ec5dc52a783e4eac96d1630a70f0ac8016bc18ff95d7d88fae38971ac5bdf21150265617ce659ce41e565a153a9dc5a77deb86eb76c59789651bb82bbaa450b4e41f36efede9621802b262721ff42eb4069c44617d2168e281c7661acb018aac636f5056034944a61524ac4bcd8ef08f9bfea956f5011fd380681eca62ac19c6eee50b53e425ed90853924ce887df458148996bd0047ac37bde0223c3908b95b9bc8297308e6506a43f982f19425c52ff4358be2c0aff36e9bb886fd212aa88e197d7da745eeb3879fdc9801b0a87907581e79a75dad2e41c04b6a52020a9c25beb0007852f4a240e29197f4df7789102e563b12feb06ab7a9d5d8991706aa1499a9f054c2fde02302bdc92f54ee798d0b881c1342136072b375b7862b79e585a3e6037b73c2a6202c4f121c67e358f70c83d5e592f57d2a444c91cfccea0429e8e9d07f282d2413bc72d51361ada5cf1afd793323305bfe777296ce8b8dacb38c0999c8aec35197b0c1ea546e31c599475c32c25873dc135025ee3e0d7a406083a7c06bb8323d6a16440532e2d1ea8b4cfe2b53bbe17f1c98e84b53eee13d770c344b1d2c4b31cd994b1111b0dda6e09ea90f90e5df6aa8651d266a6703f9d0a7361a26a21db5c47c6a3263a92f074c4fd0b088545a597771417e78f4f70daf65892ba202027372d23252c6f06837c727b738b431be457066fe97aca97464111f6fb0025883dcb6e2dc601c94e659139e68ba52e1dc1afc270e26b8ed330d7e3783ac2aa05286203fdaffe4623675e7eb7dd811500c08e0e41527eee54a5b29136c2ae2390e3d650648102fe1a3bfe0a65be8213fe5a003f8e8c1f62c10e2922ddf28f17171ddf1d0da7d07bf370dc26fa4082fa08752ffd048dcaf12614216c09d730028f457fa6aaa3b28dbd221be4b099336314fbba285cf6fc0d63386cfaa83ed183c1df981cefa5a6b481d9543145196c93f942db294ff65dc133b890950ef0012da29857fcd1168f4f8579395ce508d0f28c1f0352d9a34950fc3f5f5325a2494ae41eadeb0951006f5e8502239fb472be9ae393153f56e8ccfa9c4d28f512b409b81288969e8ef2bd16ea35947ab5171b14cf1786f68da81473c7472911c0f00409463bad9bf10d761663b669db12a0ad8ce94476ca92c01eeff5c3497ebf62a05f24cea717c0a07656e5a897f4f7f2893a3c6e63bdee127368bb7588a97afaa1e1f08a2c1c11816e4a69eed1a49f36b05d2e490678761a880a4bdb1a9731f7cf146a87f4fe26444936a594f9a958305f6a61f9b46fc790713e0fc0aa71c89bc64556277155ae2d06d7c02a0cc23b61149971c71f465c9e6f9f4d0224dad1a458c902cde747f54d40ed8d5d06682b25885b63dd5a5bb50766e39b7163c8ebc4541652c077933cc1667f94e42f45daddf762d5d83c6fce8fee8325f5c56841974771b7cd37d65061f69758a637c9ee11020052a8da68f52562fca3f4b8f61d1f48e66116de2a2cc84b04e89c44341a4635a990bd4fb573804ce6f16a0f0c8532d0c4b40667abf701c6a25c683ebcfa027e84b62b2e80828b37bca807af82f51d8ac7059a8c39bfb760d8f9f56c045ea9186391c2fb1e77a0549f224d671c77493bd8bf2236b666cc3dff58ca82e81856f88f9268d9577d0498eee936dbcc578bd14330b25e4572b5aaad3c1a265903ec8a104585b60d7510fe14f0f2f80f51528832689ec4c716c881d06b640c656ddbaccde90fc26512f663550ef956ed983da4cddb1a880e1e42c4990f7031fd0c5ed94fd08b1d6e9f3a349eec8f9c5e175eafd6fae2c7d2167311c7e7673aeed4e5909a5cd10d3e241195bf37eda527cb1bc3aa685f79f0f844baec25f0d9c1c71f9b67f9c3f081738db47a644bc1e67d653a54578bc6a0c5e2dec1e914f9c37f43ddc457d945ce84b3fc52ef856d517103ca811d4cb9bd834f9221f23c8254aa102249de8c9119d1d43b282013072d0452a25eaf3f5efc1bedb6b8558c2879cd14c6151d35ecd97685bc23b29239424ac8a62d5e398099f7e36b8e97812bc3cee0b60da1a4604c67e61e6622c4c39153a5de7a9a6191d78ed36b57f3d2a7973601afa67b7f073ad19ed2ddbb760b4e6d2ce01755de0de8a95c2d18fa08a2bf2df7a806b79f8a4f9e8f80d459b9f20a88c2942f7741e0cb8b961", 0x1000}, {&(0x7f00000034c0)="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", 0x1000}, {&(0x7f0000000180)="82d57edf21ec144aed6aa7d0aa039bc7a13947f4fd8ff27a9a", 0x19}, {&(0x7f0000000400)="2d94b1ab9fcebc4e5593d3b9e01a26a81b2dd50e8377b67f8b22cbb0ef6bc170ac003fbbeabd00f11ea0a6bbc4e41161d59729a9f068c163cfd313425f73f2982c32162e27a8e24fcf02577af716ac27c4a3671ebadfb507294e4b8d63840976d1", 0x61}, {&(0x7f0000000640)="6022c216a337ccf19da7a6ba7267b0666317a4bc0be8a47632e155e327ace237996d5bf1fcf2b8389cf30f7716b2f0c81e22c54d09f951be0cdc1f2cf64769be38aebede8af076f33e4c0821243149ad204b636bf5f512d401b72ee952bc5ecfe6a35d538e6021538fdecd6ad6fcf0334fb213369fdd64c49397903f472c03ac32afd926809276823d6298dc", 0x8c}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="71939b28c5", 0x5}], 0x1}}], 0x5, 0x2000c048) 3m1.96337869s ago: executing program 32 (id=99): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="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", 0x179}, {&(0x7f0000003380)="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", 0x114}, {&(0x7f0000000c80)="331e8c48b2ab8236fae299aaccebe171a2f9d28c12776d4c6a9fd8f28ae9a98c16964f5ce289f029d188f72f8eced9", 0x2f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ec0)="bdb2600dc8d5d5b93e2de4213650aea3e35a128eaae97adbc821d6c68024e8ba1e7345e3680438f90cb68df4187da1848e88d85bdaff0a01a24b19b1674d4fdf74099172ed178e2dfa4d1c5d144a754f32f2b56cdc9103b2997a1e0d95fcaee24d775863c71c8d236f7f83560b25ea91b0d7841783123793a5121898de23da6f33664650c138cd7aef41e86f6ee4cc95a98b78ebd117b6d5c312c0e8c18ac15aa3d1e4ae6ef06af64ee5fe7962595f8eb66298ee32178596deb0968bb1252f62e3df4d1872bbfe80263bb459cf62116795aad3ce3d73aa270b4097f15c619835d8a489e9720fcf3d3650e2be50a9ce29893fdf3423700af9920dd0a84e4a92c3b86a9d781793a9a1519bb136b0e9ec242bbce698f6c7114cd9da8dc885c8a1a8988dcf14c08a005ace31a2609ab549c8c7e619b4b299809c22e81e1b04e1e65b98efe6251f3bcb43fd3f5071e1b8aba34569e52d74996031593cb741887f90d356317ad4252fbcd7d81578d5f02628adaa39df2a00417c080d46fa5f8d16dc4a088b6b618e324f6f82830d38c912e6849cc1d41a7ae0a7e945c02161bcc4ab600ad505f5d195b3f673e0de3ff8bcd9257bbdd1447d30c50963461ae865f6c0111986549bad9c4f2636f74059876d068d6552f79ad830a6028f73c90690df2ef4131eaf229a4a3c1f37e123c5d21c15aa325ee6f51bc051f45ff7f03d8318e9b89b3064fa0f10e41ba1d7c27dd38e7c3cd643af39a68a5d91680ea8c623ae71e3b14fb650691a874f1bf4aee0ee35cb2079f00e085e34bc96b30975e99bb52b40c09a4112f95e39406b581756162bee17371d209f08709b0859f0a2bf41f1d26856a677ae034a529f5e3d5eed923723732e69c024be9f0a84f8aedbf9f9d8e14621f01d482e393a88be9b3b12dc2e9a6ad2e1e745609934f2ba9c35748619f15a8e2e33c131080ea237621e35ac3113dd53bf41e187d5484c7091ee733ca79f269cd42198600a543588e69c250d4f8871e99e9ed8aee530f4384f901f7d62dd3af3aca3b8d2a5aa954477e337eb5c75d77f8c0980395120ff31f8c9e54f9376b87b160c55e685b79fd95d715297e3a6a01a341f971294a7c3cb376374a303f0", 0x31f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="01081d4f08d5fadbaf4c7c276eff5bee77be5b8bd77045f280ef2dc1ebea25375c3422f53407b922dea5113341087e1b39ee02b6d3a0289773776ae650ec62d7894ab6c501be6705c19a9a336a4895f8c713adb5cb9a43d6fc6184a24682db41a5b8c6e9a9c1d51eb6130acf0e6561f7eb7dd43fd002c3c99dae0ee4f53b99215d60c1902cdcf7ee2e", 0x89}, {&(0x7f0000000380)="f4395e6221e4160c2217a6f8b263e60db8165f8255fefe1294d42db03509b75c5adfccbdd257f49ec125babe70bdd804016f9f04c5590a9e847eb036ec73b8dce7de66c205b1cd627e8e45bab4b910ff8e225c744578be6f22ec9b2910d7c8", 0x5f}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f00000034c0)="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", 0x1000}, {&(0x7f0000000180)="82d57edf21ec144aed6aa7d0aa039bc7a13947f4fd8ff27a9a", 0x19}, {&(0x7f0000000400)="2d94b1ab9fcebc4e5593d3b9e01a26a81b2dd50e8377b67f8b22cbb0ef6bc170ac003fbbeabd00f11ea0a6bbc4e41161d59729a9f068c163cfd313425f73f2982c32162e27a8e24fcf02577af716ac27c4a3671ebadfb507294e4b8d63840976d1", 0x61}, {&(0x7f0000000640)="6022c216a337ccf19da7a6ba7267b0666317a4bc0be8a47632e155e327ace237996d5bf1fcf2b8389cf30f7716b2f0c81e22c54d09f951be0cdc1f2cf64769be38aebede8af076f33e4c0821243149ad204b636bf5f512d401b72ee952bc5ecfe6a35d538e6021538fdecd6ad6fcf0334fb213369fdd64c49397903f472c03ac32afd926809276823d6298dc", 0x8c}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="71939b28c5", 0x5}], 0x1}}], 0x5, 0x2000c048) 3m1.949271662s ago: executing program 3 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x141, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @binary="6de2ed53"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='e3'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 3m1.893391728s ago: executing program 33 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x141, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @binary="6de2ed53"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='e3'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 2m25.040960744s ago: executing program 1 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2m24.900876573s ago: executing program 1 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="14002c"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 2m24.832415252s ago: executing program 1 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x840, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x731500df, 0x3, 0x5, 0x2, 0x7, 0x3, 0x5, 0xc, 0x7c53, 0x5, 0x9, 0x80000001, 0x6, 0x4, 0x4, 0xc, 0x4, 0x1, 0x3, 0x7fffffff, 0xcbf, 0x3903, 0x3, 0xe5, 0x5, 0x0, 0x9, 0xfffffffb, 0x92a4, 0x7fffffff, 0x7, 0x3ff, 0xbb, 0x7, 0x9, 0x3, 0x7, 0x800, 0x6, 0x7, 0x8040, 0x8, 0x6, 0x0, 0xd07, 0x91, 0x6, 0x7, 0xb90a, 0x7f69, 0x4, 0x0, 0x7c06, 0x8, 0x3, 0x5, 0x8, 0x2, 0x7, 0x6, 0x101, 0x8, 0x7a, 0x7fff, 0x9, 0x3ff, 0x8, 0xad3, 0x3, 0x7, 0xfe, 0x0, 0x8, 0x7, 0x8, 0x0, 0x5, 0x0, 0x7ff, 0x4, 0x7f, 0x8, 0x5, 0x7, 0x400, 0xd, 0x81, 0x7, 0x19, 0x941, 0x3, 0x3dd, 0x10001, 0x2, 0x6e9b, 0xfffffff8, 0x0, 0x3a, 0x5, 0x0, 0x80000000, 0x1, 0x922, 0x1, 0x2, 0x5, 0x1, 0x9, 0x6, 0x80, 0x7, 0xe275, 0xfff, 0x80000, 0x401, 0xceb, 0x15, 0x0, 0x7, 0x0, 0x9, 0x1, 0x8, 0x4, 0xb537, 0x4, 0x6, 0x7, 0x4, 0x1, 0xb4, 0xfffffff9, 0x8001, 0x7, 0xfffff001, 0x4007, 0x0, 0x0, 0x2, 0x4, 0x5, 0xe8, 0x7, 0x1, 0x3, 0xa44, 0x6c7586fb, 0x0, 0x6, 0x306d564a, 0x6, 0x1, 0xfffff800, 0xe0, 0x0, 0x35, 0x2, 0x5, 0x80, 0x3, 0x528c74, 0x4, 0x4, 0x5, 0xf7, 0x9, 0x2, 0x2, 0x1, 0x8, 0x3ff, 0x8, 0x7f, 0x80, 0x4, 0x7bc7, 0x0, 0x3, 0x8, 0xe6, 0x4, 0x101, 0x200, 0xa1, 0x9, 0xe363, 0x800, 0xd7b, 0x78f, 0x8, 0x9, 0x7e, 0xf, 0x7fff, 0x5, 0x5, 0x0, 0x3, 0x4, 0x3fd, 0xf29, 0xfffffff9, 0x1, 0x1, 0xf10d, 0x2, 0x7, 0x14, 0x1, 0x2, 0x8, 0x4, 0x2, 0xfffff0b2, 0x9, 0x1, 0x1ff, 0x101, 0x800, 0x8, 0x3a965a17, 0x7, 0x2, 0x3ff, 0xb8, 0xe70, 0x1, 0x9, 0x7, 0x9a0a, 0x4, 0x8, 0x1, 0x1, 0xf951, 0x3ff, 0x3, 0x7, 0x3, 0x96f9, 0x2, 0x1, 0x3, 0x2, 0x0, 0x80, 0x3ffc, 0x401, 0xfffffff7, 0x40, 0x9, 0x6, 0x0, 0x4600, 0xf, 0xc]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fffffff, 0xfd, 0x8, 0xbf1, 0xfffffff8, 0x8, 0x6c, 0x8000, 0x0, 0x3, 0x50ad33d4, 0xffff, 0x9199, 0x6, 0x7, 0x0, 0xe, 0x7, 0x4, 0x8, 0x0, 0xbd, 0x9, 0x80, 0x22da, 0x4, 0x5, 0x8, 0xe935, 0x8, 0x7fff, 0x40, 0x8, 0x0, 0x9, 0x8000, 0x9, 0x10, 0x67, 0x6, 0x2, 0xb, 0x0, 0x40, 0xc1, 0x7, 0x0, 0x10, 0xffffff00, 0x7, 0x0, 0x6, 0x9, 0x8, 0x8000000, 0x4, 0x4d, 0x200, 0xa179, 0x0, 0x6, 0x5, 0xe754, 0x5, 0x80000000, 0x400000, 0x9, 0x2, 0xeca, 0x8, 0xf15, 0x7, 0x9, 0x3, 0xa000000, 0xfff, 0x8, 0x0, 0x7f, 0x4, 0x4, 0x3, 0xf6000000, 0x2, 0x3, 0x8, 0xeb6f, 0x4, 0x7ff, 0xe9, 0xe, 0x1, 0x6, 0x1, 0x4, 0xfffffff7, 0x5f, 0x80, 0x5a12, 0x3ff, 0xd3f, 0x4, 0xe, 0xd, 0x9, 0xb, 0x8b58ddff, 0x10001, 0x425ce4c6, 0x5a, 0x7, 0x1, 0x3ff, 0x3, 0x8, 0x80, 0x2, 0x7fff, 0x8001, 0x4, 0xfffffffb, 0x25b, 0x277, 0xfff, 0x8001, 0x8, 0x7, 0x0, 0x1, 0x1000000, 0x2, 0x7, 0xd90, 0x1, 0x7, 0x7284, 0x6, 0x0, 0x6, 0x9, 0xab, 0x1, 0x7, 0xfc, 0xf, 0x7, 0x9, 0x9, 0x7fff, 0x0, 0x7fffffff, 0x50, 0x7, 0x8, 0x1, 0x8, 0x9, 0xff, 0x1000, 0x0, 0x7, 0x9d, 0x1, 0xb3, 0xfffffff9, 0x3, 0x2, 0x1, 0xfffffffc, 0x1, 0xfffffffd, 0x1, 0x1, 0x8, 0xc, 0x21, 0x80000, 0xffff3c08, 0x7, 0x4, 0x37d8bacd, 0x3, 0x0, 0x0, 0x81, 0x6, 0x1, 0x1, 0x80, 0x2, 0x1, 0x2c, 0xa, 0x4, 0xe, 0x2, 0x5, 0x59, 0x0, 0x8, 0x7d2f, 0x5, 0x9, 0x1, 0x5, 0x1, 0x3, 0x0, 0x81, 0x1, 0x9, 0x6, 0xd2, 0x2, 0x8001, 0x200000, 0x10, 0x7, 0x80000000, 0x4, 0x3, 0x28e45532, 0x1000, 0x101, 0x1, 0x8, 0x2, 0x3, 0x9, 0x4, 0x2, 0x1, 0x3, 0x2, 0xac, 0xca0, 0x83b0, 0x7, 0x4, 0x1, 0x8, 0x7fff, 0xa, 0x30, 0x7, 0x3, 0x3, 0xffffffff, 0x2, 0x8, 0x7, 0x3, 0x1a8, 0x0, 0x9, 0xfffffffc]}, @TCA_TBF_BURST={0x8, 0x6, 0x3}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r7, 0x1, 0xd8, 0x6, @remote}, 0x14) 2m24.729893193s ago: executing program 1 (id=459): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00008bc6000200", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) gettid() setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) 2m24.240181928s ago: executing program 0 (id=486): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m24.182192499s ago: executing program 5 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2m24.181809117s ago: executing program 0 (id=488): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2m24.022555529s ago: executing program 5 (id=489): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x2) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) 2m24.021944778s ago: executing program 5 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) 2m23.971084139s ago: executing program 0 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000000100)=@tcp6=r1, 0x1}, 0x20) 2m23.970799949s ago: executing program 5 (id=494): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x858}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m23.917372905s ago: executing program 0 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xafc, 0x4a, 0x0, 0x2633, 0x3, 0xee8, 0x7, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m23.842551812s ago: executing program 0 (id=499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2m23.84229883s ago: executing program 5 (id=500): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x890e, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x10) 2m23.772030392s ago: executing program 1 (id=501): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2m23.771850746s ago: executing program 1 (id=502): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae", 0xa5}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce83e6c2faa97a4f99d042e50e7993649", 0x6d}], 0x1}}], 0x2, 0x2090) 2m23.66848412s ago: executing program 34 (id=502): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae", 0xa5}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce83e6c2faa97a4f99d042e50e7993649", 0x6d}], 0x1}}], 0x2, 0x2090) 2m23.562498408s ago: executing program 5 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x1, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x4, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x4, 0xec2, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x103, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x4, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0xb, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x3, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x85cb, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0xfff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x800002, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffe, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 2m23.489346661s ago: executing program 35 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x1, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x4, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x4, 0xec2, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x103, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x4, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0xb, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x3, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x85cb, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0xfff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x800002, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffe, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 2m23.442072105s ago: executing program 0 (id=507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m23.432124411s ago: executing program 36 (id=507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m20.742328304s ago: executing program 8 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2m20.633575337s ago: executing program 37 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1.131005039s ago: executing program 9 (id=2470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xffd, 0x4, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 971.237385ms ago: executing program 9 (id=2476): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fchmod(r0, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40004f24a4ce7b2c8c926fe208ed08206cbaf2f003a610079060000000000006f0400000000000095000e00"], &(0x7f0000000000)='syzkaller\x00', 0x42, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @fallback=0x2}, 0x94) close(r1) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="96bced8af9c8", 0x6}], 0x2, &(0x7f0000000b80)=[@ip_retopts={{0x10}}], 0x10}, 0x42090) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000000100)=@tcp6=r3, 0x1}, 0x20) 911.30779ms ago: executing program 9 (id=2477): prctl$PR_SET_DUMPABLE(0x4, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 910.163997ms ago: executing program 6 (id=2479): close(0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 661.313531ms ago: executing program 6 (id=2484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xffd, 0x4, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706", 0x11}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 661.004769ms ago: executing program 4 (id=2485): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x3) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=r2) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r1, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x9, r2, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x8, r2, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2, 0x30303030}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000007c0)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x6, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000980)={0x201, 0x2, &(0x7f0000000140)=[r1, r1], &(0x7f0000000180)=[0x49, 0x3, 0x183, 0xd, 0x401, 0x2, 0x80000000], &(0x7f0000000900)=[r3, r4, r5, r6, r7, r8], &(0x7f0000000940)=[0x2, 0x84]}) sendmsg$nl_route(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@ipv4_delrule={0x24, 0x21, 0x60347772ce867bf2, 0x70bd2c, 0x25dfdbff, {0x2, 0x14, 0x14, 0x3e, 0x5, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x2010, r0, 0xa42dd000) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$TIOCGSERIAL(r9, 0x541e, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/173}) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2286, &(0x7f0000000c40)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000dc0)={0x0, @in6={{0xa, 0x4e21, 0x5, @private1, 0x3}}, 0x727, 0xffffffff, 0x0, 0x7, 0x8}, &(0x7f0000000e80)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000ec0)={r10, 0x5}, &(0x7f0000000f00)=0x8) fcntl$getownex(r9, 0x10, &(0x7f0000000f40)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000f80)={r11, 0x3}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000fc0)={{{@in=@broadcast, @in6=@private2}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f00000010c0)=0xe8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000001100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000001300)={{0x0, 0x9, 0x4, 0x2, 0x7, 0x9e98, 0x2, 0x6, 0x7, 0xffff, 0x2, 0x4, 0x10, 0x101, 0x503}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000013c0)={r12, r13, "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", "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"}) r14 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002480)={0x14, 0x0, &(0x7f00000023c0)=[@exit_looper, @register_looper, @free_buffer={0x40086303, r14}], 0x70, 0x0, &(0x7f0000002400)="3b9f36a6d41d57984e84fb7cfb420a5f3a6ba205b0298152c546b9e8443731f7c26edc8bdd0b6ebcec8df58e12e4c9017e3b0229adfcb7b291c98b25611e64e59920b76777ff7e6433313bd8661d5844ce5373e4ee2b9f29810d56a0bbfa631406d2ebb810b5f7a72a05d211e9b5dbbb"}) bpf$TOKEN_CREATE(0x24, &(0x7f00000024c0)={0x0, r9}, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000002600)={&(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002540), &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000025c0)=[0x0], 0x7, 0x0, 0xa, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x48002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000002680)=0x14, 0x4) 502.231919ms ago: executing program 4 (id=2486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) (fail_nth: 6) 502.086543ms ago: executing program 9 (id=2487): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 501.884874ms ago: executing program 7 (id=2488): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2001, 0x8e) close(r0) writev(r2, &(0x7f0000001840)=[{&(0x7f00000002c0)="ca0a8b627f2c3690f46e336d45c0de2a3f10ff823ee1a89def615471426a89ddf9a5a30e20b5", 0x26}, {&(0x7f0000000300)="40388d5ea3be08e25434ce2c6fb7", 0xe}, {&(0x7f00000006c0)="61709331a8bfc4fa4c99eaf98a05cea46aae6f7f554c22ed6d149e38b93c43bfd09889002b6da97d8ee4894b0b6696c0e099338b6b54114cb94923ffd4f2ea417bb6b62f43290a3bf5edac6003fccd38fa191b1a7502722a15f875552bff92a1ed4febd9927eed7e76d165e3cda8b4b756fdff3d492a36b03b80da69046a9bdedb952b08bd83a3e93dd179cbb37768bb6ad5976fd93c6a77f0fc963b505b8d86020539bf9a65a2af377c3f4ec3b736674c7dbc6ddd8c6d785fc7d578ecbd1b1e73f1aab259345d32e2c291450b06dce64307ff743b65598816d25ee0452336007264211456484068e200e49c6fe23bb27b751a4da32a5cd7042f05be775bc7e6ee2b62f26c2e3e825afa03c10afc28726df6abaf766e03cab01d52ea3e92dcb7e34a51ceaf8f211a3e057fc08b319593602c0bfcb06034a26c0b3c5fd0146e9590ca2b13deb761e3724d31ed8a7776fbd75da015131f5a4f3aee066f27116ce9742c6480860d0366988c1b5a7f217dac34398ca202b28183103c16db156122b2a24bb532bf6cd4f6f8d435e85af63d49b6e5d259c7fcefac838eaaabe9b9236f8adbac38913d31dc61455c35e5aa7e7ac46f21f017c96f7d081118ed14d80fa2b6b4c50f4f4566ff9133d3bfe69fba1786b9ed6067c15a66e15947849aef995679a95f395e75a3cfe31a4a6c35e5aa2257d7410d64f17af06f7209dc8259d32a4c54fd9a44b33b9f43023c5002120b829a4756a8f4ea300269b40065c2443eebc1b8a8d27a80fa664adc53e2deadc549fda4287b0dbf8ea3591fad1db0ed8507d5cab5e8f5550443c2211d436e114dfbf3338833f633eb2f0fe205371cd013d76c6a8f48d4d81aa6e825e79174f6b6d798e4acbacda8fa717b36c4d597c3e04e45bd39b80fab3010689a872242ab21034cd6d62087d0b98e3f1bd30ada4538b9006c151683d138e59a2fefada7b7f11d89a6f5223a036746d4d79b8735774c6ccaaf48b36e0548e64e6ef4e596c99066a0b5f10f3a85f5a2806b9dd72a827d96adb1c2abe40bab98385b25fafc02aa032c10193975c9ec94cc79569bc7c26bad279197db7207a0b16caec0cd93b9c11fa709c1da26b12b9a67187b290e1e307e7344fab0dd521c13c4faf90b6b9f2b82f2c12ce337d3081139a8bd990615ad38ad1fb87ec44d2871a43dbc1dffec9f007df0175912522d0873c7df949f36f83b265525f56234b5462913a40f33444380cd171a05b7d7a3cac43b0f262350ae9a21e9b25b49efc33876fbf650062d56407a50baea18444d9d1ba5fa5837b040b1cd77e9b5d8e8b42cdb71085e8150400f16a0822936dd2172d4a09e16be14a0664aed277b2f3e6a00d2f0311aa8b32481a556514a66f088582365490a47b87c33b156e8b17c0e7ced76b554f8cd68cb347c800b89a8d4b72e26e2060fb31f7235dfd848aa76a7a54ed929af3b45453d301c4881afa4e284a8c3849cd4a5a35b77d46d1811208cb1bdce3ad861c8c936b73760a5627237b8fd6d0b7f93fb04f5a42c52fa8b59dba3eb2b8315f27fb0370510ef2c1d6f3e3d97e3ae193e77d216ec557a8a5c0c4ef2710baf18e2a7aab892837dfd1ae093361efa2a7867547230053976ea9485b13eeda6171eeed3e899ab3e4965bf1ad8931c582418a63d8b342c0b3039af401d8810be38e8686984ab34e555abe0e8c418c30ee1a9252e9528ac7aa5e9560250840998bc31130d75eb384af6a7f42429afe63697c6c8de8901693edf0e61f69600f1f3ab878bb569bbc80988767081359cbc094ac02e3d0521cba091968e5ae0b9515d158faec6a53dfbdbd4fa83aedeed7a2574b0e5b391b207e064fbf0b4ecc9d217b76a329d350afb2dc67d5297152e32296c1203e4465fe368f90c896d1dd0f05992057b96a50821b5458c705545707065821edcb5eb5d5e97a8ca9f240ff0aa45a37badf738f2bef51755b10d37e9598a86d92601d8282bd67e2edb6cfca6fa18f336e4067ff423c6655a22688dc2779663b12404802147caf7c7290d4249375914411793dc8cb21c228a4b026d25fbd79ecd889f61c0d2890b4b0e149d0a41d6b2f1dc6a7216f6c494aaa02ea51a4845a8e25464bb0f0c22fd51f0e3e76225e22ce7cdf535ca7cb9f9c927a643331b96ed04be3bf61b8840f33d4f583661782e12a8427f7d15376c23bbcc6c7c538ef2fc2c4ec2670c87e8024f2ac118dec06a578f5998d713575e32af61e03c45ec3861c2b2ea1a68bb521677fa611403a5e87d64df6bb07adb647483b55d254bf7d25fa2b99b08dae7f9fdef0217fa94499914be6422f21b7aa718576f81a8b8b32ee277215053b0c62c0e28763dbff4b89363e8a2ef378f608c7ce0a11225fa1406988731e9fb232075c1f1b3fd0b79eefaab5630d43c863136f71437684bd92ce67353b8eaa9c9e22da67e969af4de31abf081753258f4435087252ba14bbc046c4f19454e9a774f6cae292f516c93c1606397b63dfe674d5587bd6bc97604bb49fad325582a61d5adf2a909442e54f2547f566e43e72a00deecd3251370f97059d737d7d7a82a8fdd5579bd1cf085eb4a24103ac3ad9f567e8ff7745470fe145831206de39a4151376d93a5f8e12d3997bfec771ba5e27243c886f930fed00cefa8aca2e58d7b1b6dfa02de951777a90d620d695fd803b6bcf4819de10574b9be4afa71f5d4fafcdea2090b5c4a7bd06b991415575b4fdd8caa61c08c6cf11d24a566cde84f1af85a99064dbee31553a60c131dd7f21cd866013246f86e7cdf7019880b1b329b1dda0196384759f51fcf62204af0dc68bef983578cce834d69b88417824d5b83cbc17e6291284846d5f8a23420c443bd3db4c6d091bd13e32a2511879b375e4631441db1caae12ae5ecf8b126602e5dd7df8373eab776a2a2c912107f5cf03bab40b2afae8c31db2d0234bb4a149ed9eef2387f5a7633739cb942d7974f5d2bac253cf80da5bb695e14140fe15a3ad16fb4b009539e92cfcc4269c7e286e362e23668118df2f9176ff1e98ea2c1ffac5e73e28c76e5ae8a569a63ab0d0d06b60ecb90c1e42b6c0c6df114da39249092c582e8e04ea48a237b3312d4bfe30c016a1f403a4c2d48f11d99b8985d27d622a7e6cdd4e63720adae8b349c5ae26b2da15d655044a408db715f42f7dabfd36ac4236317018e1000c24014784719ea0a295cc22f9954cc33be1cca12707b9ddbb1047a21f75b6225c4c6d80d41d1be86433ffa679ce9d3702ddd67b415cd8bd907c2859551916873e94d12343fc10cbc80a2477ced8a0569cd51c12963a4dc4470a3b30559c347f221e203c90023cc03d0a9d4cb74613f7f89a2e2be3b6735c200f49113b49516072dfdb156557400483c4eef40ad9683d1e50437c0ac21099370c0f3aa62b502802d0d7566fc1d44a8aa23db7e6e35fe0d4ef8eb674737d6fc1de7cb08073b2b5d41e1031bb862c8a5b63c6c233fccb76dbcf731ea566a412335a6a7afcd4c0a59c0082472b6b5ff97d97796ebbe37beab3e74bc0b224862a69960a57f3e650b547755feea1737ff7328be5403ccc635cd078bd155ddbcced7e2f402ee285013ee16087326e0f56d4d515a94df0de58cc760359819eac0f37c0ca3531ec723c191673f65f865c8f73da6a7ebf919d730ba70ef7f16e34d87989c18d7c039c5ceebf545a3395e495d18f09899dc27ee57a551bc1545d5446f9fef1d16ede745af6211dacb6c71a15b98e652dfbdbe95c00be426aee7c673c1d827bfb2ca082449269b0724b71dac5ca4d42360a22694902f9251b8bf7b8af7239ae29325f4a1b99ab681c072b6946383215adfd8bdb294896165e0e475e344385a6645bfc1d28c83a016bf247149dd33699db82592c6637a4bb986c734b6624e1bbc040dd15cc20535921fb91828fe71622a2299aa9a6169558c30381ea7cac506119e92a856e9a1002a608148d9ce38e7232e4f0b61513187ce90d05eb71805341f3f8b163e832b5294c1e2fc45ee94d971f397c2dfff42f0aa2740a83933bb6119beed7729d7f30a9567b630cd47b0f56e48712505f98cf8bf5813a4ec151e1d6aba91279a141c7c29b9671783caa2cfe974a3d7bac5cd4f898ed129fd7a636b7be8315f2719b958f65aeea8d320528a6f3c90540d9e06886c20985bf9e0dd588738ca756e96b211962ac8e3479ec7dd7fbe17872411434da9300be9ec666487b27e947dd3c9b28712cc3658763b707739a6f35645a47197d7e75b457add4df46d382ada95469087c11082e4795f0c71e73a7243df6a010e210956f0ff251c593d3229c4d5f7b35a6897f8aae75d71017234de6f6fb496983204c6fb9a0d03ef8ed2fb9b15cb1149ac3157965e4ef18ccb0aedc2c4d9c1a00eafe43b6eec78058ee1320cce2466a8ef843e78a7bc6c79b51d8bb3acf6ef8edbeb3572ff953aa4f84c60c138e40f857be6491902396678b239b876b4517452043394281b0fd74622f84bc7994c2cfcb571f4aa213b210b4764f2088fd19a98c81d3e2c307bcc6b523f666622e9835c3ba57ed1b902d165e26350a8cd13e86e36ebf00d42d78de4e45d956d3696331e0905a1ad45754cb757603d2a3ddfadd9360a92ba2a5e53303a03af17af7c4f78cc8ef4f7a22fa171650f6ebf6ac4e8e230809c1debacf9ef150d2f13fd7a1082de93bffb547246773905ffec695f59194b5d0debef1fa7d75721f6b0fbf354bd57567600d8cd669197a475b20e8016dac063760df8ac6aad90d8ec4a84da0f63cfc7b81d39d05ea228188bdc6e2789e2e92792e6336cc28e1847c5e29d4df709ff6d341f31388c6dd34757d2226a6bde264c34f021176d85a83d5ff709efb41913e73fea06bfd94949cabb1bc6ec3cc713f61a3dedec9c3aca24dc2be082dc20007e4e0b73f1613ab3d3547c5fafe242b45f4a6ae6d7203c20839afacce98012279e0373d7f5a7676998254022f3e5ccacea3faf17a8d0c89f88bf5443e728943414b365da7cd8c26cda67bca5b604bba954eafed87f8838aa3f84dd562ce68f0cf973d3acb38a699d2c94433530b7c9c2da8d9c51b8fa08e5cd73c3a62be67be581b584276f96e18e4a884c656d9b3c94a2abf0de16c1d3d9c28f1b08af07d7fb5357ff6d051e41e8031ccba495e8306d26b8b73256398bd451dd51c41171e28ad1d27a33a47e44b2f6a7359733e6291eb668de2c45180b30dee26dad33a4081f7dd2934f12a43880960024c0cb8fc2c908229ed68eb5583a7bc779302d852c5b526eb1ea5a56415855e87912c001b81b45f14d90aea6598724948d506f255e28fd685c945d4fe275d8fa4f5c313b8455bbb61e83bf3bca6fa55fce9c4fe09b3e919450da48b4182d91914f25de8ff0a16240e3d1a6e83af1d3308a963902305128369401a9d56aac0ae841e14e9b1d6b0d06b6bb3a986ec73289cae9785eb0cf7477c311ae70517912e7a1a353f52c76783bdfd27aafd0f53d6227b8a4e657cb999a4e108f9836d34881f9dfe18148689761339c56f4235f07271a35c518b6c42d120d2988dd6281d44e36b11d3acd3f88cdb199eb8bc566a9a7a328fbf13d8f84b731ab82d6bfbfa680e0fdb41e747b857bdb3fa9c045017ce084fed03f5f8a81255c7f2520ed70c64825a0ca106e53fe38a22ebcd86e991e3875c719d9f1254f5532761d0c7990def6c6f7b", 0xfc5}], 0x3) 490.539667ms ago: executing program 7 (id=2489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) (fail_nth: 6) 431.224647ms ago: executing program 4 (id=2490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) (async) getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 310.669871ms ago: executing program 7 (id=2491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x1400, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) 310.551335ms ago: executing program 4 (id=2492): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x8000}, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 310.329522ms ago: executing program 6 (id=2493): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 309.727336ms ago: executing program 9 (id=2494): setfsuid(0xee00) setresuid(0x0, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 239.571662ms ago: executing program 7 (id=2495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x70bd25, 0x0, {0x9}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r1, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x75, 0x28}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3ad0a59b0be31b800295ac5e0e"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x44004) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x4c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004044}, 0x4000004) 239.164056ms ago: executing program 9 (id=2496): mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,timeoutx0000000000000003,\x00']) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffffffffffba, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000002) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000a145e17cb39636500c4e3bf4d12415551647403a0c7c57c2fa88368ab181c73b05d13a8a0c157de3c53f2f68d7841931db7ec5309977ebda5724c67c957db6d2f158a6576496779ba354b1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000000)={0x2, 0x0, 0x1}) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x8, 0xb, 0xfffffffc}) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xb6, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x8, 0x40, 0x3, 0xffffffff}}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000480)) (async) sendto$packet(r6, &(0x7f0000000180)="73f01b9e2c16cdc44ec042e31a6ed4f88e028947965a37346ce0f403edbca1a000e60f74f5fb2d63a4fe121168f47e74d47cdef439b7cb54ceb5bb17c4a170985f28505b2b657f38311ef8d4326b55d80edfde8be2b13bc43535c25fc8d77d8d15416f27eb858a162cb16521bccbff9056cc9616", 0x74, 0x4c, &(0x7f0000000380)={0x11, 0x11, r8, 0x1, 0xa, 0x6, @local}, 0x14) (async) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="31042abd7000f540dc9f251600000018010180140002006e6574646576736a000000deff0000000500040001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000003c0)='illinois', 0x8) (async) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120007030000000000100000000601044e2300000000000000010000810000000000000001000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="00000000ff7f000007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) (async) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4004080}, 0x24000800) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000a00000000008000f0fffeffe809005300fff5dd00000010000100070c10000000000000000000", 0x58}], 0x1) 238.961144ms ago: executing program 7 (id=2497): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2001, 0x8e) close(r0) writev(r2, &(0x7f0000001840)=[{&(0x7f00000002c0)="ca0a8b627f2c3690f46e336d45c0de2a3f10ff823ee1a89def615471426a89ddf9a5a30e20b5", 0x26}, {&(0x7f0000000300)="40388d5ea3be08e25434ce2c6fb7", 0xe}, {&(0x7f00000006c0)="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", 0xfc5}], 0x3) 190.352102ms ago: executing program 4 (id=2498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x40000000}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 190.002976ms ago: executing program 6 (id=2499): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x300, 0x0}}], 0x1, 0x40000) 131.080675ms ago: executing program 6 (id=2500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x181341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x50, 0x28, 0x1, 0x70bd2a, 0xfffdfdf8, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0xe3f0, 0x6, 0x3, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) 130.484217ms ago: executing program 7 (id=2501): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000019300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) write$binfmt_misc(r13, &(0x7f0000000980), 0xfdef) splice(r10, 0x0, r13, 0x0, 0x81, 0x2) timer_settime(r9, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400f9ff002e"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000004) sendto$packet(r7, &(0x7f00000192c0)="8347e7bf3e0001000000efbf4467fe8baeebaebc15bbf4a860921a2df3b9dd6a1d00af1778647a8d03aba28309af0f652a656ce54ff174aea194f987e9000000", 0x40, 0x841, &(0x7f0000000200)={0x11, 0x10, r6, 0x1, 0x4, 0x6, @multicast}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0xffffffff80000000, 0x0, 0x121, 0x2, 0x1}) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r16, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) 661.023µs ago: executing program 6 (id=2502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xffd, 0x4, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706", 0x11}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 0s ago: executing program 4 (id=2503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x181341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x50, 0x28, 0x1, 0x70bd2a, 0xfffdfdf8, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0xe3f0, 0x6, 0x3, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) (fail_nth: 6) kernel console output (not intermixed with test programs): ler0: entered promiscuous mode [ 230.540719][T12431] syzkaller0: entered allmulticast mode [ 230.556674][T12433] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 230.558974][T12433] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.563953][T12433] vhci_hcd vhci_hcd.0: Device attached [ 230.576710][T12434] vhci_hcd: connection closed [ 230.588614][ T4218] vhci_hcd vhci_hcd.9: stop threads [ 230.593146][ T4218] vhci_hcd vhci_hcd.9: release socket [ 230.594948][ T4218] vhci_hcd vhci_hcd.9: disconnect device [ 230.603502][T12438] binder: 12437:12438 ioctl 4018620d 0 returned -22 [ 230.698099][T12440] "syz.9.2249" (12440) uses obsolete ecb(arc4) skcipher [ 230.764822][T12448] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2249'. [ 230.843309][T12407] /dev/sr0: Can't open blockdev [ 230.882438][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2252'. [ 230.884349][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2252'. [ 231.113224][T12478] FAULT_INJECTION: forcing a failure. [ 231.113224][T12478] name failslab, interval 1, probability 0, space 0, times 0 [ 231.117488][T12478] CPU: 2 UID: 0 PID: 12478 Comm: syz.4.2261 Not tainted syzkaller #0 PREEMPT(full) [ 231.117504][T12478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.117511][T12478] Call Trace: [ 231.117515][T12478] [ 231.117521][T12478] dump_stack_lvl+0x16c/0x1f0 [ 231.117549][T12478] should_fail_ex+0x512/0x640 [ 231.117566][T12478] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 231.117586][T12478] should_failslab+0xc2/0x120 [ 231.117606][T12478] kmem_cache_alloc_node_noprof+0x86/0x800 [ 231.117617][T12478] ? __alloc_skb+0x156/0x410 [ 231.117632][T12478] ? __alloc_skb+0x156/0x410 [ 231.117642][T12478] __alloc_skb+0x156/0x410 [ 231.117654][T12478] ? __pfx___alloc_skb+0x10/0x10 [ 231.117667][T12478] ? find_held_lock+0x2b/0x80 [ 231.117687][T12478] tcp_stream_alloc_skb+0x34/0x670 [ 231.117701][T12478] tcp_sendmsg_locked+0x12de/0x42a0 [ 231.117718][T12478] ? __lock_acquire+0x436/0x2890 [ 231.117735][T12478] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 231.117750][T12478] ? do_raw_spin_lock+0x12c/0x2b0 [ 231.117765][T12478] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 231.117783][T12478] ? __local_bh_enable_ip+0xa4/0x120 [ 231.117803][T12478] tcp_sendmsg+0x2e/0x50 [ 231.117814][T12478] ? __pfx_tcp_sendmsg+0x10/0x10 [ 231.117826][T12478] inet_sendmsg+0xb9/0x140 [ 231.117839][T12478] __sys_sendto+0x43c/0x520 [ 231.117853][T12478] ? __pfx___sys_sendto+0x10/0x10 [ 231.117876][T12478] ? ksys_write+0x1ac/0x250 [ 231.117890][T12478] ? __pfx_ksys_write+0x10/0x10 [ 231.117905][T12478] __x64_sys_sendto+0xe0/0x1c0 [ 231.117916][T12478] ? do_syscall_64+0x91/0xf80 [ 231.117933][T12478] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.117950][T12478] do_syscall_64+0xcd/0xf80 [ 231.117967][T12478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.117978][T12478] RIP: 0033:0x7f8c3338f7c9 [ 231.117988][T12478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.118004][T12478] RSP: 002b:00007f8c341ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.118015][T12478] RAX: ffffffffffffffda RBX: 00007f8c335e5fa0 RCX: 00007f8c3338f7c9 [ 231.118022][T12478] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 231.118028][T12478] RBP: 00007f8c341ad090 R08: 0000000000000000 R09: 0000000000000000 [ 231.118034][T12478] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 231.118041][T12478] R13: 00007f8c335e6038 R14: 00007f8c335e5fa0 R15: 00007ffd33e18088 [ 231.118055][T12478] [ 231.348147][T12486] syzkaller0: entered promiscuous mode [ 231.350140][T12486] syzkaller0: entered allmulticast mode [ 231.359355][ T6026] usbhid 12-1:0.0: can't add hid device: -71 [ 231.370130][ T6026] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 231.377966][ T6026] usb 12-1: USB disconnect, device number 9 [ 231.386907][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2266'. [ 231.393643][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2266'. [ 231.406029][T12490] netlink: 312 bytes leftover after parsing attributes in process `syz.7.2266'. [ 231.807350][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.281774][T12499] FAULT_INJECTION: forcing a failure. [ 232.281774][T12499] name failslab, interval 1, probability 0, space 0, times 0 [ 232.285612][T12499] CPU: 0 UID: 0 PID: 12499 Comm: syz.9.2270 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.285636][T12499] Tainted: [L]=SOFTLOCKUP [ 232.285641][T12499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.285651][T12499] Call Trace: [ 232.285658][T12499] [ 232.285665][T12499] dump_stack_lvl+0x16c/0x1f0 [ 232.285692][T12499] should_fail_ex+0x512/0x640 [ 232.285710][T12499] ? __kmalloc_noprof+0xca/0x910 [ 232.285735][T12499] should_failslab+0xc2/0x120 [ 232.285755][T12499] __kmalloc_noprof+0xeb/0x910 [ 232.285777][T12499] ? sctp_auth_create_key+0x35/0xd0 [ 232.285805][T12499] ? sctp_auth_create_key+0x35/0xd0 [ 232.285825][T12499] sctp_auth_create_key+0x35/0xd0 [ 232.285848][T12499] sctp_auth_make_key_vector+0xfd/0x1b0 [ 232.285874][T12499] sctp_auth_asoc_create_secret+0x3d/0x6d0 [ 232.285903][T12499] sctp_auth_asoc_init_active_key+0x1b8/0x5b0 [ 232.285931][T12499] sctp_auth_set_active_key+0x1dc/0x380 [ 232.285960][T12499] sctp_setsockopt+0xb35b/0xb8c0 [ 232.285977][T12499] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 232.286005][T12499] ? __pfx_sctp_setsockopt+0x10/0x10 [ 232.286022][T12499] ? find_held_lock+0x2b/0x80 [ 232.286049][T12499] ? selinux_socket_setsockopt+0x6a/0x80 [ 232.286071][T12499] ? sock_common_setsockopt+0x2e/0xf0 [ 232.286093][T12499] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 232.286116][T12499] do_sock_setsockopt+0xf3/0x1d0 [ 232.286141][T12499] __sys_setsockopt+0x1a0/0x230 [ 232.286162][T12499] __x64_sys_setsockopt+0xbd/0x160 [ 232.286179][T12499] ? do_syscall_64+0x91/0xf80 [ 232.286201][T12499] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.286230][T12499] do_syscall_64+0xcd/0xf80 [ 232.286254][T12499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.286270][T12499] RIP: 0033:0x7ff698f8f7c9 [ 232.286284][T12499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.286299][T12499] RSP: 002b:00007ff699e3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.286315][T12499] RAX: ffffffffffffffda RBX: 00007ff6991e5fa0 RCX: 00007ff698f8f7c9 [ 232.286324][T12499] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 232.286333][T12499] RBP: 00007ff699e3c090 R08: 0000000000000008 R09: 0000000000000000 [ 232.286342][T12499] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 232.286351][T12499] R13: 00007ff6991e6038 R14: 00007ff6991e5fa0 R15: 00007ffeb0dd8808 [ 232.286372][T12499] [ 232.409643][T12503] FAULT_INJECTION: forcing a failure. [ 232.409643][T12503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.415262][T12503] CPU: 2 UID: 0 PID: 12503 Comm: syz.4.2272 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.415290][T12503] Tainted: [L]=SOFTLOCKUP [ 232.415296][T12503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.415307][T12503] Call Trace: [ 232.415313][T12503] [ 232.415321][T12503] dump_stack_lvl+0x16c/0x1f0 [ 232.415353][T12503] should_fail_ex+0x512/0x640 [ 232.415377][T12503] _copy_from_user+0x2e/0xd0 [ 232.415398][T12503] map_update_elem+0x755/0x930 [ 232.415424][T12503] ? __pfx_map_update_elem+0x10/0x10 [ 232.415445][T12503] ? selinux_bpf+0xed/0x130 [ 232.415470][T12503] __sys_bpf+0x1573/0x4980 [ 232.415498][T12503] ? __pfx___sys_bpf+0x10/0x10 [ 232.415522][T12503] ? find_held_lock+0x2b/0x80 [ 232.415554][T12503] ? find_held_lock+0x2b/0x80 [ 232.415586][T12503] ? __mutex_unlock_slowpath+0x161/0x790 [ 232.415628][T12503] ? fput+0x70/0xf0 [ 232.415654][T12503] ? ksys_write+0x1ac/0x250 [ 232.415677][T12503] ? __pfx_ksys_write+0x10/0x10 [ 232.415702][T12503] __x64_sys_bpf+0x78/0xc0 [ 232.415728][T12503] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.415753][T12503] do_syscall_64+0xcd/0xf80 [ 232.415782][T12503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.415801][T12503] RIP: 0033:0x7f8c3338f7c9 [ 232.415817][T12503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.415833][T12503] RSP: 002b:00007f8c341ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.415850][T12503] RAX: ffffffffffffffda RBX: 00007f8c335e5fa0 RCX: 00007f8c3338f7c9 [ 232.415862][T12503] RDX: 0000000000000020 RSI: 00002000000048c0 RDI: 0000000000000002 [ 232.415874][T12503] RBP: 00007f8c341ad090 R08: 0000000000000000 R09: 0000000000000000 [ 232.415885][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.415895][T12503] R13: 00007f8c335e6038 R14: 00007f8c335e5fa0 R15: 00007ffd33e18088 [ 232.415945][T12503] [ 232.557350][ T6026] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 232.662399][T12516] comedi comedi0: Minor 3 specified more than once! [ 232.677424][T12518] syzkaller0: entered promiscuous mode [ 232.680931][T12518] syzkaller0: entered allmulticast mode [ 232.685752][T12518] FAULT_INJECTION: forcing a failure. [ 232.685752][T12518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.691374][T12518] CPU: 3 UID: 0 PID: 12518 Comm: syz.4.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.691393][T12518] Tainted: [L]=SOFTLOCKUP [ 232.691396][T12518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.691403][T12518] Call Trace: [ 232.691407][T12518] [ 232.691411][T12518] dump_stack_lvl+0x16c/0x1f0 [ 232.691433][T12518] should_fail_ex+0x512/0x640 [ 232.691448][T12518] _copy_from_user+0x2e/0xd0 [ 232.691460][T12518] copy_msghdr_from_user+0x98/0x160 [ 232.691475][T12518] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 232.691495][T12518] ___sys_sendmsg+0xfe/0x1d0 [ 232.691509][T12518] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.691538][T12518] __sys_sendmsg+0x16d/0x220 [ 232.691552][T12518] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.691574][T12518] do_syscall_64+0xcd/0xf80 [ 232.691592][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.691603][T12518] RIP: 0033:0x7f8c3338f7c9 [ 232.691613][T12518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.691623][T12518] RSP: 002b:00007f8c341ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.691634][T12518] RAX: ffffffffffffffda RBX: 00007f8c335e5fa0 RCX: 00007f8c3338f7c9 [ 232.691640][T12518] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 232.691647][T12518] RBP: 00007f8c341ad090 R08: 0000000000000000 R09: 0000000000000000 [ 232.691653][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.691660][T12518] R13: 00007f8c335e6038 R14: 00007f8c335e5fa0 R15: 00007ffd33e18088 [ 232.691673][T12518] [ 232.727524][ T6026] usb 12-1: Using ep0 maxpacket: 8 [ 232.762830][ T6026] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 232.766481][ T6026] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.770945][ T6026] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.775110][ T6026] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.779586][ T6026] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.780212][T12522] tipc: Enabled bearer , priority 0 [ 232.785076][ T6026] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.785101][ T6026] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.795823][T12522] syzkaller0: entered promiscuous mode [ 232.798404][T12522] syzkaller0: entered allmulticast mode [ 232.799681][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2280'. [ 232.811880][T12522] tipc: Resetting bearer [ 232.815286][T12521] tipc: Resetting bearer [ 232.823297][T12521] tipc: Disabling bearer [ 232.833452][T12520] syzkaller0: entered promiscuous mode [ 232.835945][T12520] syzkaller0: entered allmulticast mode [ 232.845321][T12520] tipc: Enabled bearer , priority 0 [ 232.851166][T12519] tipc: Resetting bearer [ 232.863435][T12519] tipc: Disabling bearer [ 232.904493][T12528] FAULT_INJECTION: forcing a failure. [ 232.904493][T12528] name failslab, interval 1, probability 0, space 0, times 0 [ 232.908994][T12528] CPU: 1 UID: 0 PID: 12528 Comm: syz.4.2283 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.909024][T12528] Tainted: [L]=SOFTLOCKUP [ 232.909030][T12528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.909041][T12528] Call Trace: [ 232.909047][T12528] [ 232.909055][T12528] dump_stack_lvl+0x16c/0x1f0 [ 232.909088][T12528] should_fail_ex+0x512/0x640 [ 232.909108][T12528] ? __kmalloc_cache_noprof+0x5f/0x800 [ 232.909156][T12528] should_failslab+0xc2/0x120 [ 232.909180][T12528] __kmalloc_cache_noprof+0x80/0x800 [ 232.909209][T12528] ? bpf_raw_tp_link_attach+0x191/0x630 [ 232.909235][T12528] ? bpf_get_raw_tracepoint+0x9c/0x2d0 [ 232.909261][T12528] ? bpf_raw_tp_link_attach+0x191/0x630 [ 232.909285][T12528] bpf_raw_tp_link_attach+0x191/0x630 [ 232.909312][T12528] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 232.909337][T12528] ? find_held_lock+0x2b/0x80 [ 232.909366][T12528] ? __fget_files+0x204/0x3c0 [ 232.909401][T12528] ? fput+0x70/0xf0 [ 232.909427][T12528] ? __bpf_prog_get+0x97/0x2a0 [ 232.909449][T12528] __sys_bpf+0x20c1/0x4980 [ 232.909478][T12528] ? __pfx___sys_bpf+0x10/0x10 [ 232.909502][T12528] ? find_held_lock+0x2b/0x80 [ 232.909534][T12528] ? find_held_lock+0x2b/0x80 [ 232.909566][T12528] ? __mutex_unlock_slowpath+0x161/0x790 [ 232.909624][T12528] ? fput+0x70/0xf0 [ 232.909652][T12528] ? ksys_write+0x1ac/0x250 [ 232.909673][T12528] ? __pfx_ksys_write+0x10/0x10 [ 232.909700][T12528] __x64_sys_bpf+0x78/0xc0 [ 232.909725][T12528] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.909751][T12528] do_syscall_64+0xcd/0xf80 [ 232.909780][T12528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.909798][T12528] RIP: 0033:0x7f8c3338f7c9 [ 232.909814][T12528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.909831][T12528] RSP: 002b:00007f8c341ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.909848][T12528] RAX: ffffffffffffffda RBX: 00007f8c335e5fa0 RCX: 00007f8c3338f7c9 [ 232.909860][T12528] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 232.909870][T12528] RBP: 00007f8c341ad090 R08: 0000000000000000 R09: 0000000000000000 [ 232.909881][T12528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.909896][T12528] R13: 00007f8c335e6038 R14: 00007f8c335e5fa0 R15: 00007ffd33e18088 [ 232.909922][T12528] [ 232.998866][ T6026] usb 12-1: GET_CAPABILITIES returned 0 [ 233.019262][ T6026] usbtmc 12-1:16.0: can't read capabilities [ 233.116708][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 233.116726][ T40] audit: type=1400 audit(1765239758.758:453): avc: denied { ioctl } for pid=12543 comm="syz.9.2289" path="socket:[42082]" dev="sockfs" ino=42082 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.134720][T12542] syzkaller0: entered promiscuous mode [ 233.137076][T12542] syzkaller0: entered allmulticast mode [ 233.180336][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2291'. [ 233.210134][ T75] usb 12-1: USB disconnect, device number 10 [ 234.300635][T12560] syzkaller0: entered promiscuous mode [ 234.302473][T12560] syzkaller0: entered allmulticast mode [ 234.305309][T12568] FAULT_INJECTION: forcing a failure. [ 234.305309][T12568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.309727][T12568] CPU: 1 UID: 0 PID: 12568 Comm: syz.4.2297 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.309745][T12568] Tainted: [L]=SOFTLOCKUP [ 234.309749][T12568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.309755][T12568] Call Trace: [ 234.309759][T12568] [ 234.309763][T12568] dump_stack_lvl+0x16c/0x1f0 [ 234.309785][T12568] should_fail_ex+0x512/0x640 [ 234.309800][T12568] _copy_from_iter+0x2a4/0x16c0 [ 234.309814][T12568] ? __alloc_skb+0x220/0x410 [ 234.309825][T12568] ? __alloc_skb+0x35d/0x410 [ 234.309836][T12568] ? __pfx__copy_from_iter+0x10/0x10 [ 234.309848][T12568] ? netlink_autobind.isra.0+0x158/0x370 [ 234.309870][T12568] netlink_sendmsg+0x820/0xdd0 [ 234.309893][T12568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.309914][T12568] ____sys_sendmsg+0xa5d/0xc30 [ 234.309932][T12568] ? copy_msghdr_from_user+0x10a/0x160 [ 234.309946][T12568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.309968][T12568] ___sys_sendmsg+0x134/0x1d0 [ 234.309983][T12568] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.310012][T12568] __sys_sendmsg+0x16d/0x220 [ 234.310026][T12568] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.310047][T12568] do_syscall_64+0xcd/0xf80 [ 234.310065][T12568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.310076][T12568] RIP: 0033:0x7f8c3338f7c9 [ 234.310085][T12568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.310096][T12568] RSP: 002b:00007f8c341ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.310107][T12568] RAX: ffffffffffffffda RBX: 00007f8c335e5fa0 RCX: 00007f8c3338f7c9 [ 234.310114][T12568] RDX: 00000000040c0080 RSI: 00002000000003c0 RDI: 0000000000000004 [ 234.310120][T12568] RBP: 00007f8c341ad090 R08: 0000000000000000 R09: 0000000000000000 [ 234.310127][T12568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.310132][T12568] R13: 00007f8c335e6038 R14: 00007f8c335e5fa0 R15: 00007ffd33e18088 [ 234.310146][T12568] [ 234.700821][ T75] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 234.868744][ T75] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 234.871586][ T75] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 234.874669][ T75] usb 11-1: config 0 interface 0 has no altsetting 0 [ 234.879019][ T75] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 234.882004][ T75] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 234.884629][ T75] usb 11-1: Product: syz [ 234.886041][ T75] usb 11-1: Manufacturer: syz [ 234.887613][ T75] usb 11-1: SerialNumber: syz [ 234.890351][ T75] usb 11-1: config 0 descriptor?? [ 234.896171][ T75] hub 11-1:0.0: bad descriptor, ignoring hub [ 234.898137][ T75] hub 11-1:0.0: probe with driver hub failed with error -5 [ 234.901944][ T75] usb 11-1: selecting invalid altsetting 0 [ 235.509682][T12578] usb 11-1: reset high-speed USB device number 6 using dummy_hcd [ 235.541344][T12586] syzkaller0: entered promiscuous mode [ 235.543197][T12586] syzkaller0: entered allmulticast mode [ 235.613399][T12590] FAULT_INJECTION: forcing a failure. [ 235.613399][T12590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.613426][ T5938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.617888][T12590] CPU: 0 UID: 0 PID: 12590 Comm: syz.7.2305 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.617907][T12590] Tainted: [L]=SOFTLOCKUP [ 235.617911][T12590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.617918][T12590] Call Trace: [ 235.617922][T12590] [ 235.617926][T12590] dump_stack_lvl+0x16c/0x1f0 [ 235.617947][T12590] should_fail_ex+0x512/0x640 [ 235.617966][T12590] _copy_from_user+0x2e/0xd0 [ 235.617983][T12590] copy_msghdr_from_user+0x98/0x160 [ 235.618002][T12590] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 235.618022][T12590] ___sys_sendmsg+0xfe/0x1d0 [ 235.618036][T12590] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.618064][T12590] __sys_sendmsg+0x16d/0x220 [ 235.618078][T12590] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.618100][T12590] do_syscall_64+0xcd/0xf80 [ 235.618118][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.618131][T12590] RIP: 0033:0x7f0953b8f7c9 [ 235.618141][T12590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.618152][T12590] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.618162][T12590] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 235.618169][T12590] RDX: 00000000040c0080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 235.618176][T12590] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 235.618182][T12590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.618188][T12590] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 235.618202][T12590] [ 235.654874][T12594] 9pnet_virtio: no channels available for device 127.0.0.1 [ 235.660439][ T5938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.679134][T12592] syzkaller0: entered promiscuous mode [ 235.682867][ T5938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.687111][T12592] syzkaller0: entered allmulticast mode [ 235.688606][ T5938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.690823][T12578] usb 11-1: device firmware changed [ 235.709712][ T5938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.710877][ T10] usb 11-1: USB disconnect, device number 6 [ 235.784009][T12599] FAULT_INJECTION: forcing a failure. [ 235.784009][T12599] name failslab, interval 1, probability 0, space 0, times 0 [ 235.789331][T12599] CPU: 3 UID: 0 PID: 12599 Comm: syz.9.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.789360][T12599] Tainted: [L]=SOFTLOCKUP [ 235.789365][T12599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.789376][T12599] Call Trace: [ 235.789381][T12599] [ 235.789388][T12599] dump_stack_lvl+0x16c/0x1f0 [ 235.789417][T12599] should_fail_ex+0x512/0x640 [ 235.789435][T12599] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 235.789456][T12599] should_failslab+0xc2/0x120 [ 235.789477][T12599] kmem_cache_alloc_node_noprof+0x86/0x800 [ 235.789493][T12599] ? __alloc_skb+0x156/0x410 [ 235.789516][T12599] ? __alloc_skb+0x156/0x410 [ 235.789532][T12599] __alloc_skb+0x156/0x410 [ 235.789547][T12599] ? __alloc_skb+0x35d/0x410 [ 235.789563][T12599] ? __pfx___alloc_skb+0x10/0x10 [ 235.789590][T12599] alloc_skb_with_frags+0xe0/0x860 [ 235.789612][T12599] ? find_held_lock+0x2b/0x80 [ 235.789636][T12599] ? __might_fault+0xe3/0x190 [ 235.789649][T12599] ? __might_fault+0x13b/0x190 [ 235.789666][T12599] sock_alloc_send_pskb+0x7f9/0x980 [ 235.789692][T12599] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 235.789710][T12599] ? __pfx__copy_from_iter+0x10/0x10 [ 235.789728][T12599] ? __lock_acquire+0x436/0x2890 [ 235.789753][T12599] l2cap_sock_alloc_skb_cb+0xc5/0x510 [ 235.789781][T12599] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 235.789807][T12599] ? rcu_is_watching+0x12/0xc0 [ 235.789823][T12599] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 235.789850][T12599] l2cap_chan_send+0x1509/0x2dc0 [ 235.789877][T12599] ? __pfx_l2cap_chan_send+0x10/0x10 [ 235.789903][T12599] ? l2cap_sock_sendmsg+0x2d9/0x4b0 [ 235.789927][T12599] ? rcu_is_watching+0x12/0xc0 [ 235.789951][T12599] l2cap_sock_sendmsg+0x3a4/0x4b0 [ 235.789977][T12599] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 235.790010][T12599] ____sys_sendmsg+0xa5d/0xc30 [ 235.790036][T12599] ? copy_msghdr_from_user+0x10a/0x160 [ 235.790055][T12599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.790083][T12599] ? __pfx__kstrtoull+0x10/0x10 [ 235.790109][T12599] ___sys_sendmsg+0x134/0x1d0 [ 235.790130][T12599] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.790161][T12599] ? find_held_lock+0x2b/0x80 [ 235.790197][T12599] __sys_sendmmsg+0x200/0x420 [ 235.790220][T12599] ? __pfx___sys_sendmmsg+0x10/0x10 [ 235.790248][T12599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.790282][T12599] ? fput+0x70/0xf0 [ 235.790306][T12599] ? ksys_write+0x1ac/0x250 [ 235.790325][T12599] ? __pfx_ksys_write+0x10/0x10 [ 235.790348][T12599] __x64_sys_sendmmsg+0x9c/0x100 [ 235.790368][T12599] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.790391][T12599] do_syscall_64+0xcd/0xf80 [ 235.790437][T12599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.790453][T12599] RIP: 0033:0x7ff698f8f7c9 [ 235.790467][T12599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.790482][T12599] RSP: 002b:00007ff699e3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 235.790498][T12599] RAX: ffffffffffffffda RBX: 00007ff6991e5fa0 RCX: 00007ff698f8f7c9 [ 235.790509][T12599] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000004 [ 235.790518][T12599] RBP: 00007ff699e3c090 R08: 0000000000000000 R09: 0000000000000000 [ 235.790528][T12599] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 235.790537][T12599] R13: 00007ff6991e6038 R14: 00007ff6991e5fa0 R15: 00007ffeb0dd8808 [ 235.790560][T12599] [ 235.879327][ T10] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 236.085362][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2300'. [ 236.150645][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2300'. [ 236.960807][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 236.964432][ T10] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 236.967171][ T10] usb 11-1: can't read configurations, error -71 [ 237.004567][ T1143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.046969][T12609] FAULT_INJECTION: forcing a failure. [ 237.046969][T12609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.051285][T12609] CPU: 3 UID: 0 PID: 12609 Comm: syz.7.2313 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.051303][T12609] Tainted: [L]=SOFTLOCKUP [ 237.051307][T12609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.051313][T12609] Call Trace: [ 237.051317][T12609] [ 237.051322][T12609] dump_stack_lvl+0x16c/0x1f0 [ 237.051344][T12609] should_fail_ex+0x512/0x640 [ 237.051359][T12609] should_fail_alloc_page+0xe7/0x130 [ 237.051375][T12609] prepare_alloc_pages+0x401/0x670 [ 237.051393][T12609] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 237.051404][T12609] ? should_fail_alloc_page+0xee/0x130 [ 237.051420][T12609] ? rcu_is_watching+0x12/0xc0 [ 237.051430][T12609] ? trace_mm_page_alloc+0x11b/0x180 [ 237.051445][T12609] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 237.051457][T12609] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 237.051469][T12609] ? find_held_lock+0x2b/0x80 [ 237.051486][T12609] ? is_bpf_text_address+0x8a/0x1a0 [ 237.051499][T12609] ? bpf_ksym_find+0x127/0x1c0 [ 237.051516][T12609] ? kernel_text_address+0x8d/0x100 [ 237.051532][T12609] ? __kernel_text_address+0xd/0x40 [ 237.051546][T12609] ? unwind_get_return_address+0x59/0xa0 [ 237.051566][T12609] alloc_pages_bulk_noprof+0x77a/0x1410 [ 237.051577][T12609] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.051591][T12609] ? policy_nodemask+0xea/0x4e0 [ 237.051606][T12609] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 237.051618][T12609] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 237.051638][T12609] __kasan_populate_vmalloc+0xfb/0x220 [ 237.051653][T12609] alloc_vmap_area+0x98d/0x2a50 [ 237.051672][T12609] ? __pfx_alloc_vmap_area+0x10/0x10 [ 237.051689][T12609] __get_vm_area_node+0x1ca/0x330 [ 237.051706][T12609] __vmalloc_node_range_noprof+0x247/0x16b0 [ 237.051736][T12609] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 237.051751][T12609] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 237.051766][T12609] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.051782][T12609] ? find_held_lock+0x2b/0x80 [ 237.051799][T12609] ? avc_has_perm_noaudit+0x117/0x3b0 [ 237.051815][T12609] ? avc_has_perm_noaudit+0x149/0x3b0 [ 237.051828][T12609] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 237.051840][T12609] __vmalloc_node_noprof+0xad/0xf0 [ 237.051855][T12609] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 237.051889][T12609] __vmalloc_noprof+0xa3/0x120 [ 237.051906][T12609] ? __pfx___vmalloc_noprof+0x10/0x10 [ 237.051927][T12609] ? rcu_is_watching+0x12/0xc0 [ 237.051937][T12609] ? cap_capable+0x10d/0x3f0 [ 237.051952][T12609] bpf_prog_alloc_no_stats+0x58/0x610 [ 237.051963][T12609] ? security_capable+0x7e/0x260 [ 237.051979][T12609] bpf_prog_alloc+0x3b/0x230 [ 237.051989][T12609] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.052002][T12609] bpf_prog_load+0x19bc/0x2cc0 [ 237.052021][T12609] ? __pfx_bpf_prog_load+0x10/0x10 [ 237.052037][T12609] ? avc_has_perm_noaudit+0x149/0x3b0 [ 237.052051][T12609] ? avc_has_perm+0x144/0x1f0 [ 237.052070][T12609] ? selinux_bpf+0xdd/0x130 [ 237.052082][T12609] ? bpf_lsm_bpf+0x9/0x10 [ 237.052095][T12609] __sys_bpf+0x3e72/0x4980 [ 237.052113][T12609] ? __pfx___sys_bpf+0x10/0x10 [ 237.052128][T12609] ? find_held_lock+0x2b/0x80 [ 237.052147][T12609] ? find_held_lock+0x2b/0x80 [ 237.052166][T12609] ? __mutex_unlock_slowpath+0x161/0x790 [ 237.052192][T12609] ? fput+0x70/0xf0 [ 237.052208][T12609] ? ksys_write+0x1ac/0x250 [ 237.052221][T12609] ? __pfx_ksys_write+0x10/0x10 [ 237.052237][T12609] __x64_sys_bpf+0x78/0xc0 [ 237.052252][T12609] ? lockdep_hardirqs_on+0x7c/0x110 [ 237.052268][T12609] do_syscall_64+0xcd/0xf80 [ 237.052285][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.052297][T12609] RIP: 0033:0x7f0953b8f7c9 [ 237.052306][T12609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.052317][T12609] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.052328][T12609] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 237.052335][T12609] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 237.052341][T12609] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 237.052347][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.052354][T12609] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 237.052367][T12609] [ 237.052396][T12609] warn_alloc: 1 callbacks suppressed [ 237.052402][T12609] syz.7.2313: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 237.068300][T12607] syzkaller0: entered promiscuous mode [ 237.069170][T12609] ,cpuset=/ [ 237.072633][T12607] syzkaller0: entered allmulticast mode [ 237.074477][T12609] ,mems_allowed=0-1 [ 237.087381][ T5939] Bluetooth: hci1: command 0x0406 tx timeout [ 237.087393][ T5938] Bluetooth: hci2: command 0x0406 tx timeout [ 237.091160][T12609] CPU: 3 UID: 0 PID: 12609 Comm: syz.7.2313 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.091178][T12609] Tainted: [L]=SOFTLOCKUP [ 237.091182][T12609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.091189][T12609] Call Trace: [ 237.091193][T12609] [ 237.091198][T12609] dump_stack_lvl+0x16c/0x1f0 [ 237.091219][T12609] warn_alloc+0x248/0x3a0 [ 237.091231][T12609] ? __pfx_warn_alloc+0x10/0x10 [ 237.091242][T12609] ? kfree+0x2f8/0x6e0 [ 237.091258][T12609] ? __get_vm_area_node+0x2cd/0x330 [ 237.091275][T12609] ? __get_vm_area_node+0x2cd/0x330 [ 237.091288][T12609] ? __get_vm_area_node+0x1dc/0x330 [ 237.091301][T12609] ? __get_vm_area_node+0x208/0x330 [ 237.091319][T12609] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 237.091339][T12609] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 237.091355][T12609] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.091371][T12609] ? find_held_lock+0x2b/0x80 [ 237.091389][T12609] ? avc_has_perm_noaudit+0x117/0x3b0 [ 237.091405][T12609] ? avc_has_perm_noaudit+0x149/0x3b0 [ 237.091418][T12609] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 237.091429][T12609] __vmalloc_node_noprof+0xad/0xf0 [ 237.091445][T12609] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 237.091458][T12609] __vmalloc_noprof+0xa3/0x120 [ 237.091473][T12609] ? __pfx___vmalloc_noprof+0x10/0x10 [ 237.091490][T12609] ? rcu_is_watching+0x12/0xc0 [ 237.091501][T12609] ? cap_capable+0x10d/0x3f0 [ 237.091516][T12609] bpf_prog_alloc_no_stats+0x58/0x610 [ 237.091528][T12609] ? security_capable+0x7e/0x260 [ 237.091543][T12609] bpf_prog_alloc+0x3b/0x230 [ 237.091553][T12609] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.091567][T12609] bpf_prog_load+0x19bc/0x2cc0 [ 237.091586][T12609] ? __pfx_bpf_prog_load+0x10/0x10 [ 237.091602][T12609] ? avc_has_perm_noaudit+0x149/0x3b0 [ 237.091617][T12609] ? avc_has_perm+0x144/0x1f0 [ 237.091635][T12609] ? selinux_bpf+0xdd/0x130 [ 237.091648][T12609] ? bpf_lsm_bpf+0x9/0x10 [ 237.091661][T12609] __sys_bpf+0x3e72/0x4980 [ 237.091678][T12609] ? __pfx___sys_bpf+0x10/0x10 [ 237.091693][T12609] ? find_held_lock+0x2b/0x80 [ 237.091728][T12609] ? find_held_lock+0x2b/0x80 [ 237.091748][T12609] ? __mutex_unlock_slowpath+0x161/0x790 [ 237.091773][T12609] ? fput+0x70/0xf0 [ 237.091789][T12609] ? ksys_write+0x1ac/0x250 [ 237.091802][T12609] ? __pfx_ksys_write+0x10/0x10 [ 237.091818][T12609] __x64_sys_bpf+0x78/0xc0 [ 237.091834][T12609] ? lockdep_hardirqs_on+0x7c/0x110 [ 237.091850][T12609] do_syscall_64+0xcd/0xf80 [ 237.091915][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.091927][T12609] RIP: 0033:0x7f0953b8f7c9 [ 237.091938][T12609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.091949][T12609] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.091959][T12609] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 237.091966][T12609] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 237.091973][T12609] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 237.091979][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.091985][T12609] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 237.091998][T12609] [ 237.092002][T12609] Mem-Info: [ 237.177353][T12587] chnl_net:caif_netlink_parms(): no params data found [ 237.186688][T12609] active_anon:14527 inactive_anon:0 isolated_anon:0 [ 237.186688][T12609] active_file:13803 inactive_file:40720 isolated_file:0 [ 237.186688][T12609] unevictable:1768 dirty:524 writeback:0 [ 237.186688][T12609] slab_reclaimable:12926 slab_unreclaimable:82491 [ 237.186688][T12609] mapped:25592 shmem:5274 pagetables:1830 [ 237.186688][T12609] sec_pagetables:306 bounce:0 [ 237.186688][T12609] kernel_misc_reclaimable:0 [ 237.186688][T12609] free:439113 free_pcp:9685 free_cma:0 [ 237.186723][T12609] Node 0 active_anon:58108kB inactive_anon:0kB active_file:55212kB inactive_file:162676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:85984kB dirty:2092kB writeback:0kB shmem:17560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14560kB pagetables:7132kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB [ 237.186751][T12609] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 237.186777][T12609] Node 0 DMA free:9104kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:56kB free_cma:0kB [ 237.186809][T12609] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 237.186830][T12609] Node 0 DMA32 free:193288kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58108kB inactive_anon:0kB active_file:55212kB inactive_file:162676kB unevictable:3536kB writepending:2092kB zspages:0kB present:2080628kB managed:1265292kB mlocked:0kB bounce:0kB free_pcp:23192kB local_pcp:4292kB free_cma:0kB [ 237.186862][T12609] lowmem_reserve[]: 0 0 0 0 0 [ 237.186881][T12609] Node 1 Normal free:1554060kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:15436kB local_pcp:6764kB free_cma:0kB [ 237.186917][T12609] lowmem_reserve[]: 0 0 0 0 0 [ 237.186936][T12609] Node 0 DMA: 0*4kB 2*8kB (U) 0*16kB 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 2*2048kB (U) 0*4096kB = 9104kB [ 237.415420][T12609] Node 0 DMA32: 2098*4kB (UM) 2480*8kB (UME) 1752*16kB (UME) 203*32kB (UME) 216*64kB (UME) 168*128kB (UME) 37*256kB (UM) 29*512kB (UME) 19*1024kB (UME) 13*2048kB (UM) 6*4096kB (UM) = 193064kB [ 237.423320][T12609] Node 1 Normal: 14*4kB (UME) 17*8kB (UME) 31*16kB (UME) 119*32kB (UME) 34*64kB (UME) 13*128kB (UME) 6*256kB (UME) 8*512kB (UME) 4*1024kB (UE) 6*2048kB (UME) 372*4096kB (UM) = 1554064kB [ 237.430954][T12609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.434844][T12609] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.438868][T12609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.442789][T12609] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.446557][T12609] 59793 total pagecache pages [ 237.448787][T12609] 0 pages in swap cache [ 237.450180][T12609] Free swap = 124996kB [ 237.451489][T12609] Total swap = 124996kB [ 237.452842][T12609] 1048443 pages RAM [ 237.454138][T12609] 0 pages HighMem/MovableOnly [ 237.455676][T12609] 282809 pages reserved [ 237.457000][T12609] 0 pages cma reserved [ 237.797425][ T64] Bluetooth: hci4: command tx timeout [ 237.979586][T12627] FAULT_INJECTION: forcing a failure. [ 237.979586][T12627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.984011][T12627] CPU: 3 UID: 0 PID: 12627 Comm: syz.6.2315 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.984030][T12627] Tainted: [L]=SOFTLOCKUP [ 237.984034][T12627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.984041][T12627] Call Trace: [ 237.984046][T12627] [ 237.984051][T12627] dump_stack_lvl+0x16c/0x1f0 [ 237.984075][T12627] should_fail_ex+0x512/0x640 [ 237.984091][T12627] _copy_from_iter+0x2a4/0x16c0 [ 237.984104][T12627] ? __alloc_skb+0x220/0x410 [ 237.984116][T12627] ? __alloc_skb+0x35d/0x410 [ 237.984140][T12627] ? __pfx__copy_from_iter+0x10/0x10 [ 237.984152][T12627] ? netlink_autobind.isra.0+0x158/0x370 [ 237.984175][T12627] netlink_sendmsg+0x820/0xdd0 [ 237.984193][T12627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.984214][T12627] ____sys_sendmsg+0xa5d/0xc30 [ 237.984233][T12627] ? copy_msghdr_from_user+0x10a/0x160 [ 237.984246][T12627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.984269][T12627] ___sys_sendmsg+0x134/0x1d0 [ 237.984284][T12627] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.984314][T12627] __sys_sendmsg+0x16d/0x220 [ 237.984328][T12627] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.984346][T12627] ? fput+0x70/0xf0 [ 237.984366][T12627] do_syscall_64+0xcd/0xf80 [ 237.984384][T12627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.984396][T12627] RIP: 0033:0x7f547158f7c9 [ 237.984406][T12627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.984417][T12627] RSP: 002b:00007f54724af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.984428][T12627] RAX: ffffffffffffffda RBX: 00007f54717e5fa0 RCX: 00007f547158f7c9 [ 237.984434][T12627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 237.984441][T12627] RBP: 00007f54724af090 R08: 0000000000000000 R09: 0000000000000000 [ 237.984447][T12627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.984453][T12627] R13: 00007f54717e6038 R14: 00007f54717e5fa0 R15: 00007ffc3264bc88 [ 237.984475][T12627] [ 238.571303][ T1143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.601790][T12619] syzkaller0: entered promiscuous mode [ 238.603582][T12619] syzkaller0: entered allmulticast mode [ 238.819778][ T40] audit: type=1400 audit(1765239764.468:454): avc: denied { ioctl } for pid=12639 comm="syz.6.2319" path="socket:[40145]" dev="sockfs" ino=40145 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 238.829766][T12640] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 239.062768][ T40] audit: type=1400 audit(1765239764.708:455): avc: denied { read write } for pid=12647 comm="syz.6.2323" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 239.083921][ T40] audit: type=1400 audit(1765239764.718:456): avc: denied { open } for pid=12647 comm="syz.6.2323" path="/398/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 239.097327][ T40] audit: type=1400 audit(1765239764.718:457): avc: denied { ioctl } for pid=12647 comm="syz.6.2323" path="/398/file0/file0" dev="fuse" ino=64 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 239.877351][ T64] Bluetooth: hci4: command tx timeout [ 239.936374][T12656] syzkaller0: entered promiscuous mode [ 239.938566][T12656] syzkaller0: entered allmulticast mode [ 239.955799][ T1143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.986572][T12663] binder: 12662:12663 ioctl c0306201 0 returned -14 [ 240.123401][ T75] IPVS: starting estimator thread 0... [ 240.220074][T12677] IPVS: using max 42 ests per chain, 100800 per kthread [ 241.261060][ T1143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.296349][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.301165][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.304076][T12587] bridge_slave_0: entered allmulticast mode [ 241.308707][T12587] bridge_slave_0: entered promiscuous mode [ 241.314607][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.319172][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.322123][T12587] bridge_slave_1: entered allmulticast mode [ 241.325884][T12587] bridge_slave_1: entered promiscuous mode [ 241.356265][T12587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.366705][T12587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.420659][T12587] team0: Port device team_slave_0 added [ 241.430873][T12587] team0: Port device team_slave_1 added [ 241.470793][T12587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.474021][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.484210][T12587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.499390][T12587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.502462][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.511198][T12587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.547580][ T1143] bridge_slave_1: left allmulticast mode [ 241.550065][ T1143] bridge_slave_1: left promiscuous mode [ 241.552195][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.556257][ T1143] bridge_slave_0: left allmulticast mode [ 241.558708][ T1143] bridge_slave_0: left promiscuous mode [ 241.560673][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.924750][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.930238][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.934687][ T1143] bond0 (unregistering): Released all slaves [ 241.944412][T12587] hsr_slave_0: entered promiscuous mode [ 241.947406][T12587] hsr_slave_1: entered promiscuous mode [ 241.950209][T12587] debugfs: 'hsr0' already exists in 'hsr' [ 241.952198][T12587] Cannot create hsr debugfs directory [ 241.954245][T12697] syzkaller0: entered promiscuous mode [ 241.956821][T12697] syzkaller0: entered allmulticast mode [ 241.958713][ T64] Bluetooth: hci4: command tx timeout [ 242.071258][ T1143] tipc: Left network mode [ 242.194877][T12708] FAULT_INJECTION: forcing a failure. [ 242.194877][T12708] name failslab, interval 1, probability 0, space 0, times 0 [ 242.200475][T12708] CPU: 1 UID: 0 PID: 12708 Comm: syz.7.2336 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.200502][T12708] Tainted: [L]=SOFTLOCKUP [ 242.200507][T12708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.200517][T12708] Call Trace: [ 242.200524][T12708] [ 242.200530][T12708] dump_stack_lvl+0x16c/0x1f0 [ 242.200576][T12708] should_fail_ex+0x512/0x640 [ 242.200596][T12708] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 242.200618][T12708] should_failslab+0xc2/0x120 [ 242.200640][T12708] kmem_cache_alloc_noprof+0x83/0x770 [ 242.200658][T12708] ? skb_clone+0x190/0x3f0 [ 242.200682][T12708] ? skb_clone+0x190/0x3f0 [ 242.200700][T12708] skb_clone+0x190/0x3f0 [ 242.200720][T12708] netlink_deliver_tap+0xabd/0xd30 [ 242.200747][T12708] netlink_unicast+0x64c/0x870 [ 242.200774][T12708] ? __pfx_netlink_unicast+0x10/0x10 [ 242.200806][T12708] netlink_sendmsg+0x8c8/0xdd0 [ 242.200833][T12708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.200865][T12708] ____sys_sendmsg+0xa5d/0xc30 [ 242.200892][T12708] ? copy_msghdr_from_user+0x10a/0x160 [ 242.200912][T12708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.200947][T12708] ___sys_sendmsg+0x134/0x1d0 [ 242.200969][T12708] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.201017][T12708] __sys_sendmsg+0x16d/0x220 [ 242.201037][T12708] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.201072][T12708] do_syscall_64+0xcd/0xf80 [ 242.201102][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.201119][T12708] RIP: 0033:0x7f0953b8f7c9 [ 242.201132][T12708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.201149][T12708] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.201165][T12708] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 242.201176][T12708] RDX: 0000000020000800 RSI: 00002000000004c0 RDI: 0000000000000003 [ 242.201186][T12708] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 242.201195][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.201205][T12708] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 242.201228][T12708] [ 242.421350][T12716] syzkaller0: entered promiscuous mode [ 242.423152][T12716] syzkaller0: entered allmulticast mode [ 242.445012][ T1143] hsr_slave_0: left promiscuous mode [ 242.449307][ T1143] hsr_slave_1: left promiscuous mode [ 242.452131][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.455227][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.468131][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.471239][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.486672][ T1143] veth1_macvtap: left promiscuous mode [ 242.490393][ T1143] veth0_macvtap: left promiscuous mode [ 242.492926][ T1143] veth1_vlan: left promiscuous mode [ 242.495241][ T1143] veth0_vlan: left promiscuous mode [ 242.920002][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 242.942804][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 244.038515][ T64] Bluetooth: hci4: command tx timeout [ 244.351056][T12743] syzkaller0: entered promiscuous mode [ 244.352939][T12743] syzkaller0: entered allmulticast mode [ 244.364371][T12743] FAULT_INJECTION: forcing a failure. [ 244.364371][T12743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.372207][T12743] CPU: 1 UID: 0 PID: 12743 Comm: syz.7.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.372228][T12743] Tainted: [L]=SOFTLOCKUP [ 244.372232][T12743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.372239][T12743] Call Trace: [ 244.372242][T12743] [ 244.372247][T12743] dump_stack_lvl+0x16c/0x1f0 [ 244.372286][T12743] should_fail_ex+0x512/0x640 [ 244.372307][T12743] _copy_to_user+0x32/0xd0 [ 244.372320][T12743] simple_read_from_buffer+0xcb/0x170 [ 244.372337][T12743] proc_fail_nth_read+0x197/0x240 [ 244.372352][T12743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.372364][T12743] ? rw_verify_area+0xcf/0x6c0 [ 244.372375][T12743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.372386][T12743] vfs_read+0x1e4/0xcf0 [ 244.372400][T12743] ? __pfx___mutex_lock+0x10/0x10 [ 244.372419][T12743] ? __pfx_vfs_read+0x10/0x10 [ 244.372436][T12743] ? __fget_files+0x20e/0x3c0 [ 244.372455][T12743] ksys_read+0x12a/0x250 [ 244.372468][T12743] ? __pfx_ksys_read+0x10/0x10 [ 244.372485][T12743] do_syscall_64+0xcd/0xf80 [ 244.372503][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.372514][T12743] RIP: 0033:0x7f0953b8e1dc [ 244.372525][T12743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.372535][T12743] RSP: 002b:00007f0954968030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.372547][T12743] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8e1dc [ 244.372554][T12743] RDX: 000000000000000f RSI: 00007f09549680a0 RDI: 000000000000000b [ 244.372560][T12743] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000014 [ 244.372567][T12743] R10: 00000000040000c0 R11: 0000000000000246 R12: 0000000000000001 [ 244.372573][T12743] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 244.372587][T12743] [ 244.399849][T12749] FAULT_INJECTION: forcing a failure. [ 244.399849][T12749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.464107][T12749] CPU: 3 UID: 0 PID: 12749 Comm: syz.6.2347 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.464138][T12749] Tainted: [L]=SOFTLOCKUP [ 244.464144][T12749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.464170][T12749] Call Trace: [ 244.464176][T12749] [ 244.464181][T12749] dump_stack_lvl+0x16c/0x1f0 [ 244.464214][T12749] should_fail_ex+0x512/0x640 [ 244.464238][T12749] _copy_from_user+0x2e/0xd0 [ 244.464257][T12749] __sys_bpf+0x248/0x4980 [ 244.464286][T12749] ? __pfx___sys_bpf+0x10/0x10 [ 244.464311][T12749] ? find_held_lock+0x2b/0x80 [ 244.464344][T12749] ? find_held_lock+0x2b/0x80 [ 244.464372][T12749] ? __mutex_unlock_slowpath+0x161/0x790 [ 244.464415][T12749] ? fput+0x70/0xf0 [ 244.464442][T12749] ? ksys_write+0x1ac/0x250 [ 244.464463][T12749] ? __pfx_ksys_write+0x10/0x10 [ 244.464490][T12749] __x64_sys_bpf+0x78/0xc0 [ 244.464516][T12749] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.464542][T12749] do_syscall_64+0xcd/0xf80 [ 244.464570][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.464590][T12749] RIP: 0033:0x7f547158f7c9 [ 244.464604][T12749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.464621][T12749] RSP: 002b:00007f54724af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.464638][T12749] RAX: ffffffffffffffda RBX: 00007f54717e5fa0 RCX: 00007f547158f7c9 [ 244.464649][T12749] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 244.464659][T12749] RBP: 00007f54724af090 R08: 0000000000000000 R09: 0000000000000000 [ 244.464671][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.464682][T12749] R13: 00007f54717e6038 R14: 00007f54717e5fa0 R15: 00007ffc3264bc88 [ 244.464704][T12749] [ 244.707082][T12765] syzkaller0: entered promiscuous mode [ 244.715115][T12765] syzkaller0: entered allmulticast mode [ 244.761583][T12773] FAULT_INJECTION: forcing a failure. [ 244.761583][T12773] name failslab, interval 1, probability 0, space 0, times 0 [ 244.766023][T12773] CPU: 3 UID: 0 PID: 12773 Comm: syz.6.2353 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.766047][T12773] Tainted: [L]=SOFTLOCKUP [ 244.766051][T12773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.766058][T12773] Call Trace: [ 244.766063][T12773] [ 244.766067][T12773] dump_stack_lvl+0x16c/0x1f0 [ 244.766100][T12773] should_fail_ex+0x512/0x640 [ 244.766114][T12773] ? __kmalloc_noprof+0xca/0x910 [ 244.766133][T12773] should_failslab+0xc2/0x120 [ 244.766148][T12773] __kmalloc_noprof+0xeb/0x910 [ 244.766165][T12773] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 244.766181][T12773] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 244.766192][T12773] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 244.766207][T12773] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 244.766219][T12773] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 244.766234][T12773] ? bpf_lsm_capable+0x9/0x10 [ 244.766247][T12773] ? security_capable+0x7e/0x260 [ 244.766262][T12773] ? ns_capable+0xd7/0x110 [ 244.766279][T12773] genl_rcv_msg+0x55c/0x800 [ 244.766291][T12773] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.766301][T12773] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 244.766315][T12773] ? __pfx_nl80211_set_station+0x10/0x10 [ 244.766330][T12773] ? __pfx_nl80211_post_doit+0x10/0x10 [ 244.766346][T12773] ? __lock_acquire+0x436/0x2890 [ 244.766361][T12773] netlink_rcv_skb+0x158/0x420 [ 244.766377][T12773] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.766389][T12773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.766410][T12773] ? netlink_deliver_tap+0x1ae/0xd30 [ 244.766427][T12773] genl_rcv+0x28/0x40 [ 244.766443][T12773] netlink_unicast+0x5aa/0x870 [ 244.766461][T12773] ? __pfx_netlink_unicast+0x10/0x10 [ 244.766482][T12773] netlink_sendmsg+0x8c8/0xdd0 [ 244.766501][T12773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.766522][T12773] ____sys_sendmsg+0xa5d/0xc30 [ 244.766540][T12773] ? copy_msghdr_from_user+0x10a/0x160 [ 244.766554][T12773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.766577][T12773] ___sys_sendmsg+0x134/0x1d0 [ 244.766592][T12773] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.766622][T12773] __sys_sendmsg+0x16d/0x220 [ 244.766636][T12773] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.766659][T12773] do_syscall_64+0xcd/0xf80 [ 244.766677][T12773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.766688][T12773] RIP: 0033:0x7f547158f7c9 [ 244.766697][T12773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.766708][T12773] RSP: 002b:00007f54724af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.766718][T12773] RAX: ffffffffffffffda RBX: 00007f54717e5fa0 RCX: 00007f547158f7c9 [ 244.766725][T12773] RDX: 0000000000040800 RSI: 0000200000000240 RDI: 0000000000000004 [ 244.766732][T12773] RBP: 00007f54724af090 R08: 0000000000000000 R09: 0000000000000000 [ 244.766738][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.766744][T12773] R13: 00007f54717e6038 R14: 00007f54717e5fa0 R15: 00007ffc3264bc88 [ 244.766758][T12773] [ 244.927968][T12779] openvswitch: netlink: IPv4 tun info is not correct [ 245.885845][T12787] FAULT_INJECTION: forcing a failure. [ 245.885845][T12787] name failslab, interval 1, probability 0, space 0, times 0 [ 245.897252][T12787] CPU: 1 UID: 0 PID: 12787 Comm: syz.6.2357 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.897273][T12787] Tainted: [L]=SOFTLOCKUP [ 245.897277][T12787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.897284][T12787] Call Trace: [ 245.897288][T12787] [ 245.897293][T12787] dump_stack_lvl+0x16c/0x1f0 [ 245.897314][T12787] should_fail_ex+0x512/0x640 [ 245.897327][T12787] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 245.897340][T12787] should_failslab+0xc2/0x120 [ 245.897355][T12787] kmem_cache_alloc_node_noprof+0x86/0x800 [ 245.897366][T12787] ? __alloc_skb+0x156/0x410 [ 245.897381][T12787] ? __alloc_skb+0x156/0x410 [ 245.897391][T12787] __alloc_skb+0x156/0x410 [ 245.897402][T12787] ? __alloc_skb+0x35d/0x410 [ 245.897413][T12787] ? __pfx___alloc_skb+0x10/0x10 [ 245.897424][T12787] ? genl_rcv_msg+0x550/0x800 [ 245.897434][T12787] ? genl_rcv_msg+0x4bb/0x800 [ 245.897448][T12787] netlink_ack+0x15d/0xb80 [ 245.897468][T12787] netlink_rcv_skb+0x332/0x420 [ 245.897484][T12787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.897495][T12787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.897517][T12787] ? netlink_deliver_tap+0x1ae/0xd30 [ 245.897534][T12787] genl_rcv+0x28/0x40 [ 245.897550][T12787] netlink_unicast+0x5aa/0x870 [ 245.897568][T12787] ? __pfx_netlink_unicast+0x10/0x10 [ 245.897589][T12787] netlink_sendmsg+0x8c8/0xdd0 [ 245.897607][T12787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.897628][T12787] ____sys_sendmsg+0xa5d/0xc30 [ 245.897646][T12787] ? copy_msghdr_from_user+0x10a/0x160 [ 245.897660][T12787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.897682][T12787] ___sys_sendmsg+0x134/0x1d0 [ 245.897697][T12787] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.897727][T12787] __sys_sendmsg+0x16d/0x220 [ 245.897741][T12787] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.897763][T12787] do_syscall_64+0xcd/0xf80 [ 245.897781][T12787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.897797][T12787] RIP: 0033:0x7f547158f7c9 [ 245.897806][T12787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.897817][T12787] RSP: 002b:00007f54724af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.897828][T12787] RAX: ffffffffffffffda RBX: 00007f54717e5fa0 RCX: 00007f547158f7c9 [ 245.897835][T12787] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 245.897842][T12787] RBP: 00007f54724af090 R08: 0000000000000000 R09: 0000000000000000 [ 245.897848][T12787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.897854][T12787] R13: 00007f54717e6038 R14: 00007f54717e5fa0 R15: 00007ffc3264bc88 [ 245.897868][T12787] [ 245.919509][T12587] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.970320][T12795] FAULT_INJECTION: forcing a failure. [ 245.970320][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 245.970363][T12795] CPU: 3 UID: 0 PID: 12795 Comm: syz.6.2358 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.970389][T12795] Tainted: [L]=SOFTLOCKUP [ 245.970394][T12795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.970406][T12795] Call Trace: [ 245.970412][T12795] [ 245.970418][T12795] dump_stack_lvl+0x16c/0x1f0 [ 245.970450][T12795] should_fail_ex+0x512/0x640 [ 245.970469][T12795] ? __kmalloc_noprof+0xca/0x910 [ 245.970498][T12795] should_failslab+0xc2/0x120 [ 245.970521][T12795] __kmalloc_noprof+0xeb/0x910 [ 245.970546][T12795] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 245.970571][T12795] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 245.970589][T12795] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 245.970612][T12795] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 245.970631][T12795] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 245.970656][T12795] ? bpf_lsm_capable+0x9/0x10 [ 245.970675][T12795] ? security_capable+0x7e/0x260 [ 245.970699][T12795] ? ns_capable+0xd7/0x110 [ 245.970726][T12795] genl_rcv_msg+0x55c/0x800 [ 245.970746][T12795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.970762][T12795] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 245.970785][T12795] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 245.970803][T12795] ? __pfx_nl80211_post_doit+0x10/0x10 [ 245.970833][T12795] ? __lock_acquire+0x436/0x2890 [ 245.970859][T12795] netlink_rcv_skb+0x158/0x420 [ 245.970883][T12795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.970901][T12795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.970936][T12795] ? netlink_deliver_tap+0x1ae/0xd30 [ 245.970964][T12795] genl_rcv+0x28/0x40 [ 245.970989][T12795] netlink_unicast+0x5aa/0x870 [ 245.971017][T12795] ? __pfx_netlink_unicast+0x10/0x10 [ 245.971051][T12795] netlink_sendmsg+0x8c8/0xdd0 [ 245.971079][T12795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.971113][T12795] ____sys_sendmsg+0xa5d/0xc30 [ 245.971141][T12795] ? copy_msghdr_from_user+0x10a/0x160 [ 245.971163][T12795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.971200][T12795] ___sys_sendmsg+0x134/0x1d0 [ 245.971223][T12795] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.971274][T12795] __sys_sendmsg+0x16d/0x220 [ 245.971298][T12795] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.971327][T12795] ? fput+0x70/0xf0 [ 245.971357][T12795] do_syscall_64+0xcd/0xf80 [ 245.971385][T12795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.971403][T12795] RIP: 0033:0x7f547158f7c9 [ 245.971416][T12795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.971433][T12795] RSP: 002b:00007f54724af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.971450][T12795] RAX: ffffffffffffffda RBX: 00007f54717e5fa0 RCX: 00007f547158f7c9 [ 245.971462][T12795] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 245.971472][T12795] RBP: 00007f54724af090 R08: 0000000000000000 R09: 0000000000000000 [ 245.971482][T12795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.971492][T12795] R13: 00007f54717e6038 R14: 00007f54717e5fa0 R15: 00007ffc3264bc88 [ 245.971517][T12795] [ 246.007441][T12796] netlink: 'syz.9.2359': attribute type 2 has an invalid length. [ 246.145983][T12587] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.233430][T12587] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.245043][T12587] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.307014][T12587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.322013][T12587] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.328890][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.331909][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.339772][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.342329][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.408713][ T34] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 246.414869][T12813] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 246.496418][T12829] FAULT_INJECTION: forcing a failure. [ 246.496418][T12829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.502186][T12829] CPU: 0 UID: 0 PID: 12829 Comm: syz.6.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.502208][T12829] Tainted: [L]=SOFTLOCKUP [ 246.502211][T12829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.502218][T12829] Call Trace: [ 246.502223][T12829] [ 246.502228][T12829] dump_stack_lvl+0x16c/0x1f0 [ 246.502248][T12829] should_fail_ex+0x512/0x640 [ 246.502263][T12829] _copy_from_user+0x2e/0xd0 [ 246.502275][T12829] map_update_elem+0x57d/0x930 [ 246.502291][T12829] ? __pfx_map_update_elem+0x10/0x10 [ 246.502304][T12829] ? selinux_bpf+0xed/0x130 [ 246.502319][T12829] __sys_bpf+0x1573/0x4980 [ 246.502337][T12829] ? __pfx___sys_bpf+0x10/0x10 [ 246.502351][T12829] ? find_held_lock+0x2b/0x80 [ 246.502371][T12829] ? find_held_lock+0x2b/0x80 [ 246.502390][T12829] ? __mutex_unlock_slowpath+0x161/0x790 [ 246.502415][T12829] ? fput+0x70/0xf0 [ 246.502433][T12829] ? ksys_write+0x1ac/0x250 [ 246.502446][T12829] ? __pfx_ksys_write+0x10/0x10 [ 246.502461][T12829] __x64_sys_bpf+0x78/0xc0 [ 246.502476][T12829] ? lockdep_hardirqs_on+0x7c/0x110 [ 246.502493][T12829] do_syscall_64+0xcd/0xf80 [ 246.502510][T12829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.502522][T12829] RIP: 0033:0x7f547158f7c9 [ 246.502531][T12829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.502542][T12829] RSP: 002b:00007f54724af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.502552][T12829] RAX: ffffffffffffffda RBX: 00007f54717e5fa0 RCX: 00007f547158f7c9 [ 246.502559][T12829] RDX: 0000000000000020 RSI: 00002000000048c0 RDI: 0000000000000002 [ 246.502566][T12829] RBP: 00007f54724af090 R08: 0000000000000000 R09: 0000000000000000 [ 246.502572][T12829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.502578][T12829] R13: 00007f54717e6038 R14: 00007f54717e5fa0 R15: 00007ffc3264bc88 [ 246.502592][T12829] [ 246.522999][T12587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.557334][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 246.599146][T12831] syzkaller0: entered promiscuous mode [ 246.601480][T12831] syzkaller0: entered allmulticast mode [ 246.601674][ T34] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 246.607698][ T34] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.612312][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.616017][ T34] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 246.620513][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 246.624890][ T34] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.630563][ T34] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.634453][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.762830][T12587] veth0_vlan: entered promiscuous mode [ 246.770820][T12587] veth1_vlan: entered promiscuous mode [ 246.796115][T12587] veth0_macvtap: entered promiscuous mode [ 246.802546][T12587] veth1_macvtap: entered promiscuous mode [ 246.816892][T12587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.827150][T12587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.834773][ T4255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.837872][ T4255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.841792][ T4255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.845110][ T4255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.849110][ T34] usb 12-1: usb_control_msg returned -32 [ 246.853530][ T34] usbtmc 12-1:16.0: can't read capabilities [ 246.896500][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.899110][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.924239][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.926803][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.942221][ T40] audit: type=1400 audit(1765239772.588:458): avc: denied { mounton } for pid=12587 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 247.007407][ T29] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 247.167421][ T29] usb 14-1: Using ep0 maxpacket: 8 [ 247.171164][ T29] usb 14-1: config 0 interface 0 has no altsetting 0 [ 247.173068][ T29] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 247.175573][ T29] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.179425][ T29] usb 14-1: config 0 descriptor?? [ 247.194549][ T40] audit: type=1326 audit(1765239772.838:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.2375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91058f7c9 code=0x7ffc0000 [ 247.202048][ T40] audit: type=1326 audit(1765239772.838:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.2375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91058f7c9 code=0x7ffc0000 [ 247.209776][ T40] audit: type=1326 audit(1765239772.838:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.2375" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa91058f7c9 code=0x7ffc0000 [ 247.216990][ T40] audit: type=1326 audit(1765239772.838:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.2375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91058f7c9 code=0x7ffc0000 [ 247.224833][ T40] audit: type=1326 audit(1765239772.838:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.2375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91058f7c9 code=0x7ffc0000 [ 247.232878][ T40] audit: type=1326 audit(1765239772.838:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.2375" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa91058f7c9 code=0x7ffc0000 [ 247.240527][ T40] audit: type=1326 audit(1765239772.838:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.2375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91058f7c9 code=0x7ffc0000 [ 247.247505][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 247.249841][ T40] audit: type=1326 audit(1765239772.838:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.2375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91058f7c9 code=0x7ffc0000 [ 247.261748][ T40] audit: type=1326 audit(1765239772.838:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.2375" exe="/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fa91058f7c9 code=0x7ffc0000 [ 247.587323][ T29] hid_parser_main: 1 callbacks suppressed [ 247.587335][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 247.594368][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 247.597431][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 247.599678][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 247.601897][ T29] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 247.604913][ T29] mcp2221 0003:04D8:00DD.0019: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 247.669352][T12859] syzkaller0: entered promiscuous mode [ 247.671462][T12859] syzkaller0: entered allmulticast mode [ 247.677064][T12859] tipc: Enabled bearer , priority 0 [ 247.681640][T12858] tipc: Resetting bearer [ 247.701904][T12858] tipc: Disabling bearer [ 247.797407][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.853776][ T1329] usb 14-1: USB disconnect, device number 15 [ 247.912597][T12862] usbtmc 12-1:16.0: INITIATE_CLEAR returned 0 [ 248.054661][T12865] FAULT_INJECTION: forcing a failure. [ 248.054661][T12865] name failslab, interval 1, probability 0, space 0, times 0 [ 248.060065][T12865] CPU: 3 UID: 0 PID: 12865 Comm: syz.6.2378 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.060084][T12865] Tainted: [L]=SOFTLOCKUP [ 248.060088][T12865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.060094][T12865] Call Trace: [ 248.060100][T12865] [ 248.060104][T12865] dump_stack_lvl+0x16c/0x1f0 [ 248.060124][T12865] should_fail_ex+0x512/0x640 [ 248.060138][T12865] ? __kmalloc_cache_noprof+0x5f/0x800 [ 248.060157][T12865] should_failslab+0xc2/0x120 [ 248.060172][T12865] __kmalloc_cache_noprof+0x80/0x800 [ 248.060188][T12865] ? __tcf_qdisc_find.part.0+0x38c/0xb20 [ 248.060206][T12865] ? tcf_chain_create+0x98/0x370 [ 248.060221][T12865] ? tcf_chain_create+0x98/0x370 [ 248.060232][T12865] tcf_chain_create+0x98/0x370 [ 248.060247][T12865] __tcf_chain_get+0x153/0x1b0 [ 248.060262][T12865] tc_new_tfilter+0x6ed/0x2340 [ 248.060284][T12865] ? avc_has_perm_noaudit+0x117/0x3b0 [ 248.060298][T12865] ? __pfx_tc_new_tfilter+0x10/0x10 [ 248.060319][T12865] ? __lock_acquire+0x436/0x2890 [ 248.060340][T12865] ? find_held_lock+0x2b/0x80 [ 248.060356][T12865] ? __pfx_tc_new_tfilter+0x10/0x10 [ 248.060371][T12865] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 248.060387][T12865] ? __pfx_tc_new_tfilter+0x10/0x10 [ 248.060404][T12865] rtnetlink_rcv_msg+0x95e/0xe90 [ 248.060425][T12865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.060454][T12865] ? __lock_acquire+0x436/0x2890 [ 248.060481][T12865] netlink_rcv_skb+0x158/0x420 [ 248.060508][T12865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.060531][T12865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.060552][T12865] ? netlink_deliver_tap+0x1ae/0xd30 [ 248.060570][T12865] netlink_unicast+0x5aa/0x870 [ 248.060588][T12865] ? __pfx_netlink_unicast+0x10/0x10 [ 248.060609][T12865] netlink_sendmsg+0x8c8/0xdd0 [ 248.060627][T12865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.060648][T12865] ____sys_sendmsg+0xa5d/0xc30 [ 248.060666][T12865] ? copy_msghdr_from_user+0x10a/0x160 [ 248.060680][T12865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.060703][T12865] ___sys_sendmsg+0x134/0x1d0 [ 248.060717][T12865] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.060747][T12865] __sys_sendmsg+0x16d/0x220 [ 248.060761][T12865] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.060780][T12865] ? fput+0x70/0xf0 [ 248.060800][T12865] do_syscall_64+0xcd/0xf80 [ 248.060818][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.060829][T12865] RIP: 0033:0x7f547158f7c9 [ 248.060839][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.060855][T12865] RSP: 002b:00007f54724af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.060866][T12865] RAX: ffffffffffffffda RBX: 00007f54717e5fa0 RCX: 00007f547158f7c9 [ 248.060873][T12865] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000006 [ 248.060879][T12865] RBP: 00007f54724af090 R08: 0000000000000000 R09: 0000000000000000 [ 248.060886][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.060892][T12865] R13: 00007f54717e6038 R14: 00007f54717e5fa0 R15: 00007ffc3264bc88 [ 248.060906][T12865] [ 248.166144][T12867] syzkaller0: entered promiscuous mode [ 248.168862][T12867] syzkaller0: entered allmulticast mode [ 248.300085][T12872] netlink: 'syz.4.2381': attribute type 1 has an invalid length. [ 248.399205][T12877] FAULT_INJECTION: forcing a failure. [ 248.399205][T12877] name failslab, interval 1, probability 0, space 0, times 0 [ 248.407454][T12877] CPU: 1 UID: 0 PID: 12877 Comm: syz.4.2383 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.407473][T12877] Tainted: [L]=SOFTLOCKUP [ 248.407477][T12877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.407483][T12877] Call Trace: [ 248.407488][T12877] [ 248.407492][T12877] dump_stack_lvl+0x16c/0x1f0 [ 248.407514][T12877] should_fail_ex+0x512/0x640 [ 248.407530][T12877] should_failslab+0xc2/0x120 [ 248.407545][T12877] kmem_cache_alloc_noprof+0x83/0x770 [ 248.407557][T12877] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 248.407573][T12877] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 248.407587][T12877] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 248.407608][T12877] idr_get_free+0x528/0xa30 [ 248.407627][T12877] idr_alloc_u32+0x190/0x2f0 [ 248.407643][T12877] ? __pfx_idr_alloc_u32+0x10/0x10 [ 248.407663][T12877] ? lock_acquire+0x179/0x330 [ 248.407680][T12877] idr_alloc_cyclic+0x10b/0x230 [ 248.407696][T12877] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 248.407710][T12877] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 248.407728][T12877] bpf_link_prime+0x7b/0x4c0 [ 248.407743][T12877] ? bpf_link_init_sleepable+0x91/0x220 [ 248.407787][T12877] bpf_raw_tp_link_attach+0x2ad/0x630 [ 248.407811][T12877] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 248.407826][T12877] ? find_held_lock+0x2b/0x80 [ 248.407842][T12877] ? __fget_files+0x204/0x3c0 [ 248.407868][T12877] ? fput+0x70/0xf0 [ 248.407884][T12877] ? __bpf_prog_get+0x97/0x2a0 [ 248.407897][T12877] __sys_bpf+0x20c1/0x4980 [ 248.407914][T12877] ? __pfx___sys_bpf+0x10/0x10 [ 248.407929][T12877] ? find_held_lock+0x2b/0x80 [ 248.407947][T12877] ? find_held_lock+0x2b/0x80 [ 248.407967][T12877] ? __mutex_unlock_slowpath+0x161/0x790 [ 248.407991][T12877] ? fput+0x70/0xf0 [ 248.408007][T12877] ? ksys_write+0x1ac/0x250 [ 248.408020][T12877] ? __pfx_ksys_write+0x10/0x10 [ 248.408035][T12877] __x64_sys_bpf+0x78/0xc0 [ 248.408050][T12877] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.408066][T12877] do_syscall_64+0xcd/0xf80 [ 248.408084][T12877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.408096][T12877] RIP: 0033:0x7fa91058f7c9 [ 248.408107][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.408117][T12877] RSP: 002b:00007fa911480038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.408128][T12877] RAX: ffffffffffffffda RBX: 00007fa9107e5fa0 RCX: 00007fa91058f7c9 [ 248.408134][T12877] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 248.408141][T12877] RBP: 00007fa911480090 R08: 0000000000000000 R09: 0000000000000000 [ 248.408147][T12877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.408153][T12877] R13: 00007fa9107e6038 R14: 00007fa9107e5fa0 R15: 00007fff3e1a2dd8 [ 248.408167][T12877] [ 248.863430][T12892] FAULT_INJECTION: forcing a failure. [ 248.863430][T12892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 248.869177][T12892] CPU: 2 UID: 0 PID: 12892 Comm: syz.9.2388 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.869208][T12892] Tainted: [L]=SOFTLOCKUP [ 248.869214][T12892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.869224][T12892] Call Trace: [ 248.869230][T12892] [ 248.869239][T12892] dump_stack_lvl+0x16c/0x1f0 [ 248.869271][T12892] should_fail_ex+0x512/0x640 [ 248.869295][T12892] should_fail_alloc_page+0xe7/0x130 [ 248.869320][T12892] prepare_alloc_pages+0x401/0x670 [ 248.869349][T12892] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 248.869374][T12892] ? find_held_lock+0x2b/0x80 [ 248.869402][T12892] ? is_bpf_text_address+0x8a/0x1a0 [ 248.869423][T12892] ? bpf_ksym_find+0x127/0x1c0 [ 248.869448][T12892] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 248.869468][T12892] ? kernel_text_address+0x8d/0x100 [ 248.869491][T12892] ? __kernel_text_address+0xd/0x40 [ 248.869514][T12892] ? unwind_get_return_address+0x59/0xa0 [ 248.869548][T12892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.869571][T12892] ? policy_nodemask+0xea/0x4e0 [ 248.869594][T12892] alloc_pages_mpol+0x1fb/0x550 [ 248.869619][T12892] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 248.869640][T12892] ? kasan_save_stack+0x42/0x60 [ 248.869657][T12892] ? kasan_save_track+0x14/0x30 [ 248.869676][T12892] ? __kasan_kmalloc+0xaa/0xb0 [ 248.869693][T12892] ? __get_vm_area_node+0x101/0x330 [ 248.869720][T12892] alloc_pages_noprof+0x131/0x390 [ 248.869744][T12892] get_free_pages_noprof+0x10/0xb0 [ 248.869765][T12892] __kasan_populate_vmalloc+0xa0/0x220 [ 248.869790][T12892] alloc_vmap_area+0x98d/0x2a50 [ 248.869821][T12892] ? __pfx_alloc_vmap_area+0x10/0x10 [ 248.869853][T12892] __get_vm_area_node+0x1ca/0x330 [ 248.869880][T12892] __vmalloc_node_range_noprof+0x247/0x16b0 [ 248.869907][T12892] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 248.869933][T12892] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 248.869971][T12892] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.869996][T12892] ? find_held_lock+0x2b/0x80 [ 248.870023][T12892] ? avc_has_perm_noaudit+0x117/0x3b0 [ 248.870047][T12892] ? avc_has_perm_noaudit+0x149/0x3b0 [ 248.870068][T12892] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 248.870088][T12892] __vmalloc_node_noprof+0xad/0xf0 [ 248.870111][T12892] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 248.870133][T12892] __vmalloc_noprof+0xa3/0x120 [ 248.870157][T12892] ? __pfx___vmalloc_noprof+0x10/0x10 [ 248.870183][T12892] ? rcu_is_watching+0x12/0xc0 [ 248.870202][T12892] ? cap_capable+0x10d/0x3f0 [ 248.870225][T12892] bpf_prog_alloc_no_stats+0x58/0x610 [ 248.870244][T12892] ? security_capable+0x7e/0x260 [ 248.870271][T12892] bpf_prog_alloc+0x3b/0x230 [ 248.870287][T12892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.870306][T12892] bpf_prog_load+0x19bc/0x2cc0 [ 248.870338][T12892] ? __pfx_bpf_prog_load+0x10/0x10 [ 248.870365][T12892] ? avc_has_perm_noaudit+0x149/0x3b0 [ 248.870388][T12892] ? avc_has_perm+0x144/0x1f0 [ 248.870421][T12892] ? selinux_bpf+0xdd/0x130 [ 248.870440][T12892] ? bpf_lsm_bpf+0x9/0x10 [ 248.870462][T12892] __sys_bpf+0x3e72/0x4980 [ 248.870490][T12892] ? __pfx___sys_bpf+0x10/0x10 [ 248.870513][T12892] ? find_held_lock+0x2b/0x80 [ 248.870544][T12892] ? find_held_lock+0x2b/0x80 [ 248.870576][T12892] ? __mutex_unlock_slowpath+0x161/0x790 [ 248.870617][T12892] ? fput+0x70/0xf0 [ 248.870645][T12892] ? ksys_write+0x1ac/0x250 [ 248.870667][T12892] ? __pfx_ksys_write+0x10/0x10 [ 248.870691][T12892] __x64_sys_bpf+0x78/0xc0 [ 248.870716][T12892] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.870742][T12892] do_syscall_64+0xcd/0xf80 [ 248.870772][T12892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.870789][T12892] RIP: 0033:0x7ff698f8f7c9 [ 248.870805][T12892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.870822][T12892] RSP: 002b:00007ff699e3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.870845][T12892] RAX: ffffffffffffffda RBX: 00007ff6991e5fa0 RCX: 00007ff698f8f7c9 [ 248.870856][T12892] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 248.870867][T12892] RBP: 00007ff699e3c090 R08: 0000000000000000 R09: 0000000000000000 [ 248.870878][T12892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.870888][T12892] R13: 00007ff6991e6038 R14: 00007ff6991e5fa0 R15: 00007ffeb0dd8808 [ 248.870913][T12892] [ 248.871034][T12892] syz.9.2388: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 249.062914][T12892] CPU: 3 UID: 0 PID: 12892 Comm: syz.9.2388 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.062942][T12892] Tainted: [L]=SOFTLOCKUP [ 249.062948][T12892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.062961][T12892] Call Trace: [ 249.062967][T12892] [ 249.062975][T12892] dump_stack_lvl+0x16c/0x1f0 [ 249.063008][T12892] warn_alloc+0x248/0x3a0 [ 249.063027][T12892] ? __pfx_warn_alloc+0x10/0x10 [ 249.063045][T12892] ? kfree+0x2f8/0x6e0 [ 249.063077][T12892] ? __get_vm_area_node+0x2cd/0x330 [ 249.063105][T12892] ? __get_vm_area_node+0x2cd/0x330 [ 249.063126][T12892] ? __get_vm_area_node+0x1dc/0x330 [ 249.063147][T12892] ? __get_vm_area_node+0x208/0x330 [ 249.063173][T12892] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 249.063207][T12892] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 249.063234][T12892] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.063260][T12892] ? find_held_lock+0x2b/0x80 [ 249.063288][T12892] ? avc_has_perm_noaudit+0x117/0x3b0 [ 249.063315][T12892] ? avc_has_perm_noaudit+0x149/0x3b0 [ 249.063337][T12892] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 249.063356][T12892] __vmalloc_node_noprof+0xad/0xf0 [ 249.063381][T12892] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 249.063404][T12892] __vmalloc_noprof+0xa3/0x120 [ 249.063429][T12892] ? __pfx___vmalloc_noprof+0x10/0x10 [ 249.063457][T12892] ? rcu_is_watching+0x12/0xc0 [ 249.063475][T12892] ? cap_capable+0x10d/0x3f0 [ 249.063500][T12892] bpf_prog_alloc_no_stats+0x58/0x610 [ 249.063519][T12892] ? security_capable+0x7e/0x260 [ 249.063545][T12892] bpf_prog_alloc+0x3b/0x230 [ 249.063561][T12892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.063584][T12892] bpf_prog_load+0x19bc/0x2cc0 [ 249.063615][T12892] ? __pfx_bpf_prog_load+0x10/0x10 [ 249.063641][T12892] ? avc_has_perm_noaudit+0x149/0x3b0 [ 249.063666][T12892] ? avc_has_perm+0x144/0x1f0 [ 249.063699][T12892] ? selinux_bpf+0xdd/0x130 [ 249.063720][T12892] ? bpf_lsm_bpf+0x9/0x10 [ 249.063742][T12892] __sys_bpf+0x3e72/0x4980 [ 249.063793][T12892] ? __pfx___sys_bpf+0x10/0x10 [ 249.063818][T12892] ? find_held_lock+0x2b/0x80 [ 249.063850][T12892] ? find_held_lock+0x2b/0x80 [ 249.063883][T12892] ? __mutex_unlock_slowpath+0x161/0x790 [ 249.063927][T12892] ? fput+0x70/0xf0 [ 249.063960][T12892] ? ksys_write+0x1ac/0x250 [ 249.063981][T12892] ? __pfx_ksys_write+0x10/0x10 [ 249.064007][T12892] __x64_sys_bpf+0x78/0xc0 [ 249.064032][T12892] ? lockdep_hardirqs_on+0x7c/0x110 [ 249.064066][T12892] do_syscall_64+0xcd/0xf80 [ 249.064097][T12892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.064115][T12892] RIP: 0033:0x7ff698f8f7c9 [ 249.064129][T12892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.064144][T12892] RSP: 002b:00007ff699e3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.064161][T12892] RAX: ffffffffffffffda RBX: 00007ff6991e5fa0 RCX: 00007ff698f8f7c9 [ 249.064173][T12892] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 249.064183][T12892] RBP: 00007ff699e3c090 R08: 0000000000000000 R09: 0000000000000000 [ 249.064194][T12892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.064204][T12892] R13: 00007ff6991e6038 R14: 00007ff6991e5fa0 R15: 00007ffeb0dd8808 [ 249.064228][T12892] [ 249.064234][T12892] Mem-Info: [ 249.157742][ T1329] usb 12-1: USB disconnect, device number 11 [ 249.159186][T12892] active_anon:14536 inactive_anon:0 isolated_anon:0 [ 249.159186][T12892] active_file:13803 inactive_file:40725 isolated_file:0 [ 249.159186][T12892] unevictable:1768 dirty:505 writeback:0 [ 249.159186][T12892] slab_reclaimable:12860 slab_unreclaimable:78332 [ 249.159186][T12892] mapped:25661 shmem:5275 pagetables:1892 [ 249.159186][T12892] sec_pagetables:306 bounce:0 [ 249.159186][T12892] kernel_misc_reclaimable:0 [ 249.159186][T12892] free:441976 free_pcp:12342 free_cma:0 [ 249.219384][T12892] Node 0 active_anon:58144kB inactive_anon:0kB active_file:55212kB inactive_file:163068kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:86260kB dirty:2020kB writeback:0kB shmem:17564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14432kB pagetables:7628kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB [ 249.229746][T12892] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.239698][T12892] Node 0 DMA free:9104kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:56kB free_cma:0kB [ 249.249700][T12892] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 249.251542][T12892] Node 0 DMA32 free:202704kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58144kB inactive_anon:0kB active_file:55212kB inactive_file:163068kB unevictable:3536kB writepending:2020kB zspages:0kB present:2080628kB managed:1265292kB mlocked:0kB bounce:0kB free_pcp:35072kB local_pcp:11220kB free_cma:0kB [ 249.261985][T12892] lowmem_reserve[]: 0 0 0 0 0 [ 249.263528][T12892] Node 1 Normal free:1556096kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:13416kB local_pcp:6008kB free_cma:0kB [ 249.273349][T12892] lowmem_reserve[]: 0 0 0 0 0 [ 249.274920][T12892] Node 0 DMA: 0*4kB 2*8kB (U) 0*16kB 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 2*2048kB (U) 0*4096kB = 9104kB [ 249.279857][T12892] Node 0 DMA32: 2580*4kB (UM) 2112*8kB (UME) 1329*16kB (UME) 629*32kB (UME) 246*64kB (UME) 190*128kB (UME) 42*256kB (UM) 32*512kB (UME) 19*1024kB (UME) 11*2048kB (M) 6*4096kB (UM) = 202368kB [ 249.285978][T12892] Node 1 Normal: 15*4kB (UME) 17*8kB (UME) 32*16kB (UME) 126*32kB (UME) 36*64kB (UME) 14*128kB (UME) 8*256kB (UME) 8*512kB (UME) 3*1024kB (UE) 5*2048kB (UME) 373*4096kB (UM) = 1556100kB [ 249.287936][T12901] syzkaller0: entered promiscuous mode [ 249.291855][T12892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.293810][T12901] syzkaller0: entered allmulticast mode [ 249.296621][T12892] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 249.296638][T12892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.296647][T12892] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 249.296656][T12892] 59923 total pagecache pages [ 249.296660][T12892] 0 pages in swap cache [ 249.296664][T12892] Free swap = 124996kB [ 249.296668][T12892] Total swap = 124996kB [ 249.313070][T12892] 1048443 pages RAM [ 249.314341][T12892] 0 pages HighMem/MovableOnly [ 249.315895][T12892] 282809 pages reserved [ 249.317340][T12892] 0 pages cma reserved [ 249.572807][T12916] syzkaller0: entered promiscuous mode [ 249.574453][T12916] syzkaller0: entered allmulticast mode [ 249.990682][T12929] tipc: Enabled bearer , priority 0 [ 249.994115][T12929] syzkaller0: entered promiscuous mode [ 249.996453][T12929] syzkaller0: entered allmulticast mode [ 250.009157][T12929] FAULT_INJECTION: forcing a failure. [ 250.009157][T12929] name failslab, interval 1, probability 0, space 0, times 0 [ 250.014420][T12929] CPU: 0 UID: 0 PID: 12929 Comm: syz.7.2400 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.014449][T12929] Tainted: [L]=SOFTLOCKUP [ 250.014455][T12929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.014467][T12929] Call Trace: [ 250.014475][T12929] [ 250.014482][T12929] dump_stack_lvl+0x16c/0x1f0 [ 250.014517][T12929] should_fail_ex+0x512/0x640 [ 250.014537][T12929] ? fs_reclaim_acquire+0xae/0x150 [ 250.014564][T12929] should_failslab+0xc2/0x120 [ 250.014588][T12929] __kmalloc_noprof+0xeb/0x910 [ 250.014616][T12929] ? tomoyo_encode2+0x100/0x3e0 [ 250.014639][T12929] ? tomoyo_encode2+0x100/0x3e0 [ 250.014656][T12929] tomoyo_encode2+0x100/0x3e0 [ 250.014676][T12929] tomoyo_encode+0x29/0x50 [ 250.014692][T12929] tomoyo_realpath_from_path+0x18f/0x6e0 [ 250.014713][T12929] ? tomoyo_profile+0x47/0x60 [ 250.014736][T12929] tomoyo_path_number_perm+0x245/0x580 [ 250.014766][T12929] ? tomoyo_path_number_perm+0x237/0x580 [ 250.014794][T12929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.014821][T12929] ? find_held_lock+0x2b/0x80 [ 250.014869][T12929] ? find_held_lock+0x2b/0x80 [ 250.014895][T12929] ? hook_file_ioctl_common+0x144/0x410 [ 250.014921][T12929] ? __fget_files+0x20e/0x3c0 [ 250.014950][T12929] security_file_ioctl+0x9b/0x240 [ 250.014980][T12929] __x64_sys_ioctl+0xb7/0x210 [ 250.015005][T12929] do_syscall_64+0xcd/0xf80 [ 250.015035][T12929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.015055][T12929] RIP: 0033:0x7f0953b8f7c9 [ 250.015070][T12929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.015086][T12929] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.015104][T12929] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 250.015118][T12929] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 250.015129][T12929] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 250.015139][T12929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.015165][T12929] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 250.015190][T12929] [ 250.015228][T12929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.101326][T12935] netlink: 'syz.9.2403': attribute type 3 has an invalid length. [ 250.106218][T12929] tipc: Resetting bearer [ 250.109408][T12935] netlink: 'syz.9.2403': attribute type 1 has an invalid length. [ 250.117939][T12935] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2403'. [ 250.121747][T12935] NCSI netlink: No device for ifindex 0 [ 250.121963][T12928] tipc: Resetting bearer [ 250.131844][T12928] tipc: Disabling bearer [ 250.277424][ T5947] Bluetooth: hci0: command 0xfc11 tx timeout [ 250.277988][ T64] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 250.342912][T12954] mmap: syz.9.2409 (12954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 250.380945][T12958] FAULT_INJECTION: forcing a failure. [ 250.380945][T12958] name failslab, interval 1, probability 0, space 0, times 0 [ 250.386045][T12958] CPU: 2 UID: 0 PID: 12958 Comm: syz.7.2410 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.386073][T12958] Tainted: [L]=SOFTLOCKUP [ 250.386079][T12958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.386089][T12958] Call Trace: [ 250.386095][T12958] [ 250.386103][T12958] dump_stack_lvl+0x16c/0x1f0 [ 250.386133][T12958] should_fail_ex+0x512/0x640 [ 250.386151][T12958] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 250.386172][T12958] should_failslab+0xc2/0x120 [ 250.386194][T12958] kmem_cache_alloc_node_noprof+0x86/0x800 [ 250.386210][T12958] ? __alloc_skb+0x156/0x410 [ 250.386234][T12958] ? __alloc_skb+0x156/0x410 [ 250.386251][T12958] __alloc_skb+0x156/0x410 [ 250.386267][T12958] ? __alloc_skb+0x35d/0x410 [ 250.386285][T12958] ? __pfx___alloc_skb+0x10/0x10 [ 250.386312][T12958] alloc_skb_with_frags+0xe0/0x860 [ 250.386335][T12958] ? find_held_lock+0x2b/0x80 [ 250.386361][T12958] ? __might_fault+0xe3/0x190 [ 250.386376][T12958] ? __might_fault+0x13b/0x190 [ 250.386394][T12958] sock_alloc_send_pskb+0x7f9/0x980 [ 250.386422][T12958] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 250.386440][T12958] ? __pfx__copy_from_iter+0x10/0x10 [ 250.386459][T12958] ? __lock_acquire+0x436/0x2890 [ 250.386485][T12958] l2cap_sock_alloc_skb_cb+0xc5/0x510 [ 250.386515][T12958] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 250.386542][T12958] ? rcu_is_watching+0x12/0xc0 [ 250.386559][T12958] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 250.386588][T12958] l2cap_chan_send+0x1509/0x2dc0 [ 250.386617][T12958] ? __pfx_l2cap_chan_send+0x10/0x10 [ 250.386644][T12958] ? l2cap_sock_sendmsg+0x2d9/0x4b0 [ 250.386670][T12958] ? rcu_is_watching+0x12/0xc0 [ 250.386689][T12958] l2cap_sock_sendmsg+0x3a4/0x4b0 [ 250.386716][T12958] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 250.386760][T12958] ____sys_sendmsg+0xa5d/0xc30 [ 250.386787][T12958] ? copy_msghdr_from_user+0x10a/0x160 [ 250.386809][T12958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.386839][T12958] ? __pfx__kstrtoull+0x10/0x10 [ 250.386866][T12958] ___sys_sendmsg+0x134/0x1d0 [ 250.386889][T12958] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.386923][T12958] ? find_held_lock+0x2b/0x80 [ 250.386963][T12958] __sys_sendmmsg+0x200/0x420 [ 250.386987][T12958] ? __pfx___sys_sendmmsg+0x10/0x10 [ 250.387016][T12958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.387054][T12958] ? fput+0x70/0xf0 [ 250.387079][T12958] ? ksys_write+0x1ac/0x250 [ 250.387099][T12958] ? __pfx_ksys_write+0x10/0x10 [ 250.387125][T12958] __x64_sys_sendmmsg+0x9c/0x100 [ 250.387147][T12958] ? lockdep_hardirqs_on+0x7c/0x110 [ 250.387172][T12958] do_syscall_64+0xcd/0xf80 [ 250.387221][T12958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.387239][T12958] RIP: 0033:0x7f0953b8f7c9 [ 250.387253][T12958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.387286][T12958] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.387302][T12958] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 250.387313][T12958] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000004 [ 250.387323][T12958] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 250.387334][T12958] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 250.387344][T12958] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 250.387369][T12958] [ 250.544216][T12962] syzkaller0: entered promiscuous mode [ 250.546008][T12962] syzkaller0: entered allmulticast mode [ 250.705575][T12976] program syz.7.2416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.708983][T12978] FAULT_INJECTION: forcing a failure. [ 250.708983][T12978] name failslab, interval 1, probability 0, space 0, times 0 [ 250.711893][T12976] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 250.713288][ T64] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 250.717004][T12976] SELinux: failed to load policy [ 250.722654][T12978] CPU: 0 UID: 0 PID: 12978 Comm: syz.6.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.722674][T12978] Tainted: [L]=SOFTLOCKUP [ 250.722677][T12978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.722684][T12978] Call Trace: [ 250.722688][T12978] [ 250.722692][T12978] dump_stack_lvl+0x16c/0x1f0 [ 250.722735][T12978] should_fail_ex+0x512/0x640 [ 250.722749][T12978] ? fs_reclaim_acquire+0xae/0x150 [ 250.722766][T12978] should_failslab+0xc2/0x120 [ 250.722781][T12978] __kmalloc_noprof+0xeb/0x910 [ 250.722807][T12978] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 250.722822][T12978] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 250.722832][T12978] tomoyo_realpath_from_path+0xc2/0x6e0 [ 250.722844][T12978] ? tomoyo_profile+0x47/0x60 [ 250.722858][T12978] tomoyo_path_number_perm+0x245/0x580 [ 250.722873][T12978] ? tomoyo_path_number_perm+0x237/0x580 [ 250.722889][T12978] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.722906][T12978] ? find_held_lock+0x2b/0x80 [ 250.722936][T12978] ? find_held_lock+0x2b/0x80 [ 250.722951][T12978] ? hook_file_ioctl_common+0x144/0x410 [ 250.722967][T12978] ? __fget_files+0x20e/0x3c0 [ 250.722985][T12978] security_file_ioctl+0x9b/0x240 [ 250.723003][T12978] __x64_sys_ioctl+0xb7/0x210 [ 250.723016][T12978] do_syscall_64+0xcd/0xf80 [ 250.723034][T12978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.723046][T12978] RIP: 0033:0x7f547158f7c9 [ 250.723056][T12978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.723066][T12978] RSP: 002b:00007f54724af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.723077][T12978] RAX: ffffffffffffffda RBX: 00007f54717e5fa0 RCX: 00007f547158f7c9 [ 250.723084][T12978] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 250.723090][T12978] RBP: 00007f54724af090 R08: 0000000000000000 R09: 0000000000000000 [ 250.723097][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.723103][T12978] R13: 00007f54717e6038 R14: 00007f54717e5fa0 R15: 00007ffc3264bc88 [ 250.723117][T12978] [ 250.723136][T12978] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.818282][T12986] syzkaller0: entered promiscuous mode [ 250.820165][T12986] syzkaller0: entered allmulticast mode [ 250.823513][T12986] FAULT_INJECTION: forcing a failure. [ 250.823513][T12986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.828217][T12986] CPU: 2 UID: 0 PID: 12986 Comm: syz.7.2420 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.828246][T12986] Tainted: [L]=SOFTLOCKUP [ 250.828252][T12986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.828261][T12986] Call Trace: [ 250.828268][T12986] [ 250.828275][T12986] dump_stack_lvl+0x16c/0x1f0 [ 250.828307][T12986] should_fail_ex+0x512/0x640 [ 250.828331][T12986] _copy_from_user+0x2e/0xd0 [ 250.828351][T12986] move_addr_to_kernel+0x65/0x170 [ 250.828371][T12986] __copy_msghdr+0x386/0x470 [ 250.828393][T12986] copy_msghdr_from_user+0xc1/0x160 [ 250.828416][T12986] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 250.828450][T12986] ___sys_sendmsg+0xfe/0x1d0 [ 250.828473][T12986] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.828526][T12986] __sys_sendmsg+0x16d/0x220 [ 250.828549][T12986] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.828587][T12986] do_syscall_64+0xcd/0xf80 [ 250.828616][T12986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.828634][T12986] RIP: 0033:0x7f0953b8f7c9 [ 250.828649][T12986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.828667][T12986] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.828685][T12986] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 250.828697][T12986] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 250.828707][T12986] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 250.828718][T12986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.828729][T12986] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 250.828753][T12986] [ 250.838386][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2418'. [ 250.899848][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2418'. [ 250.949481][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2422'. [ 251.233173][T13029] FAULT_INJECTION: forcing a failure. [ 251.233173][T13029] name failslab, interval 1, probability 0, space 0, times 0 [ 251.241686][T13029] CPU: 0 UID: 0 PID: 13029 Comm: syz.9.2433 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.241714][T13029] Tainted: [L]=SOFTLOCKUP [ 251.241720][T13029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.241732][T13029] Call Trace: [ 251.241738][T13029] [ 251.241745][T13029] dump_stack_lvl+0x16c/0x1f0 [ 251.241782][T13029] should_fail_ex+0x512/0x640 [ 251.241800][T13029] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 251.241825][T13029] should_failslab+0xc2/0x120 [ 251.241847][T13029] __kmalloc_cache_node_noprof+0x83/0x830 [ 251.241867][T13029] ? rcu_is_watching+0x12/0xc0 [ 251.241884][T13029] ? page_pool_create_percpu+0x7a/0xd30 [ 251.241912][T13029] ? trace_kmalloc+0x2b/0xb0 [ 251.241931][T13029] ? __kvmalloc_node_noprof+0x3c9/0xa40 [ 251.241955][T13029] ? page_pool_create_percpu+0x7a/0xd30 [ 251.241981][T13029] page_pool_create_percpu+0x7a/0xd30 [ 251.242013][T13029] bpf_test_run_xdp_live+0x191/0x770 [ 251.242038][T13029] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 251.242064][T13029] ? __pfx___schedule+0x10/0x10 [ 251.242086][T13029] ? find_held_lock+0x2b/0x80 [ 251.242118][T13029] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 251.242158][T13029] ? 0xffffffffa0206200 [ 251.242174][T13029] ? 0xffffffffa0206200 [ 251.242188][T13029] ? 0xffffffffa0206200 [ 251.242200][T13029] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 251.242228][T13029] bpf_prog_test_run_xdp+0xd3d/0x1660 [ 251.242260][T13029] ? __fget_files+0x204/0x3c0 [ 251.242284][T13029] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 251.242308][T13029] ? __might_fault+0x50/0x190 [ 251.242327][T13029] ? fput+0x70/0xf0 [ 251.242352][T13029] ? __bpf_prog_get+0x97/0x2a0 [ 251.242371][T13029] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 251.242395][T13029] __sys_bpf+0x1035/0x4980 [ 251.242422][T13029] ? __pfx___sys_bpf+0x10/0x10 [ 251.242446][T13029] ? find_held_lock+0x2b/0x80 [ 251.242477][T13029] ? find_held_lock+0x2b/0x80 [ 251.242508][T13029] ? __mutex_unlock_slowpath+0x161/0x790 [ 251.242549][T13029] ? fput+0x70/0xf0 [ 251.242574][T13029] ? ksys_write+0x1ac/0x250 [ 251.242595][T13029] ? __pfx_ksys_write+0x10/0x10 [ 251.242621][T13029] __x64_sys_bpf+0x78/0xc0 [ 251.242645][T13029] ? lockdep_hardirqs_on+0x7c/0x110 [ 251.242671][T13029] do_syscall_64+0xcd/0xf80 [ 251.242700][T13029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.242719][T13029] RIP: 0033:0x7ff698f8f7c9 [ 251.242734][T13029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.242752][T13029] RSP: 002b:00007ff699e3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.242776][T13029] RAX: ffffffffffffffda RBX: 00007ff6991e5fa0 RCX: 00007ff698f8f7c9 [ 251.242788][T13029] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 251.242799][T13029] RBP: 00007ff699e3c090 R08: 0000000000000000 R09: 0000000000000000 [ 251.242810][T13029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.242820][T13029] R13: 00007ff6991e6038 R14: 00007ff6991e5fa0 R15: 00007ffeb0dd8808 [ 251.242846][T13029] [ 251.380576][T13032] syzkaller0: entered promiscuous mode [ 251.382882][T13032] syzkaller0: entered allmulticast mode [ 251.430119][T13040] syzkaller0: entered promiscuous mode [ 251.431889][T13040] syzkaller0: entered allmulticast mode [ 251.636386][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2443'. [ 251.673096][T13070] syzkaller0: entered promiscuous mode [ 251.675386][T13070] syzkaller0: entered allmulticast mode [ 251.864341][T13088] FAULT_INJECTION: forcing a failure. [ 251.864341][T13088] name failslab, interval 1, probability 0, space 0, times 0 [ 251.871829][T13088] CPU: 0 UID: 0 PID: 13088 Comm: syz.7.2456 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.871860][T13088] Tainted: [L]=SOFTLOCKUP [ 251.871866][T13088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.871879][T13088] Call Trace: [ 251.871887][T13088] [ 251.871895][T13088] dump_stack_lvl+0x16c/0x1f0 [ 251.871931][T13088] should_fail_ex+0x512/0x640 [ 251.871953][T13088] ? __kmalloc_noprof+0xca/0x910 [ 251.871986][T13088] should_failslab+0xc2/0x120 [ 251.872011][T13088] __kmalloc_noprof+0xeb/0x910 [ 251.872043][T13088] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 251.872071][T13088] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 251.872090][T13088] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 251.872118][T13088] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 251.872141][T13088] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.872169][T13088] ? bpf_lsm_capable+0x9/0x10 [ 251.872193][T13088] ? security_capable+0x7e/0x260 [ 251.872220][T13088] ? ns_capable+0xd7/0x110 [ 251.872267][T13088] genl_rcv_msg+0x55c/0x800 [ 251.872292][T13088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.872311][T13088] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 251.872337][T13088] ? __pfx_nl80211_set_station+0x10/0x10 [ 251.872364][T13088] ? __pfx_nl80211_post_doit+0x10/0x10 [ 251.872399][T13088] netlink_rcv_skb+0x158/0x420 [ 251.872429][T13088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.872449][T13088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.872486][T13088] ? netlink_deliver_tap+0x1ae/0xd30 [ 251.872512][T13088] genl_rcv+0x28/0x40 [ 251.872537][T13088] netlink_unicast+0x5aa/0x870 [ 251.872562][T13088] ? __pfx_netlink_unicast+0x10/0x10 [ 251.872592][T13088] netlink_sendmsg+0x8c8/0xdd0 [ 251.872617][T13088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.872646][T13088] ____sys_sendmsg+0xa5d/0xc30 [ 251.872671][T13088] ? copy_msghdr_from_user+0x10a/0x160 [ 251.872690][T13088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.872724][T13088] ___sys_sendmsg+0x134/0x1d0 [ 251.872745][T13088] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.872792][T13088] __sys_sendmsg+0x16d/0x220 [ 251.872811][T13088] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.872854][T13088] do_syscall_64+0xcd/0xf80 [ 251.872879][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.872897][T13088] RIP: 0033:0x7f0953b8f7c9 [ 251.872914][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.872933][T13088] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.872953][T13088] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 251.872964][T13088] RDX: 0000000000040800 RSI: 0000200000000240 RDI: 0000000000000004 [ 251.872976][T13088] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 251.872986][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.872998][T13088] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 251.873021][T13088] [ 251.907880][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.954897][T13098] FAULT_INJECTION: forcing a failure. [ 251.954897][T13098] name failslab, interval 1, probability 0, space 0, times 0 [ 251.962889][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.963310][T13098] CPU: 3 UID: 0 PID: 13098 Comm: syz.7.2459 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.963337][T13098] Tainted: [L]=SOFTLOCKUP [ 251.963344][T13098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.963355][T13098] Call Trace: [ 251.963361][T13098] [ 251.963369][T13098] dump_stack_lvl+0x16c/0x1f0 [ 251.963401][T13098] should_fail_ex+0x512/0x640 [ 251.963420][T13098] ? __kmalloc_noprof+0xca/0x910 [ 251.963450][T13098] should_failslab+0xc2/0x120 [ 251.963473][T13098] __kmalloc_noprof+0xeb/0x910 [ 251.963500][T13098] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 251.963526][T13098] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 251.963544][T13098] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 251.963569][T13098] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 251.963589][T13098] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.963615][T13098] ? bpf_lsm_capable+0x9/0x10 [ 251.963635][T13098] ? security_capable+0x7e/0x260 [ 251.963659][T13098] ? ns_capable+0xd7/0x110 [ 251.963686][T13098] genl_rcv_msg+0x55c/0x800 [ 251.963708][T13098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.963725][T13098] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 251.963775][T13098] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 251.963796][T13098] ? __pfx_nl80211_post_doit+0x10/0x10 [ 251.963829][T13098] netlink_rcv_skb+0x158/0x420 [ 251.963863][T13098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.963882][T13098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.963918][T13098] ? netlink_deliver_tap+0x1ae/0xd30 [ 251.963946][T13098] genl_rcv+0x28/0x40 [ 251.963971][T13098] netlink_unicast+0x5aa/0x870 [ 251.963999][T13098] ? __pfx_netlink_unicast+0x10/0x10 [ 251.964035][T13098] netlink_sendmsg+0x8c8/0xdd0 [ 251.964065][T13098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.964121][T13098] ____sys_sendmsg+0xa5d/0xc30 [ 251.964152][T13098] ? copy_msghdr_from_user+0x10a/0x160 [ 251.964173][T13098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.964210][T13098] ___sys_sendmsg+0x134/0x1d0 [ 251.964234][T13098] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.964287][T13098] __sys_sendmsg+0x16d/0x220 [ 251.964310][T13098] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.964346][T13098] do_syscall_64+0xcd/0xf80 [ 251.964375][T13098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.964392][T13098] RIP: 0033:0x7f0953b8f7c9 [ 251.964407][T13098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.964438][T13098] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.964456][T13098] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 251.964468][T13098] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 251.964479][T13098] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 251.964490][T13098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.964499][T13098] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 251.964521][T13098] [ 252.198591][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 252.514847][T13113] syzkaller0: entered promiscuous mode [ 252.521707][T13113] syzkaller0: entered allmulticast mode [ 252.831981][T13131] syzkaller0: entered promiscuous mode [ 252.834387][T13131] syzkaller0: entered allmulticast mode [ 253.052513][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 253.052529][ T40] audit: type=1400 audit(1765239778.698:484): avc: denied { read } for pid=13147 comm="syz.9.2477" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 253.076648][ T40] audit: type=1400 audit(1765239778.698:485): avc: denied { open } for pid=13147 comm="syz.9.2477" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 253.342794][T13175] syzkaller0: entered promiscuous mode [ 253.344887][ T40] audit: type=1400 audit(1765239778.988:486): avc: denied { read } for pid=13172 comm="syz.4.2485" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 253.345095][T13175] syzkaller0: entered allmulticast mode [ 253.357730][ T40] audit: type=1400 audit(1765239778.988:487): avc: denied { open } for pid=13172 comm="syz.4.2485" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 253.370358][ T40] audit: type=1400 audit(1765239778.988:488): avc: denied { ioctl } for pid=13172 comm="syz.4.2485" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x541e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 253.402571][T13180] FAULT_INJECTION: forcing a failure. [ 253.402571][T13180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.407016][T13180] CPU: 1 UID: 0 PID: 13180 Comm: syz.4.2486 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.407035][T13180] Tainted: [L]=SOFTLOCKUP [ 253.407039][T13180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.407046][T13180] Call Trace: [ 253.407050][T13180] [ 253.407055][T13180] dump_stack_lvl+0x16c/0x1f0 [ 253.407076][T13180] should_fail_ex+0x512/0x640 [ 253.407092][T13180] _copy_to_user+0x32/0xd0 [ 253.407105][T13180] simple_read_from_buffer+0xcb/0x170 [ 253.407121][T13180] proc_fail_nth_read+0x197/0x240 [ 253.407133][T13180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.407145][T13180] ? rw_verify_area+0xcf/0x6c0 [ 253.407157][T13180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.407168][T13180] vfs_read+0x1e4/0xcf0 [ 253.407195][T13180] ? __pfx___mutex_lock+0x10/0x10 [ 253.407214][T13180] ? __pfx_vfs_read+0x10/0x10 [ 253.407230][T13180] ? __fget_files+0x20e/0x3c0 [ 253.407250][T13180] ksys_read+0x12a/0x250 [ 253.407263][T13180] ? __pfx_ksys_read+0x10/0x10 [ 253.407279][T13180] do_syscall_64+0xcd/0xf80 [ 253.407298][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.407309][T13180] RIP: 0033:0x7fa91058e1dc [ 253.407320][T13180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.407331][T13180] RSP: 002b:00007fa911480030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.407342][T13180] RAX: ffffffffffffffda RBX: 00007fa9107e5fa0 RCX: 00007fa91058e1dc [ 253.407349][T13180] RDX: 000000000000000f RSI: 00007fa9114800a0 RDI: 0000000000000003 [ 253.407355][T13180] RBP: 00007fa911480090 R08: 0000000000000000 R09: 0000000000000000 [ 253.407361][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.407368][T13180] R13: 00007fa9107e6038 R14: 00007fa9107e5fa0 R15: 00007fff3e1a2dd8 [ 253.407382][T13180] [ 253.512491][ T40] audit: type=1400 audit(1765239779.158:489): avc: denied { getopt } for pid=13187 comm="syz.4.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.521124][T13190] FAULT_INJECTION: forcing a failure. [ 253.521124][T13190] name failslab, interval 1, probability 0, space 0, times 0 [ 253.524984][T13190] CPU: 3 UID: 0 PID: 13190 Comm: syz.7.2489 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.525003][T13190] Tainted: [L]=SOFTLOCKUP [ 253.525007][T13190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.525014][T13190] Call Trace: [ 253.525019][T13190] [ 253.525024][T13190] dump_stack_lvl+0x16c/0x1f0 [ 253.525046][T13190] should_fail_ex+0x512/0x640 [ 253.525059][T13190] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 253.525072][T13190] should_failslab+0xc2/0x120 [ 253.525087][T13190] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 253.525099][T13190] ? __d_alloc+0x35/0xa80 [ 253.525119][T13190] ? __d_alloc+0x35/0xa80 [ 253.525135][T13190] __d_alloc+0x35/0xa80 [ 253.525150][T13190] ? __pfx_idr_alloc_u32+0x10/0x10 [ 253.525167][T13190] d_alloc_pseudo+0x1c/0xc0 [ 253.525179][T13190] alloc_file_pseudo+0xcf/0x230 [ 253.525191][T13190] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 253.525205][T13190] __anon_inode_getfile+0xe8/0x280 [ 253.525219][T13190] bpf_link_prime+0x202/0x4c0 [ 253.525234][T13190] ? bpf_link_init_sleepable+0x91/0x220 [ 253.525251][T13190] bpf_raw_tp_link_attach+0x2ad/0x630 [ 253.525267][T13190] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 253.525282][T13190] ? find_held_lock+0x2b/0x80 [ 253.525300][T13190] ? __fget_files+0x204/0x3c0 [ 253.525320][T13190] ? fput+0x70/0xf0 [ 253.525336][T13190] ? __bpf_prog_get+0x97/0x2a0 [ 253.525349][T13190] __sys_bpf+0x20c1/0x4980 [ 253.525366][T13190] ? __pfx___sys_bpf+0x10/0x10 [ 253.525381][T13190] ? find_held_lock+0x2b/0x80 [ 253.525400][T13190] ? find_held_lock+0x2b/0x80 [ 253.525420][T13190] ? __mutex_unlock_slowpath+0x161/0x790 [ 253.525445][T13190] ? fput+0x70/0xf0 [ 253.525461][T13190] ? ksys_write+0x1ac/0x250 [ 253.525474][T13190] ? __pfx_ksys_write+0x10/0x10 [ 253.525490][T13190] __x64_sys_bpf+0x78/0xc0 [ 253.525505][T13190] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.525521][T13190] do_syscall_64+0xcd/0xf80 [ 253.525539][T13190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.525550][T13190] RIP: 0033:0x7f0953b8f7c9 [ 253.525559][T13190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.525571][T13190] RSP: 002b:00007f0954968038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.525581][T13190] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8f7c9 [ 253.525588][T13190] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 253.525594][T13190] RBP: 00007f0954968090 R08: 0000000000000000 R09: 0000000000000000 [ 253.525601][T13190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.525607][T13190] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007fff13024f58 [ 253.525621][T13190] [ 253.657123][T13195] syzkaller0: entered promiscuous mode [ 253.660784][T13195] syzkaller0: entered allmulticast mode [ 253.747610][T13203] 9pnet_virtio: no channels available for device 127.0.0.1 [ 253.816143][T13213] netlink: 'syz.6.2500': attribute type 1 has an invalid length. [ 253.878579][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2501'. [ 253.965629][T13220] syzkaller0: entered promiscuous mode [ 253.967858][T13220] syzkaller0: entered allmulticast mode [ 253.971773][T13222] netlink: 'syz.4.2503': attribute type 1 has an invalid length. [ 253.974949][T13222] FAULT_INJECTION: forcing a failure. [ 253.974949][T13222] name failslab, interval 1, probability 0, space 0, times 0 [ 253.982862][T13222] CPU: 3 UID: 0 PID: 13222 Comm: syz.4.2503 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.982890][T13222] Tainted: [L]=SOFTLOCKUP [ 253.982898][T13222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.982910][T13222] Call Trace: [ 253.982916][T13222] [ 253.982924][T13222] dump_stack_lvl+0x16c/0x1f0 [ 253.982957][T13222] should_fail_ex+0x512/0x640 [ 253.982979][T13222] ? __kmalloc_cache_noprof+0x5f/0x800 [ 253.983010][T13222] should_failslab+0xc2/0x120 [ 253.983033][T13222] __kmalloc_cache_noprof+0x80/0x800 [ 253.983062][T13222] ? qfq_change_class+0xcf8/0x1da0 [ 253.983096][T13222] ? qfq_change_class+0xcf8/0x1da0 [ 253.983123][T13222] qfq_change_class+0xcf8/0x1da0 [ 253.983156][T13222] ? __pfx_qfq_change_class+0x10/0x10 [ 253.983186][T13222] ? qdisc_match_from_root+0x16f/0x260 [ 253.983214][T13222] ? __pfx_qfq_change_class+0x10/0x10 [ 253.983241][T13222] tc_ctl_tclass+0x59d/0x16c0 [ 253.983265][T13222] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 253.983283][T13222] ? __mutex_lock+0x27b/0x1ca0 [ 253.983314][T13222] ? rtnetlink_rcv_msg+0x371/0xe90 [ 253.983361][T13222] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 253.983380][T13222] rtnetlink_rcv_msg+0x3c9/0xe90 [ 253.983407][T13222] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.983440][T13222] ? ref_tracker_free+0x37c/0x830 [ 253.983466][T13222] netlink_rcv_skb+0x158/0x420 [ 253.983494][T13222] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.983521][T13222] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.983557][T13222] ? netlink_deliver_tap+0x1ae/0xd30 [ 253.983587][T13222] netlink_unicast+0x5aa/0x870 [ 253.983617][T13222] ? __pfx_netlink_unicast+0x10/0x10 [ 253.983656][T13222] netlink_sendmsg+0x8c8/0xdd0 [ 253.983689][T13222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.983749][T13222] ____sys_sendmsg+0xa5d/0xc30 [ 253.983780][T13222] ? copy_msghdr_from_user+0x10a/0x160 [ 253.983811][T13222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.983852][T13222] ___sys_sendmsg+0x134/0x1d0 [ 253.983878][T13222] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.983935][T13222] __sys_sendmsg+0x16d/0x220 [ 253.983959][T13222] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.983993][T13222] ? fput+0x70/0xf0 [ 253.984026][T13222] do_syscall_64+0xcd/0xf80 [ 253.984056][T13222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.984075][T13222] RIP: 0033:0x7fa91058f7c9 [ 253.984091][T13222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.984108][T13222] RSP: 002b:00007fa911480038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.984126][T13222] RAX: ffffffffffffffda RBX: 00007fa9107e5fa0 RCX: 00007fa91058f7c9 [ 253.984137][T13222] RDX: 00000000240000a0 RSI: 0000200000001200 RDI: 0000000000000007 [ 253.984148][T13222] RBP: 00007fa911480090 R08: 0000000000000000 R09: 0000000000000000 [ 253.984160][T13222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.984171][T13222] R13: 00007fa9107e6038 R14: 00007fa9107e5fa0 R15: 00007fff3e1a2dd8 [ 253.984198][T13222] [ 253.997409][ T6000] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 254.103428][T13221] ================================================================== [ 254.106996][T13221] BUG: KASAN: slab-use-after-free in qfq_reset_qdisc+0x323/0x420 [ 254.110281][T13221] Read of size 8 at addr ffff888055d2de50 by task syz.4.2503/13221 [ 254.115580][T13221] [ 254.116668][T13221] CPU: 0 UID: 0 PID: 13221 Comm: syz.4.2503 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.116697][T13221] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.116704][T13221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.116714][T13221] Call Trace: [ 254.116723][T13221] [ 254.116730][T13221] dump_stack_lvl+0x116/0x1f0 [ 254.116759][T13221] print_report+0xcd/0x630 [ 254.116774][T13221] ? __virt_addr_valid+0x81/0x610 [ 254.116784][T13221] ? __phys_addr+0xe8/0x180 [ 254.116794][T13221] ? qfq_reset_qdisc+0x323/0x420 [ 254.116810][T13221] kasan_report+0xe0/0x110 [ 254.116824][T13221] ? qfq_reset_qdisc+0x323/0x420 [ 254.116840][T13221] qfq_reset_qdisc+0x323/0x420 [ 254.116857][T13221] ? synchronize_rcu_expedited+0x3b9/0x460 [ 254.116872][T13221] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 254.116888][T13221] qdisc_reset+0xe0/0x630 [ 254.116901][T13221] __qdisc_destroy+0xd3/0x4a0 [ 254.116913][T13221] qdisc_put+0xab/0xe0 [ 254.116925][T13221] dev_shutdown+0x1d0/0x430 [ 254.116939][T13221] unregister_netdevice_many_notify+0xb37/0x2590 [ 254.116958][T13221] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 254.116974][T13221] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 254.116996][T13221] ? skb_queue_purge_reason+0x2c8/0x420 [ 254.117012][T13221] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 254.117028][T13221] unregister_netdevice_queue+0x305/0x3c0 [ 254.117044][T13221] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 254.117062][T13221] __tun_detach+0x119c/0x1490 [ 254.117082][T13221] ? __pfx_tun_chr_close+0x10/0x10 [ 254.117091][T13221] tun_chr_close+0xc2/0x230 [ 254.117105][T13221] __fput+0x402/0xb70 [ 254.117127][T13221] task_work_run+0x150/0x240 [ 254.117141][T13221] ? __pfx_task_work_run+0x10/0x10 [ 254.117155][T13221] ? __do_sys_close_range+0x278/0x730 [ 254.117173][T13221] exit_to_user_mode_loop+0xfb/0x540 [ 254.117190][T13221] do_syscall_64+0x4ee/0xf80 [ 254.117207][T13221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.117219][T13221] RIP: 0033:0x7fa91058f7c9 [ 254.117229][T13221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.117240][T13221] RSP: 002b:00007fff3e1a2f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 254.117250][T13221] RAX: 0000000000000000 RBX: 000000000003df8e RCX: 00007fa91058f7c9 [ 254.117257][T13221] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 254.117264][T13221] RBP: 00007fa9107e7da0 R08: 0000000000000001 R09: 0000000c3e1a322f [ 254.117273][T13221] R10: 0000001b2e820000 R11: 0000000000000246 R12: 00007fa9107e5fac [ 254.117283][T13221] R13: 00007fa9107e5fa0 R14: ffffffffffffffff R15: 00007fff3e1a3050 [ 254.117298][T13221] [ 254.117303][T13221] [ 254.228538][T13221] Allocated by task 13222: [ 254.230412][T13221] kasan_save_stack+0x33/0x60 [ 254.232349][T13221] kasan_save_track+0x14/0x30 [ 254.234262][T13221] __kasan_kmalloc+0xaa/0xb0 [ 254.236171][T13221] qfq_change_class+0x2ba/0x1da0 [ 254.238200][T13221] tc_ctl_tclass+0x59d/0x16c0 [ 254.240171][T13221] rtnetlink_rcv_msg+0x3c9/0xe90 [ 254.241849][T13221] netlink_rcv_skb+0x158/0x420 [ 254.243381][T13221] netlink_unicast+0x5aa/0x870 [ 254.245223][T13221] netlink_sendmsg+0x8c8/0xdd0 [ 254.247191][T13221] ____sys_sendmsg+0xa5d/0xc30 [ 254.249177][T13221] ___sys_sendmsg+0x134/0x1d0 [ 254.251171][T13221] __sys_sendmsg+0x16d/0x220 [ 254.253150][T13221] do_syscall_64+0xcd/0xf80 [ 254.255074][T13221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.257575][T13221] [ 254.258595][T13221] Freed by task 13222: [ 254.260354][T13221] kasan_save_stack+0x33/0x60 [ 254.262303][T13221] kasan_save_track+0x14/0x30 [ 254.263827][T13221] kasan_save_free_info+0x3b/0x60 [ 254.265438][T13221] __kasan_slab_free+0x5f/0x80 [ 254.266965][T13221] kfree+0x2f8/0x6e0 [ 254.268258][T13221] qfq_change_class+0x1576/0x1da0 [ 254.270229][T13221] tc_ctl_tclass+0x59d/0x16c0 [ 254.272260][T13221] rtnetlink_rcv_msg+0x3c9/0xe90 [ 254.274197][T13221] netlink_rcv_skb+0x158/0x420 [ 254.275692][T13221] netlink_unicast+0x5aa/0x870 [ 254.277296][T13221] netlink_sendmsg+0x8c8/0xdd0 [ 254.278834][T13221] ____sys_sendmsg+0xa5d/0xc30 [ 254.280449][T13221] ___sys_sendmsg+0x134/0x1d0 [ 254.282041][T13221] __sys_sendmsg+0x16d/0x220 [ 254.283690][T13221] do_syscall_64+0xcd/0xf80 [ 254.285187][T13221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.287022][T13221] [ 254.287816][T13221] The buggy address belongs to the object at ffff888055d2de00 [ 254.287816][T13221] which belongs to the cache kmalloc-128 of size 128 [ 254.292506][T13221] The buggy address is located 80 bytes inside of [ 254.292506][T13221] freed 128-byte region [ffff888055d2de00, ffff888055d2de80) [ 254.296726][T13221] [ 254.297538][T13221] The buggy address belongs to the physical page: [ 254.299799][T13221] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55d2d [ 254.303451][T13221] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 254.306635][T13221] page_type: f5(slab) [ 254.308430][T13221] raw: 00fff00000000000 ffff88801b442a00 ffffea0001556c80 dead000000000003 [ 254.311514][T13221] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 254.314332][T13221] page dumped because: kasan: bad access detected [ 254.316362][T13221] page_owner tracks the page as allocated [ 254.318277][T13221] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6288, tgid 6288 (syz-executor), ts 72406428930, free_ts 71284247604 [ 254.325162][T13221] post_alloc_hook+0x1af/0x220 [ 254.326700][T13221] get_page_from_freelist+0xd0b/0x31a0 [ 254.328455][T13221] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 254.330444][T13221] alloc_pages_mpol+0x1fb/0x550 [ 254.332036][T13221] new_slab+0x2c3/0x430 [ 254.333368][T13221] ___slab_alloc+0xe18/0x1c90 [ 254.334949][T13221] __slab_alloc.constprop.0+0x63/0x110 [ 254.336860][T13221] __kmalloc_cache_noprof+0x485/0x800 [ 254.338525][T13221] __hw_addr_add_ex+0x3c9/0x7c0 [ 254.340147][T13221] dev_mc_add+0xb6/0x110 [ 254.341503][T13221] igmp6_group_added+0x3e4/0x4c0 [ 254.343081][T13221] __ipv6_dev_mc_inc+0x6f9/0xbc0 [ 254.344779][T13221] ipv6_add_dev+0xbc6/0x15f0 [ 254.346257][T13221] addrconf_notify+0x53e/0x19f0 [ 254.347820][T13221] notifier_call_chain+0xbc/0x3e0 [ 254.349465][T13221] call_netdevice_notifiers_info+0xbe/0x110 [ 254.351335][T13221] page last free pid 34 tgid 34 stack trace: [ 254.353244][T13221] __free_frozen_pages+0x7df/0x1170 [ 254.355003][T13221] kasan_depopulate_vmalloc_pte+0x5b/0x80 [ 254.356816][T13221] __apply_to_page_range+0xac1/0x13f0 [ 254.358525][T13221] __kasan_release_vmalloc+0xd1/0xe0 [ 254.360788][T13221] purge_vmap_node+0x1ba/0xad0 [ 254.362832][T13221] __purge_vmap_area_lazy+0x9d2/0xc00 [ 254.365141][T13221] drain_vmap_area_work+0x27/0x40 [ 254.367301][T13221] process_one_work+0x9ba/0x1b20 [ 254.369373][T13221] worker_thread+0x6c8/0xf10 [ 254.371382][T13221] kthread+0x3c5/0x780 [ 254.373187][T13221] ret_from_fork+0x983/0xb10 [ 254.375178][T13221] ret_from_fork_asm+0x1a/0x30 [ 254.377255][T13221] [ 254.378286][T13221] Memory state around the buggy address: [ 254.380613][T13221] ffff888055d2dd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 254.384001][T13221] ffff888055d2dd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.387124][T13221] >ffff888055d2de00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.390524][T13221] ^ [ 254.393353][T13221] ffff888055d2de80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.396558][T13221] ffff888055d2df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.399734][T13221] ================================================================== [ 254.407410][T13221] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.410420][T13221] CPU: 1 UID: 0 PID: 13221 Comm: syz.4.2503 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.414833][T13221] Tainted: [L]=SOFTLOCKUP [ 254.416626][T13221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.420977][T13221] Call Trace: [ 254.422381][T13221] [ 254.423624][T13221] dump_stack_lvl+0x3d/0x1f0 [ 254.425574][T13221] vpanic+0x640/0x6f0 [ 254.427250][T13221] panic+0xca/0xd0 [ 254.428836][T13221] ? __pfx_panic+0x10/0x10 [ 254.430712][T13221] ? qfq_reset_qdisc+0x323/0x420 [ 254.432747][T13221] ? preempt_schedule_common+0x44/0xc0 [ 254.434998][T13221] ? preempt_schedule_thunk+0x16/0x30 [ 254.437219][T13221] ? check_panic_on_warn+0x1f/0xb0 [ 254.439347][T13221] check_panic_on_warn+0xab/0xb0 [ 254.441406][T13221] end_report+0x107/0x160 [ 254.443205][T13221] kasan_report+0xee/0x110 [ 254.445073][T13221] ? qfq_reset_qdisc+0x323/0x420 [ 254.447128][T13221] qfq_reset_qdisc+0x323/0x420 [ 254.449125][T13221] ? synchronize_rcu_expedited+0x3b9/0x460 [ 254.451578][T13221] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 254.453776][T13221] qdisc_reset+0xe0/0x630 [ 254.455609][T13221] __qdisc_destroy+0xd3/0x4a0 [ 254.457567][T13221] qdisc_put+0xab/0xe0 [ 254.459263][T13221] dev_shutdown+0x1d0/0x430 [ 254.461161][T13221] unregister_netdevice_many_notify+0xb37/0x2590 [ 254.463770][T13221] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 254.466519][T13221] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 254.468958][T13221] ? skb_queue_purge_reason+0x2c8/0x420 [ 254.471265][T13221] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 254.473715][T13221] unregister_netdevice_queue+0x305/0x3c0 [ 254.476044][T13221] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 254.478597][T13221] __tun_detach+0x119c/0x1490 [ 254.480577][T13221] ? __pfx_tun_chr_close+0x10/0x10 [ 254.482704][T13221] tun_chr_close+0xc2/0x230 [ 254.484591][T13221] __fput+0x402/0xb70 [ 254.486273][T13221] task_work_run+0x150/0x240 [ 254.488199][T13221] ? __pfx_task_work_run+0x10/0x10 [ 254.490329][T13221] ? __do_sys_close_range+0x278/0x730 [ 254.492578][T13221] exit_to_user_mode_loop+0xfb/0x540 [ 254.494775][T13221] do_syscall_64+0x4ee/0xf80 [ 254.496710][T13221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.499115][T13221] RIP: 0033:0x7fa91058f7c9 [ 254.500954][T13221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.508683][T13221] RSP: 002b:00007fff3e1a2f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 254.512109][T13221] RAX: 0000000000000000 RBX: 000000000003df8e RCX: 00007fa91058f7c9 [ 254.515326][T13221] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 254.518550][T13221] RBP: 00007fa9107e7da0 R08: 0000000000000001 R09: 0000000c3e1a322f [ 254.521776][T13221] R10: 0000001b2e820000 R11: 0000000000000246 R12: 00007fa9107e5fac [ 254.524995][T13221] R13: 00007fa9107e5fa0 R14: ffffffffffffffff R15: 00007fff3e1a3050 [ 254.528224][T13221] [ 254.530407][T13221] Kernel Offset: disabled [ 254.532251][T13221] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:22:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853176c5 RDI=ffffffff9aed9aa0 RBP=ffffffff9aed9a60 RSP=ffffc9000c67f440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9aed9a60 R15=ffffffff85317660 RIP=ffffffff853176ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556eb64500 ffffffff 00c00000 GS =0000 ffff8880d6909000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f54724aef98 CR3=000000004f3ff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0953c15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0953c1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0953c15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0953c1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0953c150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0953c151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e987f994a1 ae74f14fe56c652a 650faf0983a2ab03 8d7a647817af001d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f095491d100 00007f0953dba460 00007f0953db0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0953dba4b8 00007f0953dba4b0 00007f0953dba4a8 00007f0953dba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000083d849 RBX=0000000000000001 RCX=ffffffff8b7706d9 RDX=0000000000000000 RSI=ffffffff8dac204b RDI=ffffffff8bf24280 RBP=ffffed1003bda498 RSP=ffffc90000177de8 R8 =0000000000000001 R9 =ffffed100d4a673d R10=ffff88806a5339eb R11=ffff88801ded2ff0 R12=0000000000000001 R13=ffff88801ded24c0 R14=ffffffff9087f7d0 R15=0000000000000000 RIP=ffffffff8b76edcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a09000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c456408 CR3=00000000278bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000009cf 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c0010000fffffff ffffff0400100006 0102c01000000190 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003800401000000 080606015cd20008 0003e00300100003 d00300100003c003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02100003b00304c4 1000019003010000 0000000000000003 0a00000000200a00 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100100000 00144a0804800304 8004018003018004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03a0030008000390 030fffffffffffff 0403800318080006 1000201000060071 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020406048803 0007002808080480 0304800433800333 800403a003000800 ZMM25=258e28ee258e28ee 258e28ee258e28ee 258e28ee258e28ee 258e28ee258e28ee 258e28ee258e28ee 258e28ee258e28ee 258e28ee258e28ee 258e28ee258e28ee ZMM26=2c0cbc792c0cbc79 2c0cbc792c0cbc79 2c0cbc792c0cbc79 2c0cbc792c0cbc79 2c0cbc792c0cbc79 2c0cbc792c0cbc79 2c0cbc792c0cbc79 2c0cbc792c0cbc79 ZMM27=6e84c98c6e84c98c 6e84c98c6e84c98c 6e84c98c6e84c98c 6e84c98c6e84c98c 6e84c98c6e84c98c 6e84c98c6e84c98c 6e84c98c6e84c98c 6e84c98c6e84c98c ZMM28=000000d0000000cf 000000ce000000cd 000000cc000000cb 000000ca000000c9 000000c8000000c7 000000c6000000c5 000000c4000000c3 000000c2000000c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=540c0000540c0000 540c0000540c0000 540c0000540c0000 540c0000540c0000 540c0000540c0000 540c0000540c0000 540c0000540c0000 540c0000540c0000 info registers vcpu 2 CPU#2 RAX=00000000002608d3 RBX=0000000000000002 RCX=ffffffff8b7706d9 RDX=0000000000000000 RSI=ffffffff8dac204b RDI=ffffffff8bf24280 RBP=ffffed1003bda930 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=ffff88801ded54b0 R12=0000000000000002 R13=ffff88801ded4980 R14=ffffffff9087f7d0 R15=0000000000000000 RIP=ffffffff8b76edcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b09000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f09519b1f98 CR3=0000000031fd3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb0dd8b90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff699015050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff69901505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff699015057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff69901506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6990150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6990151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001f738b RBX=0000000000000003 RCX=ffffffff8b7706d9 RDX=0000000000000000 RSI=ffffffff8dac204b RDI=ffffffff8bf24280 RBP=ffffed1003bdf000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=ffff88801def8b30 R12=0000000000000003 R13=ffff88801def8000 R14=ffffffff9087f7d0 R15=0000000000000000 RIP=ffffffff8b76edcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c09000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f09519b2d58 CR3=00000000364a7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005583ad252600 00005583ad252600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9a4d8650 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572662d72657466 612d6573752d6261 6c73203a4e415341 4b203a475542205d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203861203163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000