last executing test programs: 7m48.507305727s ago: executing program 0 (id=74): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r2, 0x80) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 7m48.457992298s ago: executing program 0 (id=76): r0 = socket(0x2a, 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "9123dbd4aea4ad9484b2cbf5fe07000000000000e2ca7f836662bdd2be1f755f"}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x20, 0x80, 0x6, 0x5, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x0, 0xd, 0x29, 0x0, @multicast2, @loopback}}}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2a}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0xd0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x0, @vbi={0x3, 0xd, 0xf2, 0x4745504d, [0xfffffffd, 0x6], [0x3, 0x2], 0x108}}) 7m48.408032834s ago: executing program 0 (id=78): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$CDROMRESET(r0, 0x5312) 7m48.374524418s ago: executing program 0 (id=80): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00') sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), r4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$CDROM_MEDIA_CHANGED(r7, 0x5325, 0x800) 7m47.454047392s ago: executing program 0 (id=95): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 7m47.238164527s ago: executing program 0 (id=103): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}], [], 0x6b}}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c00198008000100"], 0x44}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x7, 0x7, 0x648a, 0x9, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x66, 0x0, 0xf1, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0xb, 0x6d, [@empty, @rand_addr=0x64010101]}, @noop, @lsrr={0x83, 0x17, 0x51, [@multicast1, @multicast2, @broadcast, @local, @multicast2]}]}}}}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000305000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xde, 0x2, 0x26, @loopback, @private0, 0x10, 0x40, 0x2, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x8, 0x3af, 0x7, {{0x1f, 0x4, 0x0, 0x3f, 0x7c, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @local, {[@generic={0x86, 0xf, "a2a2c75f0841f83e8e8d8b2e50"}, @timestamp={0x44, 0x2c, 0x7f, 0x0, 0x8, [0x7, 0x5, 0x3, 0xdf6c, 0x4, 0x5, 0xfffffffb, 0x5, 0x6, 0x0]}, @timestamp={0x44, 0x8, 0xa4, 0x0, 0xb, [0x150]}, @timestamp={0x44, 0x14, 0x7d, 0x0, 0xd, [0x0, 0x0, 0xb, 0x7]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xa7, 0x0, 0x0, [0x1]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xa880}, 0x4040010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7, 0x20, 0x57dc, 0xf99, {{0xc, 0x4, 0x3, 0x3c, 0x30, 0x67, 0x0, 0x5, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xda, [@multicast2]}, @end, @generic={0x89, 0x7, "9c38972507"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)={0xc4, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40004}, 0x200000c0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7m47.178364288s ago: executing program 32 (id=103): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}], [], 0x6b}}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c00198008000100"], 0x44}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x7, 0x7, 0x648a, 0x9, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x66, 0x0, 0xf1, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0xb, 0x6d, [@empty, @rand_addr=0x64010101]}, @noop, @lsrr={0x83, 0x17, 0x51, [@multicast1, @multicast2, @broadcast, @local, @multicast2]}]}}}}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000305000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xde, 0x2, 0x26, @loopback, @private0, 0x10, 0x40, 0x2, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x8, 0x3af, 0x7, {{0x1f, 0x4, 0x0, 0x3f, 0x7c, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @local, {[@generic={0x86, 0xf, "a2a2c75f0841f83e8e8d8b2e50"}, @timestamp={0x44, 0x2c, 0x7f, 0x0, 0x8, [0x7, 0x5, 0x3, 0xdf6c, 0x4, 0x5, 0xfffffffb, 0x5, 0x6, 0x0]}, @timestamp={0x44, 0x8, 0xa4, 0x0, 0xb, [0x150]}, @timestamp={0x44, 0x14, 0x7d, 0x0, 0xd, [0x0, 0x0, 0xb, 0x7]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xa7, 0x0, 0x0, [0x1]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xa880}, 0x4040010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7, 0x20, 0x57dc, 0xf99, {{0xc, 0x4, 0x3, 0x3c, 0x30, 0x67, 0x0, 0x5, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xda, [@multicast2]}, @end, @generic={0x89, 0x7, "9c38972507"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)={0xc4, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40004}, 0x200000c0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7m12.137658637s ago: executing program 2 (id=869): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fadvise64(r0, 0x7, 0x9, 0x0) (async) fadvise64(r0, 0x7, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) 7m12.137205394s ago: executing program 2 (id=871): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4008094) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, 0x0, &(0x7f0000000640)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000ffffff"}) 7m12.055976551s ago: executing program 2 (id=872): syz_open_dev$audion(&(0x7f0000000080), 0x8000000000000000, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0xfffffffd, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 7m11.197552464s ago: executing program 2 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0002000000000000feffffffffffffff040000000000000003000000000000000080020000000000030000000000000009000000010001000600000000000000090000000000000004000000000000001000000000000000060000000000000000000000000000000600000000004c110600000000800000de000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0180000001000080000000000100000000000000010000000000000001000000970154320000000000000000040000000000000000000000000000000400000000000000ff03000000000000bd000000f4000000040000000000000007000000000000000c00000000000000f9ffffffffffffff0000000000000000ffffff7f0000000008000000060800000500000000a0000078bcc133", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="ff01000000000000000000000400000000000000e60000000000000014000000070000001573109414db5495980b30dc51056b300ee996f20000000004000000000000000300000000000000ff07000000000000ffffffffffffff7fff0f0000ff0700000300000000000000090000000000000003000000000000000600000000000000050000000000000002000000000000000200000006000000070000000060000004000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="6800000003000000000000000000000000000000070000000000000001"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000140)=""/125, 0x5f) socket$kcm(0xa, 0x922000000003, 0x11) r5 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r6 = dup(r5) syz_clone(0xd006391, 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x0) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) (async) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0002000000000000feffffffffffffff040000000000000003000000000000000080020000000000030000000000000009000000010001000600000000000000090000000000000004000000000000001000000000000000060000000000000000000000000000000600000000004c110600000000800000de000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0180000001000080000000000100000000000000010000000000000001000000970154320000000000000000040000000000000000000000000000000400000000000000ff03000000000000bd000000f4000000040000000000000007000000000000000c00000000000000f9ffffffffffffff0000000000000000ffffff7f0000000008000000060800000500000000a0000078bcc133", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="ff01000000000000000000000400000000000000e60000000000000014000000070000001573109414db5495980b30dc51056b300ee996f20000000004000000000000000300000000000000ff07000000000000ffffffffffffff7fff0f0000ff0700000300000000000000090000000000000003000000000000000600000000000000050000000000000002000000000000000200000006000000070000000060000004000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="6800000003000000000000000000000000000000070000000000000001"], 0x0, 0x0, 0x0}) (async) getdents64(r4, &(0x7f0000000140)=""/125, 0x5f) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) (async) dup(r5) (async) syz_clone(0xd006391, 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x0) (async) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) (async) 7m10.98545194s ago: executing program 2 (id=899): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf00ffff000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) 7m10.657757256s ago: executing program 2 (id=900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000240)=0x4) 7m10.595292539s ago: executing program 33 (id=900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000240)=0x4) 5m11.330955162s ago: executing program 1 (id=3672): r0 = getpgrp(0xffffffffffffffff) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) socket(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x40004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x91, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x248, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x1, 0x1, 0x84, 0x800, 0x165, 0x13, 0x5, 0x3ff, 0x80, 0x8}, {0xfffffffffffffff3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x101, 0x8, 0x3, 0xb1, 'syz0\x00', {0x105}}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x44, 0xb2}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r5 = fcntl$dupfd(r1, 0x0, r1) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x8000}, 0xc905) sendmsg$inet6(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f000034c000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/191, 0xbf, 0x1, 0x0}, &(0x7f0000000440)=0x40) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1a0, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe08}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa970}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa20}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "3ed7ce0e140e51f4ca0c84f6659aafe811d9c6fdf66124794c8829725580a8384d014012d527f3dc3fdb932f3b4ac15c8d89d63be897a6b164a7ab5c8cf57676023ed6daeea093a82150b18c003ad0f329c1551a0550fee908c694eef9bd728c62c60440dd2e2bf51442038106e172b046eb2acf78f00e568739ac9a0d47f0be98f9345743bf935c43c77eeeb645bbd93114cc19bbe3e27d703d5a113c22f26cedbb62d6177a3c9c7f2c3ecc5abcc137b65c7032611a56b7c0f5a57469797eaf662cc4830d2de3f0c5610fe01d95c1de0a5f06e0a24bb7c63f5f842eafaaa9cf821bb4e8b059a2861cab11303134f42b03f3b4c449"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}]}, 0x1a0}}, 0x40005) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x5530a1d7d0a33949, 0x0) ioctl$BLKRESETZONE(r7, 0x40101283, &(0x7f0000000040)={0x7, 0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4380, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 5m10.284755469s ago: executing program 1 (id=3694): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r0 = openat$kvm(0xffffff9c, 0x0, 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffa}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x400003, 0x4002004c2, 0x100000007ff, 0x3ff, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8d7d, 0x8b], 0x25000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m10.283919734s ago: executing program 1 (id=3696): mkdir(0x0, 0x100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f01c90f01df66660f38821067660fc7340f061471660f38817700b95408000065f3dbe43e2e3e0f01c166bad004ed", 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000003c0)={0x3, 0x0, [{0x572, 0x0, 0xfffffffffffffff9}, {0x8f1, 0x0, 0x96}, {0x4000053c, 0x0, 0x7}]}) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000340)={0x74, 0x0, 0x62}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 5m10.019199579s ago: executing program 1 (id=3701): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x10, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="03021200de09b22f0b7d27508728"], 0xe, 0x2) ioctl$BSG_IO(0xffffffffffffffff, 0x2285, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x2b, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x30385056}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048900}, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000180), 0x3) read$FUSE(r8, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES16=r9, @ANYRESDEC=r6, @ANYRESDEC=r6, @ANYRESDEC=r5, @ANYRES16, @ANYRESHEX=r9, @ANYBLOB="738c02c8af398b69822c4aa8e508bccc589984647239adc3b687d9fa647b9868bf073f2cb39befa38d7473c3270dc273786a6eeead2dad21e56aa4c44f1b01f4bf6cc9ad1b6a136bd9668780e5cd312dc77af829a176f1d22aee486cf4911aca9e3ead99fbab2163a178a3ad5cf94b25e897ef3ed62b384ae23e689c2e", @ANYRES8=r10], 0x32600) 5m9.645958059s ago: executing program 1 (id=3707): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f023f01be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 5m9.087288007s ago: executing program 1 (id=3719): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400000000f0ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x0) 5m9.008749595s ago: executing program 34 (id=3719): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400000000f0ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x0) 5m4.767307184s ago: executing program 4 (id=3768): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 5m4.690478084s ago: executing program 4 (id=3769): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x80000001}, 0x8) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a0f4bdf7ffffffffffffff00"}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x91ea6c1af182516) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x190) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 5m4.462287984s ago: executing program 4 (id=3772): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) 5m4.327383789s ago: executing program 4 (id=3775): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x10, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="03021200de09b22f0b7d27508728"], 0xe, 0x2) ioctl$BSG_IO(0xffffffffffffffff, 0x2285, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x2b, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x30385056}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048900}, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020}, 0x2020) 5m3.996808609s ago: executing program 4 (id=3780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\t\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x10, 0x1, 0xa6a, 0x0, {{0x8, 0x4, 0x2, 0x37, 0x20, 0x64, 0x0, 0x9, 0x0, 0x0, @broadcast, @rand_addr=0x64010102, {[@generic={0xc3, 0xa, "a4e8e083124ba37e"}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xe}, {0x1, 0x7}, {0x3}}, [{0x8, 0xb, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c040}, 0x4050) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r1}, 0x38) 5m1.580621352s ago: executing program 4 (id=3804): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x188}, 0x1, 0x0, 0xf400, 0x404c010}, 0x0) 5m1.515984214s ago: executing program 35 (id=3804): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x188}, 0x1, 0x0, 0xf400, 0x404c010}, 0x0) 4m51.155763939s ago: executing program 6 (id=4006): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 4m50.253566881s ago: executing program 6 (id=4025): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 4m50.16059273s ago: executing program 6 (id=4028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028110081e949b93897bc3b0000000000007d01ff0200"/53], 0xfdef) 4m50.034875291s ago: executing program 6 (id=4035): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x10, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="03021200de09b22f0b7d27508728"], 0xe, 0x2) ioctl$BSG_IO(0xffffffffffffffff, 0x2285, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x2b, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x30385056}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048900}, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020}, 0x2020) 4m49.880898732s ago: executing program 6 (id=4037): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000019240), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[]) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xeef, {0x4, 0x3, 0x0, 0x7e34, 0xf, 0x0, {0xffffffffffffffff, 0xe, 0x0, 0x1, 0x9, 0x1, 0x1000002, 0x2, 0x0, 0xa000, 0xf8, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000019280), &(0x7f00000192c0)=0x0, &(0x7f0000019300)) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000019340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, r5}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, 0x0, 0x0, 0x1000000000) bind$inet(r2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0xfeffffffffffffff, 0x0, 0x240008c4}, 0x4054) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f000000afc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="427c8be605be178d546f4f211bd6bc33c15a888d73ea0e7e72cd541d7b508906b720c6d1cd0e18f1f6657971188163dba86b4ac14de16bbd7079ff498fec181a237d86a3a0f303bd4e9326cb044c3f6ce1aa54772915904bbfffa2238cc7928894cd9f70486d55edbec1b1e5d10be74a52f18441204fcfa99002076c145d8d3ed3b38c018b520c5bda198690c6b6f93d89", 0x91}, {&(0x7f00000004c0)="65fb1da725954d9ae628986f6c08dcaa6cc539d24e5df92b2555534facce96ddcc2bb551abc09cd231493f3926981f6ff28d3a8828ea7bb095e6c844bca702ca298cbc087ba0d1c22c84c54af30ceba0158f809a71a7486f13d3575e0fcff801d27887e8c6bfbe6ed188c512d8608bfce00999cf2d88291a3c4519aeb2d45f3a8e44ad0258237f78d9a940c5bd6e1059a4401a191023f780ad7587c4c62559ce59a4db374b50ed6df30faea6008da8aec03ff320bac7dfe7de1817dfdb8438beac9d140665c8c560a22a572c48346f45804539ef6dc724fcdb6b6d68ac93674de4d8ec3b8929840fad69bd968f1236fce7e80c378b8ebd498424946db0d4db78b0315f14efbb713d792c68a5b9c4d35cbc1c5ecba8b5382e34127040d40722b40de5f9dec6c6248f8e2338cc", 0x12c}], 0x2}}], 0x1, 0xc000080) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4m49.423454642s ago: executing program 6 (id=4038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8c, 0x0, 0xfffffffffffffff9}]}) 4m49.358697779s ago: executing program 36 (id=4038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8c, 0x0, 0xfffffffffffffff9}]}) 4m48.574683082s ago: executing program 5 (id=4058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e89", 0x5}], 0x1, 0x0, 0x0, 0x8005}, 0x34000041) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc01, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 4m48.482407823s ago: executing program 5 (id=4060): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$tun(r0, 0x0, 0x70f) 4m48.481769518s ago: executing program 5 (id=4062): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x10) madvise(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100739f00000000000000000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001496df48fffb32236b3b36949600228dc02a881383ae2901971cce203d9f4f96552b3de031c9d652a0ac2efef41922cdd7c810fb70c40dd9fce9715e49cd2b881872d228379f9507c95c11c1f368c0c46d5a21d946d4bd47a5e26d9b8babc294d6e14335110a59ba8fc72238e3c8ef925d7a3"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$unix(r9, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="f0", 0x1}], 0x1, 0x0, 0x0, 0x20008848}}], 0x1, 0xc000) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x3fff57039d436b9}, 0x8000840) sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x464, 0x20, 0x70bd25, 0x25dfdbfb, "61da3667bca4a5656f6e498fb1005924ef1b3a40aaa702bd21c750d98e132efc", [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8804) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffb800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) ptrace$setopts(0x4206, r5, 0x0, 0x300024) write(r2, &(0x7f0000000340)="07000000010000", 0x7) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000040), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x320001}, 0xc, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x840}, 0x40041) 4m48.064070576s ago: executing program 5 (id=4067): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x10, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="03021200de09b22f0b7d27508728"], 0xe, 0x2) ioctl$BSG_IO(0xffffffffffffffff, 0x2285, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x2b, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x30385056}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048900}, 0x0) bind$inet(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020}, 0x2020) 4m47.957764001s ago: executing program 5 (id=4071): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x7000004, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000005c0)={0x2f, 0x1, 0x3, "1c13ebdaf2f20d55806ba058e8edb1439bfcc1000000efffffffffffffff00", 0x31424752}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r6, 0x0, 0x6}, 0x18) r7 = socket(0x1e, 0x2, 0x2000001) sendmmsg$inet_sctp(r7, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000140)={r9, 0x1}, 0x8) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4, @ANYRES64, @ANYRES32=r5, @ANYRES64=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x894) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r11, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r11, 0xa9525000) chmod(&(0x7f0000000040)='.\x00', 0x35e) r12 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r12, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000080)="05031600d3fc14000000470800d5e263dd1daa9a2ca990b78939f29dbdf84567f7bae903f8c2e9c4011ec96067ce0382d40623cc4f58122f41c649e3d3c4404e13e8aa3b0ea29a", 0x47, 0x95d4d0a719b8b3bf, &(0x7f0000000240)={0x11, 0x2, r10, 0x1, 0x8, 0x6, @local}, 0x14) syz_open_dev$media(&(0x7f0000000000), 0x800, 0x20000) 4m47.701911966s ago: executing program 5 (id=4072): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 4m47.584971653s ago: executing program 37 (id=4072): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 9.796422873s ago: executing program 3 (id=7192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newnexthop={0x20, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 9.743507601s ago: executing program 3 (id=7195): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e000001"], 0x114}], 0x1}, 0x40000) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0xffff776b}, {{0x0, 0x0, 0x0}, 0x606}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x20, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000070a010100000000000000000200000009000200faff7a32000000000900010073797a3000"], 0x2c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 7.605613846s ago: executing program 3 (id=7204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 7.604954118s ago: executing program 3 (id=7206): r0 = socket(0x15, 0x1, 0x85b) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) 7.540709241s ago: executing program 3 (id=7208): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x1, @loopback, 0x7}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xa5}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x101}], 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0xa, &(0x7f00000003c0)=[{0x8, 0x5, 0x0, 0x7}, {0x7fff, 0x9, 0x0, 0x5}, {0x4, 0x2, 0x6, 0x10}, {0x7, 0x6, 0x7, 0x1c3e}, {0xc71, 0xe, 0x1, 0x5}, {0x1000, 0xbc, 0x9, 0xe2d}, {0x2, 0xff, 0x48, 0x8}, {0x9, 0x80, 0x0, 0x3}, {0x2, 0x4, 0xa, 0x800}, {0xbc5, 0x8, 0xb, 0xffffffff}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}], 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) 5.378572293s ago: executing program 3 (id=7220): socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.752671253s ago: executing program 7 (id=7236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f00000004c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x100000000000000, 0x0}) 2.748042307s ago: executing program 7 (id=7237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xe9) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100), &(0x7f0000000080)=0x6c) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000020000000000000000000000085000000a00000005f00000000000000128a1f0233dfde748185095e5a56b6250430c52bac303c78b11cd7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0xdc, 0x16, 0xa, 0xc00, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'team0\x00'}]}]}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) sendto(r2, &(0x7f0000000100)="e5554893842de6666449abf1ac1fd79fe0f1635965d486e31b1cb76c0b11f2060e27a8ee688b50e1be97c695a574c8061278bb259aa858e4e82c239b49fee80a04a37232ac8688045a72177be8712dd1346f49b89bf994d561b0d2db0dfc9f8fbda6659b912b403859762a14d625527b6a0f", 0x72, 0x4004, &(0x7f0000000380)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) 2.610530822s ago: executing program 9 (id=7238): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x801, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 2.610313696s ago: executing program 7 (id=7239): socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.609825733s ago: executing program 9 (id=7240): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/50, 0x32) getdents(r1, 0x0, 0xbb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x44, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x84) 2.535492088s ago: executing program 7 (id=7241): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x1, @loopback, 0x7}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xa5}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x101}], 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0xa, &(0x7f00000003c0)=[{0x8, 0x5, 0x0, 0x7}, {0x7fff, 0x9, 0x0, 0x5}, {0x4, 0x2, 0x6, 0x10}, {0x7, 0x6, 0x7, 0x1c3e}, {0xc71, 0xe, 0x1, 0x5}, {0x1000, 0xbc, 0x9, 0xe2d}, {0x2, 0xff, 0x48, 0x8}, {0x9, 0x80, 0x0, 0x3}, {0x2, 0x4, 0xa, 0x800}, {0xbc5, 0x8, 0xb, 0xffffffff}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2e, 0x0, @void}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}], 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) 2.500070448s ago: executing program 9 (id=7242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000000"], 0x14}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 801.768781ms ago: executing program 8 (id=7245): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 801.504515ms ago: executing program 8 (id=7246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x2, @local, 0x8}}, 0x0, 0x0, 0x36, 0x0, "09cab2886a7ab4f6c4796e4db1d5c4db66fac7a2915985eb70a21ef90e0d5cfaed52ced0469a394f45f9df79db718e84fd1081625fa9df4fde0673c1fc1620b37c672aae05ad18231f8eb4b2cf4f4ddb"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0xa, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 695.921697ms ago: executing program 8 (id=7247): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) io_setup(0x8, &(0x7f0000004200)) io_setup(0x3, &(0x7f0000000240)) io_setup(0x3083, &(0x7f0000000000)) io_setup(0xa, &(0x7f0000000040)) io_setup(0x8, &(0x7f00000001c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd21, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004) 545.960091ms ago: executing program 8 (id=7248): socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 545.452352ms ago: executing program 8 (id=7249): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x801, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 95.536424ms ago: executing program 8 (id=7250): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="4400000010000d0425bd7000fcdbff2500000000", @ANYRES64=r0, @ANYBLOB="1000000000006b00240012800b0001ee617269646765000014000280080002000600000005"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x2, 0x1, &(0x7f0000000500)=""/190, &(0x7f0000000340)=""/141, &(0x7f00000014c0)=""/4096, 0x3000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r3, 0x0, 0xffffffffffffffff}) close_range(r2, r2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r5, r4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r9, @ANYBLOB="56060900000000001c00128009fa0100626f6e64000000000c00028008000400888c0000"], 0x3c}, 0x1, 0x0, 0x0, 0xe90}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r13], 0x54}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}], 0x2c) r14 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 94.572244ms ago: executing program 9 (id=7251): r0 = socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xffa6}], 0x1}, 0xa6}], 0x1, 0x4008440) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000a80)={'wg2\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="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", 0xfb}, {&(0x7f00000002c0)="a8e44c61c7f168691ad15db4516378249f0ab8fa4c822bc4d33b2f847d40a1d5327ea4c4ddf8f5e1d76eb55fb798961efeffc8e2311024be212be8710718664f25b0e2bac997c8a87e28638705aefaf68020d126ccead6c502a93877492e118b5b526595718ddcd12190f3fdbd114af8a7312239c08616e9bdbeccb03f1f5c", 0x7f}, {&(0x7f0000000140)="a70a5c528f3f7d2e715a8aa9e18c5bab3426ae9789057837e34a3a69a15e9a0036ab7ab596c2881032d8d343940c075cba199cb2", 0x34}, {&(0x7f0000000340)="056b5870d9e7288cbfa6f6983815b672231295af69b0041905569b70428a846f86c8e7d1ced38e089c24a8320d9f1eb132fb8c17e17d5b78b9525f7a03357f57be3d13fe7a6ced205e21c2429b5afe252462f1d6262c67982145ccada8e64c4eda067650f63ec38a833cf2ca44", 0x6d}, {&(0x7f00000003c0)="70562cdd1880b81c284c6b869b84ad7edc93328b2e9062aeadfd2744043971ffc36efaa86c7b82bc26c6dea2fb8d5fc9614a", 0x32}, {0x0}, {&(0x7f0000000500)="e305f93f74bd316765ff7799c1e8a3380ae83543131b35d1ec99c63efbe09e345c2dad0885947ceb246709888ecf0a65a83027159cfa36fbfc6faaf1fc1a03c42ecbfd1467a7c0681b4baaf4b3e7a7b5ce9e829d5615a47c58e796f4e5ee001ebdffca15cfc04047fc6787a4f6d0f93471edd69585adad3220181d09ad632507ec1b4a2923a428da04f777b5872ba867", 0x90}], 0x7, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf86}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0x90}}, {{&(0x7f0000000680)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)="1e0df00fab269e7bec64576f43cca3085ea727c3c8463c84688d93461dc45bf366fa41368c9f58c7580f3b941f87a18d4bc752b0c16096b1a4349d064e8fdad19754", 0x42}], 0x2}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000900)="8981973a9c5a80909edfabc0e48446acd53536b557b482369d659238f9857fab9cbb4058e5f69f2229f27f2878854398157b4f6b5434aa32b42984a6062b05e4bd38ea27721e806dc5bd3b3bc303232e6546f15e59fed2386d525b0a122416c8b5e0adbeb6d57c04b248b58cf5e034ce65665b22d833f8e8c994aae8f412497ab49780b2ab4207bc917e72da40e36835251fbe6e3e3623177c379630f7f29f654580846d8f289c1beec2701e196e540d96eed7b6c649973aa45fc8", 0xbb}, {&(0x7f00000009c0)="f0a25c637f04dd44b7042a", 0xb}, {&(0x7f0000001900)="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", 0x1000}], 0x3, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @private=0xa010100}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xf4, [@multicast1]}, @cipso={0x86, 0x30, 0x3, [{0x1, 0x10, "8fb7fc1dfeb2328c74f8ffcfc870"}, {0x5, 0xc, "2bed2acb5ced22bbf235"}, {0x1, 0xe, "4dddc9795a3b49e2bf1cfbba"}]}, @lsrr={0x83, 0x13, 0xe5, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @end, @timestamp_prespec={0x44, 0x34, 0x7d, 0x3, 0x7, [{@rand_addr=0x64010100, 0xfffffffa}, {@broadcast, 0x1ff}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@broadcast, 0x35fd}, {@local, 0x9}]}, @timestamp={0x44, 0x20, 0x94, 0x0, 0x9, [0x7f000000, 0x120, 0x101, 0x7fffffff, 0x8, 0x7ff, 0x3]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x14, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x7f}, {@rand_addr=0x64010101, 0xfffffff9}, {@local, 0x34}, {@rand_addr=0x64010100, 0x3}, {@multicast1, 0x9bd}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x1d8e}, {@private=0xa010100, 0x5}, {@private=0xa010101, 0x2}]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x1a8}}, {{&(0x7f0000000c80)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000cc0)="8e75e43b5053a6c8e8", 0x9}, {&(0x7f0000000d00)="0a3d03ec944f1a500f792883ebe5a8e0e9d02fc4d8af28cc7390c123d5d9fd530a8785678725f23604102f2afd85099d4052f09a4652c94bde8014aefbb1", 0x3e}, {&(0x7f0000000d80)="6718d5eb3364b9525ed7fa925a894f3ef58357d76e20313e6eadd0f152b0", 0x1e}, {&(0x7f0000000dc0)='[H[0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 118.76µs ago: executing program 9 (id=7254): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000004c0)="f893e287f42ebb6b714150d4a9dd691bfa278d1ef3358e858449a99d574e6c11acdfcaea5dd6094285e779922c48ee1d79509cbac285f467eaf1d30e836c130716adceaf246d11c101b9a7f3ee86b9d53f28a8ae9dc007b70d669a310fb79bb048d19fbb42fbf6e26351926b9bd86a23e1824e6d1ee6250588a4e5e1dfa2bde7f7f669a878efdd9eb5c86e828367e156366372701f47face819d8aa3de0262e1668f90aecf5ad271a6b6d462459b9fc845bac76998c2090c6d9bfd7c29a8a7a70f2ce79ab928bb4172356505efcc22fd0200000000000000fd6c37ba68da80a1f1741ee742f3d08f23ffea9c33d7b4d172cfb4e5837a32825540e73671e825c5ee10dc5e682980c3429ec3e5baf2ee4b9acfcf3d5aad82ba5bb4fcb8e744629f0551f1c58518abc6e7f663bf8900a9c68be852ad67831894f031c306d4e65195abe1be690a8941c103f90d17a57a1c09d8f27afb9c626966bac44399a5559b73c0acbe0dc438bd45f8fab86548c06a966e5431d7c7d5697cb55b236ce377f73d88da0bcd83c1c8b73693b499dbdc1705d26bd2853d9accd3fc0e6ea7d5868c570095c961785979dd5c5bc711722dac1bdad5a4a69e9376ade98f9d8bdc91", 0x1be, 0xfffffffffffffffd) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r0, 0xc9, 0xa5}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000000300)="617bbd0bd876f84b94fd19dad4ec60c6b0aa2435fa3cb011d2e5acdeea7e9895a2339209aa9620a1c7341f924aa2464a4fed8503c91f299e6227127bc69d52e1b8e5570eb8d8291b5348ad623671a31d19260dd5bf608809ef8c4a54d32f0bea2cd0a84c2cbfdb0900dd6067466871aaf2ee4d579d25fbf5871d7cb325dbc915dd8a765e1bf0dac61c916a9ee9d335098ed57080d57b9a5855d7cbf5bfb801794cdb8b6baa4b4c4e513bfb9216472bf2cdc7a6056d59aff3d5e05d0b7ba3e3e31fe4975098ab6b0b7a", &(0x7f0000000240)="ad1451dee5bd5effdfee96720f4842de13c2eeac4a2a8b49ab1a6113a433072a91bfcfc7d643770acf1fe4fc9f172a300534e4fbf97cbe903174d07de6996350bd100b8f1af429d79dca908f09801863c3134f6dd70a520f3f957123121c9c523eeb890eb225330d94efd115cc00f7dba119216e8408bf5d18e797455d256a4a08cc2336f797ca943d8f7e51f938338ed6f04be79f5235ef060debc89c249ec28f2873638e") r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, &(0x7f00000003c0)=""/143, 0x8f) r3 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "0a92072159ab0fbeb5e67b804d1cf7382975a202eaa7b07c5a414337d40bb803fc93d356aea4d8caeea9cc85ad688e03e566ed55c6efaeed3cb57d4c51fb0235"}, 0x48, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r3, 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'enc='}, 0x1d, r3) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000004c0)="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", 0x1be, 0xfffffffffffffffd) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r0, 0xc9, 0xa5}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000000300)="617bbd0bd876f84b94fd19dad4ec60c6b0aa2435fa3cb011d2e5acdeea7e9895a2339209aa9620a1c7341f924aa2464a4fed8503c91f299e6227127bc69d52e1b8e5570eb8d8291b5348ad623671a31d19260dd5bf608809ef8c4a54d32f0bea2cd0a84c2cbfdb0900dd6067466871aaf2ee4d579d25fbf5871d7cb325dbc915dd8a765e1bf0dac61c916a9ee9d335098ed57080d57b9a5855d7cbf5bfb801794cdb8b6baa4b4c4e513bfb9216472bf2cdc7a6056d59aff3d5e05d0b7ba3e3e31fe4975098ab6b0b7a", &(0x7f0000000240)="ad1451dee5bd5effdfee96720f4842de13c2eeac4a2a8b49ab1a6113a433072a91bfcfc7d643770acf1fe4fc9f172a300534e4fbf97cbe903174d07de6996350bd100b8f1af429d79dca908f09801863c3134f6dd70a520f3f957123121c9c523eeb890eb225330d94efd115cc00f7dba119216e8408bf5d18e797455d256a4a08cc2336f797ca943d8f7e51f938338ed6f04be79f5235ef060debc89c249ec28f2873638e") (async) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$get_security(0x11, r2, &(0x7f00000003c0)=""/143, 0x8f) (async) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "0a92072159ab0fbeb5e67b804d1cf7382975a202eaa7b07c5a414337d40bb803fc93d356aea4d8caeea9cc85ad688e03e566ed55c6efaeed3cb57d4c51fb0235"}, 0x48, 0xfffffffffffffffe) (async) keyctl$get_keyring_id(0x0, r3, 0x0) (async) keyctl$instantiate(0xc, r2, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'enc='}, 0x1d, r3) (async) 0s ago: executing program 9 (id=7255): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000580)={0x0, 0xaee9, 0x400, 0x200002, 0x1f6}, &(0x7f0000000640)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r0, 0x47f6, 0x0, 0xfffffffffffff000, 0x0, 0x0) kernel console output (not intermixed with test programs): file_ioctl_common+0x144/0x410 [ 474.709183][T24604] ? selinux_file_ioctl+0x180/0x270 [ 474.709199][T24604] ? selinux_file_ioctl+0xb4/0x270 [ 474.709216][T24604] ? __pfx_binder_ioctl+0x10/0x10 [ 474.709232][T24604] __x64_sys_ioctl+0x18e/0x210 [ 474.709247][T24604] do_syscall_64+0xcd/0xf80 [ 474.709265][T24604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.709278][T24604] RIP: 0033:0x7f87e7f8f7c9 [ 474.709288][T24604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.709300][T24604] RSP: 002b:00007f87e61ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.709311][T24604] RAX: ffffffffffffffda RBX: 00007f87e81e5fa0 RCX: 00007f87e7f8f7c9 [ 474.709319][T24604] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 474.709326][T24604] RBP: 00007f87e61ee090 R08: 0000000000000000 R09: 0000000000000000 [ 474.709333][T24604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.709340][T24604] R13: 00007f87e81e6038 R14: 00007f87e81e5fa0 R15: 00007fff4ba1c7b8 [ 474.709355][T24604] [ 474.738347][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6722'. [ 474.747267][T24606] syzkaller0: entered promiscuous mode [ 474.832423][T24606] syzkaller0: entered allmulticast mode [ 475.111786][ T6461] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 475.287594][ T6461] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 475.291325][ T6461] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.295047][ T6461] usb 12-1: Product: syz [ 475.305669][ T6461] usb 12-1: Manufacturer: syz [ 475.307673][ T6461] usb 12-1: SerialNumber: syz [ 475.315103][ T6461] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 475.345539][ T40] audit: type=1400 audit(1769037698.150:1153): avc: denied { firmware_load } for pid=6461 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 475.362386][ T6461] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 475.379207][ T54] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 475.594228][ T54] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 475.597853][ T54] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 475.601139][ T54] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 475.604154][ T54] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.640045][T24617] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 475.647794][ T54] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.882437][ T60] usb 13-1: USB disconnect, device number 6 [ 476.099418][T24617] fuse: Bad value for 'rootmode' [ 476.103874][ T40] audit: type=1400 audit(1769037698.861:1154): avc: denied { setopt } for pid=24616 comm="syz.8.6725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 476.109475][ T6024] IPVS: starting estimator thread 0... [ 476.213045][T24618] IPVS: using max 47 ests per chain, 112800 per kthread [ 476.227481][T24620] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6725'. [ 476.454391][ T6461] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 476.465821][ T6461] ath9k_htc: Failed to initialize the device [ 476.577574][ T6461] usb 12-1: ath9k_htc: USB layer deinitialized [ 477.347606][T24625] syzkaller0: entered promiscuous mode [ 477.350044][T24625] syzkaller0: entered allmulticast mode [ 477.401419][ C1] Illegal XDP return value 16128 on prog (id 851) dev veth0_to_bond, expect packet loss! [ 477.474811][ T40] audit: type=1400 audit(1769037700.142:1155): avc: denied { create } for pid=24632 comm="syz.9.6730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 477.478661][T24633] batman_adv: batadv0: Adding interface: dummy0 [ 477.483647][T24633] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.495956][T24633] batman_adv: batadv0: Interface activated: dummy0 [ 477.606068][T24643] syzkaller0: entered promiscuous mode [ 477.608437][T24643] syzkaller0: entered allmulticast mode [ 478.116362][ T60] usb 12-1: USB disconnect, device number 5 [ 479.633234][T24663] netlink: 'syz.8.6739': attribute type 21 has an invalid length. [ 479.636620][T24663] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6739'. [ 479.661611][T24663] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6739'. [ 479.716177][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 479.716194][ T40] audit: type=1400 audit(1769037702.245:1161): avc: denied { mounton } for pid=24666 comm="syz.9.6747" path="/30/bus" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 479.733409][T24668] /dev/nullb0: Can't open blockdev [ 479.750436][ T40] audit: type=1400 audit(1769037702.274:1162): avc: denied { create } for pid=24666 comm="syz.9.6747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 479.764096][ T6153] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.786017][T24670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.788784][T24670] IPv6: NLM_F_CREATE should be set when creating new route [ 479.791812][T24670] IPv6: NLM_F_CREATE should be set when creating new route [ 479.794774][T24670] IPv6: NLM_F_CREATE should be set when creating new route [ 479.815031][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6747'. [ 479.820185][T24668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6747'. [ 479.829306][ T40] audit: type=1400 audit(1769037702.358:1163): avc: denied { create } for pid=24672 comm="syz.7.6743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 479.850550][ T40] audit: type=1400 audit(1769037702.358:1164): avc: denied { read } for pid=24671 comm="syz.3.6742" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 479.859563][ T40] audit: type=1400 audit(1769037702.358:1165): avc: denied { open } for pid=24671 comm="syz.3.6742" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 479.877700][ T40] audit: type=1400 audit(1769037702.367:1166): avc: denied { read write } for pid=24672 comm="syz.7.6743" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 479.888365][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6743'. [ 479.907133][ T40] audit: type=1400 audit(1769037702.367:1167): avc: denied { open } for pid=24672 comm="syz.7.6743" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 479.916307][ T40] audit: type=1400 audit(1769037702.395:1168): avc: denied { append } for pid=24672 comm="syz.7.6743" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 479.944275][T24681] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 479.945947][ T40] audit: type=1400 audit(1769037702.395:1169): avc: denied { open } for pid=24672 comm="syz.7.6743" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 479.951801][T24681] team0: Device ipvlan2 is already an upper device of the team interface [ 479.956061][ T40] audit: type=1400 audit(1769037702.395:1170): avc: denied { create } for pid=24672 comm="syz.7.6743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 479.964963][T24673] NFSD: Failed to start, no listeners configured. [ 480.029698][T24685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6744'. [ 480.037987][T24679] syzkaller0: entered promiscuous mode [ 480.040400][T24679] syzkaller0: entered allmulticast mode [ 480.076576][T24687] FAULT_INJECTION: forcing a failure. [ 480.076576][T24687] name failslab, interval 1, probability 0, space 0, times 0 [ 480.085442][T24687] CPU: 0 UID: 0 PID: 24687 Comm: syz.9.6746 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.085463][T24687] Tainted: [L]=SOFTLOCKUP [ 480.085468][T24687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 480.085476][T24687] Call Trace: [ 480.085480][T24687] [ 480.085485][T24687] dump_stack_lvl+0x16c/0x1f0 [ 480.085506][T24687] should_fail_ex+0x512/0x640 [ 480.085518][T24687] ? __kmalloc_noprof+0xca/0x910 [ 480.085531][T24687] should_failslab+0xc2/0x120 [ 480.085548][T24687] __kmalloc_noprof+0xeb/0x910 [ 480.085559][T24687] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 480.085581][T24687] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 480.085599][T24687] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 480.085630][T24687] vb2_core_create_bufs+0x2bf/0xab0 [ 480.085645][T24687] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 480.085659][T24687] ? lock_acquire+0x179/0x330 [ 480.085677][T24687] vb2_create_bufs+0x5e8/0x840 [ 480.085697][T24687] ? __pfx_vb2_create_bufs+0x10/0x10 [ 480.085716][T24687] ? __pfx___mutex_lock+0x10/0x10 [ 480.085735][T24687] vb2_ioctl_create_bufs+0x244/0x3e0 [ 480.085752][T24687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 480.085769][T24687] vidioc_create_bufs+0x7d/0xf0 [ 480.085786][T24687] v4l_create_bufs+0x151/0x260 [ 480.085801][T24687] __video_do_ioctl+0xb77/0xf00 [ 480.085818][T24687] ? __might_fault+0xe3/0x190 [ 480.085829][T24687] ? __pfx___video_do_ioctl+0x10/0x10 [ 480.085849][T24687] video_usercopy+0x4d0/0x16c0 [ 480.085866][T24687] ? __pfx___video_do_ioctl+0x10/0x10 [ 480.085879][T24687] ? selinux_kernel_read_file+0xd0/0x120 [ 480.085896][T24687] ? __pfx_video_usercopy+0x10/0x10 [ 480.085922][T24687] v4l2_ioctl+0x1bd/0x250 [ 480.085936][T24687] ? __pfx_v4l2_ioctl+0x10/0x10 [ 480.085950][T24687] __x64_sys_ioctl+0x18e/0x210 [ 480.085966][T24687] do_syscall_64+0xcd/0xf80 [ 480.085983][T24687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.085995][T24687] RIP: 0033:0x7f417f58f7c9 [ 480.086005][T24687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.086016][T24687] RSP: 002b:00007f418049a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.086028][T24687] RAX: ffffffffffffffda RBX: 00007f417f7e5fa0 RCX: 00007f417f58f7c9 [ 480.086036][T24687] RDX: 0000200000000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 480.086043][T24687] RBP: 00007f418049a090 R08: 0000000000000000 R09: 0000000000000000 [ 480.086050][T24687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.086056][T24687] R13: 00007f417f7e6038 R14: 00007f417f7e5fa0 R15: 00007ffee9403d38 [ 480.086094][T24687] [ 480.204068][T24691] syzkaller0: entered promiscuous mode [ 480.205853][T24691] syzkaller0: entered allmulticast mode [ 480.476317][T24709] Mount JFS Failure: -22 [ 480.533520][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6755'. [ 480.538322][T24709] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6755'. [ 482.013575][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 482.013584][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 482.356620][T24726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6762'. [ 482.361145][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6761'. [ 482.368391][T24725] syzkaller0: entered promiscuous mode [ 482.370879][T24725] syzkaller0: entered allmulticast mode [ 482.375147][T24729] FAULT_INJECTION: forcing a failure. [ 482.375147][T24729] name failslab, interval 1, probability 0, space 0, times 0 [ 482.379388][T24729] CPU: 0 UID: 0 PID: 24729 Comm: syz.7.6764 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.379409][T24729] Tainted: [L]=SOFTLOCKUP [ 482.379413][T24729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 482.379421][T24729] Call Trace: [ 482.379426][T24729] [ 482.379431][T24729] dump_stack_lvl+0x16c/0x1f0 [ 482.379452][T24729] should_fail_ex+0x512/0x640 [ 482.379463][T24729] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 482.379479][T24729] should_failslab+0xc2/0x120 [ 482.379496][T24729] kmem_cache_alloc_node_noprof+0x86/0x800 [ 482.379522][T24729] ? __alloc_skb+0x156/0x410 [ 482.379534][T24729] ? __alloc_skb+0x35d/0x410 [ 482.379547][T24729] ? __alloc_skb+0x156/0x410 [ 482.379557][T24729] __alloc_skb+0x156/0x410 [ 482.379567][T24729] ? __alloc_skb+0x35d/0x410 [ 482.379577][T24729] ? __pfx___alloc_skb+0x10/0x10 [ 482.379594][T24729] netlink_ack+0x15d/0xb80 [ 482.379609][T24729] ? avc_has_perm_noaudit+0x149/0x3b0 [ 482.379625][T24729] netlink_rcv_skb+0x332/0x420 [ 482.379641][T24729] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 482.379655][T24729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.379677][T24729] ? ns_capable+0xd7/0x110 [ 482.379694][T24729] nfnetlink_rcv+0x1b3/0x430 [ 482.379706][T24729] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 482.379717][T24729] ? netlink_deliver_tap+0x1ae/0xd30 [ 482.379735][T24729] netlink_unicast+0x5aa/0x870 [ 482.379752][T24729] ? __pfx_netlink_unicast+0x10/0x10 [ 482.379773][T24729] netlink_sendmsg+0x8c8/0xdd0 [ 482.379791][T24729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.379812][T24729] ____sys_sendmsg+0xa5d/0xc30 [ 482.379829][T24729] ? copy_msghdr_from_user+0x10a/0x160 [ 482.379842][T24729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.379860][T24729] ? __pfx__kstrtoull+0x10/0x10 [ 482.379877][T24729] ___sys_sendmsg+0x134/0x1d0 [ 482.379891][T24729] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.379911][T24729] ? find_held_lock+0x2b/0x80 [ 482.379938][T24729] __sys_sendmmsg+0x200/0x420 [ 482.379953][T24729] ? __pfx___sys_sendmmsg+0x10/0x10 [ 482.379971][T24729] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.379994][T24729] ? fput+0x70/0xf0 [ 482.380005][T24729] ? ksys_write+0x1ac/0x250 [ 482.380020][T24729] ? __pfx_ksys_write+0x10/0x10 [ 482.380037][T24729] __x64_sys_sendmmsg+0x9c/0x100 [ 482.380050][T24729] ? lockdep_hardirqs_on+0x7c/0x110 [ 482.380066][T24729] do_syscall_64+0xcd/0xf80 [ 482.380084][T24729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.380096][T24729] RIP: 0033:0x7f87e7f8f7c9 [ 482.380107][T24729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.380118][T24729] RSP: 002b:00007f87e61ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 482.380131][T24729] RAX: ffffffffffffffda RBX: 00007f87e81e5fa0 RCX: 00007f87e7f8f7c9 [ 482.380138][T24729] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 482.380145][T24729] RBP: 00007f87e61ee090 R08: 0000000000000000 R09: 0000000000000000 [ 482.380152][T24729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.380158][T24729] R13: 00007f87e81e6038 R14: 00007f87e81e5fa0 R15: 00007fff4ba1c7b8 [ 482.380173][T24729] [ 482.684262][T24755] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 482.878142][T24778] syzkaller0: entered promiscuous mode [ 482.880441][T24778] syzkaller0: entered allmulticast mode [ 483.022351][T24793] tipc: Enabled bearer , priority 0 [ 483.027361][T24793] syzkaller0: entered promiscuous mode [ 483.029447][T24793] syzkaller0: entered allmulticast mode [ 483.048879][T24793] tipc: Resetting bearer [ 483.052717][T24791] tipc: Resetting bearer [ 483.070499][T24791] tipc: Disabling bearer [ 483.189956][T24801] FAULT_INJECTION: forcing a failure. [ 483.189956][T24801] name failslab, interval 1, probability 0, space 0, times 0 [ 483.194000][T24801] CPU: 1 UID: 0 PID: 24801 Comm: syz.9.6788 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.194019][T24801] Tainted: [L]=SOFTLOCKUP [ 483.194024][T24801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 483.194031][T24801] Call Trace: [ 483.194053][T24801] [ 483.194061][T24801] dump_stack_lvl+0x16c/0x1f0 [ 483.194083][T24801] should_fail_ex+0x512/0x640 [ 483.194094][T24801] ? __kmalloc_cache_noprof+0x5f/0x800 [ 483.194108][T24801] should_failslab+0xc2/0x120 [ 483.194125][T24801] __kmalloc_cache_noprof+0x80/0x800 [ 483.194136][T24801] ? tcf_exts_init_ex+0x113/0x690 [ 483.194152][T24801] ? tcf_exts_init_ex+0x113/0x690 [ 483.194164][T24801] tcf_exts_init_ex+0x113/0x690 [ 483.194178][T24801] flow_change+0x418/0x19c0 [ 483.194197][T24801] ? __pfx_flow_change+0x10/0x10 [ 483.194212][T24801] ? __mutex_unlock_slowpath+0x161/0x790 [ 483.194237][T24801] ? __pfx_flow_change+0x10/0x10 [ 483.194252][T24801] tc_new_tfilter+0xa35/0x2340 [ 483.194275][T24801] ? avc_has_perm_noaudit+0x117/0x3b0 [ 483.194288][T24801] ? __pfx_tc_new_tfilter+0x10/0x10 [ 483.194309][T24801] ? __lock_acquire+0x436/0x2890 [ 483.194335][T24801] ? find_held_lock+0x2b/0x80 [ 483.194353][T24801] ? __pfx_tc_new_tfilter+0x10/0x10 [ 483.194367][T24801] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 483.194383][T24801] ? __pfx_tc_new_tfilter+0x10/0x10 [ 483.194399][T24801] rtnetlink_rcv_msg+0x95e/0xe90 [ 483.194415][T24801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.194434][T24801] ? ref_tracker_free+0x37c/0x830 [ 483.194447][T24801] netlink_rcv_skb+0x158/0x420 [ 483.194463][T24801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.194479][T24801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.194499][T24801] ? netlink_deliver_tap+0x1ae/0xd30 [ 483.194518][T24801] netlink_unicast+0x5aa/0x870 [ 483.194536][T24801] ? __pfx_netlink_unicast+0x10/0x10 [ 483.194557][T24801] netlink_sendmsg+0x8c8/0xdd0 [ 483.194575][T24801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.194596][T24801] ____sys_sendmsg+0xa5d/0xc30 [ 483.194613][T24801] ? copy_msghdr_from_user+0x10a/0x160 [ 483.194627][T24801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.194646][T24801] ? __pfx__kstrtoull+0x10/0x10 [ 483.194663][T24801] ___sys_sendmsg+0x134/0x1d0 [ 483.194677][T24801] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.194697][T24801] ? find_held_lock+0x2b/0x80 [ 483.194724][T24801] __sys_sendmmsg+0x200/0x420 [ 483.194739][T24801] ? __pfx___sys_sendmmsg+0x10/0x10 [ 483.194757][T24801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 483.194780][T24801] ? fput+0x70/0xf0 [ 483.194791][T24801] ? ksys_write+0x1ac/0x250 [ 483.194806][T24801] ? __pfx_ksys_write+0x10/0x10 [ 483.194823][T24801] __x64_sys_sendmmsg+0x9c/0x100 [ 483.194836][T24801] ? lockdep_hardirqs_on+0x7c/0x110 [ 483.194852][T24801] do_syscall_64+0xcd/0xf80 [ 483.194870][T24801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.194882][T24801] RIP: 0033:0x7f417f58f7c9 [ 483.194892][T24801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.194904][T24801] RSP: 002b:00007f418049a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 483.194915][T24801] RAX: ffffffffffffffda RBX: 00007f417f7e5fa0 RCX: 00007f417f58f7c9 [ 483.194922][T24801] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000006 [ 483.194930][T24801] RBP: 00007f418049a090 R08: 0000000000000000 R09: 0000000000000000 [ 483.194936][T24801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.194943][T24801] R13: 00007f417f7e6038 R14: 00007f417f7e5fa0 R15: 00007ffee9403d38 [ 483.194959][T24801] [ 483.324282][T24806] tipc: Enabled bearer , priority 0 [ 483.327896][T24806] syzkaller0: entered promiscuous mode [ 483.329732][T24806] syzkaller0: entered allmulticast mode [ 483.355736][T24806] tipc: Resetting bearer [ 483.362407][T24805] tipc: Resetting bearer [ 483.375803][T24805] tipc: Disabling bearer [ 483.400447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 483.422209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 483.530370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 483.550349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 483.565727][T24823] syzkaller0: entered promiscuous mode [ 483.567661][T24823] syzkaller0: entered allmulticast mode [ 483.571691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 483.701898][T24833] binder: 24828:24833 ioctl c0306201 0 returned -14 [ 483.705616][T24833] binder: 24828:24833 ioctl c0306201 0 returned -14 [ 483.839037][T24843] FAULT_INJECTION: forcing a failure. [ 483.839037][T24843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.844481][T24843] CPU: 1 UID: 0 PID: 24843 Comm: syz.8.6801 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.844513][T24843] Tainted: [L]=SOFTLOCKUP [ 483.844519][T24843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 483.844530][T24843] Call Trace: [ 483.844536][T24843] [ 483.844543][T24843] dump_stack_lvl+0x16c/0x1f0 [ 483.844574][T24843] should_fail_ex+0x512/0x640 [ 483.844597][T24843] _copy_from_user+0x2e/0xd0 [ 483.844626][T24843] kstrtouint_from_user+0xd6/0x1d0 [ 483.844648][T24843] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 483.844669][T24843] ? __lock_acquire+0x436/0x2890 [ 483.844696][T24843] ? lock_acquire+0x179/0x330 [ 483.844723][T24843] proc_fail_nth_write+0x83/0x220 [ 483.844745][T24843] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 483.844773][T24843] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 483.844792][T24843] vfs_write+0x2a0/0x11d0 [ 483.844818][T24843] ? __pfx___mutex_lock+0x10/0x10 [ 483.844848][T24843] ? __pfx_vfs_write+0x10/0x10 [ 483.844879][T24843] ? __fget_files+0x20e/0x3c0 [ 483.844913][T24843] ksys_write+0x12a/0x250 [ 483.844937][T24843] ? __pfx_ksys_write+0x10/0x10 [ 483.844969][T24843] do_syscall_64+0xcd/0xf80 [ 483.844997][T24843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.845017][T24843] RIP: 0033:0x7f081ab8e27f [ 483.845032][T24843] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 483.845049][T24843] RSP: 002b:00007f081b9bd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 483.845066][T24843] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f081ab8e27f [ 483.845093][T24843] RDX: 0000000000000001 RSI: 00007f081b9bd0a0 RDI: 0000000000000003 [ 483.845104][T24843] RBP: 00007f081b9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 483.845114][T24843] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 483.845125][T24843] R13: 00007f081ade6038 R14: 00007f081ade5fa0 R15: 00007ffc01400c68 [ 483.845153][T24843] [ 483.947483][T24849] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 483.951893][T24849] team0: Device ipvlan2 is already an upper device of the team interface [ 483.983637][T24847] NFSD: Failed to start, no listeners configured. [ 484.172462][T24863] openvswitch: netlink: Key type 31 is not supported [ 484.864751][T24904] NFSD: Failed to start, no listeners configured. [ 484.911866][T24908] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 484.915605][T24908] team0: Device ipvlan2 is already an upper device of the team interface [ 485.074576][T24919] __nla_validate_parse: 10 callbacks suppressed [ 485.074596][T24919] netlink: 176 bytes leftover after parsing attributes in process `syz.9.6824'. [ 485.146798][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 485.146813][ T40] audit: type=1400 audit(1769037707.323:1224): avc: denied { getopt } for pid=24918 comm="syz.9.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 485.279008][ T40] audit: type=1400 audit(1769037707.444:1225): avc: denied { write } for pid=24935 comm="syz.7.6830" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 485.279581][T24936] program syz.7.6830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.288442][T24937] vlan2: entered promiscuous mode [ 485.292082][T24937] bridge0: entered promiscuous mode [ 485.326324][ T40] audit: type=1400 audit(1769037707.491:1226): avc: denied { remount } for pid=24941 comm="syz.3.6834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 485.326678][T24944] netlink: 'syz.7.6833': attribute type 1 has an invalid length. [ 485.332829][T24942] tmpfs: Cannot enable quota on remount [ 485.336471][T24944] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6833'. [ 485.336494][T24944] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6833'. [ 485.336508][T24944] netlink: 'syz.7.6833': attribute type 1 has an invalid length. [ 485.336521][T24944] netlink: 634 bytes leftover after parsing attributes in process `syz.7.6833'. [ 485.372346][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6832'. [ 485.457232][T24950] syzkaller0: entered promiscuous mode [ 485.459105][T24950] syzkaller0: entered allmulticast mode [ 485.489063][T24950] 0: reclassify loop, rule prio 0, protocol 800 [ 485.527472][T24954] syzkaller0: entered promiscuous mode [ 485.531315][T24954] syzkaller0: entered allmulticast mode [ 485.537020][T24954] FAULT_INJECTION: forcing a failure. [ 485.537020][T24954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.542650][T24954] CPU: 2 UID: 0 PID: 24954 Comm: syz.8.6837 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.542681][T24954] Tainted: [L]=SOFTLOCKUP [ 485.542687][T24954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 485.542699][T24954] Call Trace: [ 485.542706][T24954] [ 485.542715][T24954] dump_stack_lvl+0x16c/0x1f0 [ 485.542746][T24954] should_fail_ex+0x512/0x640 [ 485.542768][T24954] _copy_from_user+0x2e/0xd0 [ 485.542797][T24954] copy_msghdr_from_user+0x98/0x160 [ 485.542820][T24954] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 485.542846][T24954] ? __pfx__kstrtoull+0x10/0x10 [ 485.542873][T24954] ___sys_sendmsg+0xfe/0x1d0 [ 485.542893][T24954] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.542925][T24954] ? find_held_lock+0x2b/0x80 [ 485.542968][T24954] __sys_sendmmsg+0x200/0x420 [ 485.542992][T24954] ? __pfx___sys_sendmmsg+0x10/0x10 [ 485.543020][T24954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 485.543055][T24954] ? fput+0x70/0xf0 [ 485.543073][T24954] ? ksys_write+0x1ac/0x250 [ 485.543094][T24954] ? __pfx_ksys_write+0x10/0x10 [ 485.543122][T24954] __x64_sys_sendmmsg+0x9c/0x100 [ 485.543145][T24954] ? lockdep_hardirqs_on+0x7c/0x110 [ 485.543171][T24954] do_syscall_64+0xcd/0xf80 [ 485.543200][T24954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.543218][T24954] RIP: 0033:0x7f081ab8f7c9 [ 485.543233][T24954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.543250][T24954] RSP: 002b:00007f081b9bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 485.543268][T24954] RAX: ffffffffffffffda RBX: 00007f081ade5fa0 RCX: 00007f081ab8f7c9 [ 485.543280][T24954] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000007 [ 485.543291][T24954] RBP: 00007f081b9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 485.543302][T24954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.543313][T24954] R13: 00007f081ade6038 R14: 00007f081ade5fa0 R15: 00007ffc01400c68 [ 485.543347][T24954] [ 485.742344][ T40] audit: type=1400 audit(1769037707.874:1227): avc: denied { mount } for pid=24961 comm="syz.7.6841" name="/" dev="hugetlbfs" ino=125814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 485.744131][T24962] overlayfs: maximum fs stacking depth exceeded [ 485.757445][ T40] audit: type=1400 audit(1769037707.884:1228): avc: denied { mounton } for pid=24961 comm="syz.7.6841" path="/170/file0" dev="hugetlbfs" ino=125814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 485.758310][T24962] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6841'. [ 485.765158][T24964] syzkaller0: entered promiscuous mode [ 485.765174][T24964] syzkaller0: entered allmulticast mode [ 485.774446][ T40] audit: type=1400 audit(1769037707.893:1229): avc: denied { create } for pid=24961 comm="syz.7.6841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 485.782849][ T40] audit: type=1400 audit(1769037707.893:1230): avc: denied { setopt } for pid=24961 comm="syz.7.6841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 485.786334][T24964] 0: reclassify loop, rule prio 0, protocol 800 [ 485.836428][ T40] audit: type=1400 audit(1769037707.968:1231): avc: denied { unmount } for pid=23130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 485.864012][T24969] FAULT_INJECTION: forcing a failure. [ 485.864012][T24969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.885766][T24969] CPU: 2 UID: 0 PID: 24969 Comm: syz.7.6844 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.885787][T24969] Tainted: [L]=SOFTLOCKUP [ 485.885792][T24969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 485.885799][T24969] Call Trace: [ 485.885803][T24969] [ 485.885808][T24969] dump_stack_lvl+0x16c/0x1f0 [ 485.885832][T24969] should_fail_ex+0x512/0x640 [ 485.885848][T24969] _copy_to_user+0x32/0xd0 [ 485.885868][T24969] simple_read_from_buffer+0xcb/0x170 [ 485.885887][T24969] proc_fail_nth_read+0x197/0x240 [ 485.885900][T24969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.885914][T24969] ? rw_verify_area+0xcf/0x6c0 [ 485.885928][T24969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.885940][T24969] vfs_read+0x1e4/0xcf0 [ 485.885956][T24969] ? __pfx___mutex_lock+0x10/0x10 [ 485.885975][T24969] ? __pfx_vfs_read+0x10/0x10 [ 485.885993][T24969] ? __fget_files+0x20e/0x3c0 [ 485.886049][T24969] ksys_read+0x12a/0x250 [ 485.886071][T24969] ? __pfx_ksys_read+0x10/0x10 [ 485.886091][T24969] do_syscall_64+0xcd/0xf80 [ 485.886108][T24969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.886120][T24969] RIP: 0033:0x7f87e7f8e1dc [ 485.886130][T24969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 485.886142][T24969] RSP: 002b:00007f87e61ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.886153][T24969] RAX: ffffffffffffffda RBX: 00007f87e81e5fa0 RCX: 00007f87e7f8e1dc [ 485.886161][T24969] RDX: 000000000000000f RSI: 00007f87e61ee0a0 RDI: 0000000000000004 [ 485.886168][T24969] RBP: 00007f87e61ee090 R08: 0000000000000000 R09: 0000000000000000 [ 485.886175][T24969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.886181][T24969] R13: 00007f87e81e6038 R14: 00007f87e81e5fa0 R15: 00007fff4ba1c7b8 [ 485.886217][T24969] [ 485.891740][T24967] NFSD: Failed to start, no listeners configured. [ 485.914009][T24971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6845'. [ 485.926715][T24972] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 485.927294][T24972] team0: Device ipvlan2 is already an upper device of the team interface [ 485.937547][T24974] binder: 24973:24974 ioctl c0306201 0 returned -14 [ 485.996514][ T40] audit: type=1400 audit(1769037708.117:1232): avc: denied { create } for pid=24973 comm="syz.7.6846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 485.996874][T24974] binder: 24973:24974 ioctl c0306201 0 returned -14 [ 486.011442][ T40] audit: type=1400 audit(1769037708.136:1233): avc: denied { checkpoint_restore } for pid=24973 comm="syz.7.6846" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 486.036209][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 486.051870][ T5941] Bluetooth: hci0: command 0x0419 tx timeout [ 486.136890][T24987] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 486.142985][T24988] FAULT_INJECTION: forcing a failure. [ 486.142985][T24988] name failslab, interval 1, probability 0, space 0, times 0 [ 486.147197][T24988] CPU: 2 UID: 0 PID: 24988 Comm: syz.9.6851 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.147228][T24988] Tainted: [L]=SOFTLOCKUP [ 486.147235][T24988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 486.147246][T24988] Call Trace: [ 486.147253][T24988] [ 486.147261][T24988] dump_stack_lvl+0x16c/0x1f0 [ 486.147292][T24988] should_fail_ex+0x512/0x640 [ 486.147316][T24988] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 486.147338][T24988] should_failslab+0xc2/0x120 [ 486.147363][T24988] kmem_cache_alloc_node_noprof+0x86/0x800 [ 486.147383][T24988] ? __alloc_skb+0x156/0x410 [ 486.147407][T24988] ? __alloc_skb+0x156/0x410 [ 486.147423][T24988] __alloc_skb+0x156/0x410 [ 486.147440][T24988] ? __alloc_skb+0x35d/0x410 [ 486.147456][T24988] ? __pfx___alloc_skb+0x10/0x10 [ 486.147475][T24988] ? kasan_quarantine_put+0x10a/0x240 [ 486.147503][T24988] mgmt_cmd_complete+0x4f/0x570 [ 486.147532][T24988] set_def_system_config+0x93b/0x1520 [ 486.147561][T24988] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 486.147589][T24988] hci_sock_sendmsg+0x1556/0x26b0 [ 486.147619][T24988] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 486.147650][T24988] sock_write_iter+0x566/0x610 [ 486.147677][T24988] ? __pfx_sock_write_iter+0x10/0x10 [ 486.147714][T24988] ? bpf_lsm_file_permission+0x9/0x10 [ 486.147732][T24988] ? security_file_permission+0x71/0x210 [ 486.147761][T24988] ? rw_verify_area+0xcf/0x6c0 [ 486.147785][T24988] vfs_write+0x7d3/0x11d0 [ 486.147810][T24988] ? __pfx_sock_write_iter+0x10/0x10 [ 486.147839][T24988] ? __pfx_vfs_write+0x10/0x10 [ 486.147860][T24988] ? find_held_lock+0x2b/0x80 [ 486.147905][T24988] ksys_write+0x1f8/0x250 [ 486.147928][T24988] ? __pfx_ksys_write+0x10/0x10 [ 486.147959][T24988] do_syscall_64+0xcd/0xf80 [ 486.147988][T24988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.148007][T24988] RIP: 0033:0x7f417f58f7c9 [ 486.148022][T24988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.148039][T24988] RSP: 002b:00007f418049a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.148057][T24988] RAX: ffffffffffffffda RBX: 00007f417f7e5fa0 RCX: 00007f417f58f7c9 [ 486.148069][T24988] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000012 [ 486.148080][T24988] RBP: 00007f418049a090 R08: 0000000000000000 R09: 0000000000000000 [ 486.148091][T24988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.148102][T24988] R13: 00007f417f7e6038 R14: 00007f417f7e5fa0 R15: 00007ffee9403d38 [ 486.148146][T24988] [ 486.522114][T25021] FAULT_INJECTION: forcing a failure. [ 486.522114][T25021] name failslab, interval 1, probability 0, space 0, times 0 [ 486.526982][T25021] CPU: 1 UID: 0 PID: 25021 Comm: syz.3.6863 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.527001][T25021] Tainted: [L]=SOFTLOCKUP [ 486.527006][T25021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 486.527013][T25021] Call Trace: [ 486.527017][T25021] [ 486.527022][T25021] dump_stack_lvl+0x16c/0x1f0 [ 486.527041][T25021] should_fail_ex+0x512/0x640 [ 486.527054][T25021] ? __kmalloc_noprof+0xca/0x910 [ 486.527073][T25021] should_failslab+0xc2/0x120 [ 486.527102][T25021] __kmalloc_noprof+0xeb/0x910 [ 486.527114][T25021] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 486.527137][T25021] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 486.527155][T25021] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 486.527176][T25021] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 486.527195][T25021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 486.527222][T25021] ? bpf_lsm_capable+0x9/0x10 [ 486.527239][T25021] ? security_capable+0x7e/0x260 [ 486.527253][T25021] ? ns_capable+0xd7/0x110 [ 486.527272][T25021] genl_rcv_msg+0x55c/0x800 [ 486.527291][T25021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.527309][T25021] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 486.527322][T25021] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 486.527339][T25021] ? __pfx_nl80211_post_doit+0x10/0x10 [ 486.527358][T25021] netlink_rcv_skb+0x158/0x420 [ 486.527374][T25021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.527392][T25021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.527413][T25021] ? netlink_deliver_tap+0x1ae/0xd30 [ 486.527430][T25021] genl_rcv+0x28/0x40 [ 486.527446][T25021] netlink_unicast+0x5aa/0x870 [ 486.527464][T25021] ? __pfx_netlink_unicast+0x10/0x10 [ 486.527485][T25021] netlink_sendmsg+0x8c8/0xdd0 [ 486.527503][T25021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.527524][T25021] ____sys_sendmsg+0xa5d/0xc30 [ 486.527542][T25021] ? copy_msghdr_from_user+0x10a/0x160 [ 486.527555][T25021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.527578][T25021] ___sys_sendmsg+0x134/0x1d0 [ 486.527592][T25021] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.527622][T25021] __sys_sendmsg+0x16d/0x220 [ 486.527636][T25021] ? __pfx___sys_sendmsg+0x10/0x10 [ 486.527657][T25021] ? fput+0x70/0xf0 [ 486.527671][T25021] do_syscall_64+0xcd/0xf80 [ 486.527689][T25021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.527701][T25021] RIP: 0033:0x7f9e0138f7c9 [ 486.527711][T25021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.527722][T25021] RSP: 002b:00007f9e021f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.527734][T25021] RAX: ffffffffffffffda RBX: 00007f9e015e5fa0 RCX: 00007f9e0138f7c9 [ 486.527742][T25021] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 486.527748][T25021] RBP: 00007f9e021f4090 R08: 0000000000000000 R09: 0000000000000000 [ 486.527755][T25021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.527762][T25021] R13: 00007f9e015e6038 R14: 00007f9e015e5fa0 R15: 00007fff34ffc0c8 [ 486.527777][T25021] [ 486.551875][T25024] FAULT_INJECTION: forcing a failure. [ 486.551875][T25024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.588475][T25026] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 486.590211][T25024] CPU: 0 UID: 0 PID: 25024 Comm: syz.7.6864 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.590240][T25024] Tainted: [L]=SOFTLOCKUP [ 486.590246][T25024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 486.590256][T25024] Call Trace: [ 486.590263][T25024] [ 486.590269][T25024] dump_stack_lvl+0x16c/0x1f0 [ 486.590298][T25024] should_fail_ex+0x512/0x640 [ 486.590318][T25024] _copy_from_user+0x2e/0xd0 [ 486.590354][T25024] kstrtouint_from_user+0xd6/0x1d0 [ 486.590374][T25024] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 486.590392][T25024] ? __lock_acquire+0x436/0x2890 [ 486.590418][T25024] ? lock_acquire+0x179/0x330 [ 486.590443][T25024] proc_fail_nth_write+0x83/0x220 [ 486.590462][T25024] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.590487][T25024] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.590503][T25024] vfs_write+0x2a0/0x11d0 [ 486.590526][T25024] ? __pfx___mutex_lock+0x10/0x10 [ 486.590553][T25024] ? __pfx_vfs_write+0x10/0x10 [ 486.590581][T25024] ? __fget_files+0x20e/0x3c0 [ 486.590613][T25024] ksys_write+0x12a/0x250 [ 486.590633][T25024] ? __pfx_ksys_write+0x10/0x10 [ 486.590655][T25024] ? fput+0x70/0xf0 [ 486.590674][T25024] do_syscall_64+0xcd/0xf80 [ 486.590700][T25024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.590717][T25024] RIP: 0033:0x7f87e7f8e27f [ 486.590733][T25024] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 486.590749][T25024] RSP: 002b:00007f87e61ee030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 486.590766][T25024] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f87e7f8e27f [ 486.590777][T25024] RDX: 0000000000000001 RSI: 00007f87e61ee0a0 RDI: 0000000000000005 [ 486.590787][T25024] RBP: 00007f87e61ee090 R08: 0000000000000000 R09: 0000000000000000 [ 486.590797][T25024] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 486.590807][T25024] R13: 00007f87e81e6038 R14: 00007f87e81e5fa0 R15: 00007fff4ba1c7b8 [ 486.590832][T25024] [ 486.734175][T25026] team0: Device ipvlan2 is already an upper device of the team interface [ 486.890508][T25037] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6869'. [ 486.893539][T25037] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6869'. [ 486.896437][T25037] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6869'. [ 486.900685][T25039] loop6: detected capacity change from 0 to 524288000 [ 486.906844][T25037] netlink: 'syz.8.6869': attribute type 6 has an invalid length. [ 486.911919][T25037] /dev/nullb0: Can't open blockdev [ 487.016125][T25056] FAULT_INJECTION: forcing a failure. [ 487.016125][T25056] name failslab, interval 1, probability 0, space 0, times 0 [ 487.020451][T25056] CPU: 0 UID: 0 PID: 25056 Comm: syz.8.6876 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.020480][T25056] Tainted: [L]=SOFTLOCKUP [ 487.020486][T25056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.020498][T25056] Call Trace: [ 487.020505][T25056] [ 487.020513][T25056] dump_stack_lvl+0x16c/0x1f0 [ 487.020545][T25056] should_fail_ex+0x512/0x640 [ 487.020563][T25056] ? __kmalloc_cache_noprof+0x5f/0x800 [ 487.020585][T25056] should_failslab+0xc2/0x120 [ 487.020610][T25056] __kmalloc_cache_noprof+0x80/0x800 [ 487.020629][T25056] ? fl_init+0x45/0x2c0 [ 487.020649][T25056] ? __pfx_fl_classify+0x10/0x10 [ 487.020668][T25056] ? fl_init+0x45/0x2c0 [ 487.020682][T25056] ? __raw_spin_lock_init+0x3a/0x110 [ 487.020708][T25056] fl_init+0x45/0x2c0 [ 487.020725][T25056] tc_new_tfilter+0x114a/0x2340 [ 487.020763][T25056] ? avc_has_perm_noaudit+0x117/0x3b0 [ 487.020785][T25056] ? __pfx_tc_new_tfilter+0x10/0x10 [ 487.020817][T25056] ? __lock_acquire+0x436/0x2890 [ 487.020852][T25056] ? find_held_lock+0x2b/0x80 [ 487.020877][T25056] ? __pfx_tc_new_tfilter+0x10/0x10 [ 487.020892][T25056] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 487.020908][T25056] ? __pfx_tc_new_tfilter+0x10/0x10 [ 487.020924][T25056] rtnetlink_rcv_msg+0x95e/0xe90 [ 487.020940][T25056] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 487.020958][T25056] ? ref_tracker_free+0x37c/0x830 [ 487.020972][T25056] netlink_rcv_skb+0x158/0x420 [ 487.020988][T25056] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 487.021004][T25056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.021024][T25056] ? netlink_deliver_tap+0x1ae/0xd30 [ 487.021043][T25056] netlink_unicast+0x5aa/0x870 [ 487.021061][T25056] ? __pfx_netlink_unicast+0x10/0x10 [ 487.021082][T25056] netlink_sendmsg+0x8c8/0xdd0 [ 487.021100][T25056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.021121][T25056] ____sys_sendmsg+0xa5d/0xc30 [ 487.021139][T25056] ? copy_msghdr_from_user+0x10a/0x160 [ 487.021152][T25056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.021175][T25056] ___sys_sendmsg+0x134/0x1d0 [ 487.021189][T25056] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.021219][T25056] __sys_sendmsg+0x16d/0x220 [ 487.021233][T25056] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.021252][T25056] ? fput+0x70/0xf0 [ 487.021265][T25056] do_syscall_64+0xcd/0xf80 [ 487.021283][T25056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.021300][T25056] RIP: 0033:0x7f081ab8f7c9 [ 487.021310][T25056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.021321][T25056] RSP: 002b:00007f081b9bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.021333][T25056] RAX: ffffffffffffffda RBX: 00007f081ade5fa0 RCX: 00007f081ab8f7c9 [ 487.021341][T25056] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 487.021348][T25056] RBP: 00007f081b9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 487.021354][T25056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.021361][T25056] R13: 00007f081ade6038 R14: 00007f081ade5fa0 R15: 00007ffc01400c68 [ 487.021377][T25056] [ 487.248967][T25073] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 487.252364][T25073] overlayfs: missing 'lowerdir' [ 487.330872][T25081] x_tables: duplicate underflow at hook 1 [ 487.334133][T25081] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 487.337494][T25083] FAULT_INJECTION: forcing a failure. [ 487.337494][T25083] name failslab, interval 1, probability 0, space 0, times 0 [ 487.345728][T25083] CPU: 3 UID: 0 PID: 25083 Comm: syz.9.6889 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.345749][T25083] Tainted: [L]=SOFTLOCKUP [ 487.345754][T25083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.345761][T25083] Call Trace: [ 487.345765][T25083] [ 487.345770][T25083] dump_stack_lvl+0x16c/0x1f0 [ 487.345791][T25083] should_fail_ex+0x512/0x640 [ 487.345803][T25083] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 487.345816][T25083] should_failslab+0xc2/0x120 [ 487.345849][T25083] kmem_cache_alloc_noprof+0x83/0x770 [ 487.345868][T25083] ? skb_clone+0x190/0x3f0 [ 487.345894][T25083] ? skb_clone+0x190/0x3f0 [ 487.345913][T25083] skb_clone+0x190/0x3f0 [ 487.345938][T25083] netlink_deliver_tap+0xabd/0xd30 [ 487.345964][T25083] netlink_unicast+0x64c/0x870 [ 487.345983][T25083] ? __pfx_netlink_unicast+0x10/0x10 [ 487.346030][T25083] netlink_sendmsg+0x8c8/0xdd0 [ 487.346051][T25083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.346075][T25083] ____sys_sendmsg+0xa5d/0xc30 [ 487.346093][T25083] ? copy_msghdr_from_user+0x10a/0x160 [ 487.346107][T25083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.346130][T25083] ___sys_sendmsg+0x134/0x1d0 [ 487.346144][T25083] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.346175][T25083] __sys_sendmsg+0x16d/0x220 [ 487.346189][T25083] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.346211][T25083] do_syscall_64+0xcd/0xf80 [ 487.346242][T25083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.346255][T25083] RIP: 0033:0x7f417f58f7c9 [ 487.346266][T25083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.346277][T25083] RSP: 002b:00007f418049a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.346289][T25083] RAX: ffffffffffffffda RBX: 00007f417f7e5fa0 RCX: 00007f417f58f7c9 [ 487.346296][T25083] RDX: 0000000000004800 RSI: 0000200000000180 RDI: 0000000000000003 [ 487.346307][T25083] RBP: 00007f418049a090 R08: 0000000000000000 R09: 0000000000000000 [ 487.346314][T25083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.346320][T25083] R13: 00007f417f7e6038 R14: 00007f417f7e5fa0 R15: 00007ffee9403d38 [ 487.346336][T25083] [ 487.390381][T25085] FAULT_INJECTION: forcing a failure. [ 487.390381][T25085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.431130][T25085] CPU: 1 UID: 0 PID: 25085 Comm: syz.7.6888 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.431151][T25085] Tainted: [L]=SOFTLOCKUP [ 487.431155][T25085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.431162][T25085] Call Trace: [ 487.431167][T25085] [ 487.431172][T25085] dump_stack_lvl+0x16c/0x1f0 [ 487.431194][T25085] should_fail_ex+0x512/0x640 [ 487.431207][T25085] _copy_to_user+0x32/0xd0 [ 487.431226][T25085] simple_read_from_buffer+0xcb/0x170 [ 487.431245][T25085] proc_fail_nth_read+0x197/0x240 [ 487.431259][T25085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 487.431272][T25085] ? rw_verify_area+0xcf/0x6c0 [ 487.431286][T25085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 487.431298][T25085] vfs_read+0x1e4/0xcf0 [ 487.431313][T25085] ? __pfx___mutex_lock+0x10/0x10 [ 487.431337][T25085] ? __pfx_vfs_read+0x10/0x10 [ 487.431356][T25085] ? __fget_files+0x20e/0x3c0 [ 487.431377][T25085] ksys_read+0x12a/0x250 [ 487.431391][T25085] ? __pfx_ksys_read+0x10/0x10 [ 487.431410][T25085] do_syscall_64+0xcd/0xf80 [ 487.431428][T25085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.431440][T25085] RIP: 0033:0x7f87e7f8e1dc [ 487.431450][T25085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 487.431462][T25085] RSP: 002b:00007f87e61ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.431473][T25085] RAX: ffffffffffffffda RBX: 00007f87e81e5fa0 RCX: 00007f87e7f8e1dc [ 487.431480][T25085] RDX: 000000000000000f RSI: 00007f87e61ee0a0 RDI: 0000000000000004 [ 487.431487][T25085] RBP: 00007f87e61ee090 R08: 0000000000000000 R09: 0000000000000000 [ 487.431494][T25085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.431501][T25085] R13: 00007f87e81e6038 R14: 00007f87e81e5fa0 R15: 00007fff4ba1c7b8 [ 487.431516][T25085] [ 487.533024][ T66] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 487.657007][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.770498][T25110] mac80211_hwsim hwsim65 : renamed from wlan1 (while UP) [ 488.256106][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 488.256251][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 488.307233][T25141] tipc: Enabled bearer , priority 0 [ 488.310446][T25141] syzkaller0: entered promiscuous mode [ 488.312308][T25141] syzkaller0: entered allmulticast mode [ 488.324536][T25141] FAULT_INJECTION: forcing a failure. [ 488.324536][T25141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.328859][T25141] CPU: 2 UID: 0 PID: 25141 Comm: syz.3.6911 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.328883][T25141] Tainted: [L]=SOFTLOCKUP [ 488.328887][T25141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 488.328895][T25141] Call Trace: [ 488.328900][T25141] [ 488.328906][T25141] dump_stack_lvl+0x16c/0x1f0 [ 488.328926][T25141] should_fail_ex+0x512/0x640 [ 488.328940][T25141] _copy_from_user+0x2e/0xd0 [ 488.328960][T25141] get_user_ifreq+0xf1/0x250 [ 488.328976][T25141] sock_do_ioctl+0x16b/0x280 [ 488.328992][T25141] ? __pfx_sock_do_ioctl+0x10/0x10 [ 488.329011][T25141] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 488.329026][T25141] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 488.329054][T25141] sock_ioctl+0x227/0x6b0 [ 488.329089][T25141] ? __pfx_sock_ioctl+0x10/0x10 [ 488.329111][T25141] ? hook_file_ioctl_common+0x144/0x410 [ 488.329139][T25141] ? selinux_file_ioctl+0x180/0x270 [ 488.329161][T25141] ? selinux_file_ioctl+0xb4/0x270 [ 488.329178][T25141] ? __pfx_sock_ioctl+0x10/0x10 [ 488.329196][T25141] __x64_sys_ioctl+0x18e/0x210 [ 488.329211][T25141] do_syscall_64+0xcd/0xf80 [ 488.329229][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.329241][T25141] RIP: 0033:0x7f9e0138f7c9 [ 488.329252][T25141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.329263][T25141] RSP: 002b:00007f9e021f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.329274][T25141] RAX: ffffffffffffffda RBX: 00007f9e015e5fa0 RCX: 00007f9e0138f7c9 [ 488.329282][T25141] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 488.329289][T25141] RBP: 00007f9e021f4090 R08: 0000000000000000 R09: 0000000000000000 [ 488.329295][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.329302][T25141] R13: 00007f9e015e6038 R14: 00007f9e015e5fa0 R15: 00007fff34ffc0c8 [ 488.329317][T25141] [ 488.330176][T25140] tipc: Resetting bearer [ 488.408885][T25096] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 488.416980][T25096] ref_ctr decrement failed for inode: 0x15c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805ce90000 [ 488.417544][T25140] tipc: Disabling bearer [ 488.420865][T25096] uprobe: syz.9.6893:25096 failed to unregister, leaking uprobe [ 488.560785][T25145] 9pnet_virtio: no channels available for device syz [ 488.651029][T25156] tipc: Enabled bearer , priority 0 [ 488.654201][T25156] syzkaller0: entered promiscuous mode [ 488.655932][T25156] syzkaller0: entered allmulticast mode [ 488.674359][T25155] tipc: Resetting bearer [ 488.690434][T25155] tipc: Disabling bearer [ 488.692064][T25162] binder: 25161:25162 ioctl c0306201 200000000480 returned -22 [ 488.752498][T25176] FAULT_INJECTION: forcing a failure. [ 488.752498][T25176] name failslab, interval 1, probability 0, space 0, times 0 [ 488.757584][T25176] CPU: 2 UID: 0 PID: 25176 Comm: syz.7.6925 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.757614][T25176] Tainted: [L]=SOFTLOCKUP [ 488.757621][T25176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 488.757632][T25176] Call Trace: [ 488.757640][T25176] [ 488.757647][T25176] dump_stack_lvl+0x16c/0x1f0 [ 488.757677][T25176] should_fail_ex+0x512/0x640 [ 488.757694][T25176] ? fs_reclaim_acquire+0xae/0x150 [ 488.757721][T25176] should_failslab+0xc2/0x120 [ 488.757744][T25176] __kmalloc_noprof+0xeb/0x910 [ 488.757761][T25176] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 488.757792][T25176] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 488.757816][T25176] tomoyo_realpath_from_path+0xc2/0x6e0 [ 488.757844][T25176] ? tomoyo_profile+0x47/0x60 [ 488.757863][T25176] tomoyo_path_number_perm+0x245/0x580 [ 488.757884][T25176] ? tomoyo_path_number_perm+0x237/0x580 [ 488.757907][T25176] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 488.757931][T25176] ? find_held_lock+0x2b/0x80 [ 488.757982][T25176] ? find_held_lock+0x2b/0x80 [ 488.758032][T25176] ? hook_file_ioctl_common+0x144/0x410 [ 488.758068][T25176] ? __fget_files+0x20e/0x3c0 [ 488.758099][T25176] security_file_ioctl+0x9b/0x240 [ 488.758126][T25176] __x64_sys_ioctl+0xb7/0x210 [ 488.758149][T25176] do_syscall_64+0xcd/0xf80 [ 488.758176][T25176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.758193][T25176] RIP: 0033:0x7f87e7f8f7c9 [ 488.758208][T25176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.758223][T25176] RSP: 002b:00007f87e61ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.758241][T25176] RAX: ffffffffffffffda RBX: 00007f87e81e5fa0 RCX: 00007f87e7f8f7c9 [ 488.758253][T25176] RDX: 0000200000000500 RSI: 0000000000004b46 RDI: 0000000000000003 [ 488.758263][T25176] RBP: 00007f87e61ee090 R08: 0000000000000000 R09: 0000000000000000 [ 488.758278][T25176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.758288][T25176] R13: 00007f87e81e6038 R14: 00007f87e81e5fa0 R15: 00007fff4ba1c7b8 [ 488.758315][T25176] [ 488.835459][T25176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 489.842243][T25237] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 489.845483][T25237] team0: Device ipvlan2 is already an upper device of the team interface [ 490.033971][T25243] /dev/nullb0: Can't open blockdev [ 490.279233][T25263] FAULT_INJECTION: forcing a failure. [ 490.279233][T25263] name failslab, interval 1, probability 0, space 0, times 0 [ 490.283489][T25263] CPU: 1 UID: 0 PID: 25263 Comm: syz.7.6954 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.283508][T25263] Tainted: [L]=SOFTLOCKUP [ 490.283513][T25263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 490.283520][T25263] Call Trace: [ 490.283525][T25263] [ 490.283531][T25263] dump_stack_lvl+0x16c/0x1f0 [ 490.283551][T25263] should_fail_ex+0x512/0x640 [ 490.283563][T25263] ? kmem_cache_alloc_noprof+0x62/0x770 [ 490.283577][T25263] should_failslab+0xc2/0x120 [ 490.283593][T25263] kmem_cache_alloc_noprof+0x83/0x770 [ 490.283604][T25263] ? find_held_lock+0x2b/0x80 [ 490.283622][T25263] ? getname_flags.part.0+0x4c/0x550 [ 490.283637][T25263] ? getname_flags.part.0+0x4c/0x550 [ 490.283649][T25263] getname_flags.part.0+0x4c/0x550 [ 490.283662][T25263] getname_flags+0x93/0xf0 [ 490.283677][T25263] user_path_at+0x24/0x60 [ 490.283692][T25263] __x64_sys_mount+0x1fb/0x310 [ 490.283705][T25263] ? __pfx___x64_sys_mount+0x10/0x10 [ 490.283720][T25263] do_syscall_64+0xcd/0xf80 [ 490.283739][T25263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.283751][T25263] RIP: 0033:0x7f87e7f8f7c9 [ 490.283761][T25263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.283771][T25263] RSP: 002b:00007f87e61ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 490.283784][T25263] RAX: ffffffffffffffda RBX: 00007f87e81e5fa0 RCX: 00007f87e7f8f7c9 [ 490.283791][T25263] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 490.283797][T25263] RBP: 00007f87e61ee090 R08: 00002000000000c0 R09: 0000000000000000 [ 490.283804][T25263] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 490.283811][T25263] R13: 00007f87e81e6038 R14: 00007f87e81e5fa0 R15: 00007fff4ba1c7b8 [ 490.283825][T25263] [ 490.310060][T25265] ipvlan1: entered promiscuous mode [ 490.353030][T25265] ipvlan1: left promiscuous mode [ 490.490345][T25274] syzkaller0: entered promiscuous mode [ 490.495862][T25274] syzkaller0: entered allmulticast mode [ 490.526732][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 490.526748][ T40] audit: type=1400 audit(1769037712.353:1284): avc: denied { create } for pid=25278 comm="syz.3.6958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 490.538466][ T40] audit: type=1400 audit(1769037712.362:1285): avc: denied { write } for pid=25278 comm="syz.3.6958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 490.538552][T25279] __nla_validate_parse: 7 callbacks suppressed [ 490.538563][T25279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6958'. [ 492.404565][T25279] IPv6: sit1: Disabled Multicast RS [ 492.408778][T25279] sit1: entered allmulticast mode [ 492.482485][ T40] audit: type=1400 audit(1769037714.185:1286): avc: denied { create } for pid=25292 comm="syz.7.6960" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 492.489504][ T40] audit: type=1400 audit(1769037714.185:1287): avc: denied { unlink } for pid=25292 comm="syz.7.6960" name="file0" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 492.539247][T25296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6965'. [ 492.605665][T25289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6962'. [ 492.866893][T25324] FAULT_INJECTION: forcing a failure. [ 492.866893][T25324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.871629][T25324] CPU: 1 UID: 0 PID: 25324 Comm: syz.9.6971 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.871660][T25324] Tainted: [L]=SOFTLOCKUP [ 492.871666][T25324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 492.871677][T25324] Call Trace: [ 492.871685][T25324] [ 492.871694][T25324] dump_stack_lvl+0x16c/0x1f0 [ 492.871726][T25324] should_fail_ex+0x512/0x640 [ 492.871765][T25324] _copy_to_user+0x32/0xd0 [ 492.871797][T25324] simple_read_from_buffer+0xcb/0x170 [ 492.871827][T25324] proc_fail_nth_read+0x197/0x240 [ 492.871850][T25324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.871873][T25324] ? rw_verify_area+0xcf/0x6c0 [ 492.871894][T25324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.871914][T25324] vfs_read+0x1e4/0xcf0 [ 492.871938][T25324] ? __pfx___mutex_lock+0x10/0x10 [ 492.871966][T25324] ? __pfx_vfs_read+0x10/0x10 [ 492.871999][T25324] ? __fget_files+0x20e/0x3c0 [ 492.872034][T25324] ksys_read+0x12a/0x250 [ 492.872057][T25324] ? __pfx_ksys_read+0x10/0x10 [ 492.872078][T25324] ? v4l2_ioctl+0x1c5/0x250 [ 492.872101][T25324] ? fput+0x70/0xf0 [ 492.872123][T25324] do_syscall_64+0xcd/0xf80 [ 492.872152][T25324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.872171][T25324] RIP: 0033:0x7f417f58e1dc [ 492.872193][T25324] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 492.872211][T25324] RSP: 002b:00007f418049a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.872229][T25324] RAX: ffffffffffffffda RBX: 00007f417f7e5fa0 RCX: 00007f417f58e1dc [ 492.872241][T25324] RDX: 000000000000000f RSI: 00007f418049a0a0 RDI: 0000000000000004 [ 492.872252][T25324] RBP: 00007f418049a090 R08: 0000000000000000 R09: 0000000000000000 [ 492.872264][T25324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.872274][T25324] R13: 00007f417f7e6038 R14: 00007f417f7e5fa0 R15: 00007ffee9403d38 [ 492.872299][T25324] [ 492.944279][ T54] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 493.052849][T25330] syzkaller0: entered promiscuous mode [ 493.054774][T25330] syzkaller0: entered allmulticast mode [ 493.124589][ T54] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.129269][ T54] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 493.133970][ T54] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.139442][ T54] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.150686][T25310] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 493.165173][ T54] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.180416][T25335] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6976'. [ 493.372858][ T6024] usb 13-1: USB disconnect, device number 7 [ 495.253048][ T40] audit: type=1400 audit(1769037716.775:1288): avc: denied { setopt } for pid=25352 comm="syz.7.6982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 495.275356][T25353] bond_slave_1: mtu less than device minimum [ 495.278927][ T40] audit: type=1400 audit(1769037716.794:1289): avc: denied { bind } for pid=25352 comm="syz.7.6982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 495.288491][T25353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6982'. [ 495.513397][ T40] audit: type=1400 audit(1769037717.018:1290): avc: denied { mount } for pid=25364 comm="syz.9.6984" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 495.576497][T25372] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6987'. [ 495.687763][T25379] FAULT_INJECTION: forcing a failure. [ 495.687763][T25379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.693237][T25379] CPU: 1 UID: 0 PID: 25379 Comm: syz.9.6989 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.693258][T25379] Tainted: [L]=SOFTLOCKUP [ 495.693263][T25379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 495.693270][T25379] Call Trace: [ 495.693276][T25379] [ 495.693282][T25379] dump_stack_lvl+0x16c/0x1f0 [ 495.693304][T25379] should_fail_ex+0x512/0x640 [ 495.693318][T25379] _copy_from_user+0x2e/0xd0 [ 495.693339][T25379] kstrtouint_from_user+0xd6/0x1d0 [ 495.693354][T25379] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 495.693368][T25379] ? __lock_acquire+0x436/0x2890 [ 495.693386][T25379] ? lock_acquire+0x179/0x330 [ 495.693403][T25379] proc_fail_nth_write+0x83/0x220 [ 495.693419][T25379] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 495.693436][T25379] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 495.693448][T25379] vfs_write+0x2a0/0x11d0 [ 495.693466][T25379] ? __pfx___mutex_lock+0x10/0x10 [ 495.693486][T25379] ? __pfx_vfs_write+0x10/0x10 [ 495.693506][T25379] ? __fget_files+0x20e/0x3c0 [ 495.693529][T25379] ksys_write+0x12a/0x250 [ 495.693544][T25379] ? __pfx_ksys_write+0x10/0x10 [ 495.693565][T25379] do_syscall_64+0xcd/0xf80 [ 495.693584][T25379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.693596][T25379] RIP: 0033:0x7f417f58e27f [ 495.693606][T25379] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 495.693617][T25379] RSP: 002b:00007f418049a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 495.693629][T25379] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f417f58e27f [ 495.693636][T25379] RDX: 0000000000000001 RSI: 00007f418049a0a0 RDI: 0000000000000004 [ 495.693643][T25379] RBP: 00007f418049a090 R08: 0000000000000000 R09: 0000000000000000 [ 495.693650][T25379] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 495.693656][T25379] R13: 00007f417f7e6038 R14: 00007f417f7e5fa0 R15: 00007ffee9403d38 [ 495.693672][T25379] [ 495.878709][T25388] netlink: 'syz.8.6992': attribute type 1 has an invalid length. [ 495.904914][ T40] audit: type=1400 audit(1769037717.383:1291): avc: denied { mount } for pid=25387 comm="syz.8.6992" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 495.924235][ T40] audit: type=1400 audit(1769037717.383:1292): avc: denied { create } for pid=25387 comm="syz.8.6992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 495.930748][ T40] audit: type=1400 audit(1769037717.383:1293): avc: denied { write } for pid=25387 comm="syz.8.6992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 496.016843][ T40] audit: type=1400 audit(1769037717.486:1294): avc: denied { bind } for pid=25401 comm="syz.9.6995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 496.024992][ T40] audit: type=1400 audit(1769037717.486:1295): avc: denied { listen } for pid=25401 comm="syz.9.6995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 496.031326][ T40] audit: type=1400 audit(1769037717.486:1296): avc: denied { connect } for pid=25401 comm="syz.9.6995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 496.037749][ T40] audit: type=1400 audit(1769037717.486:1297): avc: denied { write } for pid=25401 comm="syz.9.6995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 496.131222][ T40] audit: type=1400 audit(1769037717.598:1298): avc: denied { create } for pid=25415 comm="syz.9.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 496.139133][ T40] audit: type=1400 audit(1769037717.598:1299): avc: denied { setopt } for pid=25415 comm="syz.9.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 496.146239][ T40] audit: type=1400 audit(1769037717.598:1300): avc: denied { listen } for pid=25415 comm="syz.9.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 496.174736][T25418] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6999'. [ 496.244565][T25420] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 496.290418][T25420] syzkaller0: entered promiscuous mode [ 496.292696][T25420] syzkaller0: entered allmulticast mode [ 496.542393][T25436] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7004'. [ 498.304591][T25447] pimreg: entered allmulticast mode [ 498.337351][T25449] netlink: 9 bytes leftover after parsing attributes in process `syz.7.7010'. [ 498.341494][T25449] 0·: renamed from hsr0 (while UP) [ 498.351034][T25449] 0·: entered allmulticast mode [ 498.355493][T25449] hsr_slave_0: entered allmulticast mode [ 498.357923][T25449] hsr_slave_1: entered allmulticast mode [ 498.360797][T25449] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 498.377999][T25457] FAULT_INJECTION: forcing a failure. [ 498.377999][T25457] name failslab, interval 1, probability 0, space 0, times 0 [ 498.384526][T25457] CPU: 2 UID: 0 PID: 25457 Comm: syz.9.7012 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.384557][T25457] Tainted: [L]=SOFTLOCKUP [ 498.384563][T25457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 498.384575][T25457] Call Trace: [ 498.384583][T25457] [ 498.384590][T25457] dump_stack_lvl+0x16c/0x1f0 [ 498.384622][T25457] should_fail_ex+0x512/0x640 [ 498.384644][T25457] should_failslab+0xc2/0x120 [ 498.384671][T25457] __kmalloc_noprof+0xeb/0x910 [ 498.384689][T25457] ? hash_netportnet6_add+0x12fe/0x30b0 [ 498.384714][T25457] ? hash_netportnet6_add+0x12fe/0x30b0 [ 498.384730][T25457] hash_netportnet6_add+0x12fe/0x30b0 [ 498.384766][T25457] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 498.384784][T25457] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 498.384806][T25457] ? __lock_acquire+0x436/0x2890 [ 498.384831][T25457] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 498.384850][T25457] hash_netportnet6_uadt+0xc5d/0x1150 [ 498.384883][T25457] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 498.384905][T25457] ? __pfx_hash_netportnet6_uadt+0x10/0x10 [ 498.384939][T25457] ? lock_acquire+0x179/0x330 [ 498.384965][T25457] ? is_bpf_text_address+0x8a/0x1a0 [ 498.384987][T25457] ? bpf_ksym_find+0x127/0x1c0 [ 498.385015][T25457] call_ad.constprop.0+0x16e/0x940 [ 498.385041][T25457] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 498.385061][T25457] ? __pfx___nla_validate_parse+0x10/0x10 [ 498.385095][T25457] ? __nla_parse+0x40/0x60 [ 498.385120][T25457] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 498.385148][T25457] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 498.385170][T25457] ? trace_contention_end+0xdd/0x110 [ 498.385194][T25457] ? __mutex_lock+0x27b/0x1ca0 [ 498.385249][T25457] ? find_held_lock+0x2b/0x80 [ 498.385285][T25457] nfnetlink_rcv_msg+0x9fc/0x1200 [ 498.385315][T25457] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 498.385338][T25457] ? __lock_acquire+0x436/0x2890 [ 498.385384][T25457] ? avc_has_perm_noaudit+0x149/0x3b0 [ 498.385412][T25457] netlink_rcv_skb+0x158/0x420 [ 498.385437][T25457] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 498.385458][T25457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.385496][T25457] ? ns_capable+0xd7/0x110 [ 498.385525][T25457] nfnetlink_rcv+0x1b3/0x430 [ 498.385544][T25457] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 498.385563][T25457] ? netlink_deliver_tap+0x1ae/0xd30 [ 498.385592][T25457] netlink_unicast+0x5aa/0x870 [ 498.385622][T25457] ? __pfx_netlink_unicast+0x10/0x10 [ 498.385658][T25457] netlink_sendmsg+0x8c8/0xdd0 [ 498.385688][T25457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.385724][T25457] ____sys_sendmsg+0xa5d/0xc30 [ 498.385753][T25457] ? copy_msghdr_from_user+0x10a/0x160 [ 498.385775][T25457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.385805][T25457] ? __pfx__kstrtoull+0x10/0x10 [ 498.385833][T25457] ___sys_sendmsg+0x134/0x1d0 [ 498.385857][T25457] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.385893][T25457] ? find_held_lock+0x2b/0x80 [ 498.385963][T25457] __sys_sendmmsg+0x200/0x420 [ 498.385988][T25457] ? __pfx___sys_sendmmsg+0x10/0x10 [ 498.386019][T25457] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.386058][T25457] ? fput+0x70/0xf0 [ 498.386075][T25457] ? ksys_write+0x1ac/0x250 [ 498.386098][T25457] ? __pfx_ksys_write+0x10/0x10 [ 498.386127][T25457] __x64_sys_sendmmsg+0x9c/0x100 [ 498.386148][T25457] ? lockdep_hardirqs_on+0x7c/0x110 [ 498.386174][T25457] do_syscall_64+0xcd/0xf80 [ 498.386207][T25457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.386227][T25457] RIP: 0033:0x7f417f58f7c9 [ 498.386243][T25457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.386262][T25457] RSP: 002b:00007f418049a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.386280][T25457] RAX: ffffffffffffffda RBX: 00007f417f7e5fa0 RCX: 00007f417f58f7c9 [ 498.386293][T25457] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 498.386305][T25457] RBP: 00007f418049a090 R08: 0000000000000000 R09: 0000000000000000 [ 498.386316][T25457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.386327][T25457] R13: 00007f417f7e6038 R14: 00007f417f7e5fa0 R15: 00007ffee9403d38 [ 498.386354][T25457] [ 498.705150][T25471] kvm: user requested TSC rate below hardware speed [ 498.716238][T25471] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3435572954 (219876669056 ns) > initial count (59054907904 ns). Using initial count to start timer. [ 498.723988][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7013'. [ 498.728550][T25471] veth0_to_bond: entered allmulticast mode [ 498.814799][T25492] tipc: Enabled bearer , priority 0 [ 498.818428][T25492] syzkaller0: entered promiscuous mode [ 498.820796][T25492] syzkaller0: entered allmulticast mode [ 498.880522][T25499] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 498.883744][T25499] team0: Device ipvlan2 is already an upper device of the team interface [ 498.950365][T25506] tipc: Resetting bearer [ 498.974413][T25508] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7024'. [ 499.046163][T25516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7027'. [ 499.088439][T25520] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7025'. [ 499.492874][T25542] syzkaller0: entered promiscuous mode [ 499.494777][T25542] syzkaller0: entered allmulticast mode [ 499.502424][T25542] 0: reclassify loop, rule prio 0, protocol 800 [ 499.664389][T25547] syzkaller0: entered promiscuous mode [ 499.666524][T25547] syzkaller0: entered allmulticast mode [ 500.328828][T25557] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7040'. [ 501.629992][T25491] tipc: Resetting bearer [ 501.643591][T25491] tipc: Disabling bearer [ 501.658083][T25549] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 501.661999][T25549] team0: Device ipvlan2 is already an upper device of the team interface [ 501.728798][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 501.728809][ T40] audit: type=1400 audit(1769037722.825:1316): avc: denied { read } for pid=25561 comm="syz.9.7042" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 501.744147][ T40] audit: type=1400 audit(1769037722.834:1317): avc: denied { open } for pid=25561 comm="syz.9.7042" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 501.783589][ T40] audit: type=1400 audit(1769037722.872:1318): avc: denied { ioctl } for pid=25561 comm="syz.9.7042" path="socket:[128991]" dev="sockfs" ino=128991 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 501.796535][T25567] netlink: 'syz.9.7042': attribute type 1 has an invalid length. [ 501.799213][T25567] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7042'. [ 501.899538][T25578] tipc: Enabled bearer , priority 10 [ 502.616341][T25562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 502.621078][T25562] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 502.624635][T25562] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 502.633877][T25562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 502.636015][T25562] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 502.641600][T25562] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 502.697523][T25588] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7050'. [ 502.740735][ T40] audit: type=1400 audit(1769037723.779:1319): avc: denied { append } for pid=25593 comm="syz.9.7053" name="pfkey" dev="proc" ino=4026535603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 502.794541][T25599] syzkaller0: entered promiscuous mode [ 502.796440][T25599] syzkaller0: entered allmulticast mode [ 502.804723][T25599] 0: reclassify loop, rule prio 0, protocol 800 [ 502.841649][ T40] audit: type=1400 audit(1769037723.863:1320): avc: denied { bind } for pid=25596 comm="syz.3.7054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 502.855374][ T40] audit: type=1400 audit(1769037723.863:1321): avc: denied { ioctl } for pid=25596 comm="syz.3.7054" path="socket:[129020]" dev="sockfs" ino=129020 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 502.856326][T25600] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7054'. [ 502.868757][T25602] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7056'. [ 502.870046][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7054'. [ 502.900724][ T2297] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 502.997256][T25609] binder: 25608:25609 ioctl c0306201 0 returned -14 [ 503.001408][ T40] audit: type=1400 audit(1769037724.012:1322): avc: denied { setattr } for pid=25608 comm="syz.9.7059" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 503.002539][T25609] binder: 25608:25609 ioctl c0306201 0 returned -14 [ 503.022327][T25612] netlink: 'syz.7.7057': attribute type 39 has an invalid length. [ 503.069020][ T2297] usb 13-1: Using ep0 maxpacket: 16 [ 503.074264][ T2297] usb 13-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 503.077215][ T2297] usb 13-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 503.080568][ T2297] usb 13-1: Product: syz [ 503.082081][ T2297] usb 13-1: Manufacturer: syz [ 503.083572][ T2297] usb 13-1: SerialNumber: syz [ 503.089095][ T2297] usb 13-1: config 0 descriptor?? [ 503.123119][T25615] syzkaller0: entered promiscuous mode [ 503.124922][T25615] syzkaller0: entered allmulticast mode [ 503.999368][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 504.088517][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 504.092271][ T5941] Bluetooth: hci0: command 0x0419 tx timeout [ 504.854754][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 505.022955][T25569] slcan: can't register candev [ 505.058846][ T2297] usb 13-1: USB disconnect, device number 8 [ 505.178932][T25626] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7062'. [ 505.182393][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7062'. [ 505.236051][ T40] audit: type=1400 audit(1769037726.107:1323): avc: denied { write } for pid=25630 comm="syz.8.7064" name="ipv6_route" dev="proc" ino=4026535355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 505.252217][T25635] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7065'. [ 505.335714][T25646] FAULT_INJECTION: forcing a failure. [ 505.335714][T25646] name failslab, interval 1, probability 0, space 0, times 0 [ 505.340681][T25646] CPU: 0 UID: 0 PID: 25646 Comm: syz.9.7070 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.340711][T25646] Tainted: [L]=SOFTLOCKUP [ 505.340717][T25646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 505.340729][T25646] Call Trace: [ 505.340737][T25646] [ 505.340744][T25646] dump_stack_lvl+0x16c/0x1f0 [ 505.340787][T25646] should_fail_ex+0x512/0x640 [ 505.340803][T25646] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 505.340816][T25646] should_failslab+0xc2/0x120 [ 505.340834][T25646] kmem_cache_alloc_noprof+0x83/0x770 [ 505.340847][T25646] ? skb_clone+0x190/0x3f0 [ 505.340864][T25646] ? skb_clone+0x190/0x3f0 [ 505.340876][T25646] skb_clone+0x190/0x3f0 [ 505.340890][T25646] netlink_deliver_tap+0xabd/0xd30 [ 505.340908][T25646] netlink_unicast+0x64c/0x870 [ 505.340926][T25646] ? __pfx_netlink_unicast+0x10/0x10 [ 505.340948][T25646] netlink_sendmsg+0x8c8/0xdd0 [ 505.340966][T25646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.340988][T25646] ____sys_sendmsg+0xa5d/0xc30 [ 505.341005][T25646] ? copy_msghdr_from_user+0x10a/0x160 [ 505.341019][T25646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.341042][T25646] ___sys_sendmsg+0x134/0x1d0 [ 505.341056][T25646] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.341091][T25646] __sys_sendmsg+0x16d/0x220 [ 505.341105][T25646] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.341127][T25646] do_syscall_64+0xcd/0xf80 [ 505.341145][T25646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.341157][T25646] RIP: 0033:0x7f417f58f7c9 [ 505.341167][T25646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.341179][T25646] RSP: 002b:00007f418049a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.341191][T25646] RAX: ffffffffffffffda RBX: 00007f417f7e5fa0 RCX: 00007f417f58f7c9 [ 505.341198][T25646] RDX: 0000000000004800 RSI: 0000200000000180 RDI: 0000000000000003 [ 505.341205][T25646] RBP: 00007f418049a090 R08: 0000000000000000 R09: 0000000000000000 [ 505.341212][T25646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.341218][T25646] R13: 00007f417f7e6038 R14: 00007f417f7e5fa0 R15: 00007ffee9403d38 [ 505.341234][T25646] [ 505.468892][ T95] bridge_slave_0: left allmulticast mode [ 505.475995][ T95] bridge_slave_0: left promiscuous mode [ 505.478001][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.676207][ T95] batman_adv: batadv0: Removing interface: gretap1 [ 505.714274][ T95] dvmrp17 (unregistering): left allmulticast mode [ 505.884505][ T95] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 505.887233][ T95] bridge1 (unregistering): left promiscuous mode [ 505.964121][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.968230][ T95] bond_slave_0: left promiscuous mode [ 505.971742][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.974963][ T95] bond_slave_1: left promiscuous mode [ 505.978201][ T95] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 505.981580][ T95] bridge_slave_1: left promiscuous mode [ 505.984681][ T95] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 505.987921][ T95] dummy0: left promiscuous mode [ 505.991077][ T95] bond0 (unregistering): Released all slaves [ 505.998151][ T95] bond1 (unregistering): Released all slaves [ 506.125407][ T95] bond2 (unregistering): Released all slaves [ 506.156768][T25673] syzkaller0: entered promiscuous mode [ 506.158556][T25673] syzkaller0: entered allmulticast mode [ 506.197197][T25670] syzkaller0: entered promiscuous mode [ 506.199219][T25670] syzkaller0: entered allmulticast mode [ 506.234498][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 507.089998][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 507.339776][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 507.346820][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 507.349360][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 508.459008][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 509.314845][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 509.571613][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 510.313179][ T95] : left promiscuous mode [ 510.480439][ T40] audit: type=1400 audit(1769037731.006:1324): avc: denied { mount } for pid=25717 comm="syz.8.7085" name="/" dev="autofs" ino=130907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 510.488969][ T40] audit: type=1400 audit(1769037731.015:1325): avc: denied { create } for pid=25712 comm="syz.7.7084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 510.495709][ T40] audit: type=1400 audit(1769037731.015:1326): avc: denied { ioctl } for pid=25712 comm="syz.7.7084" path="socket:[129861]" dev="sockfs" ino=129861 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 510.504430][T25718] netlink: 'syz.8.7085': attribute type 28 has an invalid length. [ 510.504452][T25718] netlink: 'syz.8.7085': attribute type 3 has an invalid length. [ 510.504464][T25718] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7085'. [ 510.559234][ T40] audit: type=1400 audit(1769037731.081:1327): avc: denied { unmount } for pid=23224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 510.689176][T25727] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 510.711903][T25728] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 510.714593][T25728] team0: Device ipvlan2 is already an upper device of the team interface [ 510.721343][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7090'. [ 510.944043][T25736] syzkaller0: entered promiscuous mode [ 510.945844][T25736] syzkaller0: entered allmulticast mode [ 511.471443][ T40] audit: type=1400 audit(1769037731.932:1328): avc: denied { write } for pid=25744 comm="syz.7.7095" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 511.479895][T25747] input: syz1 as /devices/virtual/input/input31 [ 511.485099][ T40] audit: type=1400 audit(1769037731.932:1329): avc: denied { ioctl } for pid=25744 comm="syz.7.7095" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 511.508678][ T40] audit: type=1400 audit(1769037731.969:1330): avc: denied { read } for pid=5331 comm="acpid" name="event4" dev="devtmpfs" ino=3440 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.518128][ T40] audit: type=1400 audit(1769037731.969:1331): avc: denied { open } for pid=5331 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3440 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.527844][ T40] audit: type=1400 audit(1769037731.969:1332): avc: denied { ioctl } for pid=5331 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3440 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.014036][T25754] netlink: 'syz.9.7098': attribute type 28 has an invalid length. [ 512.017445][T25754] netlink: 'syz.9.7098': attribute type 3 has an invalid length. [ 512.020848][T25754] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7098'. [ 512.651610][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 513.148722][T25746] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 513.221259][T25756] input: syz1 as /devices/virtual/input/input32 [ 513.268106][T25762] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 513.271551][T25762] team0: Device ipvlan2 is already an upper device of the team interface [ 513.281941][T25768] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 513.281941][T25768] program syz.9.7104 not setting count and/or reply_len properly [ 513.304702][T25764] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 513.307384][T25764] team0: Device ipvlan0 is already an upper device of the team interface [ 513.363965][T25770] netlink: 176 bytes leftover after parsing attributes in process `syz.9.7105'. [ 513.406233][T25776] FAULT_INJECTION: forcing a failure. [ 513.406233][T25776] name failslab, interval 1, probability 0, space 0, times 0 [ 513.410268][T25776] CPU: 1 UID: 0 PID: 25776 Comm: syz.8.7106 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.410288][T25776] Tainted: [L]=SOFTLOCKUP [ 513.410292][T25776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 513.410300][T25776] Call Trace: [ 513.410306][T25776] [ 513.410312][T25776] dump_stack_lvl+0x16c/0x1f0 [ 513.410334][T25776] should_fail_ex+0x512/0x640 [ 513.410348][T25776] should_failslab+0xc2/0x120 [ 513.410365][T25776] __kmalloc_noprof+0xeb/0x910 [ 513.410376][T25776] ? hash_netportnet6_add+0x12fe/0x30b0 [ 513.410391][T25776] ? hash_netportnet6_add+0x12fe/0x30b0 [ 513.410402][T25776] hash_netportnet6_add+0x12fe/0x30b0 [ 513.410422][T25776] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 513.410433][T25776] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 513.410446][T25776] ? __lock_acquire+0x436/0x2890 [ 513.410462][T25776] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 513.410473][T25776] hash_netportnet6_uadt+0xc5d/0x1150 [ 513.410493][T25776] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 513.410506][T25776] ? __pfx_hash_netportnet6_uadt+0x10/0x10 [ 513.410527][T25776] ? lock_acquire+0x179/0x330 [ 513.410543][T25776] ? is_bpf_text_address+0x8a/0x1a0 [ 513.410556][T25776] ? bpf_ksym_find+0x127/0x1c0 [ 513.410574][T25776] call_ad.constprop.0+0x16e/0x940 [ 513.410589][T25776] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 513.410600][T25776] ? __pfx___nla_validate_parse+0x10/0x10 [ 513.410620][T25776] ? __nla_parse+0x40/0x60 [ 513.410635][T25776] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 513.410652][T25776] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 513.410665][T25776] ? trace_contention_end+0xdd/0x110 [ 513.410679][T25776] ? __mutex_lock+0x27b/0x1ca0 [ 513.410721][T25776] ? find_held_lock+0x2b/0x80 [ 513.410742][T25776] nfnetlink_rcv_msg+0x9fc/0x1200 [ 513.410759][T25776] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 513.410773][T25776] ? __lock_acquire+0x436/0x2890 [ 513.410798][T25776] ? avc_has_perm_noaudit+0x149/0x3b0 [ 513.410814][T25776] netlink_rcv_skb+0x158/0x420 [ 513.410834][T25776] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 513.410847][T25776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.410869][T25776] ? ns_capable+0xd7/0x110 [ 513.410887][T25776] nfnetlink_rcv+0x1b3/0x430 [ 513.410899][T25776] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 513.410911][T25776] ? netlink_deliver_tap+0x1ae/0xd30 [ 513.410928][T25776] netlink_unicast+0x5aa/0x870 [ 513.410946][T25776] ? __pfx_netlink_unicast+0x10/0x10 [ 513.410966][T25776] netlink_sendmsg+0x8c8/0xdd0 [ 513.410984][T25776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.411005][T25776] ____sys_sendmsg+0xa5d/0xc30 [ 513.411022][T25776] ? copy_msghdr_from_user+0x10a/0x160 [ 513.411036][T25776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.411054][T25776] ? __pfx__kstrtoull+0x10/0x10 [ 513.411071][T25776] ___sys_sendmsg+0x134/0x1d0 [ 513.411085][T25776] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.411105][T25776] ? find_held_lock+0x2b/0x80 [ 513.411130][T25776] __sys_sendmmsg+0x200/0x420 [ 513.411146][T25776] ? __pfx___sys_sendmmsg+0x10/0x10 [ 513.411164][T25776] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 513.411186][T25776] ? fput+0x70/0xf0 [ 513.411197][T25776] ? ksys_write+0x1ac/0x250 [ 513.411211][T25776] ? __pfx_ksys_write+0x10/0x10 [ 513.411228][T25776] __x64_sys_sendmmsg+0x9c/0x100 [ 513.411241][T25776] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.411257][T25776] do_syscall_64+0xcd/0xf80 [ 513.411275][T25776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.411287][T25776] RIP: 0033:0x7f081ab8f7c9 [ 513.411297][T25776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.411308][T25776] RSP: 002b:00007f081b9bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 513.411319][T25776] RAX: ffffffffffffffda RBX: 00007f081ade5fa0 RCX: 00007f081ab8f7c9 [ 513.411330][T25776] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 513.411340][T25776] RBP: 00007f081b9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 513.411350][T25776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.411360][T25776] R13: 00007f081ade6038 R14: 00007f081ade5fa0 R15: 00007ffc01400c68 [ 513.411375][T25776] [ 513.653433][ T40] audit: type=1400 audit(1769037733.979:1333): avc: denied { create } for pid=25786 comm="syz.3.7111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 513.657182][ T95] batadv0: left promiscuous mode [ 513.673859][ T95] hsr_slave_0: left promiscuous mode [ 513.678728][ T95] hsr_slave_1: left promiscuous mode [ 513.682002][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.685714][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.800919][T25799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7114'. [ 514.151408][ T95] team0 (unregistering): Port device team_slave_1 removed [ 514.187768][ T95] team0 (unregistering): Port device team_slave_0 removed [ 514.596314][T25806] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 514.600296][T25806] team0: Device ipvlan0 is already an upper device of the team interface [ 514.668087][T25798] syzkaller0: entered promiscuous mode [ 514.669914][T25798] syzkaller0: entered allmulticast mode [ 516.932741][T25840] syzkaller0: entered promiscuous mode [ 516.934856][T25840] syzkaller0: entered allmulticast mode [ 516.944920][T25840] FAULT_INJECTION: forcing a failure. [ 516.944920][T25840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.950262][T25840] CPU: 3 UID: 0 PID: 25840 Comm: syz.7.7122 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.950282][T25840] Tainted: [L]=SOFTLOCKUP [ 516.950286][T25840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 516.950294][T25840] Call Trace: [ 516.950299][T25840] [ 516.950305][T25840] dump_stack_lvl+0x16c/0x1f0 [ 516.950338][T25840] should_fail_ex+0x512/0x640 [ 516.950353][T25840] _copy_from_user+0x2e/0xd0 [ 516.950372][T25840] move_addr_to_kernel+0x65/0x170 [ 516.950393][T25840] __copy_msghdr+0x386/0x470 [ 516.950406][T25840] copy_msghdr_from_user+0xc1/0x160 [ 516.950420][T25840] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 516.950440][T25840] ___sys_sendmsg+0xfe/0x1d0 [ 516.950453][T25840] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.950484][T25840] __sys_sendmsg+0x16d/0x220 [ 516.950497][T25840] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.950520][T25840] do_syscall_64+0xcd/0xf80 [ 516.950538][T25840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.950550][T25840] RIP: 0033:0x7f87e7f8f7c9 [ 516.950561][T25840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.950577][T25840] RSP: 002b:00007f87e61ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.950593][T25840] RAX: ffffffffffffffda RBX: 00007f87e81e5fa0 RCX: 00007f87e7f8f7c9 [ 516.950601][T25840] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000007 [ 516.950607][T25840] RBP: 00007f87e61ee090 R08: 0000000000000000 R09: 0000000000000000 [ 516.950614][T25840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.950621][T25840] R13: 00007f87e81e6038 R14: 00007f87e81e5fa0 R15: 00007fff4ba1c7b8 [ 516.950636][T25840] [ 517.054270][T25848] netlink: 176 bytes leftover after parsing attributes in process `syz.9.7125'. [ 517.167157][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 517.167174][ T40] audit: type=1400 audit(1769037737.261:1339): avc: denied { bind } for pid=25855 comm="syz.9.7126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 517.192059][ T40] audit: type=1400 audit(1769037737.261:1340): avc: denied { name_bind } for pid=25855 comm="syz.9.7126" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 517.200381][ T40] audit: type=1400 audit(1769037737.261:1341): avc: denied { node_bind } for pid=25855 comm="syz.9.7126" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 517.290571][T25862] syzkaller0: entered promiscuous mode [ 517.292462][T25862] syzkaller0: entered allmulticast mode [ 517.305135][T25865] netlink: 'syz.9.7129': attribute type 89 has an invalid length. [ 517.307418][T25866] comedi comedi0: comedi_config --init_data is deprecated [ 517.308171][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7129'. [ 517.625661][ T34] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 517.647530][T25889] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7134'. [ 517.822546][ T34] usb 14-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 517.827117][ T34] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.832283][ T34] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.836447][ T34] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 517.843300][ T34] usb 14-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 517.847075][ T34] usb 14-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 517.850885][ T34] usb 14-1: Manufacturer: syz [ 517.855140][ T34] usb 14-1: config 0 descriptor?? [ 518.301053][ T34] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 518.319346][ T34] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 519.372424][T12522] usb 14-1: USB disconnect, device number 4 [ 519.439768][ T40] audit: type=1400 audit(1769037739.384:1342): avc: denied { read } for pid=25896 comm="syz.3.7137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 519.476010][T25901] FAULT_INJECTION: forcing a failure. [ 519.476010][T25901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.480533][T25901] CPU: 3 UID: 0 PID: 25901 Comm: syz.8.7138 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.480563][T25901] Tainted: [L]=SOFTLOCKUP [ 519.480571][T25901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 519.480584][T25901] Call Trace: [ 519.480590][T25901] [ 519.480598][T25901] dump_stack_lvl+0x16c/0x1f0 [ 519.480627][T25901] should_fail_ex+0x512/0x640 [ 519.480661][T25901] _copy_to_user+0x32/0xd0 [ 519.480680][T25901] simple_read_from_buffer+0xcb/0x170 [ 519.480699][T25901] proc_fail_nth_read+0x197/0x240 [ 519.480713][T25901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.480726][T25901] ? rw_verify_area+0xcf/0x6c0 [ 519.480740][T25901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.480752][T25901] vfs_read+0x1e4/0xcf0 [ 519.480771][T25901] ? __pfx___mutex_lock+0x10/0x10 [ 519.480791][T25901] ? __pfx_vfs_read+0x10/0x10 [ 519.480810][T25901] ? __fget_files+0x20e/0x3c0 [ 519.480831][T25901] ksys_read+0x12a/0x250 [ 519.480845][T25901] ? __pfx_ksys_read+0x10/0x10 [ 519.480864][T25901] do_syscall_64+0xcd/0xf80 [ 519.480881][T25901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.480893][T25901] RIP: 0033:0x7f081ab8e1dc [ 519.480904][T25901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 519.480915][T25901] RSP: 002b:00007f081b9bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.480927][T25901] RAX: ffffffffffffffda RBX: 00007f081ade5fa0 RCX: 00007f081ab8e1dc [ 519.480934][T25901] RDX: 000000000000000f RSI: 00007f081b9bd0a0 RDI: 0000000000000009 [ 519.480941][T25901] RBP: 00007f081b9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 519.480948][T25901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.480955][T25901] R13: 00007f081ade6038 R14: 00007f081ade5fa0 R15: 00007ffc01400c68 [ 519.480970][T25901] [ 519.577333][ T40] audit: type=1400 audit(1769037739.515:1343): avc: denied { ioctl } for pid=25906 comm="syz.7.7140" path="socket:[131058]" dev="sockfs" ino=131058 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 519.619844][T25905] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.622691][T25905] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.671568][T25905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.678880][T25905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.771967][ T78] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.775649][ T78] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.779177][ T78] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.782653][ T78] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.797306][T25916] netlink: 212328 bytes leftover after parsing attributes in process `syz.8.7143'. [ 519.801249][T25916] netlink: ct family unspecified [ 519.814279][ T40] audit: type=1400 audit(1769037739.739:1344): avc: denied { setattr } for pid=25914 comm="syz.8.7143" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 519.847374][T25919] netlink: 176 bytes leftover after parsing attributes in process `syz.7.7144'. [ 519.928187][T25924] syzkaller0: entered promiscuous mode [ 519.930125][T25924] syzkaller0: entered allmulticast mode [ 521.037309][T25937] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7150'. [ 521.041063][T25937] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7150'. [ 522.320071][T25930] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 522.324111][T25930] team0: Device ipvlan2 is already an upper device of the team interface [ 522.411875][ T66] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 522.415574][T25947] binder: 25946:25947 ioctl c0306201 0 returned -14 [ 522.419375][T25947] binder: 25946:25947 ioctl c0306201 0 returned -14 [ 522.474176][ T40] audit: type=1400 audit(1769037742.226:1345): avc: denied { create } for pid=25952 comm="syz.3.7157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 522.482353][T25942] netlink: 176 bytes leftover after parsing attributes in process `syz.7.7153'. [ 522.486075][ T40] audit: type=1400 audit(1769037742.235:1346): avc: denied { setopt } for pid=25952 comm="syz.3.7157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 522.504565][ T40] audit: type=1400 audit(1769037742.245:1347): avc: denied { block_suspend } for pid=25952 comm="syz.3.7157" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.518236][T25957] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7158'. [ 522.538417][T25961] bridge0: port 3(gretap0) entered blocking state [ 522.542010][T25961] bridge0: port 3(gretap0) entered disabled state [ 522.544910][T25961] gretap0: entered allmulticast mode [ 522.549101][T25961] gretap0: entered promiscuous mode [ 522.551309][T25961] bridge0: port 3(gretap0) entered blocking state [ 522.554632][T25961] bridge0: port 3(gretap0) entered forwarding state [ 522.722400][T25967] TCP: TCP_TX_DELAY enabled [ 522.800131][T25969] syzkaller0: entered promiscuous mode [ 522.802350][T25969] syzkaller0: entered allmulticast mode [ 525.553457][ T40] audit: type=1400 audit(1769037745.106:1348): avc: denied { read } for pid=25974 comm="syz.9.7165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 525.560224][ T40] audit: type=1400 audit(1769037745.106:1349): avc: denied { setattr } for pid=25974 comm="syz.9.7165" name="RDS" dev="sockfs" ino=131567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 525.595085][T25977] netlink: 'syz.7.7166': attribute type 64 has an invalid length. [ 525.598286][T25977] netlink: 'syz.7.7166': attribute type 4 has an invalid length. [ 525.601508][T25977] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7166'. [ 525.633333][T25980] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 525.637615][T25980] team0: Device ipvlan2 is already an upper device of the team interface [ 525.647545][T25983] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7169'. [ 525.671562][ T40] audit: type=1400 audit(1769037745.218:1350): avc: denied { append } for pid=25984 comm="syz.7.7170" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 525.793313][T25991] FAULT_INJECTION: forcing a failure. [ 525.793313][T25991] name failslab, interval 1, probability 0, space 0, times 0 [ 525.799333][T25991] CPU: 3 UID: 0 PID: 25991 Comm: syz.8.7172 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.799365][T25991] Tainted: [L]=SOFTLOCKUP [ 525.799371][T25991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 525.799381][T25991] Call Trace: [ 525.799387][T25991] [ 525.799394][T25991] dump_stack_lvl+0x16c/0x1f0 [ 525.799425][T25991] should_fail_ex+0x512/0x640 [ 525.799441][T25991] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 525.799462][T25991] should_failslab+0xc2/0x120 [ 525.799486][T25991] kmem_cache_alloc_node_noprof+0x86/0x800 [ 525.799505][T25991] ? __alloc_skb+0x156/0x410 [ 525.799527][T25991] ? __alloc_skb+0x156/0x410 [ 525.799541][T25991] __alloc_skb+0x156/0x410 [ 525.799555][T25991] ? __alloc_skb+0x35d/0x410 [ 525.799571][T25991] ? __pfx___alloc_skb+0x10/0x10 [ 525.799586][T25991] ? genl_rcv_msg+0x480/0x800 [ 525.799610][T25991] ? genl_rcv_msg+0x4bb/0x800 [ 525.799641][T25991] netlink_ack+0x15d/0xb80 [ 525.799672][T25991] netlink_rcv_skb+0x332/0x420 [ 525.799695][T25991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.799721][T25991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.799753][T25991] ? netlink_deliver_tap+0x1ae/0xd30 [ 525.799778][T25991] genl_rcv+0x28/0x40 [ 525.799800][T25991] netlink_unicast+0x5aa/0x870 [ 525.799826][T25991] ? __pfx_netlink_unicast+0x10/0x10 [ 525.799857][T25991] netlink_sendmsg+0x8c8/0xdd0 [ 525.799883][T25991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.799913][T25991] ____sys_sendmsg+0xa5d/0xc30 [ 525.799939][T25991] ? copy_msghdr_from_user+0x10a/0x160 [ 525.799967][T25991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.800002][T25991] ___sys_sendmsg+0x134/0x1d0 [ 525.800023][T25991] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.800071][T25991] __sys_sendmsg+0x16d/0x220 [ 525.800090][T25991] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.800119][T25991] ? fput+0x70/0xf0 [ 525.800140][T25991] do_syscall_64+0xcd/0xf80 [ 525.800166][T25991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.800182][T25991] RIP: 0033:0x7f081ab8f7c9 [ 525.800196][T25991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.800212][T25991] RSP: 002b:00007f081b9bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.800229][T25991] RAX: ffffffffffffffda RBX: 00007f081ade5fa0 RCX: 00007f081ab8f7c9 [ 525.800241][T25991] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 525.800251][T25991] RBP: 00007f081b9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 525.800261][T25991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.800270][T25991] R13: 00007f081ade6038 R14: 00007f081ade5fa0 R15: 00007ffc01400c68 [ 525.800293][T25991] [ 525.863362][T25995] FAULT_INJECTION: forcing a failure. [ 525.863362][T25995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.873789][ T40] audit: type=1400 audit(1769037745.405:1351): avc: denied { read } for pid=25984 comm="syz.7.7170" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 525.878444][T25995] CPU: 0 UID: 0 PID: 25995 Comm: syz.3.7174 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.878477][T25995] Tainted: [L]=SOFTLOCKUP [ 525.878484][T25995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 525.878495][T25995] Call Trace: [ 525.878503][T25995] [ 525.878511][T25995] dump_stack_lvl+0x16c/0x1f0 [ 525.878544][T25995] should_fail_ex+0x512/0x640 [ 525.878566][T25995] _copy_from_user+0x2e/0xd0 [ 525.878597][T25995] kstrtouint_from_user+0xd6/0x1d0 [ 525.878618][T25995] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 525.878638][T25995] ? __lock_acquire+0x436/0x2890 [ 525.878665][T25995] ? lock_acquire+0x179/0x330 [ 525.878690][T25995] proc_fail_nth_write+0x83/0x220 [ 525.878714][T25995] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 525.878741][T25995] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 525.878760][T25995] vfs_write+0x2a0/0x11d0 [ 525.878787][T25995] ? __pfx___mutex_lock+0x10/0x10 [ 525.878815][T25995] ? __pfx_vfs_write+0x10/0x10 [ 525.878847][T25995] ? __fget_files+0x20e/0x3c0 [ 525.878894][T25995] ksys_write+0x12a/0x250 [ 525.878919][T25995] ? __pfx_ksys_write+0x10/0x10 [ 525.878952][T25995] do_syscall_64+0xcd/0xf80 [ 525.878984][T25995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.879004][T25995] RIP: 0033:0x7f9e0138e27f [ 525.879020][T25995] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 525.879039][T25995] RSP: 002b:00007f9e021f4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 525.879057][T25995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9e0138e27f [ 525.879088][T25995] RDX: 0000000000000001 RSI: 00007f9e021f40a0 RDI: 0000000000000004 [ 525.879180][T25995] RBP: 00007f9e021f4090 R08: 0000000000000000 R09: 0000000000000000 [ 525.879202][T25995] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 525.879211][T25995] R13: 00007f9e015e6038 R14: 00007f9e015e5fa0 R15: 00007fff34ffc0c8 [ 525.879241][T25995] [ 525.985212][T25997] syzkaller0: entered promiscuous mode [ 526.033248][T25997] syzkaller0: entered allmulticast mode [ 526.673106][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.023043][ T40] audit: type=1400 audit(1769037746.471:1352): avc: denied { write } for pid=26015 comm="syz.8.7180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 527.128337][T26016] XFS (nullb0): Invalid superblock magic number [ 527.361746][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.368182][T26033] bridge_slave_0: left allmulticast mode [ 528.370543][T26033] bridge_slave_0: left promiscuous mode [ 528.373134][T26033] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.379282][T26033] bridge_slave_1: left allmulticast mode [ 528.381743][T26033] bridge_slave_1: left promiscuous mode [ 528.383768][T26033] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.398922][T26033] bond0: (slave bond_slave_0): Releasing backup interface [ 528.402219][T26033] bond_slave_0: left promiscuous mode [ 528.407344][T26033] bond0: (slave bond_slave_1): Releasing backup interface [ 528.411342][T26033] bond_slave_1: left promiscuous mode [ 528.414737][T26033] team0: Port device team_slave_0 removed [ 528.419434][T26033] team0: Port device team_slave_1 removed [ 528.421496][T26033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.425374][T26033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.429121][T26033] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.442720][T26041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7189'. [ 528.490571][ T40] audit: type=1400 audit(1769037747.845:1353): avc: denied { map } for pid=26044 comm="syz.7.7190" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 528.530234][ T40] audit: type=1400 audit(1769037747.883:1354): avc: denied { shutdown } for pid=26051 comm="syz.9.7194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 528.542460][T26057] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7195'. [ 528.592680][T26058] syzkaller0: entered promiscuous mode [ 528.594586][T26058] syzkaller0: entered allmulticast mode [ 528.610552][T26059] overlayfs: missing 'workdir' [ 530.666093][ T40] audit: type=1400 audit(1769037749.884:1355): avc: denied { setopt } for pid=26082 comm="syz.8.7205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 530.674124][ T40] audit: type=1400 audit(1769037749.884:1356): avc: denied { write } for pid=26082 comm="syz.8.7205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 530.703520][ T40] audit: type=1400 audit(1769037749.912:1357): avc: denied { setopt } for pid=26084 comm="syz.7.7203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 530.776860][T26099] syzkaller0: entered promiscuous mode [ 530.778896][T26099] syzkaller0: entered allmulticast mode [ 530.781709][ T5941] Bluetooth: hci0: command 0x0419 tx timeout [ 530.781806][ T66] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 531.034145][ T40] audit: type=1400 audit(1769037750.220:1358): avc: denied { ioctl } for pid=26113 comm="syz.9.7216" path="socket:[134445]" dev="sockfs" ino=134445 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 532.899469][ T40] audit: type=1400 audit(1769037751.978:1359): avc: denied { read } for pid=5648 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 532.942946][ T40] audit: type=1400 audit(1769037752.016:1360): avc: denied { execute } for pid=26130 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 532.948233][T26131] overlayfs: missing 'lowerdir' [ 532.955828][ T40] audit: type=1400 audit(1769037752.025:1361): avc: denied { execute_no_trans } for pid=26130 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 533.047487][T26136] FAULT_INJECTION: forcing a failure. [ 533.047487][T26136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.051859][T26136] CPU: 0 UID: 0 PID: 26136 Comm: syz.8.7225 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.051879][T26136] Tainted: [L]=SOFTLOCKUP [ 533.051884][T26136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.051891][T26136] Call Trace: [ 533.051896][T26136] [ 533.051902][T26136] dump_stack_lvl+0x16c/0x1f0 [ 533.051924][T26136] should_fail_ex+0x512/0x640 [ 533.051937][T26136] _copy_from_user+0x2e/0xd0 [ 533.051957][T26136] copy_msghdr_from_user+0x98/0x160 [ 533.051971][T26136] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 533.051991][T26136] ___sys_sendmsg+0xfe/0x1d0 [ 533.052005][T26136] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.052035][T26136] __sys_sendmsg+0x16d/0x220 [ 533.052049][T26136] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.052071][T26136] do_syscall_64+0xcd/0xf80 [ 533.052089][T26136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.052101][T26136] RIP: 0033:0x7f081ab8f7c9 [ 533.052111][T26136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.052123][T26136] RSP: 002b:00007f081b9bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.052134][T26136] RAX: ffffffffffffffda RBX: 00007f081ade5fa0 RCX: 00007f081ab8f7c9 [ 533.052142][T26136] RDX: 00000000000440c0 RSI: 00002000000005c0 RDI: 0000000000000004 [ 533.052149][T26136] RBP: 00007f081b9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 533.052155][T26136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.052162][T26136] R13: 00007f081ade6038 R14: 00007f081ade5fa0 R15: 00007ffc01400c68 [ 533.052177][T26136] [ 533.118461][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.126196][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.131972][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.136769][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.139322][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.149746][ T40] audit: type=1400 audit(1769037752.203:1362): avc: denied { mounton } for pid=26137 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 533.236530][ T40] audit: type=1400 audit(1769037752.287:1363): avc: denied { ioctl } for pid=26145 comm="syz.8.7228" path="socket:[132787]" dev="sockfs" ino=132787 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 533.280344][T26146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7228'. [ 533.493515][T26156] syzkaller0: entered promiscuous mode [ 533.495534][T26156] syzkaller0: entered allmulticast mode [ 533.867345][T26159] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 534.459089][ T66] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 534.470810][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 535.315131][ T66] Bluetooth: hci2: command tx timeout [ 535.376598][T26163] tipc: Enabled bearer , priority 0 [ 535.379972][T26137] chnl_net:caif_netlink_parms(): no params data found [ 535.388359][T26163] tipc: Disabling bearer [ 535.479629][ T40] audit: type=1400 audit(1769037754.381:1364): avc: denied { mount } for pid=26170 comm="syz.8.7234" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 535.500136][ T40] audit: type=1400 audit(1769037754.409:1365): avc: denied { watch } for pid=26170 comm="syz.8.7234" path="/205/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 535.500310][T26173] FAULT_INJECTION: forcing a failure. [ 535.500310][T26173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.512742][ T40] audit: type=1400 audit(1769037754.409:1366): avc: denied { read } for pid=26170 comm="syz.8.7234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 535.517923][T26173] CPU: 2 UID: 0 PID: 26173 Comm: syz.9.7235 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.517953][T26173] Tainted: [L]=SOFTLOCKUP [ 535.517960][T26173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 535.517971][T26173] Call Trace: [ 535.517979][T26173] [ 535.517987][T26173] dump_stack_lvl+0x16c/0x1f0 [ 535.518018][T26173] should_fail_ex+0x512/0x640 [ 535.518040][T26173] _copy_from_user+0x2e/0xd0 [ 535.518071][T26173] vt_do_kdsk_ioctl+0x92/0xbb0 [ 535.518096][T26173] ? rcu_is_watching+0x12/0xc0 [ 535.518115][T26173] ? __pfx_vt_do_kdsk_ioctl+0x10/0x10 [ 535.518143][T26173] ? bpf_lsm_capable+0x9/0x10 [ 535.518164][T26173] ? security_capable+0x7e/0x260 [ 535.518189][T26173] vt_ioctl+0xbb9/0x30a0 [ 535.518221][T26173] ? __pfx_vt_ioctl+0x10/0x10 [ 535.518255][T26173] ? tomoyo_path_number_perm+0x18d/0x580 [ 535.518289][T26173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 535.518312][T26173] ? tty_jobctrl_ioctl+0x152/0xe00 [ 535.518344][T26173] ? __pfx_vt_ioctl+0x10/0x10 [ 535.518370][T26173] tty_ioctl+0x661/0x1650 [ 535.518394][T26173] ? __pfx_tty_ioctl+0x10/0x10 [ 535.518417][T26173] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 535.518453][T26173] ? hook_file_ioctl_common+0x144/0x410 [ 535.518479][T26173] ? selinux_file_ioctl+0x180/0x270 [ 535.518503][T26173] ? selinux_file_ioctl+0xb4/0x270 [ 535.518531][T26173] ? __pfx_tty_ioctl+0x10/0x10 [ 535.518559][T26173] __x64_sys_ioctl+0x18e/0x210 [ 535.518585][T26173] do_syscall_64+0xcd/0xf80 [ 535.518614][T26173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.518633][T26173] RIP: 0033:0x7f417f58f7c9 [ 535.518648][T26173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.518666][T26173] RSP: 002b:00007f418049a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.518685][T26173] RAX: ffffffffffffffda RBX: 00007f417f7e5fa0 RCX: 00007f417f58f7c9 [ 535.518698][T26173] RDX: 0000200000000500 RSI: 0000000000004b46 RDI: 0000000000000003 [ 535.518709][T26173] RBP: 00007f418049a090 R08: 0000000000000000 R09: 0000000000000000 [ 535.518720][T26173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.518730][T26173] R13: 00007f417f7e6038 R14: 00007f417f7e5fa0 R15: 00007ffee9403d38 [ 535.518757][T26173] [ 535.617505][ T40] audit: type=1400 audit(1769037754.456:1367): avc: denied { mounton } for pid=26170 comm="syz.8.7234" path="/proc/528/cgroup" dev="proc" ino=131868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 535.656404][T26137] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.660749][T26137] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.663984][T26137] bridge_slave_0: entered allmulticast mode [ 535.672763][T26137] bridge_slave_0: entered promiscuous mode [ 535.685479][T26185] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 535.698326][T26137] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.701126][T26137] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.704401][T26137] bridge_slave_1: entered allmulticast mode [ 535.708810][T26137] bridge_slave_1: entered promiscuous mode [ 535.746606][T26137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.753168][T26137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.786636][T26137] team0: Port device team_slave_0 added [ 535.801292][T26137] team0: Port device team_slave_1 added [ 535.839160][T26137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.841539][T26137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.849681][T26137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.861890][T26137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.864312][T26137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.872655][T26137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.919942][T26194] syzkaller0: entered promiscuous mode [ 535.921755][T26194] syzkaller0: entered allmulticast mode [ 535.949167][T26137] hsr_slave_0: entered promiscuous mode [ 535.952431][T26137] hsr_slave_1: entered promiscuous mode [ 535.955532][T26137] debugfs: 'hsr0' already exists in 'hsr' [ 535.957658][T26137] Cannot create hsr debugfs directory [ 536.437461][ T40] audit: type=1400 audit(1769037755.279:1368): avc: denied { unmount } for pid=23224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 537.544217][ T66] Bluetooth: hci2: command tx timeout [ 537.719645][T26209] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 538.291794][T26219] netlink: 'syz.8.7250': attribute type 1 has an invalid length. [ 538.310736][ C1] ================================================================== [ 538.313348][ C1] BUG: KASAN: slab-use-after-free in timer_is_static_object+0x80/0x90 [ 538.315935][ C1] Read of size 8 at addr ffff888102f35098 by task syz.9.7255/26227 [ 538.319145][ C1] [ 538.320678][ C1] CPU: 1 UID: 0 PID: 26227 Comm: syz.9.7255 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.320696][ C1] Tainted: [L]=SOFTLOCKUP [ 538.320701][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 538.320708][ C1] Call Trace: [ 538.320714][ C1] [ 538.320719][ C1] dump_stack_lvl+0x116/0x1f0 [ 538.320738][ C1] print_report+0xcd/0x630 [ 538.320754][ C1] ? __virt_addr_valid+0x81/0x610 [ 538.320765][ C1] ? __phys_addr+0xe8/0x180 [ 538.320775][ C1] ? timer_is_static_object+0x80/0x90 [ 538.320792][ C1] kasan_report+0xe0/0x110 [ 538.320811][ C1] ? timer_is_static_object+0x80/0x90 [ 538.320829][ C1] timer_is_static_object+0x80/0x90 [ 538.320846][ C1] lookup_object_or_alloc.part.0+0x420/0x590 [ 538.320863][ C1] debug_object_activate+0x326/0x4c0 [ 538.320877][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 538.320891][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 538.320907][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 538.320919][ C1] ? lock_timer_base+0x127/0x1d0 [ 538.320935][ C1] ? lock_timer_base+0x16c/0x1d0 [ 538.320952][ C1] __mod_timer+0x814/0xd30 [ 538.320967][ C1] ? __pfx___mod_timer+0x10/0x10 [ 538.320981][ C1] ? __timer_delete+0xf5/0x1c0 [ 538.320993][ C1] ? __pfx___timer_delete+0x10/0x10 [ 538.321005][ C1] ? rose_send_frame+0x16c/0x2c0 [ 538.321022][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 538.321039][ C1] add_timer+0x62/0x90 [ 538.321052][ C1] call_timer_fn+0x19a/0x5a0 [ 538.321064][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 538.321078][ C1] ? mark_held_locks+0x49/0x80 [ 538.321091][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 538.321108][ C1] __run_timers+0x74a/0xae0 [ 538.321123][ C1] ? __pfx___run_timers+0x10/0x10 [ 538.321140][ C1] run_timer_base+0x114/0x190 [ 538.321153][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 538.321167][ C1] run_timer_softirq+0x1a/0x40 [ 538.321180][ C1] handle_softirqs+0x219/0x950 [ 538.321197][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 538.321213][ C1] __irq_exit_rcu+0x109/0x170 [ 538.321228][ C1] irq_exit_rcu+0x9/0x30 [ 538.321243][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 538.321258][ C1] [ 538.321262][ C1] [ 538.321266][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.321278][ C1] RIP: 0010:write_comp_data+0x8b/0x90 [ 538.321291][ C1] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 50 08 bd 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 538.321302][ C1] RSP: 0018:ffffc90003d67548 EFLAGS: 00000293 [ 538.321312][ C1] RAX: 0000000000000000 RBX: 1ffff920007aceaa RCX: ffffffff8235208e [ 538.321319][ C1] RDX: ffff8880485424c0 RSI: 0000000000000005 RDI: 0000000000000007 [ 538.321326][ C1] RBP: 800000011af9c007 R08: 0000000000000007 R09: 0000000000000005 [ 538.321333][ C1] R10: 0000000000000005 R11: ffff888048542ff0 R12: 0000000000000005 [ 538.321339][ C1] R13: ffff88805a6bfcc8 R14: dffffc0000000000 R15: 0000000000000000 [ 538.321348][ C1] ? __page_table_check_pte_clear+0x9e/0x100 [ 538.321365][ C1] __page_table_check_pte_clear+0x9e/0x100 [ 538.321379][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 538.321393][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 538.321411][ C1] unmap_page_range+0x253c/0x42a0 [ 538.321430][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 538.321444][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 538.321461][ C1] ? uprobe_munmap+0x93/0x600 [ 538.321472][ C1] unmap_single_vma+0x153/0x240 [ 538.321486][ C1] unmap_vmas+0x218/0x470 [ 538.321501][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 538.321514][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 538.321534][ C1] exit_mmap+0x1b0/0xb60 [ 538.321568][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 538.321583][ C1] ? __lock_acquire+0x436/0x2890 [ 538.321598][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 538.321613][ C1] __mmput+0x12a/0x410 [ 538.321629][ C1] mmput+0x62/0x70 [ 538.321643][ C1] do_exit+0x7d7/0x2bd0 [ 538.321655][ C1] ? __pfx_do_exit+0x10/0x10 [ 538.321666][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 538.321680][ C1] ? find_held_lock+0x2b/0x80 [ 538.321697][ C1] do_group_exit+0xd3/0x2a0 [ 538.321708][ C1] get_signal+0x2671/0x26d0 [ 538.321727][ C1] ? __pfx_get_signal+0x10/0x10 [ 538.321742][ C1] ? do_futex+0x122/0x350 [ 538.321757][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 538.321773][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 538.321790][ C1] ? fput+0x70/0xf0 [ 538.321802][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 538.321819][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 538.321834][ C1] do_syscall_64+0x4ee/0xf80 [ 538.321850][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.321860][ C1] RIP: 0033:0x7f417f58f7c9 [ 538.321869][ C1] Code: Unable to access opcode bytes at 0x7f417f58f79f. [ 538.321874][ C1] RSP: 002b:00007f418049a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 538.321884][ C1] RAX: fffffffffffffe00 RBX: 00007f417f7e5fa8 RCX: 00007f417f58f7c9 [ 538.321891][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f417f7e5fa8 [ 538.321897][ C1] RBP: 00007f417f7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 538.321904][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.321910][ C1] R13: 00007f417f7e6038 R14: 00007ffee9403c50 R15: 00007ffee9403d38 [ 538.321921][ C1] [ 538.321924][ C1] [ 538.500523][ C1] Allocated by task 20282: [ 538.501991][ C1] kasan_save_stack+0x33/0x60 [ 538.503492][ C1] kasan_save_track+0x14/0x30 [ 538.504978][ C1] __kasan_kmalloc+0xaa/0xb0 [ 538.506433][ C1] rose_rt_ioctl+0x880/0x2580 [ 538.507930][ C1] rose_ioctl+0x64d/0x7c0 [ 538.509327][ C1] sock_do_ioctl+0x118/0x280 [ 538.510795][ C1] sock_ioctl+0x227/0x6b0 [ 538.512185][ C1] __x64_sys_ioctl+0x18e/0x210 [ 538.513766][ C1] do_syscall_64+0xcd/0xf80 [ 538.515357][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.517262][ C1] [ 538.518053][ C1] Freed by task 0: [ 538.519383][ C1] kasan_save_stack+0x33/0x60 [ 538.520886][ C1] kasan_save_track+0x14/0x30 [ 538.522433][ C1] kasan_save_free_info+0x3b/0x60 [ 538.524030][ C1] __kasan_slab_free+0x5f/0x80 [ 538.525567][ C1] kfree+0x2f8/0x6e0 [ 538.526828][ C1] rose_timer_expiry+0x53f/0x630 [ 538.528403][ C1] call_timer_fn+0x19a/0x5a0 [ 538.529896][ C1] __run_timers+0x74a/0xae0 [ 538.531353][ C1] run_timer_base+0x114/0x190 [ 538.532857][ C1] run_timer_softirq+0x1a/0x40 [ 538.534347][ C1] handle_softirqs+0x219/0x950 [ 538.535879][ C1] __irq_exit_rcu+0x109/0x170 [ 538.537372][ C1] irq_exit_rcu+0x9/0x30 [ 538.538734][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 538.540512][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.542468][ C1] [ 538.543245][ C1] The buggy address belongs to the object at ffff888102f35000 [ 538.543245][ C1] which belongs to the cache kmalloc-512 of size 512 [ 538.548025][ C1] The buggy address is located 152 bytes inside of [ 538.548025][ C1] freed 512-byte region [ffff888102f35000, ffff888102f35200) [ 538.552289][ C1] [ 538.553064][ C1] The buggy address belongs to the physical page: [ 538.555098][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102f34 [ 538.557878][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 538.560376][ C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 538.562582][ C1] page_type: f5(slab) [ 538.564196][ C1] raw: 057ff00000000040 ffff88801b442c80 ffffea000416d000 dead000000000002 [ 538.566934][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 538.569290][ C1] head: 057ff00000000040 ffff88801b442c80 ffffea000416d000 dead000000000002 [ 538.572044][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 538.574759][ C1] head: 057ff00000000002 ffffea00040bcd01 00000000ffffffff 00000000ffffffff [ 538.577469][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 538.580183][ C1] page dumped because: kasan: bad access detected [ 538.582220][ C1] page_owner tracks the page as allocated [ 538.584011][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8665332056, free_ts 0 [ 538.590082][ C1] post_alloc_hook+0x1af/0x220 [ 538.591630][ C1] get_page_from_freelist+0xd0b/0x31a0 [ 538.593352][ C1] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 538.595234][ C1] alloc_pages_mpol+0x1fb/0x550 [ 538.596809][ C1] new_slab+0x2c3/0x430 [ 538.598421][ C1] ___slab_alloc+0xe18/0x1c90 [ 538.600370][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 538.602629][ C1] __kmalloc_cache_noprof+0x485/0x800 [ 538.604799][ C1] device_add+0xcf2/0x1980 [ 538.606645][ C1] tty_register_device_attr+0x38e/0x7c0 [ 538.608887][ C1] tty_register_driver+0x50c/0x860 [ 538.611027][ C1] pty_init+0x688/0x10f0 [ 538.612983][ C1] do_one_initcall+0x123/0x680 [ 538.615038][ C1] kernel_init_freeable+0x5c8/0x920 [ 538.617248][ C1] kernel_init+0x1c/0x2b0 [ 538.619160][ C1] ret_from_fork+0x983/0xb10 [ 538.621170][ C1] page_owner free stack trace missing [ 538.623510][ C1] [ 538.624572][ C1] Memory state around the buggy address: [ 538.626956][ C1] ffff888102f34f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.630398][ C1] ffff888102f35000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.633820][ C1] >ffff888102f35080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.637207][ C1] ^ [ 538.639330][ C1] ffff888102f35100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.642636][ C1] ffff888102f35180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.645819][ C1] ================================================================== [ 538.649125][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 538.651914][ C1] CPU: 1 UID: 0 PID: 26227 Comm: syz.9.7255 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.655957][ C1] Tainted: [L]=SOFTLOCKUP [ 538.657597][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 538.661215][ C1] Call Trace: [ 538.662376][ C1] [ 538.663324][ C1] dump_stack_lvl+0x3d/0x1f0 [ 538.664836][ C1] vpanic+0x640/0x6f0 [ 538.666150][ C1] panic+0xca/0xd0 [ 538.667371][ C1] ? __pfx_panic+0x10/0x10 [ 538.668820][ C1] ? end_report+0x4c/0x160 [ 538.670294][ C1] ? rcu_is_watching+0x12/0xc0 [ 538.671872][ C1] ? lock_release+0x201/0x2d0 [ 538.673394][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 538.675320][ C1] check_panic_on_warn+0xab/0xb0 [ 538.677057][ C1] end_report+0x107/0x160 [ 538.678487][ C1] kasan_report+0xee/0x110 [ 538.679936][ C1] ? timer_is_static_object+0x80/0x90 [ 538.681733][ C1] timer_is_static_object+0x80/0x90 [ 538.683441][ C1] lookup_object_or_alloc.part.0+0x420/0x590 [ 538.685394][ C1] debug_object_activate+0x326/0x4c0 [ 538.687118][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 538.689006][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 538.690899][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 538.692657][ C1] ? lock_timer_base+0x127/0x1d0 [ 538.694258][ C1] ? lock_timer_base+0x16c/0x1d0 [ 538.695879][ C1] __mod_timer+0x814/0xd30 [ 538.697332][ C1] ? __pfx___mod_timer+0x10/0x10 [ 538.698937][ C1] ? __timer_delete+0xf5/0x1c0 [ 538.700480][ C1] ? __pfx___timer_delete+0x10/0x10 [ 538.702209][ C1] ? rose_send_frame+0x16c/0x2c0 [ 538.703813][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 538.705629][ C1] add_timer+0x62/0x90 [ 538.706951][ C1] call_timer_fn+0x19a/0x5a0 [ 538.708479][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 538.710181][ C1] ? mark_held_locks+0x49/0x80 [ 538.711764][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 538.713598][ C1] __run_timers+0x74a/0xae0 [ 538.715054][ C1] ? __pfx___run_timers+0x10/0x10 [ 538.716682][ C1] run_timer_base+0x114/0x190 [ 538.718223][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 538.719896][ C1] run_timer_softirq+0x1a/0x40 [ 538.721483][ C1] handle_softirqs+0x219/0x950 [ 538.723043][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 538.724742][ C1] __irq_exit_rcu+0x109/0x170 [ 538.726270][ C1] irq_exit_rcu+0x9/0x30 [ 538.727651][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 538.729456][ C1] [ 538.730425][ C1] [ 538.731421][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.733351][ C1] RIP: 0010:write_comp_data+0x8b/0x90 [ 538.735088][ C1] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 50 08 bd 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 538.741155][ C1] RSP: 0018:ffffc90003d67548 EFLAGS: 00000293 [ 538.743134][ C1] RAX: 0000000000000000 RBX: 1ffff920007aceaa RCX: ffffffff8235208e [ 538.745673][ C1] RDX: ffff8880485424c0 RSI: 0000000000000005 RDI: 0000000000000007 [ 538.748190][ C1] RBP: 800000011af9c007 R08: 0000000000000007 R09: 0000000000000005 [ 538.750715][ C1] R10: 0000000000000005 R11: ffff888048542ff0 R12: 0000000000000005 [ 538.753252][ C1] R13: ffff88805a6bfcc8 R14: dffffc0000000000 R15: 0000000000000000 [ 538.755764][ C1] ? __page_table_check_pte_clear+0x9e/0x100 [ 538.757694][ C1] __page_table_check_pte_clear+0x9e/0x100 [ 538.759556][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 538.761630][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 538.763944][ C1] unmap_page_range+0x253c/0x42a0 [ 538.765581][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 538.767309][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 538.768910][ C1] ? uprobe_munmap+0x93/0x600 [ 538.770441][ C1] unmap_single_vma+0x153/0x240 [ 538.772033][ C1] unmap_vmas+0x218/0x470 [ 538.773433][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 538.775020][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 538.776634][ C1] exit_mmap+0x1b0/0xb60 [ 538.778030][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 538.779618][ C1] ? __lock_acquire+0x436/0x2890 [ 538.781207][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 538.783022][ C1] __mmput+0x12a/0x410 [ 538.784341][ C1] mmput+0x62/0x70 [ 538.785577][ C1] do_exit+0x7d7/0x2bd0 [ 538.786916][ C1] ? __pfx_do_exit+0x10/0x10 [ 538.788431][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 538.790072][ C1] ? find_held_lock+0x2b/0x80 [ 538.791650][ C1] do_group_exit+0xd3/0x2a0 [ 538.793115][ C1] get_signal+0x2671/0x26d0 [ 538.794598][ C1] ? __pfx_get_signal+0x10/0x10 [ 538.796179][ C1] ? do_futex+0x122/0x350 [ 538.797603][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 538.799381][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 538.801380][ C1] ? fput+0x70/0xf0 [ 538.802636][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 538.804325][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 538.806184][ C1] do_syscall_64+0x4ee/0xf80 [ 538.807726][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.809652][ C1] RIP: 0033:0x7f417f58f7c9 [ 538.811073][ C1] Code: Unable to access opcode bytes at 0x7f417f58f79f. [ 538.813329][ C1] RSP: 002b:00007f418049a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 538.815973][ C1] RAX: fffffffffffffe00 RBX: 00007f417f7e5fa8 RCX: 00007f417f58f7c9 [ 538.818493][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f417f7e5fa8 [ 538.820990][ C1] RBP: 00007f417f7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 538.823505][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.826008][ C1] R13: 00007f417f7e6038 R14: 00007ffee9403c50 R15: 00007ffee9403d38 [ 538.828509][ C1] [ 539.904924][ C1] Shutting down cpus with NMI [ 539.907187][ C1] Kernel Offset: disabled [ 539.908566][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:18:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000061e20 RBX=ffffffff93e32240 RCX=0000000000061e27 RDX=0000000000000137 RSI=0000000000061e26 RDI=000000000002152a RBP=0000000000000007 RSP=ffffc900076477e8 R8 =0000000000061e27 R9 =ffffffff95df072e R10=0000000000000002 R11=ffff888040bd54b0 R12=ffffffff97185ef0 R13=0000000000000a2f R14=ffffffff9739cb48 R15=dead000000000122 RIP=ffffffff8199988c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4180499f98 CR3=0000000032fcf000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000afe8 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f61505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f61506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f6150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f6151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f7ba4a8 00007f417f7ba4a0 00007f417f7ba498 00007f417f7ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f418031d100 00007f417f7ba460 00007f417f7ba478 00007f417f7ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f7ba4b8 00007f417f7ba4b0 00007f417f7ba4a8 00007f417f7ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8532cba5 RDI=ffffffff9aef1c40 RBP=ffffffff9aef1c00 RSP=ffffc900006a0428 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3031383838666666 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9aef1c00 R15=ffffffff8532cb40 RIP=ffffffff8532cbcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000006000 CR3=0000000032fcf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000002800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff9c00000012 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0018300000000064 0000200000000040 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000012345 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f61505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f61506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f6150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f6151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f7ba4a8 00007f417f7ba4a0 00007f417f7ba498 00007f417f7ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f418031d100 00007f417f7ba460 00007f417f7ba478 00007f417f7ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f7ba4b8 00007f417f7ba4b0 00007f417f7ba4a8 00007f417f7ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffffffff9abe4b70 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffffffff9abe4b72 RBP=dffffc0000000000 RSP=ffffc90000648cf0 R8 =0000000000000001 R9 =ffff88806a63bbd4 R10=ffffffff9abe4b73 R11=ffff88802de20b30 R12=0000000000005a36 R13=0000000000000000 R14=ffff88806a63bbc0 R15=fffffbfff357c96e RIP=ffffffff8b7bcbe6 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000490b5000 CR4=00352ef0 DR0=00000000ffff0000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc01400ff0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081ac15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081ac1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081ac15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081ac1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081ac150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f081ac151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88806a5262c0 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88806a5262c2 RBP=dffffc0000000000 RSP=ffffc9002883f780 R8 =0000000000000001 R9 =ffff88806a73bbd4 R10=ffff88806a5262c3 R11=ffff8880294054b0 R12=000000000000303f R13=0000000000000000 R14=ffff88806a73bbc0 R15=ffffed100d4a4c58 RIP=ffffffff8b7bcbe8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b30623ffc CR3=0000000032fcf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f61505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f61506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f6150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f6151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f7ba4a8 00007f417f7ba4a0 00007f417f7ba498 00007f417f7ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f418031d100 00007f417f7ba460 00007f417f7b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417f7ba4b8 00007f417f7ba4b0 00007f417f7ba4a8 00007f417f7ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000