last executing test programs: 3m51.10697738s ago: executing program 0 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$rtc(0x0, 0x0, 0x8000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) socket(0xa, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000c40)={0x3, 0xfffffffffffffffd, @status={[0x70, 0x9, 0x3, 0x7, 0x6, 0x1]}, [0x9, 0x8000000000000000, 0x2, 0x1, 0x307, 0x2, 0x3, 0x5, 0x9, 0x5, 0x5, 0x7, 0xfffffffffffff74f, 0x8, 0x9, 0x4, 0x9, 0x7, 0x2, 0xffffffffffffffff, 0xffffffffffffff00, 0x2, 0x3, 0x0, 0x6, 0x6, 0x7, 0x3, 0x8, 0x8, 0xc0000000000000, 0xd35, 0x0, 0x1, 0xccd, 0x1, 0x1, 0x8000000000000001, 0x400, 0x9, 0xc, 0xec6, 0xfffffffffffffffc, 0x2, 0x4, 0x3, 0x2b34432, 0x5, 0x5, 0x7, 0x80, 0x5d6a, 0xeb4, 0x8000000000000000, 0xfffffffffffff001, 0x7, 0x1b14a2860000, 0x9, 0x2, 0x3ff, 0x7, 0xe3, 0x7, 0x10001]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x49ad80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) getdents64(r5, 0x0, 0x20000) 3m50.875620854s ago: executing program 0 (id=158): write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x8) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x8) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x10003, &(0x7f00000000c0)='norecovery') 3m50.816921447s ago: executing program 0 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xac}}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$inet_udp_int(r5, 0x11, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x70bd2d, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x840) (async, rerun: 64) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) (async, rerun: 64) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async, rerun: 32) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) (async, rerun: 32) connect$pppl2tp(r9, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x1, 0x0, 0x0, 0x2}}, 0x2e) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xba36}]}, 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r8, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xd6f3, 0x1, 0x4, 0x7fffffff}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8001) 3m50.758075473s ago: executing program 0 (id=160): socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async, rerun: 64) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) (async, rerun: 64) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async, rerun: 32) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) (async, rerun: 32) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) (rerun: 32) dup3(r4, r1, 0x0) epoll_create1(0x80000) (async) close(0x3) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async, rerun: 64) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async, rerun: 64) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m50.557026481s ago: executing program 0 (id=163): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x38, 0x2080) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000001c0)={0x2, 0x2, @name="61ac4602df4e6b68f25ee6abbed42965f717b6c916ffae04bddb950a07241deb"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc001001b, 0x0, 0x2}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r9, 0x6}, 0x8) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)={0x30, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x9, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) 3m50.317019996s ago: executing program 0 (id=167): r0 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES8=r1, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) 3m50.204657757s ago: executing program 32 (id=167): r0 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES8=r1, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) 3m48.467927639s ago: executing program 4 (id=178): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r0 = fanotify_init(0x81, 0x40000) r1 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf2", 0x87}, {&(0x7f00000006c0)}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3713c1ae2", 0x96}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e", 0xb3}], 0x6}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0xe7, 0x10001}, {0x7, 0xafe}]}, 0x14, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x14}}, 0x4008800) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="650f340f350f01c90f00d8b805000000b1a00f35000f01c1b869003ec90f23c80f21f835040070000f23f80fda460b0f0130c744240000800000c7442402f5120000c74424068000007c0f019424f2360f217a", 0x2b}], 0xaaaaaaaaaaaa993, 0x0, 0x0, 0x4e) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) fanotify_mark(r1, 0x105, 0x48001020, r5, 0x0) (async) fanotify_mark(r1, 0x105, 0x48001020, r5, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) 3m47.508114667s ago: executing program 4 (id=184): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x54, &(0x7f0000000300), 0x4) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4e68c2) syz_open_dev$dri(0x0, 0xfffffffffffffff9, 0x200100) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000005c0)={0x0, 0x0, 0xc1000}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0xe3c54000) 3m47.31821597s ago: executing program 4 (id=185): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x3) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x2, 0x1, 0x1, {0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) 3m47.31790826s ago: executing program 4 (id=186): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fc00000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d0d982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1ddf76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e71bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a35d8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba98526110bfdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043894b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f520d1584b4335eabdb20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x3, 0x100, 0x10000004, {0x3f, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r2, 0x902, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000300)={0x0, 0x4, 0x6e, '\x00', &(0x7f00000002c0)=0x40}) read$msr(r3, &(0x7f0000000180)=""/174, 0xae) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="2153c9300980ffff", 0x8) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x8, &(0x7f0000000040)={[0x401]}) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000000000)) connect$nfc_raw(r5, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10) 3m47.12552336s ago: executing program 4 (id=188): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="7d3be4019050be22", 0x8}, {&(0x7f00000000c0)="184b4cbac2dfbfd49ca9f012bb4a4d3a4d76c1f7f849acc5b3ec6cd33c56d098a15934a3c91b", 0x26}, {&(0x7f0000000100)}, {&(0x7f0000000440)="5e85805e1cff2f3adf1172a3e217e242f846a5b936a28cd82abbb7bdc06e7e3247449874b36167a600c75c067b03fae3f5e2357efdf3827282cd0dd542dfe86458d2a0d1b9e52f1be8ff0dbc0113fc9de5485cc7b8409c22aea1ef655a85ed4470470f6b30c9f4b4e5a1339e65c68865a7eaaa5ccfa2a1b709855622c312c85d22835ba3220c3c81acc947b568352011b563db33e90f96371275f67d3440eea11de99cc29b08e7f541b6082ae23af0fa94b3fbde83e4d8effdafabc55c07614fd84c9eaff69fbfcd4db1091788611d7134d74744a7edbeef31ec41c460ef1d2329a236c92e9b5e1b4abc59dd288f438b0cc75bea0e404020d954dccfeaa089b204c04956e1f1f783fbdc823f58d203896344ccc671ca3345117cfd42937140835e6723226c5edad6c5bc52cd1c7e296504c9daa5122b9b6b81c80177912bb8e427f79e6e106af530004fa4eb3c3faf2f4838b3864a5481ec5b8dfe4e6a5e8637e9e45b1edcc0eb66647a7fe8efa2a6a00efcc5aba9802b367e9f637834bff4eb1e9e969cc6e60c3b1ace621c20280c0528b6811154af5b2205ea1a98781716949eb967bb05494036c8f1874f4a0aa6fd06c1a77b4bbd37ec5142ddca4b322f9d91208b5eafed991b2bc50a9eaa2b88ea85614a4b882ae679942ddb13cb47e524512f2819d6c31f05e88ff487df9f47ce9ade43c3ee9216746480051cd7cc4e76e465262e9e6e7d53ff89c4d84436fe2ffe5fd66e808ea04aa0a306eaaeb57a2fd53b3c057a4a363bc34d61ffd2e32f6288a38e3c6db9189cb68491ee770d91e5b05103281bd42294b42e8db464fdfff43bf8903fc7440ebf4be673682143660db5c996d0857a8f60fece31e0664ca07f7d8f9d91c1699816211c373f566dd4ede5a771790d10262bfddba5de7b2fa2e9ce531c939049588f0828a4a5fc088c65d8c8883af683ca432213a71cac74b4fcdcfa8120fca16cefd7b756e1d4374e1645162dd84440721d8d85e04290d498d7873c7d5b0050a5a3a182e8cdb07288aa6ee1046d58c5ac9243dbe24449eb599a872d6312286dfa327bdf0c29c8ce4065b837a1deccd588582a6daae757c8c7e22adf43a912775e7b03aa4f20e0a586d67b9c0fcd0d405ceefba9ba8f4ccc26ae071c7fe3f3393968270511c1eff0065905be6dbdd7ccd563591062ba7eba989dac0b3c11685cf5fce891fd7855edb003b5854e7131bec70a9bce25cc3a25ccca52818f089bb8bfa1dcfb11c452a6d0ffe6a1b20af09b405ed374ea54be80d3d9b7c04c83a5a87ba8f4ff52360a3314cae16cc12cfe867958dfad13e1e4ab38d59e8b4fd38f787026d12061117a32ab9ee037195ee1e808d16956a045847bd85d130bc2d6586f76f1bcf1fd150185c0b6761dd944410c8cbf72039f08f6bd78b161eff2591cb3e7b17d5d745b5b6080f754efe8685b69a3c323032e56346ecb472760b2ed9c04c1d99a0737f61a86665903b63ef397ac9289400d49f94c688f0c37c6e897f7f3b9f11cd7bd86d731f178de303656a6133f22f71c8df16036bfa13848825c4fee4139e35e2c3a87cc317d02d339da80e5aff485ac6942ae531dae638bf3cf00d10867ada2b9d481b454a1058e870a53d2f483ef3efbe4a8810958a375dd1fc30838f6e3646262614f65832abae86858c73c30d682b3b734092850c371ac88710d45c53e521535244bb9ed9f345cd44d1fd96ef50201c75e1ab1292d7ec9dac77afe29eda096f6b35968be048485cfe77f9b73cc62cf7944a46f8e0992b1698d9a9c95e816a89b118322507ae92ae9dde7f70ac5247921cf105d5cf1d510e40ac7597b7a7ae4038e8285115d5438f72d0f224f5e7b4ac8cab25eed9580113e443d4f340c29dbf96cd413feed3c33415ca386fdcdfe1c077230cb78a541425fc3a145ba02044655bfa09c78d9d9274e31d7466ba68e4684024fae5b5d467c4c52de60b29fd5cd49e73529994a725800105cc00411683205a0a8635cbe85727a438d3a1c8800ffead5afdb0e161132b4ec986b9106451fe11cfaec128f66cc50c44dc425c1d4fa08a5e40dddd512e2dd473817e093631f4f5af0160b6f2e3df78d0dc0b66a07c7536e2e1a98cbdf89b97508d8d29ed7f455778732207e51082a7862278f731f99d9ad586f51fbcbbfb0ef06f27b42fbf78d474958c0dcc9bcba624d0ec82a2636f3537bae3d940a33f1cc1298c2d21bc0697e67e0991c202a9166a301de405c904b4d8a68d40b6ec5534bd0fdc138ab32d1b6e58674eee09550f44455045a42597768f22720688ea99ec9676469bd315b7ac48be8c3d88bc6c353f3b1e073dd85600b69a8b2129b3913f8e568a1bfe8cf19b27741615f330a50f4ca4edcdccfef0a379120418cf4db188d82af323915f25f2195501357986d81a32ed24ff03380a6ad4e77efe5c8414c36734249d22b16a95cc2927069c8e1e2af50a0c5834d38a104af921b99f73990ca8290aff466eb6fd57886bd0ea8ff4dc2adffbc37003955a4dc0b5cdb67b961f2b593fd1126d7cde3d5a832c2a75431be34cb31ce57311bd90037f7f5399e09da3bbc03cb2cee940e05a5dbbc5ee5fb6bcb3c8663691174c2e726e51da1ef11100217cd4010d5d4efbd197266bdd752ede766e5d8e0474354d936005d19c97237ec4e1a29d4632988c54f19f57872b36522e2dfe4a235eafd4a9c45171082f3d37543105bbda54f1369563d3323d97e50481974cb9be13beec6762f9d937466f47bc71cdbf8d6613a020ac683ce549ebad33db2377f6bb100be0d2aec7ee79e59e99a78de37b783f55caad4356115932a9725e11f9f75fede855bdde3c1c9f13f7054b22eb652d949680b50a10b727c1d049f19b0f350c11eb0879cce405dece62e3f060256e1564f91ef9ac2a7b87dafb6da54d10b2f7cb2f0b37e44a5859b6ad5155f95eda78b0cf00ba72633312b169af1260a927f5dc2299e70ba45185a04449dda5e58be88fbf407a53626cb687437918aeddaea832d5f0e143e266dc759e063a8e0cf6e8e8dad9a13c91ad32bc046b579415fc8b7a43603e42429693fc5fee4b5faa50bb352dde3b86542a1e996d454836ceb09f3da7c3d62acf877254f4d0a5120fd6c9821743b640f33e369ab497f215e34703e54622273542d6c1d061e3dfbe392f92f3ce881e5b5b2423b910aca0d566397c3ec9e0ebc6f6f750e789339e5c9eeb9277620e7bb11ed12bebb8e4c31811dc0896b6aaa97457c2400ffcd37d82fa35272566fc3de353bc2001ab87e303982fd8fa5c780d46304f4eef1f1ffad7fe8b58b3f45611c46268835eb0a9b99accd8eac3b9e0ca59f5fc4fbaea74ae58cf60155d548e7ac19ba92da080300d5da98ad62650650e30cf087bd1d0735a3b1c4a7cd59d691d1bc92572cfc2511310012eb488ec5a5904c6723ad677c4980a530f3d7bd4912bf430925d50b0284481e0c19cd9b78c200595554b2ebaea2959442c0f8b1f4efa420844a650cb532e2326740c1725774997dd9a61b55fa64a8f6c15ef804a47c18ebc7e1d23fe8fe229d187df679d82e99f638a615b1d41a25cbfcb3ab2c43db41e049eec65692070481aa29a7eeec4f854e8654063982aa272a587ffb8c75312d66991bded33d806e579a5453306399b05d1cda1be9b4305c67f105f2eb509bb63678971f8617d21f4df4e693119a2244de1018c8a540bdca4fffa6d81446efadb111dce1ff4dc1fbd8ddb720065ce5b5ed76a678094709032bbceefdf454a0138ac46e3673f85c07afe0415abe0c54d576422dc1011285a61fa89ef7389a6dccc37e933a4858a25413258db6005bbacc055b64291aa8dce3a0dd9514c2a21df82625bec8e97d38906f7fc6ee58bf082dca8e4ba345705e13b2a1f6ce6e0c6b3eb3510566610b73a607be78022f0788a1425506a7d1249ef8c7a9cccfd45d9194db98213dea05588711d4f08e2769a5873a586e3d1461e32801ed434b1c2a505fb831efff50b9a4085c9b97d35eafe9855bd2b721fd1138630051ca913bb2494f639f576c25b3c187c0ffb4f190fa0d0b25ac8610b2bffd9b0d061c5cb4f8563431f0ced456f2713fe70f891143bedd3529d611dcaf3725f09e2b4f0d8fca3b1af1af77c03187774385284c94c4742803187fb35f2773a5dbef646c809f1f289bfcfe7718cc9dab3173ae54d99544400c2b877941e2933e2f4a147a63ffe808d38798366d2d1b7eb77b4e3ffa1b12862ae9aee2dbd01f20e954174d1fc4e990c5bf22ba48c957a25f269de98493149cb7a6d7fe6ce2ab8b18d6fb95354c41c7ccaa672b11a9566cbc05e0766748965debe92f4a0deb8c9bedcad2cda182160dc50c84bd7bf24743158f42afb5a391c3ce385e4d45f9b5619ac9ba939b77dac8d44d3ca5f60afb34d67c7e48446a694b3f8709b5084140d98d8373aae0346c3ced541372dda2bac47e4637ae0b48047da4ba86f70856011a9c97670a158774ec43cf45b5e51a2fa57d8af37e8071297a9837ccca617462e3df358b1b37e4602a5f7cb09e3a77f992f2d0d5f87e1bc26407ab14c71d588a67fb311a87691f85f2f21d0869798ea38f170c013581c0e49df6492d113fb5371eaa736a4b344fbc2610ee57e456d42c26d0ca96710b2b19bf0607ece4bc5a4efdc207c495221f00e06035391147c584ff9e3e64b29691060ecd270f9145ba85390c999af5380a658f8410a8f8348a231c0a6c90c025608b43d853572802eb515bf6b785111ec20ed0761f3ec4af506c5b695942bdc3a3007b0a2a54e3761aa8f4fb7f494d1ca1fbfd27d7a9479f0e99c8eb617301d14adaf47645c251873e86e2c56c8982ca35996336d6a98547c1fb0976372e3a68c570fa47168666b2f65393a6ce5585ba32bb78de378f38f01536e9a4deea7cac32f16b500b02c051f974949ff9ed31ac7671f696f87ae81e10cac94f0aba2bca27fdba1cc82ee519b0b4932d425c0fc44bfbff8fa5c1ed42c72d7ba3d3c0fe10a878bf3f90a2b70bc9790815343716102b54b5bb057f04b059068071705b9d2b67600c0ce7af7bf4da03b44ab3b9c7b17e9ada95655e7cbf60393cb45ad995114b90907832f383c853ab0d7122b9af850ef05002fb0e9ff15a8db08193a00aa5325fc5764e1daaa75adc853265ef7709046acc267255668dcc8765fadcf6b095b2ffe7e75721b6322ca98792bd2e1484e758a000fb033d44ce829b71081b3f255cf8679c9523ef7ffc2396d331cacab2438d454784bc7c71ae2b2910241699ef237dfaffe7ed987931eec36d1788cab1196fdfbf647ee0630bbdf2dad7a7f87ab0f415b01cef833f1f2a6661b715d0b33e134189617d13ff4955311e21c1dc81edc693375b702262a4ab0cb02eeef8e371d3d73cef2edc2e045c6cd8eb2db531d38f5c61cfcd9d5d3bc101b18bf8c5bdb059522a1551280997691ac04ce83a87961c9024c3769e31f67ee3b01ea60de4cd72a17fd0164a57f5797bd70794c5db9fcef758efdfcafa40574fb84528c32aa512bffbb05f656f2b597ac496178608101337f436039b21130693fe94d22fbbfb4284f78f4f55405649b4f3227e53750f2b31f458240629952a7953f7193901332c6f86da5ad340ec588def15ee8e6db2bf97709c68339719a326a95971323beb21a4d2a92f8da713f9da25e1195a158b0ee52582b6051fe9ed835e6459722d13142bec5aa137443a29a09d8ff17e9524385b5810c7300a52dcfb0074a67b0e3c66a4cbc6936137998e4fea9aab9b2ad5dc24e3", 0x1000}, {&(0x7f00000001c0)="d6a299fc66c61dda2ba2c92554dbb8ebad2704110c6bb7c2ecba6b751b58fa6ad8bd2b975d1d5cad858396ac35e5b0b9655e7222b6711db7b65d8db13121872213d1fd8fb00e1ea4f02f548afdd8f4902300c0c8c014e3532a8ab21fa7aa2b543f73dfa42e7d5ec804a3eaa89d53b3c3fb5a50baeed82ae37b4c8bbbb7eb1318", 0x80}, {&(0x7f0000000240)="bbd7add2036266602e2c02f81660b646ab0cf402bf6b60f9a2bda484012d1c718af2de8df892d87fe60ac502f5001e7e9d039f0a07e53bd209fcf45f61ba509a8c9753f69d426d2b0ee128c0fad4a2855f8c7aa47fcf267bb0c0104a203468d1fcd268", 0x63}], 0x6, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0xe7f}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x48}, 0x40080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000001440)={&(0x7f00007a0000/0x1000)=nil, 0x5368000000000000, 0x1, 0xec}) mincore(&(0x7f0000009000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/68) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r3, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m45.665976363s ago: executing program 4 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x1, 0x101140) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000400)=""/7) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010001fff29bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="10300000403d0000f7b3128009000100626f6e64000000001400028005001d00000000000500010001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3m45.568581061s ago: executing program 33 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x1, 0x101140) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000400)=""/7) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010001fff29bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="10300000403d0000f7b3128009000100626f6e64000000001400028005001d00000000000500010001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3m24.577553514s ago: executing program 3 (id=489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) (async) unshare(0x22000000) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x2b, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7ff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x80}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @cb_func={0x18, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xa6, &(0x7f0000000500)=""/166, 0x41000, 0x4, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0x9, 0x7ff}, 0x10, 0x0, r1, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x4, 0x4, 0xd, 0x2}, {0x2, 0x5, 0x1, 0x8}, {0x2, 0x5, 0x2, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000700)="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", 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000000), 0x7}, 0x50) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsmount(r3, 0x1, 0x4) 3m24.576162192s ago: executing program 3 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, @remote, 0x1e, 0xc}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r3, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYRES16=r2], 0x74}, 0x1, 0x0, 0x0, 0x10040013}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000f08000240000000000800044000000000080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) 3m24.534308855s ago: executing program 3 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r1, 0x3b88, &(0x7f0000000500)={0xc}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async) r4 = memfd_secret(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x8, 0x0, 0x100, 0x0, r4, 0xb, '\x00', r3, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) (async) ftruncate(r6, 0xc17a) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c00000018000380140003800c00017005000200000000000400018018000180140002007665746830"], 0x44}}, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) 3m23.599294313s ago: executing program 3 (id=496): r0 = semget(0x3, 0x3, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x2, 0x1000}, {0x0, 0x9, 0x800}, {0x1, 0x2, 0x1000}], 0x3, &(0x7f0000000040)) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8e080, 0x0) mq_timedreceive(r1, &(0x7f00000000c0), 0x0, 0xd9, &(0x7f0000000100)) (async) r2 = socket$netlink(0x10, 0x3, 0x13) semget(0x3, 0x2, 0x1) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000002180)=0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000021c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x1d, r3}, 0x10, &(0x7f0000002280)={&(0x7f0000002240)=@can={{0x2, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "48a81fad20ea5bb6"}, 0x10}}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000002300)=""/55, &(0x7f0000002340)=0x37) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000002380)=0x57, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000023c0)={'vcan0\x00', 0x0}) (rerun: 64) sendmsg$can_raw(r1, &(0x7f0000002500)={&(0x7f0000002400)={0x1d, r4}, 0x10, &(0x7f00000024c0)={&(0x7f0000002440)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0x19, 0x1, 0x0, 0x0, "4675f62a66b20ec43fb379e44c726c70370ccff0a8101dbf018e6322289d70029f65018b08bb7b55c5f5bba698c1251fa71d559f79c924a57022caf7ed8b3410"}, 0x48}, 0x1, 0x0, 0x0, 0xb621d06dbb92ff2}, 0x20000880) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002540)={'vcan0\x00', 0x0}) (rerun: 64) bind$can_raw(r5, &(0x7f0000002580)={0x1d, r6}, 0x10) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r7, &(0x7f0000007c00)=[{{&(0x7f00000025c0)=@alg, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002640)=""/103, 0x67}, {&(0x7f00000026c0)=""/42, 0x2a}, {&(0x7f0000002700)=""/137, 0x89}, {&(0x7f00000027c0)=""/35, 0x23}, {&(0x7f0000002800)=""/154, 0x9a}, {&(0x7f00000028c0)=""/115, 0x73}, {&(0x7f0000002940)=""/182, 0xb6}, {&(0x7f0000002a00)=""/138, 0x8a}, {&(0x7f0000002ac0)=""/201, 0xc9}], 0x9, &(0x7f0000002c80)=""/39, 0x27}}, {{&(0x7f0000002cc0)=@un=@abs, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d40)=""/23, 0x17}, {&(0x7f0000002d80)=""/24, 0x18}, {&(0x7f0000002dc0)=""/32, 0x20}], 0x3, &(0x7f0000002e40)=""/165, 0xa5}, 0x498}, {{&(0x7f0000002f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002f80)=""/20, 0x14}, {&(0x7f0000002fc0)=""/163, 0xa3}, {&(0x7f0000003080)=""/132, 0x84}, {&(0x7f0000003140)=""/221, 0xdd}, {&(0x7f0000003240)=""/52, 0x34}, {&(0x7f0000003280)=""/230, 0xe6}, {&(0x7f0000003380)=""/62, 0x3e}], 0x7, &(0x7f0000003440)=""/51, 0x33}, 0x74c}, {{&(0x7f0000003480)=@nfc_llcp, 0x80, &(0x7f0000003940)=[{&(0x7f0000003500)=""/157, 0x9d}, {&(0x7f00000035c0)=""/235, 0xeb}, {&(0x7f00000036c0)=""/57, 0x39}, {&(0x7f0000003700)=""/157, 0x9d}, {&(0x7f00000037c0)=""/42, 0x2a}, {&(0x7f0000003800)=""/36, 0x24}, {&(0x7f0000003840)=""/217, 0xd9}], 0x7, &(0x7f00000039c0)}, 0x40}, {{&(0x7f0000003a00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/130, 0x82}, {&(0x7f0000004c00)=""/99, 0x63}], 0x4, &(0x7f0000004cc0)=""/3, 0x3}, 0x89}, {{&(0x7f0000004d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/220, 0xdc}, {&(0x7f0000005e80)=""/168, 0xa8}, {&(0x7f0000005f40)=""/126, 0x7e}], 0x4}, 0xc318985}, {{&(0x7f0000006000)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000006100)=[{&(0x7f0000006080)=""/86, 0x56}], 0x1, &(0x7f0000006140)=""/101, 0x65}, 0xffffffff}, {{&(0x7f00000061c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000007600)=[{&(0x7f0000006240)=""/193, 0xc1}, {&(0x7f0000006340)=""/157, 0x9d}, {&(0x7f0000006400)=""/160, 0xa0}, {&(0x7f00000064c0)=""/37, 0x25}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/84, 0x54}, {&(0x7f0000007580)=""/128, 0x80}], 0x7, &(0x7f0000007680)=""/2, 0x2}, 0x2}, {{&(0x7f00000076c0)=@x25, 0x80, &(0x7f00000078c0)=[{&(0x7f0000007740)=""/172, 0xac}, {&(0x7f0000007800)=""/132, 0x84}], 0x2, &(0x7f0000007900)=""/254, 0xfe}, 0x7}, {{0x0, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000007a00)=""/185, 0xb9}, {&(0x7f0000007ac0)}, {&(0x7f0000007b00)=""/101, 0x65}, {&(0x7f0000007b80)=""/57, 0x39}], 0x4}, 0x7}], 0xa, 0x40012120, &(0x7f0000007e80)={0x0, 0x989680}) (async) r11 = socket(0x3, 0x1, 0x1) sendmsg$can_raw(r11, &(0x7f0000007f80)={&(0x7f0000007ec0)={0x1d, r9}, 0x10, &(0x7f0000007f40)={&(0x7f0000007f00)=@can={{0x1}, 0x6, 0x1, 0x0, 0x0, "ee2ba3d8eae5467f"}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) (async) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000007fc0)=0x669, 0x0, 0x6) (async) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000008000), 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r12, 0x6b, 0x4, &(0x7f0000008040), 0x4) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000008080), &(0x7f00000080c0)=0x8) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000081c0)={'syztnl1\x00', &(0x7f0000008140)={'ip6gre0\x00', r6, 0x29, 0x6, 0x4, 0x781d, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x8000, 0xfffffff7, 0x4}}) sendmsg$nl_route_sched(r1, &(0x7f0000008d40)={&(0x7f0000008100), 0xc, &(0x7f0000008d00)={&(0x7f0000008200)=@delchain={0xae0, 0x65, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xf, 0x7}, {0x10, 0x6}, {0xfff2, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x401}, @filter_kind_options=@f_flow={{0x9}, {0xa98, 0x2, [@TCA_FLOW_ACT={0x628, 0x9, 0x0, 0x1, [@m_ctinfo={0x94, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x65, 0x6, "83b2845c7e26bca8c6015225d06e4fac5324d1fba76b13a5d2bf32d233d7f7d0492b9b9a2cb6374ffc191eb62611e9716f3e76ac243a4780e16d253966003df6b6a3724c89e6c763cc96fa7856cb2d883340533fe609d435476d75dd294cfa192c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x3c, 0x15, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x9, 0x6, "6e078e8f2b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xfc, 0x0, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x8, 0x2, 0x3b8, 0x5}}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x8, 0xa, 0x0, 0x10001}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x64, 0x6, "da77a7b6447f6ec74eebf24f273a84d34007b094e3930fc45c3231e332b5d7ce393010034b5089f4c53073710f1300c4105c9612f5e92e2dda337104871873e1f2ca5b45a34b25f64d9bb9fab45a1bae93430b6c2ac404d9f31722ced2bc5029"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x140, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe727}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xf}]}, {0xfc, 0x6, "3ee0747d65bd162bf4bdfb7247c88fb71612e52b68c54740c4a6ccded5539f3e332e2d8facb54228a805eca665cf775cbb85d8ec5c0409d9e377a41b3111979b4cfeed1dc43020a5be3747e599e2854e5ce187ca2c70721f0d0facf6fa8e3e3236300fb91bad7d8ebd308d29f19eae9efec7f8466a64c9b1a42310f1ca8a7cd024838d57d8daf70ec38a87f7df62206b6e6f4f02988125be8e1aacf7aa929bcdf2ae782c172f9ac9e6d66e5486c95fb76e18688b4e0035b88d0e6b1aabe216ff3d524cef378acbf1450919630a7b0f2c5f8004e502a85edc831f4ef6b466cc99fe826ad6b5477023a881ce47d8bf8a0a1410f81d65fa33d2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x60, 0xb, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x2b, 0x6, "c862cbf9b430658b3554c72ad7414942b929a5cffb5ef0f47a7176df844bc04764aa9d4091dcc5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xa8, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x64f5, 0x20000000, 0x400, 0xd000}}}]}, {0x57, 0x6, "26133d175c4ccd9cc0da7437f4977c809744d262f6af5ded0127a8159c926e6181f31a31fd1ac0b39ae8ac5bc15ffa8d5dc6643a40033decbd5265765011a77adce3c493d0610b9b4dbad2e4af0b2fc8aa9db6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x104, 0x17, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xe, 0x6, 0x5, 0x6, 0x10001}, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xfffffffe, 0xffffffffffffffff, 0x8, 0xffffffff}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x10}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd, 0x10000, 0x1, 0x2, 0x100}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa, 0x5, 0x4, 0xfffffff7, 0x3}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x2c, 0x6, "a6b72f2fb4cb5a2cfce157d336ee2b1b5b272ba29cbe3a3e4e13d6c2f10864488a9d2b47611930d1"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x10c, 0x20, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xf, 0xffffffffffffffff, 0x0, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x8e, 0x6, "fd1b856d08673911f1e6346971f512b92875f88dd312c3d6be4f3bb040597afece825c11f142c9b2247910ef32e7900b21869a38501f415cd0abe745b9ff91ceefcc41854ebaf5468c0099f6edd6558ec7cd6babb3a0f98d984c1c284076bbec5e8377c5ca7db75d457bdae36bf28e821a879a911eb0bcb1cae4fa08d9d0addabd5ab3be62e357c3d290"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOW_POLICE={0x464, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffefffffff, 0xb, 0x7f, 0x3, {0x9, 0x2, 0x2, 0x6, 0x58, 0x5}, {0x9, 0x0, 0x2, 0x5165, 0x9, 0xe53}, 0x3, 0x3, 0xfffffffd}}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x5, 0x9, 0x657, 0x8001, 0x6, 0xd, 0xf2a, 0x0, 0xa7c, 0x3, 0xffffffff, 0xe, 0x37e, 0x8, 0x6, 0x6c, 0x2, 0x3, 0x60, 0x5, 0x4, 0x9, 0x401, 0x6, 0x6, 0x4, 0x8, 0x6, 0x3, 0xdb, 0x6, 0x9, 0x2, 0x1, 0xe04, 0x6, 0xffff, 0x575, 0xb, 0x101, 0x1, 0xffff, 0x6bdc33e0, 0x2616d1ba, 0x8, 0x6, 0x5, 0x8, 0x80000000, 0x9, 0x40, 0x59b4, 0x10001, 0x8, 0x2, 0x9, 0x3, 0x8000, 0x7, 0x4, 0x4, 0x2, 0x6, 0x2, 0x0, 0x2, 0xc210, 0x1, 0x3fc, 0x200, 0x4, 0x200, 0x4, 0xb, 0x7d2, 0x10, 0x238f, 0x6, 0x6, 0xbd, 0x9, 0x4, 0x10, 0x7ff, 0x6, 0x8, 0x2, 0x7, 0x7f, 0x7fff, 0x3, 0xc, 0x2, 0x6, 0x1, 0x6, 0x6, 0x0, 0x10, 0x1, 0x80000001, 0x0, 0x3, 0x9, 0x0, 0x80000000, 0x3, 0x4, 0x7, 0x6, 0x9, 0x7, 0x5, 0x8, 0x9, 0x80000000, 0x7, 0x0, 0x40, 0x8, 0x6, 0x2, 0x8000, 0x80, 0x1ff, 0x0, 0x2, 0x7, 0xf2f, 0x9, 0x1000, 0x4, 0x18, 0x6, 0xeb, 0x8, 0x8, 0x4, 0x8, 0x930, 0x40, 0x4, 0x80000000, 0x61, 0x9, 0x2, 0x7, 0x0, 0x8, 0x0, 0x1, 0xffff, 0x1, 0xe, 0x0, 0x8000, 0x800, 0x10001, 0x5, 0x9, 0x5, 0x8, 0x1ea7, 0x6c9, 0x32fc, 0x3, 0x0, 0x771c7245, 0x5, 0x0, 0xfffffffb, 0x9, 0x7, 0x9, 0x5, 0x4, 0x2, 0x3105, 0x6ed, 0x10, 0xfd3, 0x1ff, 0x4, 0x9, 0x10000, 0x40, 0x4f7a, 0x772, 0x6, 0xffffffff, 0x400, 0xf78d, 0x5, 0xfffffffe, 0x100, 0x81, 0x5, 0x9, 0x7da4, 0x1, 0x100, 0xf, 0xd21, 0x22000000, 0x10001, 0x3, 0x2, 0x8, 0xa, 0xfffffffb, 0x0, 0xc, 0x4566, 0x5ce6, 0x0, 0x7, 0x2, 0x1, 0x9, 0x5, 0xffff49af, 0xedc, 0x1f, 0x5, 0x5, 0x100, 0x6, 0xb, 0x10001, 0x0, 0xfffffff9, 0xe20b, 0x80000000, 0x1, 0x5, 0xbb, 0x5, 0x70eb, 0x3, 0x6, 0x4, 0x5, 0x1, 0x0, 0x3ff, 0x10000, 0x7, 0x1, 0x2, 0x6, 0x7, 0x0, 0x0, 0x9, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x86}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4b75}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0xae0}}, 0x80) (async, rerun: 64) getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000008d80), &(0x7f0000008dc0)=0x4) (rerun: 64) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r12, 0x0) syz_io_uring_submit(r14, 0x0, &(0x7f0000008e00)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x7, 0x8, 0x0, 0x0, 0x8, 0x1, {0x3}}) 3m23.588859236s ago: executing program 3 (id=500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="bb766b60", @ANYRES64=0x0], 0x20) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0x109000, 0x0) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) (async) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000680)=""/248, 0xf8}], 0x4, 0x8001, 0x7) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x304000000) (async) r4 = dup2(r2, r2) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x109) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0x1}, {}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x2, 0x7}, {}], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x1}, {0x20, 0x2}}, 0x74, 0x3) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x10000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) (async) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) (async) write$vhost_msg_v2(r4, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xfd86, 0x0, 0x0, 0x2}}, 0x48) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000002020000004000000", @ANYRES32=r6], 0x27) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 3m23.518062812s ago: executing program 3 (id=501): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @bcast]}, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e74, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff2d76}, 0x1c) listen(r4, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r4, r4, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r5, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5a930, 0x11800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 3m13.137196082s ago: executing program 1 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000800)={r1, r0}, 0xc) close_range(r0, r1, 0x2) (async) close_range(r0, r1, 0x2) 3m13.077807683s ago: executing program 1 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc01000000000000000800000000000010000280050001"], 0x58}}, 0x0) 3m13.074503461s ago: executing program 1 (id=684): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x8c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x8c1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) 3m13.007332249s ago: executing program 1 (id=685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (rerun: 64) 3m13.007057817s ago: executing program 1 (id=686): sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) syz_emit_ethernet(0x2ff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285629, &(0x7f0000000680)={0x3, 0x0, 0x2, '\x00', &(0x7f0000000640)}) sched_setscheduler(0x0, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) syz_emit_ethernet(0x2ff, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000002c93a00fe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af050200010000000500000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd04b853b46d0640ff7ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0030007b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a02744000000000000000000000000025e14f0e74d2d42cfb3f27fafb608"], 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_G_EDID(r0, 0xc0285629, &(0x7f0000000680)={0x3, 0x0, 0x2, '\x00', &(0x7f0000000640)}) (async) 3m12.92622493s ago: executing program 1 (id=687): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x21100a2, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0xb) 3m8.457856755s ago: executing program 34 (id=501): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @bcast]}, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e74, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff2d76}, 0x1c) listen(r4, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r4, r4, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r5, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5a930, 0x11800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 2m57.962082673s ago: executing program 35 (id=687): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x21100a2, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0xb) 4.573797039s ago: executing program 5 (id=4149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.572677092s ago: executing program 5 (id=4150): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000140)=""/102, 0x66, 0x0, &(0x7f0000000340)=""/151, 0x97}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x3) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000f40)={{0x80000000, 0x0, 0x0, [0x5, 0xfffffffc]}, {r6, 0x0, 0x4, [0xffffffff, 0x3ff]}, 0x2, [0x1, 0x9]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_CONTROL(r7, 0x40086414, &(0x7f00000000c0)={0x0, 0x6a}) syz_usb_disconnect(r1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) fallocate(r8, 0x11, 0x600, 0x7c000) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000004c0)) 3.26569522s ago: executing program 7 (id=4178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x1d, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (fail_nth: 4) 2.984687548s ago: executing program 7 (id=4183): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x173b2a7e, @mcast1, 0x19}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="f05161197e5d0af9b8898545ef3a4bbbb7480d24ac8dedc4ad8c629d31a835d2ca4e5fea2a5378787d07701a4f09533c8847019b640d66172b99502904dd2445191103aa9749613ad0ef23a04bf208108742cc3c07bf630bc5fb3e5d29", 0x5d}, {&(0x7f0000000180)="c9a44ae1f32526a5541b4f94a55bb2b8df1e21b8b6b6cddc2cddf93fa475c33e60e2db41e26790c7e0508b2831b10bd7955b29bece7595ccfbfaa94d426e1ab0cd0357c7d9eede3e263f9a65711267a9f291f7760d627c2954ab65f13aa3299a21e623d9220c53b587d831b319", 0x6d}, {&(0x7f0000000200)="d23433559b6c09a4ec3d195a8ca947a819e9624e837880201aa5aecee6bc08f791c77951947072afc6935185c54d6b58fe896aa55f22206511424042eaad9f8813982f59c6bd8e98c03a5f0dde0385f22ddd773efdd1741fbb84aef0053cbd13b9fdf21aa904a5b45f946e5e490385a5f6cf1aa2b65fb4ba685b053779631b86592b9b440b339df315dd82ac9812c8bb6429878a0159e07253aa6d6baf88", 0x9e}, {&(0x7f00000002c0)="ce87593ff8d42a848d4f7a31f4b7b9bba47ff21e6deeaefcbfbf26c999ed7b2fff78876ab73f561d297067", 0x2b}, {&(0x7f0000000340)="715ef845a3b8a1a287e34fdae15cbb15d5ba941619617f2f6bf89c0fa4b4ef4430750451ccdc9567d091ebf151e25dd9110f85a117890423b64652740c21c41604e212397d437680bc59c900bfe26daab0bf64a18ba5deafa87716b07bb7f0fd2f749f708ae871f68657ba0ef5cf69a84d49e2bf47ebb6c7366742e608ca4128986370cf4a489320becfce0a71af46bfc165b7ea6792b26fa483c7f8f201c7c6a916", 0xa2}], 0x5, &(0x7f0000000480)=ANY=[], 0x100}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000dc0)="0fb82b8cb7547041ba02", 0xa}], 0x1}}], 0x3, 0x8048001) 2.984103056s ago: executing program 7 (id=4184): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x5cc8b4229698abf6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000304000000d9db94250000740000", @ANYRES32=r2, @ANYBLOB="202802000750050008000d00681b637d"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x6404c8c4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000005cc0)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115be", 0x1c}], 0x1}}], 0x1, 0x400c0) 1.884331897s ago: executing program 7 (id=4185): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_crash_loaded', 0x80, 0x3) read$msr(r1, &(0x7f0000000280)=""/210, 0xd2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0xdb, 0x59a096b}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000000e40)={&(0x7f0000000100)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x3ff, 0x248a20f0, 0x1, 0x8, 0x8, 0x5, 0x0, 0x0, 0x80, 0x39bf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1.26612931s ago: executing program 7 (id=4198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xfffb}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x100001, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1004, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x1, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0xffc, 0x809, 0xa, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) (fail_nth: 5) 966.292045ms ago: executing program 7 (id=4203): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r1 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfed5}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0x4, 0xd, {0xd, 0xd80017a73ff30278, "f36264719009bcd94e9926"}}, &(0x7f0000000140)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "d80c528ea04d837f1fdd03b2c6d113172c183ef562bb473fd553cdd341d3ef57ff90526471d62f58168647e577d9a53042f008859aa2da2cbd4d6325a3ce0d923fe2ea795705101f28556a6e7446799aed2f1f094a90c6c7fe23728221ba939ce915f0443f469f350369088630a7a73618724217f502a6e2cc60b3a5c672079c6809542bae16a2b633"}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x14, 0x54, "87ff9895a8606f08c17bdd5d3aad19dc4f55e7447891e54e54ba8bb7ef4675795339a86b86e44b3caf15671df36c14616a49edcf101b06c8cbe3e436621e43ea7d41f9d855cba98e3242b209281466c946f7358b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0xc0, 0x5, 0x5, "7be517b6d8"}, &(0x7f0000000380)={0x40, 0x5, 0x3, "88b5ea"}}) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setuid(0xee01) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$kcm(0x21, 0x2, 0x2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000000)="660b8fcf", 0x4, 0x24044084, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) socket$kcm(0x2d, 0x2, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000480)=0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 483.643712ms ago: executing program 2 (id=4215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x100001, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1004, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc03, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x9f67, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x1, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r4, 0x1, 0xd8, 0x6, @local}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) 394.982685ms ago: executing program 6 (id=4216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4004890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 391.634409ms ago: executing program 2 (id=4217): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x1000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'rr\x00', 0x2d, 0x3, 0x68}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000200)={0x7f, 0x2d, "95847a406c7bc4b4e2498536c00ba03b6520c0ab94969617daa715b4015936005ff4a4660ed974a45100000000"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x200, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x5, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xa}]}}}]}, 0x3c}}, 0x1) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x73) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044802}, 0x0) 285.298109ms ago: executing program 2 (id=4218): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xa6c1, 0x80}}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)="6d19ce37d37bdced650f2b376e37c4ec22fdb27beed273b57d0de54a658d7495e76091c6a9d8cfe84432c21d2bfb62790c6d7a250ef51ff524f02a6a77e1f1bf3a3bfbe6827d0a4a327e093ffa73e0e54a6c18a5", 0x54}], 0x1) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000180)) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r9, 0x5501) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000d00bc000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 284.799214ms ago: executing program 6 (id=4219): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_team\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x41115, 0x54c1f}}, 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 284.450749ms ago: executing program 5 (id=4220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x6d, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x3, 0x1, {0xffff1c72, 0x1, 0x1000, 0xfd, 0x3, 0x7583}}}}]}, 0x78}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000002c0)="040000ea07abb9a5d4da06aeac00", 0xe, 0x48040, &(0x7f00000001c0)={0x11, 0x10, r6, 0x1, 0xd8, 0x6, @local}, 0x14) 284.251957ms ago: executing program 6 (id=4221): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x4161, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000300)="260f38cbfc260f01c90fc79f004826660f3880a455740f20d86635200000000f22d866b8c290013e0f23d00f21f866350000000b0f23f8640f856fd4dde40f35660fdef8", 0x44}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x8000000000000000, 0x7, 0x5, 0x3, 0x2, 0x800000400000004, 0x2000008080451, 0x7ffffffc, 0xc, 0xffffffff, 0x4000079, 0x4, 0x1e, 0x6, 0xffffffff, 0x803], 0xeeef0000, 0x1403}) ioctl$KVM_RUN(r4, 0xae80, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) 205.837481ms ago: executing program 2 (id=4222): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x173b2a7e, @mcast1, 0x19}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="f05161197e5d0af9b8898545ef3a4bbbb7480d24ac8dedc4ad8c629d31a835d2ca4e5fea2a5378787d07701a4f09533c8847019b640d66172b99502904dd2445191103aa9749613ad0ef23a04bf208108742cc3c07bf630bc5fb3e5d29", 0x5d}, {&(0x7f0000000180)="c9a44ae1f32526a5541b4f94a55bb2b8df1e21b8b6b6cddc2cddf93fa475c33e60e2db41e26790c7e0508b2831b10bd7955b29bece7595ccfbfaa94d426e1ab0cd0357c7d9eede3e263f9a65711267a9f291f7760d627c2954ab65f13aa3299a21e623d9220c53b587d831b319", 0x6d}, {&(0x7f0000000200)="d23433559b6c09a4ec3d195a8ca947a819e9624e837880201aa5aecee6bc08f791c77951947072afc6935185c54d6b58fe896aa55f22206511424042eaad9f8813982f59c6bd8e98c03a5f0dde0385f22ddd773efdd1741fbb84aef0053cbd13b9fdf21aa904a5b45f946e5e490385a5f6cf1aa2b65fb4ba685b053779631b86592b9b440b339df315dd82ac9812c8bb6429878a0159e07253aa6d6baf88b1aed7ed562e208398ff261a86fedd4cbc", 0xaf}, {&(0x7f00000002c0)="ce87593ff8d42a848d4f7a31f4b7b9bba47ff21e6deeaefcbfbf26c999ed7b2fff78876ab73f561d297067", 0x2b}, {&(0x7f0000000340)="715ef845a3b8a1a287e34fdae15cbb15d5ba941619617f2f6bf89c0fa4b4ef4430750451ccdc9567d091ebf151e25dd9110f85a117890423b64652740c21c41604e212397d437680bc59c900bfe26daab0bf64a18ba5deafa87716b07bb7f0fd2f749f708ae871f68657ba0ef5cf69a84d49e2bf47ebb6c7366742e608ca4128986370cf4a489320becfce0a71af46bfc165b7ea6792b26fa483c7f8f201c7c6a916", 0xa2}], 0x5, &(0x7f0000000480)=ANY=[], 0x100}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000dc0)="0fb82b8cb7547041ba02", 0xa}], 0x1}}], 0x3, 0x8048001) 205.510897ms ago: executing program 2 (id=4223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010003000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 115.933234ms ago: executing program 5 (id=4224): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xae, &(0x7f0000000340)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x63, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x2}, {0x0, 0xa, "6580a5e97612fe86"}, {0x7, 0x12, "ea0d28a2c2433dffffffffffffff7f00"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 115.56699ms ago: executing program 5 (id=4225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x100001, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1004, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc03, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x9f67, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x1, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r4, 0x1, 0xd8, 0x6, @local}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) 65.060246ms ago: executing program 6 (id=4226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 64.679543ms ago: executing program 6 (id=4227): unshare(0x4020e40) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa03049078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001ac1414aa000000000000000000000000ac1414000000000000000000000000000000000000000006001e000100000000ac14140000000000"], 0x0) 1.60544ms ago: executing program 2 (id=4228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4004890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 390.602µs ago: executing program 6 (id=4229): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0x6}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x8a, 0x40, 0x2, 0xc2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (fail_nth: 5) 0s ago: executing program 5 (id=4230): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x543, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) kernel console output (not intermixed with test programs): 275.679323][T25218] syzkaller0: entered promiscuous mode [ 275.681177][T25218] syzkaller0: entered allmulticast mode [ 275.687216][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 275.689328][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 275.692388][T25218] netlink: 65 bytes leftover after parsing attributes in process `syz.6.3827'. [ 275.695621][T25210] tipc: Enabled bearer , priority 0 [ 275.711314][T25208] tipc: Resetting bearer [ 275.725810][T25208] tipc: Disabling bearer [ 275.793215][T25233] befs: (nullb0): No write support. Marking filesystem read-only [ 275.796974][T25233] befs: (nullb0): invalid magic header [ 275.800474][T25233] befs: (nullb0): No write support. Marking filesystem read-only [ 275.803230][T25233] befs: (nullb0): invalid magic header [ 275.803849][T25238] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 275.805577][T25233] befs: (nullb0): No write support. Marking filesystem read-only [ 275.810731][T25233] befs: (nullb0): invalid magic header [ 275.813031][T25233] befs: (nullb0): No write support. Marking filesystem read-only [ 275.816161][T25233] befs: (nullb0): invalid magic header [ 275.827610][T25233] befs: (nullb0): No write support. Marking filesystem read-only [ 275.830482][T25233] befs: (nullb0): invalid magic header [ 275.833129][T25233] befs: (nullb0): No write support. Marking filesystem read-only [ 275.836264][T25233] befs: (nullb0): invalid magic header [ 275.839192][T25233] befs: (nullb0): No write support. Marking filesystem read-only [ 275.843410][T25233] befs: (nullb0): invalid magic header [ 275.843943][T25241] FAULT_INJECTION: forcing a failure. [ 275.843943][T25241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.851161][ T40] audit: type=1400 audit(1766659994.887:53256): avc: denied { create } for pid=25240 comm="syz.6.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 275.851294][T25241] CPU: 0 UID: 0 PID: 25241 Comm: syz.7.3831 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.851322][T25241] Tainted: [L]=SOFTLOCKUP [ 275.851329][T25241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 275.851340][T25241] Call Trace: [ 275.851347][T25241] [ 275.851355][T25241] dump_stack_lvl+0x16c/0x1f0 [ 275.851383][T25241] should_fail_ex+0x512/0x640 [ 275.851414][T25241] _copy_to_user+0x32/0xd0 [ 275.851443][T25241] simple_read_from_buffer+0xcb/0x170 [ 275.851470][T25241] proc_fail_nth_read+0x197/0x240 [ 275.851490][T25241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.851511][T25241] ? rw_verify_area+0xcf/0x6c0 [ 275.851531][T25241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.851549][T25241] vfs_read+0x1e4/0xcf0 [ 275.851573][T25241] ? __pfx___mutex_lock+0x10/0x10 [ 275.851600][T25241] ? __pfx_vfs_read+0x10/0x10 [ 275.851630][T25241] ? __fget_files+0x20e/0x3c0 [ 275.851664][T25241] ksys_read+0x12a/0x250 [ 275.851685][T25241] ? __pfx_ksys_read+0x10/0x10 [ 275.851715][T25241] do_syscall_64+0xcd/0xf80 [ 275.851740][T25241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.851759][T25241] RIP: 0033:0x7f035e98e1dc [ 275.851774][T25241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 275.851791][T25241] RSP: 002b:00007f035f8b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.851809][T25241] RAX: ffffffffffffffda RBX: 00007f035ebe5fa0 RCX: 00007f035e98e1dc [ 275.851821][T25241] RDX: 000000000000000f RSI: 00007f035f8b50a0 RDI: 0000000000000004 [ 275.851831][T25241] RBP: 00007f035f8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 275.851842][T25241] R10: 00000000000400c0 R11: 0000000000000246 R12: 0000000000000001 [ 275.851853][T25241] R13: 00007f035ebe6038 R14: 00007f035ebe5fa0 R15: 00007ffc4825bd48 [ 275.851880][T25241] [ 276.015629][T25267] openvswitch: netlink: Flow key attr not present in new flow. [ 276.052001][T25270] syzkaller0: entered promiscuous mode [ 276.054505][T25270] syzkaller0: entered allmulticast mode [ 276.069277][T25270] tipc: Enabled bearer , priority 0 [ 276.072959][T25269] tipc: Resetting bearer [ 276.083747][T25269] tipc: Disabling bearer [ 276.139599][T25174] ceph: No mds server is up or the cluster is laggy [ 276.144853][T25178] ceph: No mds server is up or the cluster is laggy [ 276.148516][ T24] libceph: connect (1)[c::]:6789 error -101 [ 276.152062][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 276.174784][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3839'. [ 276.186449][T25283] syzkaller0: entered promiscuous mode [ 276.188951][T25283] syzkaller0: entered allmulticast mode [ 276.192731][T25283] netlink: 65 bytes leftover after parsing attributes in process `syz.7.3840'. [ 276.399951][T25305] syzkaller0: entered promiscuous mode [ 276.401847][T25305] syzkaller0: entered allmulticast mode [ 276.626207][T25314] FAULT_INJECTION: forcing a failure. [ 276.626207][T25314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.630465][T25322] syzkaller0: entered promiscuous mode [ 276.632794][T25314] CPU: 0 UID: 0 PID: 25314 Comm: syz.5.3847 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.632829][T25314] Tainted: [L]=SOFTLOCKUP [ 276.632836][T25314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 276.632848][T25314] Call Trace: [ 276.632854][T25314] [ 276.632862][T25314] dump_stack_lvl+0x16c/0x1f0 [ 276.632890][T25314] should_fail_ex+0x512/0x640 [ 276.632918][T25314] _copy_to_user+0x32/0xd0 [ 276.632946][T25314] simple_read_from_buffer+0xcb/0x170 [ 276.632974][T25314] proc_fail_nth_read+0x197/0x240 [ 276.632995][T25314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.633015][T25314] ? rw_verify_area+0xcf/0x6c0 [ 276.633033][T25314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.633052][T25314] vfs_read+0x1e4/0xcf0 [ 276.633075][T25314] ? __pfx___mutex_lock+0x10/0x10 [ 276.633101][T25314] ? __pfx_vfs_read+0x10/0x10 [ 276.633130][T25314] ? __fget_files+0x20e/0x3c0 [ 276.633160][T25314] ksys_read+0x12a/0x250 [ 276.633181][T25314] ? __pfx_ksys_read+0x10/0x10 [ 276.633210][T25314] do_syscall_64+0xcd/0xf80 [ 276.633235][T25314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.633254][T25314] RIP: 0033:0x7f094f58e1dc [ 276.633267][T25314] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 276.633283][T25314] RSP: 002b:00007f0950362030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.633301][T25314] RAX: ffffffffffffffda RBX: 00007f094f7e5fa0 RCX: 00007f094f58e1dc [ 276.633313][T25314] RDX: 000000000000000f RSI: 00007f09503620a0 RDI: 0000000000000005 [ 276.633324][T25314] RBP: 00007f0950362090 R08: 0000000000000000 R09: 0000000000000000 [ 276.633335][T25314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.633345][T25314] R13: 00007f094f7e6038 R14: 00007f094f7e5fa0 R15: 00007ffc1bcb8688 [ 276.633371][T25314] [ 276.698971][T25322] syzkaller0: entered allmulticast mode [ 276.712250][T25322] tipc: Enabled bearer , priority 0 [ 276.717866][T25321] tipc: Resetting bearer [ 276.729951][T25321] tipc: Disabling bearer [ 276.833155][T25337] option changes via remount are deprecated (pid=25336 comm=syz.2.3852) [ 276.836029][T25337] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 276.890974][T25342] syzkaller0: entered promiscuous mode [ 276.893842][T25342] syzkaller0: entered allmulticast mode [ 276.967549][T25357] tipc: Enabled bearer , priority 0 [ 276.970307][T25357] syzkaller0: entered promiscuous mode [ 276.975697][T25357] syzkaller0: entered allmulticast mode [ 276.982425][T25357] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 277.008040][T25357] FAULT_INJECTION: forcing a failure. [ 277.008040][T25357] name failslab, interval 1, probability 0, space 0, times 0 [ 277.012250][T25357] CPU: 3 UID: 0 PID: 25357 Comm: syz.2.3858 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.012267][T25357] Tainted: [L]=SOFTLOCKUP [ 277.012271][T25357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.012279][T25357] Call Trace: [ 277.012283][T25357] [ 277.012288][T25357] dump_stack_lvl+0x16c/0x1f0 [ 277.012306][T25357] should_fail_ex+0x512/0x640 [ 277.012323][T25357] ? fs_reclaim_acquire+0xae/0x150 [ 277.012341][T25357] should_failslab+0xc2/0x120 [ 277.012356][T25357] __kmalloc_noprof+0xeb/0x910 [ 277.012375][T25357] ? tomoyo_encode2+0x100/0x3e0 [ 277.012393][T25357] ? tomoyo_encode2+0x100/0x3e0 [ 277.012407][T25357] tomoyo_encode2+0x100/0x3e0 [ 277.012424][T25357] tomoyo_encode+0x29/0x50 [ 277.012438][T25357] tomoyo_realpath_from_path+0x18f/0x6e0 [ 277.012455][T25357] ? tomoyo_profile+0x47/0x60 [ 277.012473][T25357] tomoyo_path_number_perm+0x245/0x580 [ 277.012486][T25357] ? tomoyo_path_number_perm+0x237/0x580 [ 277.012500][T25357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.012514][T25357] ? find_held_lock+0x2b/0x80 [ 277.012543][T25357] ? find_held_lock+0x2b/0x80 [ 277.012559][T25357] ? hook_file_ioctl_common+0x144/0x410 [ 277.012580][T25357] ? __fget_files+0x20e/0x3c0 [ 277.012598][T25357] security_file_ioctl+0x9b/0x240 [ 277.012615][T25357] __x64_sys_ioctl+0xb7/0x210 [ 277.012629][T25357] do_syscall_64+0xcd/0xf80 [ 277.012645][T25357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.012656][T25357] RIP: 0033:0x7f8ae618f7c9 [ 277.012665][T25357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.012677][T25357] RSP: 002b:00007f8ae43f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.012688][T25357] RAX: ffffffffffffffda RBX: 00007f8ae63e5fa0 RCX: 00007f8ae618f7c9 [ 277.012695][T25357] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 277.012702][T25357] RBP: 00007f8ae43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 277.012708][T25357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.012715][T25357] R13: 00007f8ae63e6038 R14: 00007f8ae63e5fa0 R15: 00007ffce11fa4c8 [ 277.012729][T25357] [ 277.012738][T25357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.091488][T25357] tipc: Resetting bearer [ 277.095154][T25356] tipc: Resetting bearer [ 277.107564][T25356] tipc: Disabling bearer [ 277.194905][T25396] syzkaller0: entered promiscuous mode [ 277.197252][T25396] syzkaller0: entered allmulticast mode [ 277.251997][T25396] tipc: Enabled bearer , priority 0 [ 277.258930][T25394] tipc: Resetting bearer [ 277.282496][T25394] tipc: Disabling bearer [ 277.306352][T25407] tipc: Enabled bearer , priority 0 [ 277.310498][T25407] syzkaller0: entered promiscuous mode [ 277.312390][T25407] syzkaller0: entered allmulticast mode [ 277.340864][T25407] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 277.353385][T25407] tipc: Resetting bearer [ 277.380452][T25404] tipc: Resetting bearer [ 277.402397][T25404] tipc: Disabling bearer [ 277.420235][T25420] tmpfs: Unknown parameter '0x0000000000000000' [ 277.460549][T25428] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 277.463589][T25428] ALSA: mixer_oss: invalid index 1374389 [ 277.470818][T25427] Invalid source name [ 277.472548][T25427] UBIFS error (pid: 25427): cannot open "/dev/sg0", error -22 [ 277.510925][T25437] FAULT_INJECTION: forcing a failure. [ 277.510925][T25437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.520971][T25437] CPU: 2 UID: 0 PID: 25437 Comm: syz.6.3870 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.520995][T25437] Tainted: [L]=SOFTLOCKUP [ 277.521001][T25437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.521012][T25437] Call Trace: [ 277.521019][T25437] [ 277.521026][T25437] dump_stack_lvl+0x16c/0x1f0 [ 277.521051][T25437] should_fail_ex+0x512/0x640 [ 277.521097][T25437] _copy_from_iter+0x2a4/0x16c0 [ 277.521129][T25437] ? __asan_memset+0x23/0x50 [ 277.521149][T25437] ? __pfx__copy_from_iter+0x10/0x10 [ 277.521174][T25437] ? __alloc_skb+0x220/0x410 [ 277.521197][T25437] ? __pfx___alloc_skb+0x10/0x10 [ 277.521228][T25437] skb_copy_datagram_from_iter+0x124/0x740 [ 277.521261][T25437] tun_get_user+0x1850/0x3cc0 [ 277.521295][T25437] ? __pfx_tun_get_user+0x10/0x10 [ 277.521320][T25437] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 277.521344][T25437] ? find_held_lock+0x2b/0x80 [ 277.521370][T25437] ? tun_get+0x191/0x370 [ 277.521394][T25437] tun_chr_write_iter+0xdc/0x210 [ 277.521419][T25437] vfs_write+0x7d3/0x11d0 [ 277.521441][T25437] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 277.521468][T25437] ? __pfx_vfs_write+0x10/0x10 [ 277.521486][T25437] ? find_held_lock+0x2b/0x80 [ 277.521520][T25437] ksys_write+0x12a/0x250 [ 277.521540][T25437] ? __pfx_ksys_write+0x10/0x10 [ 277.521569][T25437] do_syscall_64+0xcd/0xf80 [ 277.521591][T25437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.521608][T25437] RIP: 0033:0x7fe729d8f7c9 [ 277.521619][T25437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.521635][T25437] RSP: 002b:00007fe72ac70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.521652][T25437] RAX: ffffffffffffffda RBX: 00007fe729fe5fa0 RCX: 00007fe729d8f7c9 [ 277.521663][T25437] RDX: 000000000000006d RSI: 0000200000000200 RDI: 0000000000000004 [ 277.521674][T25437] RBP: 00007fe72ac70090 R08: 0000000000000000 R09: 0000000000000000 [ 277.521684][T25437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.521694][T25437] R13: 00007fe729fe6038 R14: 00007fe729fe5fa0 R15: 00007fff7879e9d8 [ 277.521711][T25437] [ 277.640007][T25447] netlink: 'syz.7.3873': attribute type 29 has an invalid length. [ 277.647866][T25447] netlink: 'syz.7.3873': attribute type 29 has an invalid length. [ 277.650698][T25447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3873'. [ 277.684690][T25458] syzkaller0: entered promiscuous mode [ 277.686602][T25458] syzkaller0: entered allmulticast mode [ 277.725921][T25462] syzkaller0: entered promiscuous mode [ 277.727903][T25462] syzkaller0: entered allmulticast mode [ 277.731300][T25462] FAULT_INJECTION: forcing a failure. [ 277.731300][T25462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.735595][T25462] CPU: 3 UID: 0 PID: 25462 Comm: syz.6.3875 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.735612][T25462] Tainted: [L]=SOFTLOCKUP [ 277.735616][T25462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.735624][T25462] Call Trace: [ 277.735628][T25462] [ 277.735633][T25462] dump_stack_lvl+0x16c/0x1f0 [ 277.735651][T25462] should_fail_ex+0x512/0x640 [ 277.735671][T25462] _copy_from_user+0x2e/0xd0 [ 277.735688][T25462] move_addr_to_kernel+0x65/0x170 [ 277.735705][T25462] __copy_msghdr+0x386/0x470 [ 277.735720][T25462] copy_msghdr_from_user+0xc1/0x160 [ 277.735732][T25462] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 277.735749][T25462] ___sys_sendmsg+0xfe/0x1d0 [ 277.735761][T25462] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.735788][T25462] __sys_sendmsg+0x16d/0x220 [ 277.735800][T25462] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.735819][T25462] do_syscall_64+0xcd/0xf80 [ 277.735835][T25462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.735847][T25462] RIP: 0033:0x7fe729d8f7c9 [ 277.735856][T25462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.735867][T25462] RSP: 002b:00007fe72ac70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.735878][T25462] RAX: ffffffffffffffda RBX: 00007fe729fe5fa0 RCX: 00007fe729d8f7c9 [ 277.735885][T25462] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 277.735892][T25462] RBP: 00007fe72ac70090 R08: 0000000000000000 R09: 0000000000000000 [ 277.735898][T25462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.735905][T25462] R13: 00007fe729fe6038 R14: 00007fe729fe5fa0 R15: 00007fff7879e9d8 [ 277.735919][T25462] [ 277.849299][T25470] syzkaller0: entered promiscuous mode [ 277.851704][T25470] syzkaller0: entered allmulticast mode [ 277.927439][T25483] FAULT_INJECTION: forcing a failure. [ 277.927439][T25483] name failslab, interval 1, probability 0, space 0, times 0 [ 277.932645][T25483] CPU: 3 UID: 0 PID: 25483 Comm: syz.7.3880 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.932664][T25483] Tainted: [L]=SOFTLOCKUP [ 277.932668][T25483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.932676][T25483] Call Trace: [ 277.932680][T25483] [ 277.932684][T25483] dump_stack_lvl+0x16c/0x1f0 [ 277.932703][T25483] should_fail_ex+0x512/0x640 [ 277.932720][T25483] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 277.932734][T25483] should_failslab+0xc2/0x120 [ 277.932750][T25483] kmem_cache_alloc_node_noprof+0x86/0x800 [ 277.932762][T25483] ? __alloc_skb+0x156/0x410 [ 277.932782][T25483] ? __alloc_skb+0x156/0x410 [ 277.932804][T25483] __alloc_skb+0x156/0x410 [ 277.932819][T25483] ? __alloc_skb+0x35d/0x410 [ 277.932835][T25483] ? __pfx___alloc_skb+0x10/0x10 [ 277.932852][T25483] ? netlink_autobind.isra.0+0x158/0x370 [ 277.932870][T25483] netlink_alloc_large_skb+0x69/0x140 [ 277.932885][T25483] netlink_sendmsg+0x698/0xdd0 [ 277.932900][T25483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.932919][T25483] ____sys_sendmsg+0xa5d/0xc30 [ 277.932934][T25483] ? copy_msghdr_from_user+0x10a/0x160 [ 277.932946][T25483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.932966][T25483] ___sys_sendmsg+0x134/0x1d0 [ 277.932978][T25483] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.933005][T25483] __sys_sendmsg+0x16d/0x220 [ 277.933017][T25483] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.933037][T25483] do_syscall_64+0xcd/0xf80 [ 277.933054][T25483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.933066][T25483] RIP: 0033:0x7f035e98f7c9 [ 277.933075][T25483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.933087][T25483] RSP: 002b:00007f035f8b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.933098][T25483] RAX: ffffffffffffffda RBX: 00007f035ebe5fa0 RCX: 00007f035e98f7c9 [ 277.933105][T25483] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 277.933112][T25483] RBP: 00007f035f8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 277.933118][T25483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.933125][T25483] R13: 00007f035ebe6038 R14: 00007f035ebe5fa0 R15: 00007ffc4825bd48 [ 277.933139][T25483] [ 278.037117][ T40] audit: type=1400 audit(1766659997.087:53257): avc: denied { read } for pid=25490 comm="syz.7.3883" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 278.128271][ T40] audit: type=1400 audit(1766659997.177:53258): avc: denied { ioctl } for pid=25490 comm="syz.7.3883" path="socket:[63022]" dev="sockfs" ino=63022 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 278.148026][T25502] syzkaller0: entered promiscuous mode [ 278.150373][T25502] syzkaller0: entered allmulticast mode [ 278.179264][T25523] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3887'. [ 278.269825][T25532] veth0_to_bridge: entered promiscuous mode [ 278.368689][T25533] veth0_to_bridge: left promiscuous mode [ 278.393407][T25548] usb usb8: usbfs: process 25548 (syz.6.3894) did not claim interface 0 before use [ 278.406107][T25567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3897'. [ 278.460365][T25573] syzkaller0: entered promiscuous mode [ 278.462263][T25573] syzkaller0: entered allmulticast mode [ 278.477216][ T3308] block nbd1: Possible stuck request ffff888028500000: control (read@0,1024B). Runtime 210 seconds [ 278.480729][ T3308] block nbd1: Possible stuck request ffff888028500200: control (read@1024,1024B). Runtime 210 seconds [ 278.484397][ T3308] block nbd1: Possible stuck request ffff888028500400: control (read@2048,1024B). Runtime 210 seconds [ 278.488176][ T3308] block nbd1: Possible stuck request ffff888028500600: control (read@3072,1024B). Runtime 210 seconds [ 278.492461][ T40] audit: type=1400 audit(1766659997.537:53259): avc: denied { add_name } for pid=25577 comm="syz.6.3900" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.501855][ T40] audit: type=1400 audit(1766659997.537:53260): avc: denied { create } for pid=25577 comm="syz.6.3900" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.508794][ T40] audit: type=1400 audit(1766659997.537:53261): avc: denied { associate } for pid=25577 comm="syz.6.3900" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 278.518665][ T40] audit: type=1400 audit(1766659997.567:53262): avc: denied { lock } for pid=25577 comm="syz.6.3900" path="/263/file0/file0" dev="9p" ino=71827817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 278.565134][T25585] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 278.568750][T25585] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 278.611090][T25591] tmpfs: Bad value for 'mpol' [ 278.714189][T25610] syzkaller0: entered promiscuous mode [ 278.716838][T25610] syzkaller0: entered allmulticast mode [ 278.794749][T25622] x_tables: duplicate underflow at hook 1 [ 278.840473][T25628] syzkaller0: entered promiscuous mode [ 278.842354][T25628] syzkaller0: entered allmulticast mode [ 278.975413][T25656] netlink: 'syz.2.3918': attribute type 21 has an invalid length. [ 278.979704][T25656] sctp: [Deprecated]: syz.2.3918 (pid 25656) Use of int in maxseg socket option. [ 278.979704][T25656] Use struct sctp_assoc_value instead [ 279.042515][T25665] netlink: 'syz.2.3921': attribute type 9 has an invalid length. [ 279.045262][T25665] netlink: 'syz.2.3921': attribute type 11 has an invalid length. [ 279.049373][T25665] netlink: 'syz.2.3921': attribute type 12 has an invalid length. [ 279.094520][T25669] syzkaller0: entered promiscuous mode [ 279.096394][T25669] syzkaller0: entered allmulticast mode [ 279.170122][T25692] FAULT_INJECTION: forcing a failure. [ 279.170122][T25692] name failslab, interval 1, probability 0, space 0, times 0 [ 279.175675][T25692] CPU: 3 UID: 0 PID: 25692 Comm: syz.6.3929 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.175702][T25692] Tainted: [L]=SOFTLOCKUP [ 279.175708][T25692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.175718][T25692] Call Trace: [ 279.175732][T25692] [ 279.175739][T25692] dump_stack_lvl+0x16c/0x1f0 [ 279.175785][T25692] should_fail_ex+0x512/0x640 [ 279.175816][T25692] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 279.175838][T25692] should_failslab+0xc2/0x120 [ 279.175860][T25692] kmem_cache_alloc_node_noprof+0x86/0x800 [ 279.175878][T25692] ? __alloc_skb+0x156/0x410 [ 279.175901][T25692] ? __alloc_skb+0x35d/0x410 [ 279.175929][T25692] ? __alloc_skb+0x156/0x410 [ 279.175952][T25692] __alloc_skb+0x156/0x410 [ 279.175975][T25692] ? __alloc_skb+0x35d/0x410 [ 279.175998][T25692] ? __pfx___alloc_skb+0x10/0x10 [ 279.176029][T25692] alloc_skb_with_frags+0xe0/0x860 [ 279.176049][T25692] ? __might_fault+0xe3/0x190 [ 279.176064][T25692] ? __might_fault+0x13b/0x190 [ 279.176084][T25692] sock_alloc_send_pskb+0x7f9/0x980 [ 279.176111][T25692] ? _copy_from_iter+0x161/0x16c0 [ 279.176142][T25692] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 279.176167][T25692] ? __lock_acquire+0x436/0x2890 [ 279.176185][T25692] ? _parse_integer_limit+0x17f/0x1d0 [ 279.176207][T25692] ? iov_iter_advance+0x7d/0x6c0 [ 279.176234][T25692] tun_get_user+0x7e2/0x3cc0 [ 279.176269][T25692] ? __pfx_tun_get_user+0x10/0x10 [ 279.176295][T25692] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 279.176318][T25692] ? find_held_lock+0x2b/0x80 [ 279.176343][T25692] ? tun_get+0x191/0x370 [ 279.176371][T25692] tun_chr_write_iter+0xdc/0x210 [ 279.176397][T25692] vfs_write+0x7d3/0x11d0 [ 279.176420][T25692] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 279.176447][T25692] ? __pfx_vfs_write+0x10/0x10 [ 279.176466][T25692] ? find_held_lock+0x2b/0x80 [ 279.176504][T25692] ksys_write+0x12a/0x250 [ 279.176525][T25692] ? __pfx_ksys_write+0x10/0x10 [ 279.176546][T25692] ? fput+0x70/0xf0 [ 279.176564][T25692] do_syscall_64+0xcd/0xf80 [ 279.176589][T25692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.176606][T25692] RIP: 0033:0x7fe729d8f7c9 [ 279.176619][T25692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.176635][T25692] RSP: 002b:00007fe72ac70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.176652][T25692] RAX: ffffffffffffffda RBX: 00007fe729fe5fa0 RCX: 00007fe729d8f7c9 [ 279.176663][T25692] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 279.176673][T25692] RBP: 00007fe72ac70090 R08: 0000000000000000 R09: 0000000000000000 [ 279.176683][T25692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.176713][T25692] R13: 00007fe729fe6038 R14: 00007fe729fe5fa0 R15: 00007fff7879e9d8 [ 279.176743][T25692] [ 279.333824][ T40] audit: type=1400 audit(1766659998.377:53263): avc: denied { getopt } for pid=25708 comm="syz.5.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 279.391600][T25714] syzkaller0: entered promiscuous mode [ 279.393526][T25714] syzkaller0: entered allmulticast mode [ 279.465789][T25724] netlink: 'syz.6.3935': attribute type 1 has an invalid length. [ 279.612419][T25738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=25738 comm=syz.2.3940 [ 279.617693][T25738] netlink: 'syz.2.3940': attribute type 1 has an invalid length. [ 279.809770][T25768] syzkaller0: entered promiscuous mode [ 279.811674][T25768] syzkaller0: entered allmulticast mode [ 279.991424][T25786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.026787][T25799] __nla_validate_parse: 5 callbacks suppressed [ 280.026804][T25799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3950'. [ 280.074509][T25803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3946'. [ 280.078961][T25803] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3946'. [ 280.081992][T25803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3946'. [ 280.085204][T25803] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3946'. [ 280.111315][T25808] syzkaller0: entered promiscuous mode [ 280.113125][T25808] syzkaller0: entered allmulticast mode [ 280.194402][T25818] syzkaller0: entered promiscuous mode [ 280.196217][T25818] syzkaller0: entered allmulticast mode [ 280.315512][T25828] tipc: Enabled bearer , priority 0 [ 280.318570][T25828] syzkaller0: entered promiscuous mode [ 280.321119][T25828] syzkaller0: entered allmulticast mode [ 280.328362][T25828] tipc: Resetting bearer [ 280.331754][T25827] tipc: Resetting bearer [ 280.343028][T25827] tipc: Disabling bearer [ 280.485788][T25844] FAULT_INJECTION: forcing a failure. [ 280.485788][T25844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.490361][T25844] CPU: 0 UID: 0 PID: 25844 Comm: syz.5.3961 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.490380][T25844] Tainted: [L]=SOFTLOCKUP [ 280.490384][T25844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.490391][T25844] Call Trace: [ 280.490395][T25844] [ 280.490400][T25844] dump_stack_lvl+0x16c/0x1f0 [ 280.490419][T25844] should_fail_ex+0x512/0x640 [ 280.490438][T25844] _copy_from_iter+0x2a4/0x16c0 [ 280.490459][T25844] ? __pfx__copy_from_iter+0x10/0x10 [ 280.490475][T25844] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 280.490496][T25844] copy_page_from_iter+0xde/0x180 [ 280.490515][T25844] tun_build_skb.constprop.0+0x2e8/0x1560 [ 280.490537][T25844] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 280.490568][T25844] ? arch_stack_walk+0xa6/0x100 [ 280.490593][T25844] ? _kstrtoull+0x145/0x200 [ 280.490607][T25844] tun_get_user+0x149c/0x3cc0 [ 280.490629][T25844] ? __pfx_tun_get_user+0x10/0x10 [ 280.490646][T25844] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 280.490661][T25844] ? find_held_lock+0x2b/0x80 [ 280.490679][T25844] ? tun_get+0x191/0x370 [ 280.490696][T25844] tun_chr_write_iter+0xdc/0x210 [ 280.490714][T25844] vfs_write+0x7d3/0x11d0 [ 280.490729][T25844] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 280.490747][T25844] ? __pfx_vfs_write+0x10/0x10 [ 280.490760][T25844] ? find_held_lock+0x2b/0x80 [ 280.490785][T25844] ksys_write+0x12a/0x250 [ 280.490798][T25844] ? __pfx_ksys_write+0x10/0x10 [ 280.490816][T25844] do_syscall_64+0xcd/0xf80 [ 280.490832][T25844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.490845][T25844] RIP: 0033:0x7f094f58e27f [ 280.490854][T25844] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 280.490865][T25844] RSP: 002b:00007f0950341000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 280.490877][T25844] RAX: ffffffffffffffda RBX: 00007f094f7e6090 RCX: 00007f094f58e27f [ 280.490884][T25844] RDX: 000000000000003a RSI: 0000200000002100 RDI: 00000000000000c8 [ 280.490891][T25844] RBP: 00007f0950341090 R08: 0000000000000000 R09: 0000000000000000 [ 280.490897][T25844] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 280.490904][T25844] R13: 00007f094f7e6128 R14: 00007f094f7e6090 R15: 00007ffc1bcb8688 [ 280.490918][T25844] [ 280.656800][ T6612] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 280.828238][ T6612] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 280.831045][ T6612] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 280.834272][ T6612] usb 12-1: config 0 interface 0 has no altsetting 0 [ 280.838450][ T6612] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 280.841428][ T6612] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 280.844199][ T6612] usb 12-1: Product: syz [ 280.845626][ T6612] usb 12-1: Manufacturer: syz [ 280.847559][ T6612] usb 12-1: SerialNumber: syz [ 280.850499][ T6612] usb 12-1: config 0 descriptor?? [ 280.853638][ T6612] hub 12-1:0.0: bad descriptor, ignoring hub [ 280.855628][ T6612] hub 12-1:0.0: probe with driver hub failed with error -5 [ 280.859539][ T6612] usb 12-1: selecting invalid altsetting 0 [ 281.095751][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 281.095763][ T40] audit: type=1400 audit(1766660000.137:53265): avc: denied { mount } for pid=25857 comm="syz.2.3962" name="/" dev="rpc_pipefs" ino=63371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 281.237732][ T6031] usb 12-1: USB disconnect, device number 5 [ 281.296168][T25885] tipc: Enabled bearer , priority 0 [ 281.300449][T25885] syzkaller0: entered promiscuous mode [ 281.302263][T25885] syzkaller0: entered allmulticast mode [ 281.305948][T25885] FAULT_INJECTION: forcing a failure. [ 281.305948][T25885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.311081][T25885] CPU: 2 UID: 0 PID: 25885 Comm: syz.2.3963 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.311100][T25885] Tainted: [L]=SOFTLOCKUP [ 281.311104][T25885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.311111][T25885] Call Trace: [ 281.311115][T25885] [ 281.311120][T25885] dump_stack_lvl+0x16c/0x1f0 [ 281.311138][T25885] should_fail_ex+0x512/0x640 [ 281.311158][T25885] _copy_from_user+0x2e/0xd0 [ 281.311175][T25885] get_user_ifreq+0xf1/0x250 [ 281.311190][T25885] sock_do_ioctl+0x16b/0x280 [ 281.311204][T25885] ? __pfx_sock_do_ioctl+0x10/0x10 [ 281.311221][T25885] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 281.311236][T25885] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 281.311255][T25885] sock_ioctl+0x227/0x6b0 [ 281.311271][T25885] ? __pfx_sock_ioctl+0x10/0x10 [ 281.311284][T25885] ? hook_file_ioctl_common+0x144/0x410 [ 281.311306][T25885] ? selinux_file_ioctl+0x180/0x270 [ 281.311320][T25885] ? selinux_file_ioctl+0xb4/0x270 [ 281.311335][T25885] ? __pfx_sock_ioctl+0x10/0x10 [ 281.311350][T25885] __x64_sys_ioctl+0x18e/0x210 [ 281.311364][T25885] do_syscall_64+0xcd/0xf80 [ 281.311380][T25885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.311392][T25885] RIP: 0033:0x7f8ae618f7c9 [ 281.311402][T25885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.311413][T25885] RSP: 002b:00007f8ae43f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.311423][T25885] RAX: ffffffffffffffda RBX: 00007f8ae63e5fa0 RCX: 00007f8ae618f7c9 [ 281.311431][T25885] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 281.311437][T25885] RBP: 00007f8ae43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.311444][T25885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.311450][T25885] R13: 00007f8ae63e6038 R14: 00007f8ae63e5fa0 R15: 00007ffce11fa4c8 [ 281.311464][T25885] [ 281.312086][T25884] tipc: Resetting bearer [ 281.389931][T25884] tipc: Disabling bearer [ 281.437563][T25891] syzkaller0: entered promiscuous mode [ 281.440048][T25891] syzkaller0: entered allmulticast mode [ 281.494019][T25903] syzkaller0: entered promiscuous mode [ 281.496544][T25903] syzkaller0: entered allmulticast mode [ 281.659320][T25915] syzkaller0: entered promiscuous mode [ 281.661296][T25915] syzkaller0: entered allmulticast mode [ 281.685542][T25920] syzkaller0: entered promiscuous mode [ 281.687773][T25920] syzkaller0: entered allmulticast mode [ 281.742293][T25928] bond1: entered allmulticast mode [ 281.744319][T25928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.782946][T25963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3972'. [ 281.883695][T25974] XFS (nbd7): no-recovery mounts must be read-only. [ 281.894616][T25974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3975'. [ 281.929860][T25981] geneve2: entered promiscuous mode [ 281.966623][ T40] audit: type=1400 audit(1766660001.007:53266): avc: denied { mounton } for pid=25985 comm="syz.2.3977" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 281.990990][ T40] audit: type=1326 audit(1766660001.037:53267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25985 comm="syz.2.3977" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae618f7c9 code=0x0 [ 282.053328][T25990] : entered promiscuous mode [ 282.096684][T25994] FAULT_INJECTION: forcing a failure. [ 282.096684][T25994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.102436][T25994] CPU: 2 UID: 0 PID: 25994 Comm: syz.7.3979 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.102460][T25994] Tainted: [L]=SOFTLOCKUP [ 282.102466][T25994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.102477][T25994] Call Trace: [ 282.102484][T25994] [ 282.102492][T25994] dump_stack_lvl+0x16c/0x1f0 [ 282.102518][T25994] should_fail_ex+0x512/0x640 [ 282.102547][T25994] _copy_from_user+0x2e/0xd0 [ 282.102588][T25994] sctp_setsockopt+0x206e/0xb8c0 [ 282.102616][T25994] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 282.102643][T25994] ? __pfx_sctp_setsockopt+0x10/0x10 [ 282.102668][T25994] ? find_held_lock+0x2b/0x80 [ 282.102695][T25994] ? selinux_socket_setsockopt+0x6a/0x80 [ 282.102714][T25994] ? sock_common_setsockopt+0x2e/0xf0 [ 282.102735][T25994] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 282.102757][T25994] do_sock_setsockopt+0xf3/0x1d0 [ 282.102780][T25994] __sys_setsockopt+0x1a0/0x230 [ 282.102796][T25994] __x64_sys_setsockopt+0xbd/0x160 [ 282.102811][T25994] ? do_syscall_64+0x91/0xf80 [ 282.102832][T25994] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.102853][T25994] do_syscall_64+0xcd/0xf80 [ 282.102875][T25994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.102892][T25994] RIP: 0033:0x7f035e98f7c9 [ 282.102904][T25994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.102920][T25994] RSP: 002b:00007f035f8b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.102937][T25994] RAX: ffffffffffffffda RBX: 00007f035ebe5fa0 RCX: 00007f035e98f7c9 [ 282.102949][T25994] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 282.102959][T25994] RBP: 00007f035f8b5090 R08: 000000000000009c R09: 0000000000000000 [ 282.102969][T25994] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 282.102979][T25994] R13: 00007f035ebe6038 R14: 00007f035ebe5fa0 R15: 00007ffc4825bd48 [ 282.103004][T25994] [ 282.470796][T26009] syzkaller0: entered promiscuous mode [ 282.472804][T26009] syzkaller0: entered allmulticast mode [ 282.595021][T26017] syzkaller0: entered promiscuous mode [ 282.597852][T26017] syzkaller0: entered allmulticast mode [ 282.613174][T26021] FAULT_INJECTION: forcing a failure. [ 282.613174][T26021] name failslab, interval 1, probability 0, space 0, times 0 [ 282.618430][T26021] CPU: 3 UID: 0 PID: 26021 Comm: syz.5.3985 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.618448][T26021] Tainted: [L]=SOFTLOCKUP [ 282.618452][T26021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.618460][T26021] Call Trace: [ 282.618464][T26021] [ 282.618469][T26021] dump_stack_lvl+0x16c/0x1f0 [ 282.618488][T26021] should_fail_ex+0x512/0x640 [ 282.618505][T26021] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 282.618519][T26021] should_failslab+0xc2/0x120 [ 282.618535][T26021] kmem_cache_alloc_node_noprof+0x86/0x800 [ 282.618546][T26021] ? __alloc_skb+0x156/0x410 [ 282.618563][T26021] ? __alloc_skb+0x35d/0x410 [ 282.618581][T26021] ? __alloc_skb+0x156/0x410 [ 282.618596][T26021] __alloc_skb+0x156/0x410 [ 282.618611][T26021] ? __alloc_skb+0x35d/0x410 [ 282.618627][T26021] ? __pfx___alloc_skb+0x10/0x10 [ 282.618649][T26021] alloc_skb_with_frags+0xe0/0x860 [ 282.618662][T26021] ? __might_fault+0xe3/0x190 [ 282.618672][T26021] ? __might_fault+0x13b/0x190 [ 282.618686][T26021] sock_alloc_send_pskb+0x7f9/0x980 [ 282.618704][T26021] ? _copy_from_iter+0x161/0x16c0 [ 282.618724][T26021] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 282.618741][T26021] ? __lock_acquire+0x436/0x2890 [ 282.618754][T26021] ? _parse_integer_limit+0x17f/0x1d0 [ 282.618768][T26021] ? iov_iter_advance+0x7d/0x6c0 [ 282.618785][T26021] tun_get_user+0x7e2/0x3cc0 [ 282.618809][T26021] ? __pfx_tun_get_user+0x10/0x10 [ 282.618825][T26021] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 282.618840][T26021] ? find_held_lock+0x2b/0x80 [ 282.618857][T26021] ? tun_get+0x191/0x370 [ 282.618875][T26021] tun_chr_write_iter+0xdc/0x210 [ 282.618892][T26021] vfs_write+0x7d3/0x11d0 [ 282.618907][T26021] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 282.618931][T26021] ? __pfx_vfs_write+0x10/0x10 [ 282.618944][T26021] ? find_held_lock+0x2b/0x80 [ 282.618968][T26021] ksys_write+0x12a/0x250 [ 282.618982][T26021] ? __pfx_ksys_write+0x10/0x10 [ 282.619000][T26021] do_syscall_64+0xcd/0xf80 [ 282.619015][T26021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.619027][T26021] RIP: 0033:0x7f094f58f7c9 [ 282.619037][T26021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.619048][T26021] RSP: 002b:00007f0950362038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.619058][T26021] RAX: ffffffffffffffda RBX: 00007f094f7e5fa0 RCX: 00007f094f58f7c9 [ 282.619065][T26021] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 282.619072][T26021] RBP: 00007f0950362090 R08: 0000000000000000 R09: 0000000000000000 [ 282.619079][T26021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.619085][T26021] R13: 00007f094f7e6038 R14: 00007f094f7e5fa0 R15: 00007ffc1bcb8688 [ 282.619099][T26021] [ 282.860958][T26035] syzkaller0: entered promiscuous mode [ 282.863170][T26035] syzkaller0: entered allmulticast mode [ 282.912887][T26045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3990'. [ 282.939525][T26047] syzkaller0: entered promiscuous mode [ 282.941347][T26047] syzkaller0: entered allmulticast mode [ 282.954885][T26052] FAULT_INJECTION: forcing a failure. [ 282.954885][T26052] name failslab, interval 1, probability 0, space 0, times 0 [ 282.960168][T26052] CPU: 3 UID: 0 PID: 26052 Comm: syz.2.3992 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.960188][T26052] Tainted: [L]=SOFTLOCKUP [ 282.960191][T26052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.960199][T26052] Call Trace: [ 282.960202][T26052] [ 282.960207][T26052] dump_stack_lvl+0x16c/0x1f0 [ 282.960227][T26052] should_fail_ex+0x512/0x640 [ 282.960244][T26052] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 282.960258][T26052] should_failslab+0xc2/0x120 [ 282.960273][T26052] kmem_cache_alloc_node_noprof+0x86/0x800 [ 282.960285][T26052] ? __alloc_skb+0x156/0x410 [ 282.960305][T26052] ? __alloc_skb+0x156/0x410 [ 282.960320][T26052] __alloc_skb+0x156/0x410 [ 282.960336][T26052] ? __alloc_skb+0x35d/0x410 [ 282.960352][T26052] ? __pfx___alloc_skb+0x10/0x10 [ 282.960369][T26052] ? process_measurement+0x4a6/0x22d0 [ 282.960384][T26052] ? down_write+0x14d/0x200 [ 282.960403][T26052] alloc_skb_with_frags+0xe0/0x860 [ 282.960419][T26052] sock_alloc_send_pskb+0x7f9/0x980 [ 282.960437][T26052] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 282.960451][T26052] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 282.960468][T26052] ? find_held_lock+0x2b/0x80 [ 282.960486][T26052] ? dev_get_by_index+0x17c/0x380 [ 282.960502][T26052] packet_sendmsg+0x1fe4/0x54a0 [ 282.960522][T26052] ? sock_has_perm+0x258/0x2f0 [ 282.960534][T26052] ? __pfx_sock_has_perm+0x10/0x10 [ 282.960547][T26052] ? __pfx_packet_sendmsg+0x10/0x10 [ 282.960565][T26052] ____sys_sendmsg+0xa5d/0xc30 [ 282.960580][T26052] ? copy_msghdr_from_user+0x10a/0x160 [ 282.960591][T26052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.960612][T26052] ___sys_sendmsg+0x134/0x1d0 [ 282.960624][T26052] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.960650][T26052] __sys_sendmsg+0x16d/0x220 [ 282.960662][T26052] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.960682][T26052] do_syscall_64+0xcd/0xf80 [ 282.960697][T26052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.960709][T26052] RIP: 0033:0x7f8ae618f7c9 [ 282.960719][T26052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.960730][T26052] RSP: 002b:00007f8ae43f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.960741][T26052] RAX: ffffffffffffffda RBX: 00007f8ae63e5fa0 RCX: 00007f8ae618f7c9 [ 282.960748][T26052] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 282.960755][T26052] RBP: 00007f8ae43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 282.960761][T26052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.960774][T26052] R13: 00007f8ae63e6038 R14: 00007f8ae63e5fa0 R15: 00007ffce11fa4c8 [ 282.960788][T26052] [ 283.060127][T26059] syzkaller0: entered promiscuous mode [ 283.062279][T26059] syzkaller0: entered allmulticast mode [ 283.086491][T26063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.113644][T26068] No source specified [ 283.187912][T26091] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4001'. [ 283.249426][T26096] syzkaller0: entered promiscuous mode [ 283.251290][T26096] syzkaller0: entered allmulticast mode [ 283.258734][T26106] syzkaller0: entered promiscuous mode [ 283.260571][T26106] syzkaller0: entered allmulticast mode [ 283.656808][ T141] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 283.806792][ T141] usb 7-1: Using ep0 maxpacket: 8 [ 283.809649][ T141] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 283.812182][ T141] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 283.815843][ T141] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.819882][ T141] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.823411][ T141] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.832991][ T141] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 283.835280][ T141] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 283.839142][ T141] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.842920][ T141] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.846561][ T141] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.851146][ T141] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 283.853592][ T141] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 283.857413][ T141] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.860844][ T141] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.864441][ T141] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.890823][ T141] usb 7-1: string descriptor 0 read error: -22 [ 283.892905][ T141] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 283.895831][ T141] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.903175][ T141] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 284.106782][T26122] Bluetooth: MGMT ver 1.23 [ 284.334941][T26127] tipc: Enabled bearer , priority 0 [ 284.346663][T26122] sp0: Synchronizing with TNC [ 284.351938][T26127] tipc: Disabling bearer [ 284.430485][T26153] syzkaller0: entered promiscuous mode [ 284.432419][T26153] syzkaller0: entered allmulticast mode [ 284.477284][T26162] syzkaller0: entered promiscuous mode [ 284.479243][T26162] syzkaller0: entered allmulticast mode [ 284.506089][T26168] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4015'. [ 284.567601][T26173] tipc: Enabled bearer , priority 0 [ 284.571555][T26173] syzkaller0: entered promiscuous mode [ 284.573569][T26173] syzkaller0: entered allmulticast mode [ 284.580503][T26173] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 284.593119][T26173] tipc: Resetting bearer [ 284.595172][T26178] syzkaller0: entered promiscuous mode [ 284.599332][T26178] syzkaller0: entered allmulticast mode [ 284.602450][T26171] tipc: Resetting bearer [ 284.615162][T26171] tipc: Disabling bearer [ 284.647838][T26185] FAULT_INJECTION: forcing a failure. [ 284.647838][T26185] name failslab, interval 1, probability 0, space 0, times 0 [ 284.651567][T26185] CPU: 0 UID: 0 PID: 26185 Comm: syz.6.4020 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.651585][T26185] Tainted: [L]=SOFTLOCKUP [ 284.651590][T26185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.651598][T26185] Call Trace: [ 284.651603][T26185] [ 284.651609][T26185] dump_stack_lvl+0x16c/0x1f0 [ 284.651627][T26185] should_fail_ex+0x512/0x640 [ 284.651646][T26185] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 284.651660][T26185] should_failslab+0xc2/0x120 [ 284.651676][T26185] kmem_cache_alloc_node_noprof+0x86/0x800 [ 284.651688][T26185] ? __alloc_skb+0x156/0x410 [ 284.651708][T26185] ? __alloc_skb+0x156/0x410 [ 284.651723][T26185] __alloc_skb+0x156/0x410 [ 284.651739][T26185] ? __alloc_skb+0x35d/0x410 [ 284.651755][T26185] ? __pfx___alloc_skb+0x10/0x10 [ 284.651772][T26185] ? netlink_autobind.isra.0+0x158/0x370 [ 284.651789][T26185] netlink_alloc_large_skb+0x69/0x140 [ 284.651804][T26185] netlink_sendmsg+0x698/0xdd0 [ 284.651820][T26185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.651839][T26185] ____sys_sendmsg+0xa5d/0xc30 [ 284.651855][T26185] ? copy_msghdr_from_user+0x10a/0x160 [ 284.651866][T26185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.651887][T26185] ___sys_sendmsg+0x134/0x1d0 [ 284.651899][T26185] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.651926][T26185] __sys_sendmsg+0x16d/0x220 [ 284.651942][T26185] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.651958][T26185] ? fput+0x70/0xf0 [ 284.651970][T26185] do_syscall_64+0xcd/0xf80 [ 284.651986][T26185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.651998][T26185] RIP: 0033:0x7fe729d8f7c9 [ 284.652007][T26185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.652018][T26185] RSP: 002b:00007fe72ac70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.652029][T26185] RAX: ffffffffffffffda RBX: 00007fe729fe5fa0 RCX: 00007fe729d8f7c9 [ 284.652036][T26185] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000003 [ 284.652042][T26185] RBP: 00007fe72ac70090 R08: 0000000000000000 R09: 0000000000000000 [ 284.652049][T26185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.652055][T26185] R13: 00007fe729fe6038 R14: 00007fe729fe5fa0 R15: 00007fff7879e9d8 [ 284.652069][T26185] [ 284.819760][T26196] syzkaller0: entered promiscuous mode [ 284.821580][T26196] syzkaller0: entered allmulticast mode [ 284.898778][T26216] syzkaller0: entered promiscuous mode [ 284.900594][T26216] syzkaller0: entered allmulticast mode [ 284.904250][T26219] autofs4:pid:26219:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 284.937936][T26224] syzkaller0: entered promiscuous mode [ 284.939977][T26224] syzkaller0: entered allmulticast mode [ 285.069633][T26231] syzkaller0: entered promiscuous mode [ 285.072045][T26231] syzkaller0: entered allmulticast mode [ 285.238658][T26258] syzkaller0: entered promiscuous mode [ 285.240833][T26258] syzkaller0: entered allmulticast mode [ 285.280290][T26264] syzkaller0: entered promiscuous mode [ 285.282728][T26264] syzkaller0: entered allmulticast mode [ 285.348558][T26271] tipc: Enabled bearer , priority 0 [ 285.351432][T26271] syzkaller0: entered promiscuous mode [ 285.353329][T26271] syzkaller0: entered allmulticast mode [ 285.357578][T26271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4038'. [ 285.386890][T26270] tipc: Resetting bearer [ 285.408490][T26270] tipc: Disabling bearer [ 285.417870][T26276] syzkaller0: entered promiscuous mode [ 285.419732][T26276] syzkaller0: entered allmulticast mode [ 285.428870][T26276] netlink: 65 bytes leftover after parsing attributes in process `syz.5.4039'. [ 285.675183][T26302] syzkaller0: entered promiscuous mode [ 285.678693][T26302] syzkaller0: entered allmulticast mode [ 285.775874][T26309] tipc: Enabled bearer , priority 0 [ 285.780554][T26309] syzkaller0: entered promiscuous mode [ 285.783033][T26309] syzkaller0: entered allmulticast mode [ 285.790175][T26309] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 285.807780][T26309] tipc: Resetting bearer [ 285.817555][T26308] tipc: Resetting bearer [ 285.828652][T26308] tipc: Disabling bearer [ 285.867325][T26319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4045'. [ 285.909323][T26322] syzkaller0: entered promiscuous mode [ 285.911143][T26322] syzkaller0: entered allmulticast mode [ 285.961439][T26326] syzkaller0: entered promiscuous mode [ 285.963261][T26326] syzkaller0: entered allmulticast mode [ 286.074641][T26335] syzkaller0: entered promiscuous mode [ 286.077471][T26335] syzkaller0: entered allmulticast mode [ 286.129011][T26341] syzkaller0: entered promiscuous mode [ 286.130823][T26341] syzkaller0: entered allmulticast mode [ 286.140891][T26341] netlink: 65 bytes leftover after parsing attributes in process `syz.5.4049'. [ 286.259353][T26353] FAULT_INJECTION: forcing a failure. [ 286.259353][T26353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.263708][T26353] CPU: 3 UID: 0 PID: 26353 Comm: syz.5.4052 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.263726][T26353] Tainted: [L]=SOFTLOCKUP [ 286.263730][T26353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.263737][T26353] Call Trace: [ 286.263742][T26353] [ 286.263747][T26353] dump_stack_lvl+0x16c/0x1f0 [ 286.263764][T26353] should_fail_ex+0x512/0x640 [ 286.263784][T26353] _copy_from_iter+0x2a4/0x16c0 [ 286.263804][T26353] ? __alloc_skb+0x220/0x410 [ 286.263820][T26353] ? __alloc_skb+0x35d/0x410 [ 286.263837][T26353] ? __pfx__copy_from_iter+0x10/0x10 [ 286.263853][T26353] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 286.263867][T26353] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 286.263886][T26353] netlink_sendmsg+0x820/0xdd0 [ 286.263903][T26353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.263921][T26353] ____sys_sendmsg+0xa5d/0xc30 [ 286.263937][T26353] ? copy_msghdr_from_user+0x10a/0x160 [ 286.263948][T26353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.263973][T26353] ___sys_sendmsg+0x134/0x1d0 [ 286.263985][T26353] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.264012][T26353] __sys_sendmsg+0x16d/0x220 [ 286.264023][T26353] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.264043][T26353] do_syscall_64+0xcd/0xf80 [ 286.264059][T26353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.264071][T26353] RIP: 0033:0x7f094f58f7c9 [ 286.264081][T26353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.264092][T26353] RSP: 002b:00007f0950362038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.264103][T26353] RAX: ffffffffffffffda RBX: 00007f094f7e5fa0 RCX: 00007f094f58f7c9 [ 286.264110][T26353] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 286.264117][T26353] RBP: 00007f0950362090 R08: 0000000000000000 R09: 0000000000000000 [ 286.264123][T26353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.264130][T26353] R13: 00007f094f7e6038 R14: 00007f094f7e5fa0 R15: 00007ffc1bcb8688 [ 286.264144][T26353] [ 286.302759][T26363] FAULT_INJECTION: forcing a failure. [ 286.302759][T26363] name failslab, interval 1, probability 0, space 0, times 0 [ 286.345605][T26363] CPU: 1 UID: 0 PID: 26363 Comm: syz.5.4053 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.345625][T26363] Tainted: [L]=SOFTLOCKUP [ 286.345629][T26363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.345636][T26363] Call Trace: [ 286.345661][T26363] [ 286.345670][T26363] dump_stack_lvl+0x16c/0x1f0 [ 286.345697][T26363] should_fail_ex+0x512/0x640 [ 286.345721][T26363] ? __kmalloc_noprof+0xca/0x910 [ 286.345740][T26363] should_failslab+0xc2/0x120 [ 286.345756][T26363] __kmalloc_noprof+0xeb/0x910 [ 286.345773][T26363] ? arch_stack_walk+0xa6/0x100 [ 286.345788][T26363] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 286.345808][T26363] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 286.345825][T26363] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 286.345844][T26363] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 286.345861][T26363] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.345877][T26363] ? genl_get_cmd+0x194/0x580 [ 286.345896][T26363] ? ____sys_sendmsg+0xa5d/0xc30 [ 286.345910][T26363] ? ___sys_sendmsg+0x134/0x1d0 [ 286.345920][T26363] ? __radix_tree_lookup+0x21f/0x2c0 [ 286.345936][T26363] genl_rcv_msg+0x55c/0x800 [ 286.345952][T26363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.345968][T26363] ? __pfx_net_shaper_nl_pre_doit+0x10/0x10 [ 286.345984][T26363] ? __pfx_net_shaper_nl_get_doit+0x10/0x10 [ 286.346000][T26363] ? __pfx_net_shaper_nl_post_doit+0x10/0x10 [ 286.346018][T26363] ? __lock_acquire+0x436/0x2890 [ 286.346034][T26363] netlink_rcv_skb+0x158/0x420 [ 286.346048][T26363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.346065][T26363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.346084][T26363] ? netlink_deliver_tap+0x1ae/0xd30 [ 286.346099][T26363] genl_rcv+0x28/0x40 [ 286.346117][T26363] netlink_unicast+0x5aa/0x870 [ 286.346142][T26363] ? __pfx_netlink_unicast+0x10/0x10 [ 286.346171][T26363] netlink_sendmsg+0x8c8/0xdd0 [ 286.346198][T26363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.346236][T26363] ____sys_sendmsg+0xa5d/0xc30 [ 286.346260][T26363] ? copy_msghdr_from_user+0x10a/0x160 [ 286.346277][T26363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.346305][T26363] ___sys_sendmsg+0x134/0x1d0 [ 286.346318][T26363] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.346348][T26363] __sys_sendmsg+0x16d/0x220 [ 286.346360][T26363] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.346382][T26363] do_syscall_64+0xcd/0xf80 [ 286.346398][T26363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.346411][T26363] RIP: 0033:0x7f094f58f7c9 [ 286.346421][T26363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.346433][T26363] RSP: 002b:00007f0950362038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.346445][T26363] RAX: ffffffffffffffda RBX: 00007f094f7e5fa0 RCX: 00007f094f58f7c9 [ 286.346453][T26363] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000044 [ 286.346460][T26363] RBP: 00007f0950362090 R08: 0000000000000000 R09: 0000000000000000 [ 286.346466][T26363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.346473][T26363] R13: 00007f094f7e6038 R14: 00007f094f7e5fa0 R15: 00007ffc1bcb8688 [ 286.346489][T26363] [ 286.474876][T26365] netlink: 'syz.5.4054': attribute type 9 has an invalid length. [ 286.479936][T26365] input: syz0 as /devices/virtual/input/input21 [ 286.488265][ T6651] usb 7-1: USB disconnect, device number 9 [ 286.524251][T26381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4055'. [ 286.555360][T26386] FAULT_INJECTION: forcing a failure. [ 286.555360][T26386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.563089][T26386] CPU: 3 UID: 0 PID: 26386 Comm: syz.2.4057 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.563108][T26386] Tainted: [L]=SOFTLOCKUP [ 286.563112][T26386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.563119][T26386] Call Trace: [ 286.563123][T26386] [ 286.563128][T26386] dump_stack_lvl+0x16c/0x1f0 [ 286.563147][T26386] should_fail_ex+0x512/0x640 [ 286.563166][T26386] _copy_from_iter+0x2a4/0x16c0 [ 286.563185][T26386] ? __alloc_skb+0x220/0x410 [ 286.563202][T26386] ? __alloc_skb+0x35d/0x410 [ 286.563218][T26386] ? __pfx__copy_from_iter+0x10/0x10 [ 286.563237][T26386] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 286.563251][T26386] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 286.563270][T26386] netlink_sendmsg+0x820/0xdd0 [ 286.563287][T26386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.563306][T26386] ____sys_sendmsg+0xa5d/0xc30 [ 286.563321][T26386] ? copy_msghdr_from_user+0x10a/0x160 [ 286.563333][T26386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.563353][T26386] ___sys_sendmsg+0x134/0x1d0 [ 286.563366][T26386] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.563392][T26386] __sys_sendmsg+0x16d/0x220 [ 286.563404][T26386] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.563423][T26386] do_syscall_64+0xcd/0xf80 [ 286.563439][T26386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.563451][T26386] RIP: 0033:0x7f8ae618f7c9 [ 286.563460][T26386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.563471][T26386] RSP: 002b:00007f8ae43f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.563482][T26386] RAX: ffffffffffffffda RBX: 00007f8ae63e5fa0 RCX: 00007f8ae618f7c9 [ 286.563489][T26386] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 286.563496][T26386] RBP: 00007f8ae43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.563503][T26386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.563509][T26386] R13: 00007f8ae63e6038 R14: 00007f8ae63e5fa0 R15: 00007ffce11fa4c8 [ 286.563523][T26386] [ 286.792572][T26406] syzkaller0: entered promiscuous mode [ 286.794466][T26406] syzkaller0: entered allmulticast mode [ 286.805260][T26406] netlink: 65 bytes leftover after parsing attributes in process `syz.2.4060'. [ 286.904659][T26413] FAULT_INJECTION: forcing a failure. [ 286.904659][T26413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.909381][T26413] CPU: 3 UID: 0 PID: 26413 Comm: syz.2.4061 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.909400][T26413] Tainted: [L]=SOFTLOCKUP [ 286.909404][T26413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.909411][T26413] Call Trace: [ 286.909415][T26413] [ 286.909420][T26413] dump_stack_lvl+0x16c/0x1f0 [ 286.909438][T26413] should_fail_ex+0x512/0x640 [ 286.909458][T26413] _copy_to_user+0x32/0xd0 [ 286.909476][T26413] simple_read_from_buffer+0xcb/0x170 [ 286.909493][T26413] proc_fail_nth_read+0x197/0x240 [ 286.909507][T26413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.909519][T26413] ? rw_verify_area+0xcf/0x6c0 [ 286.909532][T26413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.909543][T26413] vfs_read+0x1e4/0xcf0 [ 286.909557][T26413] ? __pfx___mutex_lock+0x10/0x10 [ 286.909581][T26413] ? __pfx_vfs_read+0x10/0x10 [ 286.909598][T26413] ? __fget_files+0x20e/0x3c0 [ 286.909619][T26413] ksys_read+0x12a/0x250 [ 286.909632][T26413] ? __pfx_ksys_read+0x10/0x10 [ 286.909676][T26413] do_syscall_64+0xcd/0xf80 [ 286.909693][T26413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.909705][T26413] RIP: 0033:0x7f8ae618e1dc [ 286.909714][T26413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 286.909725][T26413] RSP: 002b:00007f8ae43f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.909736][T26413] RAX: ffffffffffffffda RBX: 00007f8ae63e5fa0 RCX: 00007f8ae618e1dc [ 286.909743][T26413] RDX: 000000000000000f RSI: 00007f8ae43f60a0 RDI: 0000000000000003 [ 286.909750][T26413] RBP: 00007f8ae43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.909757][T26413] R10: 0000000040004000 R11: 0000000000000246 R12: 0000000000000001 [ 286.909763][T26413] R13: 00007f8ae63e6038 R14: 00007f8ae63e5fa0 R15: 00007ffce11fa4c8 [ 286.909777][T26413] [ 287.102864][T26423] syzkaller0: entered promiscuous mode [ 287.104850][T26423] syzkaller0: entered allmulticast mode [ 287.114054][T26425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26425 comm=syz.2.4063 [ 287.125233][T26430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4065'. [ 287.144709][T26425] netlink: 'syz.2.4063': attribute type 12 has an invalid length. [ 287.154253][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4063'. [ 287.172290][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.172360][T26425] netlink: 'syz.2.4063': attribute type 12 has an invalid length. [ 287.175354][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.175379][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.179107][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4063'. [ 287.201092][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.212214][T26438] sp0: Synchronizing with TNC [ 287.214341][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4066'. [ 287.222041][T26443] syzkaller0: entered promiscuous mode [ 287.223926][T26443] syzkaller0: entered allmulticast mode [ 287.258994][T26455] syzkaller0: entered promiscuous mode [ 287.261268][T26455] syzkaller0: entered allmulticast mode [ 287.357804][T26466] FAULT_INJECTION: forcing a failure. [ 287.357804][T26466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.362130][T26466] CPU: 2 UID: 0 PID: 26466 Comm: syz.7.4070 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.362148][T26466] Tainted: [L]=SOFTLOCKUP [ 287.362152][T26466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.362159][T26466] Call Trace: [ 287.362164][T26466] [ 287.362169][T26466] dump_stack_lvl+0x16c/0x1f0 [ 287.362187][T26466] should_fail_ex+0x512/0x640 [ 287.362207][T26466] _copy_from_iter+0x2a4/0x16c0 [ 287.362226][T26466] ? __alloc_skb+0x220/0x410 [ 287.362242][T26466] ? __alloc_skb+0x35d/0x410 [ 287.362259][T26466] ? __pfx__copy_from_iter+0x10/0x10 [ 287.362276][T26466] ? netlink_autobind.isra.0+0x158/0x370 [ 287.362295][T26466] netlink_sendmsg+0x820/0xdd0 [ 287.362312][T26466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.362330][T26466] ____sys_sendmsg+0xa5d/0xc30 [ 287.362347][T26466] ? copy_msghdr_from_user+0x10a/0x160 [ 287.362358][T26466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.362379][T26466] ___sys_sendmsg+0x134/0x1d0 [ 287.362391][T26466] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.362418][T26466] __sys_sendmsg+0x16d/0x220 [ 287.362430][T26466] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.362446][T26466] ? fput+0x70/0xf0 [ 287.362459][T26466] do_syscall_64+0xcd/0xf80 [ 287.362475][T26466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.362486][T26466] RIP: 0033:0x7f035e98f7c9 [ 287.362496][T26466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.362507][T26466] RSP: 002b:00007f035f8b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.362518][T26466] RAX: ffffffffffffffda RBX: 00007f035ebe5fa0 RCX: 00007f035e98f7c9 [ 287.362525][T26466] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 287.362532][T26466] RBP: 00007f035f8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 287.362538][T26466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.362545][T26466] R13: 00007f035ebe6038 R14: 00007f035ebe5fa0 R15: 00007ffc4825bd48 [ 287.362559][T26466] [ 287.501257][T26477] syzkaller0: entered promiscuous mode [ 287.503672][T26477] syzkaller0: entered allmulticast mode [ 287.570003][T26491] FAULT_INJECTION: forcing a failure. [ 287.570003][T26491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.575529][T26491] CPU: 0 UID: 0 PID: 26491 Comm: syz.2.4078 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.575556][T26491] Tainted: [L]=SOFTLOCKUP [ 287.575561][T26491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.575573][T26491] Call Trace: [ 287.575578][T26491] [ 287.575583][T26491] dump_stack_lvl+0x16c/0x1f0 [ 287.575610][T26491] should_fail_ex+0x512/0x640 [ 287.575638][T26491] _copy_from_iter+0x2a4/0x16c0 [ 287.575664][T26491] ? __alloc_skb+0x220/0x410 [ 287.575692][T26491] ? __alloc_skb+0x35d/0x410 [ 287.575716][T26491] ? __pfx__copy_from_iter+0x10/0x10 [ 287.575739][T26491] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 287.575760][T26491] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 287.575789][T26491] netlink_sendmsg+0x820/0xdd0 [ 287.575810][T26491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.575839][T26491] ____sys_sendmsg+0xa5d/0xc30 [ 287.575862][T26491] ? copy_msghdr_from_user+0x10a/0x160 [ 287.575879][T26491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.575906][T26491] ___sys_sendmsg+0x134/0x1d0 [ 287.575923][T26491] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.575968][T26491] __sys_sendmsg+0x16d/0x220 [ 287.575985][T26491] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.576013][T26491] do_syscall_64+0xcd/0xf80 [ 287.576035][T26491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.576052][T26491] RIP: 0033:0x7f8ae618f7c9 [ 287.576067][T26491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.576083][T26491] RSP: 002b:00007f8ae43f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.576099][T26491] RAX: ffffffffffffffda RBX: 00007f8ae63e5fa0 RCX: 00007f8ae618f7c9 [ 287.576111][T26491] RDX: 0000000020000000 RSI: 0000200000000800 RDI: 0000000000000004 [ 287.576119][T26491] RBP: 00007f8ae43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.576126][T26491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.576137][T26491] R13: 00007f8ae63e6038 R14: 00007f8ae63e5fa0 R15: 00007ffce11fa4c8 [ 287.576160][T26491] [ 287.588602][T26495] binder: 26494:26495 unknown command 0 [ 287.610833][T26498] syzkaller0: entered promiscuous mode [ 287.611908][T26495] binder: 26494:26495 ioctl c0306201 2000000005c0 returned -22 [ 287.613181][T26498] syzkaller0: entered allmulticast mode [ 287.720800][T26512] syzkaller0: entered promiscuous mode [ 287.723487][T26512] syzkaller0: entered allmulticast mode [ 287.731927][T26511] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 287.744013][T26511] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 287.746634][T26511] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 287.750182][T26511] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 287.752901][T26511] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 287.755477][T26511] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 287.758390][T26511] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 287.826878][ T40] audit: type=1326 audit(1766660006.867:53268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.833739][T26531] overlay: filesystem on ./bus not supported as upperdir [ 287.838445][ T40] audit: type=1326 audit(1766660006.867:53269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.845832][ T40] audit: type=1326 audit(1766660006.867:53270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.854861][ T40] audit: type=1326 audit(1766660006.867:53271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.862455][ T40] audit: type=1326 audit(1766660006.867:53272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.870185][ T40] audit: type=1326 audit(1766660006.877:53273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.877827][ T40] audit: type=1326 audit(1766660006.877:53274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.885077][ T40] audit: type=1326 audit(1766660006.877:53275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.892737][ T40] audit: type=1326 audit(1766660006.877:53276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.901434][ T40] audit: type=1326 audit(1766660006.877:53277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26524 comm="syz.6.4085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe729d8f7c9 code=0x50000 [ 287.941269][T26542] syzkaller0: entered promiscuous mode [ 287.943156][T26542] syzkaller0: entered allmulticast mode [ 288.015670][T26550] syzkaller0: entered promiscuous mode [ 288.017891][T26550] syzkaller0: entered allmulticast mode [ 288.044460][T26556] syzkaller0: entered promiscuous mode [ 288.046351][T26556] syzkaller0: entered allmulticast mode [ 288.126413][T26571] syzkaller0: entered promiscuous mode [ 288.128378][T26571] syzkaller0: entered allmulticast mode [ 288.222138][T26580] FAULT_INJECTION: forcing a failure. [ 288.222138][T26580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.226370][T26580] CPU: 3 UID: 0 PID: 26580 Comm: syz.5.4096 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.226388][T26580] Tainted: [L]=SOFTLOCKUP [ 288.226392][T26580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.226399][T26580] Call Trace: [ 288.226403][T26580] [ 288.226408][T26580] dump_stack_lvl+0x16c/0x1f0 [ 288.226425][T26580] should_fail_ex+0x512/0x640 [ 288.226445][T26580] _copy_to_user+0x32/0xd0 [ 288.226463][T26580] simple_read_from_buffer+0xcb/0x170 [ 288.226480][T26580] proc_fail_nth_read+0x197/0x240 [ 288.226493][T26580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.226505][T26580] ? rw_verify_area+0xcf/0x6c0 [ 288.226518][T26580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.226543][T26580] vfs_read+0x1e4/0xcf0 [ 288.226557][T26580] ? __pfx___mutex_lock+0x10/0x10 [ 288.226574][T26580] ? __pfx_vfs_read+0x10/0x10 [ 288.226592][T26580] ? __fget_files+0x20e/0x3c0 [ 288.226612][T26580] ksys_read+0x12a/0x250 [ 288.226625][T26580] ? __pfx_ksys_read+0x10/0x10 [ 288.226643][T26580] do_syscall_64+0xcd/0xf80 [ 288.226659][T26580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.226674][T26580] RIP: 0033:0x7f094f58e1dc [ 288.226695][T26580] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 288.226707][T26580] RSP: 002b:00007f0950362030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.226718][T26580] RAX: ffffffffffffffda RBX: 00007f094f7e5fa0 RCX: 00007f094f58e1dc [ 288.226726][T26580] RDX: 000000000000000f RSI: 00007f09503620a0 RDI: 0000000000000004 [ 288.226732][T26580] RBP: 00007f0950362090 R08: 0000000000000000 R09: 0000000000000000 [ 288.226739][T26580] R10: 00000000000000c2 R11: 0000000000000246 R12: 0000000000000001 [ 288.226745][T26580] R13: 00007f094f7e6038 R14: 00007f094f7e5fa0 R15: 00007ffc1bcb8688 [ 288.226760][T26580] [ 288.358330][T26591] syzkaller0: entered promiscuous mode [ 288.360173][T26591] syzkaller0: entered allmulticast mode [ 288.393787][T26599] UHID_CREATE from different security context by process 360 (syz.7.4104), this is not allowed. [ 288.542463][T26614] syzkaller0: entered promiscuous mode [ 288.548843][T26614] syzkaller0: entered allmulticast mode [ 288.597842][T26626] FAULT_INJECTION: forcing a failure. [ 288.597842][T26626] name failslab, interval 1, probability 0, space 0, times 0 [ 288.612425][T26626] CPU: 0 UID: 0 PID: 26626 Comm: syz.2.4111 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.612463][T26626] Tainted: [L]=SOFTLOCKUP [ 288.612467][T26626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.612475][T26626] Call Trace: [ 288.612480][T26626] [ 288.612485][T26626] dump_stack_lvl+0x16c/0x1f0 [ 288.612505][T26626] should_fail_ex+0x512/0x640 [ 288.612524][T26626] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 288.612540][T26626] should_failslab+0xc2/0x120 [ 288.612556][T26626] kmem_cache_alloc_node_noprof+0x86/0x800 [ 288.612568][T26626] ? __alloc_skb+0x156/0x410 [ 288.612590][T26626] ? __alloc_skb+0x156/0x410 [ 288.612607][T26626] __alloc_skb+0x156/0x410 [ 288.612629][T26626] ? __alloc_skb+0x35d/0x410 [ 288.612646][T26626] ? __pfx___alloc_skb+0x10/0x10 [ 288.612663][T26626] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 288.612680][T26626] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 288.612698][T26626] netlink_alloc_large_skb+0x69/0x140 [ 288.612715][T26626] netlink_sendmsg+0x698/0xdd0 [ 288.612732][T26626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.612752][T26626] ____sys_sendmsg+0xa5d/0xc30 [ 288.612769][T26626] ? copy_msghdr_from_user+0x10a/0x160 [ 288.612781][T26626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.612804][T26626] ___sys_sendmsg+0x134/0x1d0 [ 288.612823][T26626] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.612865][T26626] __sys_sendmsg+0x16d/0x220 [ 288.612884][T26626] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.612903][T26626] ? fput+0x70/0xf0 [ 288.612916][T26626] do_syscall_64+0xcd/0xf80 [ 288.612933][T26626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.612946][T26626] RIP: 0033:0x7f8ae618f7c9 [ 288.612956][T26626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.612968][T26626] RSP: 002b:00007f8ae43f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.612980][T26626] RAX: ffffffffffffffda RBX: 00007f8ae63e5fa0 RCX: 00007f8ae618f7c9 [ 288.612987][T26626] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003 [ 288.612995][T26626] RBP: 00007f8ae43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 288.613002][T26626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.613008][T26626] R13: 00007f8ae63e6038 R14: 00007f8ae63e5fa0 R15: 00007ffce11fa4c8 [ 288.613024][T26626] [ 288.632796][T26628] openvswitch: netlink: IP tunnel dst address not specified [ 288.766866][T26640] FAULT_INJECTION: forcing a failure. [ 288.766866][T26640] name failslab, interval 1, probability 0, space 0, times 0 [ 288.771437][T26640] CPU: 1 UID: 0 PID: 26640 Comm: syz.5.4115 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.771455][T26640] Tainted: [L]=SOFTLOCKUP [ 288.771459][T26640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.771466][T26640] Call Trace: [ 288.771470][T26640] [ 288.771475][T26640] dump_stack_lvl+0x16c/0x1f0 [ 288.771494][T26640] should_fail_ex+0x512/0x640 [ 288.771511][T26640] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 288.771525][T26640] should_failslab+0xc2/0x120 [ 288.771541][T26640] kmem_cache_alloc_node_noprof+0x86/0x800 [ 288.771553][T26640] ? __alloc_skb+0x156/0x410 [ 288.771573][T26640] ? __alloc_skb+0x156/0x410 [ 288.771589][T26640] __alloc_skb+0x156/0x410 [ 288.771613][T26640] ? __pfx___alloc_skb+0x10/0x10 [ 288.771636][T26640] ? __pfx__copy_from_iter+0x10/0x10 [ 288.771663][T26640] ? skb_page_frag_refill+0x11d/0x5c0 [ 288.771698][T26640] tcp_stream_alloc_skb+0x34/0x670 [ 288.771728][T26640] tcp_sendmsg_locked+0x12de/0x42a0 [ 288.771770][T26640] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 288.771799][T26640] ? do_raw_spin_lock+0x12c/0x2b0 [ 288.771826][T26640] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 288.771849][T26640] ? __local_bh_enable_ip+0xa4/0x120 [ 288.771869][T26640] tcp_sendmsg+0x2e/0x50 [ 288.771884][T26640] ? __pfx_tcp_sendmsg+0x10/0x10 [ 288.771901][T26640] inet_sendmsg+0xb9/0x140 [ 288.771913][T26640] __sys_sendto+0x43c/0x520 [ 288.771930][T26640] ? __pfx___sys_sendto+0x10/0x10 [ 288.771959][T26640] ? ksys_write+0x1ac/0x250 [ 288.771974][T26640] ? __pfx_ksys_write+0x10/0x10 [ 288.771989][T26640] __x64_sys_sendto+0xe0/0x1c0 [ 288.772006][T26640] ? do_syscall_64+0x91/0xf80 [ 288.772020][T26640] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.772035][T26640] do_syscall_64+0xcd/0xf80 [ 288.772049][T26640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.772062][T26640] RIP: 0033:0x7f094f58f7c9 [ 288.772071][T26640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.772082][T26640] RSP: 002b:00007f0950362038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 288.772093][T26640] RAX: ffffffffffffffda RBX: 00007f094f7e5fa0 RCX: 00007f094f58f7c9 [ 288.772100][T26640] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 288.772107][T26640] RBP: 00007f0950362090 R08: 0000000000000000 R09: 0000000000000000 [ 288.772113][T26640] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 288.772120][T26640] R13: 00007f094f7e6038 R14: 00007f094f7e5fa0 R15: 00007ffc1bcb8688 [ 288.772134][T26640] [ 289.122188][T26691] syzkaller0: entered promiscuous mode [ 289.124087][T26691] syzkaller0: entered allmulticast mode [ 289.354901][T26709] tipc: Enabled bearer , priority 0 [ 289.362574][T26709] syzkaller0: entered promiscuous mode [ 289.364851][T26709] syzkaller0: entered allmulticast mode [ 289.372249][T26709] FAULT_INJECTION: forcing a failure. [ 289.372249][T26709] name failslab, interval 1, probability 0, space 0, times 0 [ 289.379004][T26709] CPU: 3 UID: 0 PID: 26709 Comm: syz.7.4127 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.379023][T26709] Tainted: [L]=SOFTLOCKUP [ 289.379027][T26709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.379035][T26709] Call Trace: [ 289.379039][T26709] [ 289.379044][T26709] dump_stack_lvl+0x16c/0x1f0 [ 289.379061][T26709] should_fail_ex+0x512/0x640 [ 289.379080][T26709] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 289.379099][T26709] should_failslab+0xc2/0x120 [ 289.379122][T26709] kmem_cache_alloc_node_noprof+0x86/0x800 [ 289.379139][T26709] ? __alloc_skb+0x156/0x410 [ 289.379170][T26709] ? __alloc_skb+0x156/0x410 [ 289.379193][T26709] __alloc_skb+0x156/0x410 [ 289.379216][T26709] ? __alloc_skb+0x35d/0x410 [ 289.379240][T26709] ? __pfx___alloc_skb+0x10/0x10 [ 289.379263][T26709] ? rtnl_prop_list_size+0x295/0x2d0 [ 289.379276][T26709] ? if_nlmsg_size+0x4a7/0xb30 [ 289.379290][T26709] rtmsg_ifinfo_build_skb+0x81/0x280 [ 289.379307][T26709] rtnetlink_event+0xf3/0x1f0 [ 289.379322][T26709] notifier_call_chain+0xbc/0x3e0 [ 289.379335][T26709] ? __pfx_rtnetlink_event+0x10/0x10 [ 289.379352][T26709] call_netdevice_notifiers_info+0xbe/0x110 [ 289.379369][T26709] netif_set_mtu_ext+0x563/0x7a0 [ 289.379382][T26709] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 289.379404][T26709] ? __lock_acquire+0x436/0x2890 [ 289.379429][T26709] netif_set_mtu+0x98/0x140 [ 289.379445][T26709] ? __pfx_netif_set_mtu+0x10/0x10 [ 289.379469][T26709] ? full_name_hash+0xbc/0x110 [ 289.379499][T26709] dev_set_mtu+0xb2/0x260 [ 289.379520][T26709] dev_ifsioc+0xd28/0x1f70 [ 289.379540][T26709] ? __pfx_dev_ifsioc+0x10/0x10 [ 289.379554][T26709] ? __pfx___mutex_lock+0x10/0x10 [ 289.379585][T26709] ? dev_load+0x8e/0x240 [ 289.379605][T26709] dev_ioctl+0x223/0x10e0 [ 289.379625][T26709] sock_do_ioctl+0x19d/0x280 [ 289.379647][T26709] ? __pfx_sock_do_ioctl+0x10/0x10 [ 289.379674][T26709] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 289.379695][T26709] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 289.379731][T26709] sock_ioctl+0x227/0x6b0 [ 289.379754][T26709] ? __pfx_sock_ioctl+0x10/0x10 [ 289.379774][T26709] ? hook_file_ioctl_common+0x144/0x410 [ 289.379807][T26709] ? selinux_file_ioctl+0x180/0x270 [ 289.379827][T26709] ? selinux_file_ioctl+0xb4/0x270 [ 289.379849][T26709] ? __pfx_sock_ioctl+0x10/0x10 [ 289.379873][T26709] __x64_sys_ioctl+0x18e/0x210 [ 289.379894][T26709] do_syscall_64+0xcd/0xf80 [ 289.379918][T26709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.379936][T26709] RIP: 0033:0x7f035e98f7c9 [ 289.379949][T26709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.379966][T26709] RSP: 002b:00007f035f8b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.379983][T26709] RAX: ffffffffffffffda RBX: 00007f035ebe5fa0 RCX: 00007f035e98f7c9 [ 289.379994][T26709] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 289.380005][T26709] RBP: 00007f035f8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 289.380015][T26709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.380025][T26709] R13: 00007f035ebe6038 R14: 00007f035ebe5fa0 R15: 00007ffc4825bd48 [ 289.380050][T26709] [ 289.381223][T26709] tipc: Resetting bearer [ 289.488031][T26716] syzkaller0: entered promiscuous mode [ 289.490697][T26716] syzkaller0: entered allmulticast mode [ 289.515725][T26708] tipc: Resetting bearer [ 289.526594][T26708] tipc: Disabling bearer [ 289.659361][T26726] syzkaller0: entered promiscuous mode [ 289.661756][T26726] syzkaller0: entered allmulticast mode [ 289.679582][T26730] syzkaller0: entered promiscuous mode [ 289.681496][T26730] syzkaller0: entered allmulticast mode [ 289.853353][T26744] syzkaller0: entered promiscuous mode [ 289.855270][T26744] syzkaller0: entered allmulticast mode [ 290.066291][T26751] tipc: Enabled bearer , priority 0 [ 290.068948][T26751] syzkaller0: entered promiscuous mode [ 290.070857][T26751] syzkaller0: entered allmulticast mode [ 290.108960][T26764] FAULT_INJECTION: forcing a failure. [ 290.108960][T26764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.114313][T26764] CPU: 0 UID: 0 PID: 26764 Comm: syz.5.4137 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.114335][T26764] Tainted: [L]=SOFTLOCKUP [ 290.114342][T26764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.114353][T26764] Call Trace: [ 290.114359][T26764] [ 290.114366][T26764] dump_stack_lvl+0x16c/0x1f0 [ 290.114393][T26764] should_fail_ex+0x512/0x640 [ 290.114421][T26764] _copy_from_iter+0x2a4/0x16c0 [ 290.114449][T26764] ? __alloc_skb+0x220/0x410 [ 290.114473][T26764] ? __alloc_skb+0x35d/0x410 [ 290.114497][T26764] ? __pfx__copy_from_iter+0x10/0x10 [ 290.114520][T26764] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 290.114542][T26764] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 290.114567][T26764] netlink_sendmsg+0x820/0xdd0 [ 290.114593][T26764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.114627][T26764] ____sys_sendmsg+0xa5d/0xc30 [ 290.114648][T26764] ? copy_msghdr_from_user+0x10a/0x160 [ 290.114662][T26764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.114694][T26764] ___sys_sendmsg+0x134/0x1d0 [ 290.114712][T26764] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.114752][T26764] __sys_sendmsg+0x16d/0x220 [ 290.114769][T26764] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.114800][T26764] do_syscall_64+0xcd/0xf80 [ 290.114823][T26764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.114841][T26764] RIP: 0033:0x7f094f58f7c9 [ 290.114851][T26764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.114867][T26764] RSP: 002b:00007f0950362038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.114884][T26764] RAX: ffffffffffffffda RBX: 00007f094f7e5fa0 RCX: 00007f094f58f7c9 [ 290.114895][T26764] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 290.114905][T26764] RBP: 00007f0950362090 R08: 0000000000000000 R09: 0000000000000000 [ 290.114915][T26764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.114925][T26764] R13: 00007f094f7e6038 R14: 00007f094f7e5fa0 R15: 00007ffc1bcb8688 [ 290.114946][T26764] [ 290.324558][T26779] FAULT_INJECTION: forcing a failure. [ 290.324558][T26779] name failslab, interval 1, probability 0, space 0, times 0 [ 290.329383][T26779] CPU: 1 UID: 0 PID: 26779 Comm: syz.5.4142 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.329403][T26779] Tainted: [L]=SOFTLOCKUP [ 290.329407][T26779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.329414][T26779] Call Trace: [ 290.329419][T26779] [ 290.329423][T26779] dump_stack_lvl+0x16c/0x1f0 [ 290.329442][T26779] should_fail_ex+0x512/0x640 [ 290.329460][T26779] ? __kmalloc_cache_noprof+0x5f/0x800 [ 290.329481][T26779] should_failslab+0xc2/0x120 [ 290.329497][T26779] __kmalloc_cache_noprof+0x80/0x800 [ 290.329514][T26779] ? __tcf_qdisc_find.part.0+0x38c/0xb20 [ 290.329529][T26779] ? tcf_chain_create+0x98/0x370 [ 290.329541][T26779] ? tcf_chain_create+0x98/0x370 [ 290.329551][T26779] tcf_chain_create+0x98/0x370 [ 290.329563][T26779] __tcf_chain_get+0x153/0x1b0 [ 290.329577][T26779] tc_new_tfilter+0x6ed/0x2340 [ 290.329601][T26779] ? avc_has_perm_noaudit+0x117/0x3b0 [ 290.329640][T26779] ? __pfx_tc_new_tfilter+0x10/0x10 [ 290.329659][T26779] ? __lock_acquire+0x436/0x2890 [ 290.329680][T26779] ? find_held_lock+0x2b/0x80 [ 290.329697][T26779] ? __pfx_tc_new_tfilter+0x10/0x10 [ 290.329710][T26779] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 290.329723][T26779] ? __pfx_tc_new_tfilter+0x10/0x10 [ 290.329738][T26779] rtnetlink_rcv_msg+0x95e/0xe90 [ 290.329752][T26779] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.329767][T26779] ? __lock_acquire+0x436/0x2890 [ 290.329783][T26779] netlink_rcv_skb+0x158/0x420 [ 290.329797][T26779] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.329810][T26779] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.329829][T26779] ? netlink_deliver_tap+0x1ae/0xd30 [ 290.329845][T26779] netlink_unicast+0x5aa/0x870 [ 290.329861][T26779] ? __pfx_netlink_unicast+0x10/0x10 [ 290.329880][T26779] netlink_sendmsg+0x8c8/0xdd0 [ 290.329896][T26779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.329915][T26779] ____sys_sendmsg+0xa5d/0xc30 [ 290.329931][T26779] ? copy_msghdr_from_user+0x10a/0x160 [ 290.329942][T26779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.329963][T26779] ___sys_sendmsg+0x134/0x1d0 [ 290.329975][T26779] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.330003][T26779] __sys_sendmsg+0x16d/0x220 [ 290.330015][T26779] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.330035][T26779] do_syscall_64+0xcd/0xf80 [ 290.330051][T26779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.330064][T26779] RIP: 0033:0x7f094f58f7c9 [ 290.330073][T26779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.330084][T26779] RSP: 002b:00007f0950362038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.330095][T26779] RAX: ffffffffffffffda RBX: 00007f094f7e5fa0 RCX: 00007f094f58f7c9 [ 290.330102][T26779] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 290.330109][T26779] RBP: 00007f0950362090 R08: 0000000000000000 R09: 0000000000000000 [ 290.330116][T26779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.330122][T26779] R13: 00007f094f7e6038 R14: 00007f094f7e5fa0 R15: 00007ffc1bcb8688 [ 290.330136][T26779] [ 290.756648][T26750] tipc: Resetting bearer [ 290.772407][T26750] tipc: Disabling bearer [ 290.798256][T26791] syzkaller0: entered promiscuous mode [ 290.800558][T26791] syzkaller0: entered allmulticast mode [ 290.832094][T26798] __nla_validate_parse: 10 callbacks suppressed [ 290.832106][T26798] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4145'. [ 290.887725][T26837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4147'. [ 291.177245][ T141] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 291.206793][ T6612] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 291.231813][T26875] syzkaller0: entered promiscuous mode [ 291.233797][T26875] syzkaller0: entered allmulticast mode [ 291.244710][T26879] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4158'. [ 291.275256][T26883] FAULT_INJECTION: forcing a failure. [ 291.275256][T26883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.280520][T26883] CPU: 0 UID: 0 PID: 26883 Comm: syz.7.4159 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.280539][T26883] Tainted: [L]=SOFTLOCKUP [ 291.280543][T26883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.280550][T26883] Call Trace: [ 291.280554][T26883] [ 291.280558][T26883] dump_stack_lvl+0x16c/0x1f0 [ 291.280576][T26883] should_fail_ex+0x512/0x640 [ 291.280596][T26883] _copy_from_iter+0x2a4/0x16c0 [ 291.280615][T26883] ? __alloc_skb+0x220/0x410 [ 291.280632][T26883] ? __alloc_skb+0x35d/0x410 [ 291.280648][T26883] ? __pfx__copy_from_iter+0x10/0x10 [ 291.280665][T26883] ? netlink_autobind.isra.0+0x158/0x370 [ 291.280684][T26883] netlink_sendmsg+0x820/0xdd0 [ 291.280700][T26883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.280719][T26883] ____sys_sendmsg+0xa5d/0xc30 [ 291.280735][T26883] ? copy_msghdr_from_user+0x10a/0x160 [ 291.280746][T26883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.280767][T26883] ___sys_sendmsg+0x134/0x1d0 [ 291.280779][T26883] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.280822][T26883] __sys_sendmsg+0x16d/0x220 [ 291.280840][T26883] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.280869][T26883] do_syscall_64+0xcd/0xf80 [ 291.280885][T26883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.280897][T26883] RIP: 0033:0x7f035e98f7c9 [ 291.280906][T26883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.280917][T26883] RSP: 002b:00007f035f8b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.280928][T26883] RAX: ffffffffffffffda RBX: 00007f035ebe5fa0 RCX: 00007f035e98f7c9 [ 291.280936][T26883] RDX: 0000000012000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 291.280942][T26883] RBP: 00007f035f8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 291.280949][T26883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.280955][T26883] R13: 00007f035ebe6038 R14: 00007f035ebe5fa0 R15: 00007ffc4825bd48 [ 291.280969][T26883] [ 291.346872][ T141] usb 11-1: Using ep0 maxpacket: 8 [ 291.368196][ T141] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 291.371449][ T6612] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 291.374144][ T6612] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 291.377412][ T141] usb 11-1: config 179 has no interface number 0 [ 291.379513][ T141] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 291.383057][ T141] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 291.386753][ T6612] usb 10-1: config 0 interface 0 has no altsetting 0 [ 291.389034][ T141] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 291.392744][ T141] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 291.396564][ T141] usb 11-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 291.401376][ T141] usb 11-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 291.404559][ T141] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.409910][ T6612] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 291.413857][ T6612] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 291.416644][ T6612] usb 10-1: Product: syz [ 291.420424][T26842] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 291.427188][T26892] FAULT_INJECTION: forcing a failure. [ 291.427188][T26892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.427888][ T6612] usb 10-1: Manufacturer: syz [ 291.433192][ T6612] usb 10-1: SerialNumber: syz [ 291.435218][T26892] CPU: 2 UID: 0 PID: 26892 Comm: syz.7.4162 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.435236][T26892] Tainted: [L]=SOFTLOCKUP [ 291.435241][T26892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.435248][T26892] Call Trace: [ 291.435251][T26892] [ 291.435256][T26892] dump_stack_lvl+0x16c/0x1f0 [ 291.435274][T26892] should_fail_ex+0x512/0x640 [ 291.435311][T26892] _copy_from_iter+0x2a4/0x16c0 [ 291.435334][T26892] ? __alloc_skb+0x220/0x410 [ 291.435350][T26892] ? __alloc_skb+0x35d/0x410 [ 291.435367][T26892] ? __pfx__copy_from_iter+0x10/0x10 [ 291.435384][T26892] ? netlink_autobind.isra.0+0x158/0x370 [ 291.435403][T26892] netlink_sendmsg+0x820/0xdd0 [ 291.435419][T26892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.435438][T26892] ____sys_sendmsg+0xa5d/0xc30 [ 291.435454][T26892] ? copy_msghdr_from_user+0x10a/0x160 [ 291.435465][T26892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.435486][T26892] ___sys_sendmsg+0x134/0x1d0 [ 291.435498][T26892] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.435525][T26892] __sys_sendmsg+0x16d/0x220 [ 291.435537][T26892] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.435557][T26892] do_syscall_64+0xcd/0xf80 [ 291.435572][T26892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.435584][T26892] RIP: 0033:0x7f035e98f7c9 [ 291.435594][T26892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.435605][T26892] RSP: 002b:00007f035f8b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.435616][T26892] RAX: ffffffffffffffda RBX: 00007f035ebe5fa0 RCX: 00007f035e98f7c9 [ 291.435623][T26892] RDX: 0000000000040080 RSI: 0000200000001300 RDI: 0000000000000004 [ 291.435630][T26892] RBP: 00007f035f8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 291.435636][T26892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.435643][T26892] R13: 00007f035ebe6038 R14: 00007f035ebe5fa0 R15: 00007ffc4825bd48 [ 291.435657][T26892] [ 291.447200][ T6612] usb 10-1: config 0 descriptor?? [ 291.510307][ T6612] hub 10-1:0.0: bad descriptor, ignoring hub [ 291.512425][ T6612] hub 10-1:0.0: probe with driver hub failed with error -5 [ 291.517812][ T6612] usb 10-1: selecting invalid altsetting 0 [ 291.615661][T26914] syzkaller0: entered promiscuous mode [ 291.617912][T26914] syzkaller0: entered allmulticast mode [ 291.619284][T26918] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 291.646609][ T6612] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input23 [ 291.659735][T26924] syzkaller0: entered promiscuous mode [ 291.661821][T26924] syzkaller0: entered allmulticast mode [ 291.679456][T26924] tipc: Enabled bearer , priority 0 [ 291.683366][T26922] tipc: Resetting bearer [ 291.693987][T26922] tipc: Disabling bearer [ 291.743325][T26932] syzkaller0: entered promiscuous mode [ 291.745197][T26932] syzkaller0: entered allmulticast mode [ 291.826498][ T829] usb 11-1: USB disconnect, device number 3 [ 291.826558][ C1] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 291.832069][ C1] xpad 11-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 291.864412][T26958] syzkaller0: entered promiscuous mode [ 291.866303][T26958] syzkaller0: entered allmulticast mode [ 291.922171][T26964] input: syz1 as /devices/virtual/input/input24 [ 291.934378][T26964] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 291.985874][T26972] syzkaller0: entered promiscuous mode [ 291.987824][T26972] syzkaller0: entered allmulticast mode [ 292.013271][T26978] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 292.040970][T26982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'. [ 292.044709][T26982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'. [ 292.050142][T26982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4175'. [ 292.116666][T26992] syzkaller0: entered promiscuous mode [ 292.119282][T26992] syzkaller0: entered allmulticast mode [ 292.135298][T26992] netlink: 65 bytes leftover after parsing attributes in process `syz.7.4176'. [ 292.140134][T26996] tipc: Enabled bearer , priority 0 [ 292.143686][T26996] syzkaller0: entered promiscuous mode [ 292.146069][T26996] syzkaller0: entered allmulticast mode [ 292.166316][T26996] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 292.178145][T26995] tipc: Resetting bearer [ 292.186374][T26995] tipc: Disabling bearer [ 292.256403][T27004] syzkaller0: entered promiscuous mode [ 292.259340][T27004] syzkaller0: entered allmulticast mode [ 292.273140][T27004] FAULT_INJECTION: forcing a failure. [ 292.273140][T27004] name failslab, interval 1, probability 0, space 0, times 0 [ 292.278862][T27004] CPU: 1 UID: 0 PID: 27004 Comm: syz.7.4178 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.278894][T27004] Tainted: [L]=SOFTLOCKUP [ 292.278901][T27004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.278913][T27004] Call Trace: [ 292.278921][T27004] [ 292.278929][T27004] dump_stack_lvl+0x16c/0x1f0 [ 292.278959][T27004] should_fail_ex+0x512/0x640 [ 292.278979][T27004] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 292.278992][T27004] should_failslab+0xc2/0x120 [ 292.279009][T27004] kmem_cache_alloc_noprof+0x83/0x770 [ 292.279021][T27004] ? skb_clone+0x190/0x3f0 [ 292.279037][T27004] ? skb_clone+0x190/0x3f0 [ 292.279048][T27004] skb_clone+0x190/0x3f0 [ 292.279060][T27004] netlink_deliver_tap+0xabd/0xd30 [ 292.279077][T27004] netlink_unicast+0x64c/0x870 [ 292.279094][T27004] ? __pfx_netlink_unicast+0x10/0x10 [ 292.279114][T27004] netlink_sendmsg+0x8c8/0xdd0 [ 292.279131][T27004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.279151][T27004] ____sys_sendmsg+0xa5d/0xc30 [ 292.279169][T27004] ? copy_msghdr_from_user+0x10a/0x160 [ 292.279182][T27004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.279218][T27004] ___sys_sendmsg+0x134/0x1d0 [ 292.279237][T27004] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.279284][T27004] __sys_sendmsg+0x16d/0x220 [ 292.279305][T27004] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.279341][T27004] do_syscall_64+0xcd/0xf80 [ 292.279369][T27004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.279388][T27004] RIP: 0033:0x7f035e98f7c9 [ 292.279403][T27004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.279420][T27004] RSP: 002b:00007f035f8b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.279440][T27004] RAX: ffffffffffffffda RBX: 00007f035ebe5fa0 RCX: 00007f035e98f7c9 [ 292.279453][T27004] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 292.279464][T27004] RBP: 00007f035f8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 292.279475][T27004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.279486][T27004] R13: 00007f035ebe6038 R14: 00007f035ebe5fa0 R15: 00007ffc4825bd48 [ 292.279513][T27004] [ 292.280421][T27004] tipc: Enabled bearer , priority 0 [ 292.366411][T27003] tipc: Resetting bearer [ 292.381907][T27003] tipc: Disabling bearer [ 292.425108][T27019] FAULT_INJECTION: forcing a failure. [ 292.425108][T27019] name failslab, interval 1, probability 0, space 0, times 0 [ 292.427249][T27008] syzkaller0: entered promiscuous mode [ 292.430299][T27019] CPU: 1 UID: 0 PID: 27019 Comm: syz.6.4181 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.430325][T27019] Tainted: [L]=SOFTLOCKUP [ 292.430332][T27019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.430342][T27019] Call Trace: [ 292.430350][T27019] [ 292.430358][T27019] dump_stack_lvl+0x16c/0x1f0 [ 292.430384][T27019] should_fail_ex+0x512/0x640 [ 292.430410][T27019] ? __kmalloc_noprof+0xca/0x910 [ 292.430441][T27019] should_failslab+0xc2/0x120 [ 292.430465][T27019] __kmalloc_noprof+0xeb/0x910 [ 292.430493][T27019] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 292.430524][T27019] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 292.430548][T27019] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 292.430586][T27019] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 292.430612][T27019] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 292.430644][T27019] ? bpf_lsm_capable+0x9/0x10 [ 292.430666][T27019] ? security_capable+0x7e/0x260 [ 292.430686][T27019] ? ns_capable+0xd7/0x110 [ 292.430711][T27019] genl_rcv_msg+0x55c/0x800 [ 292.430739][T27019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.430764][T27019] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 292.430793][T27019] netlink_rcv_skb+0x158/0x420 [ 292.430814][T27019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.430839][T27019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.430870][T27019] ? netlink_deliver_tap+0x1ae/0xd30 [ 292.430893][T27019] genl_rcv+0x28/0x40 [ 292.430915][T27019] netlink_unicast+0x5aa/0x870 [ 292.430940][T27019] ? __pfx_netlink_unicast+0x10/0x10 [ 292.430971][T27019] netlink_sendmsg+0x8c8/0xdd0 [ 292.430996][T27019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.431026][T27019] ____sys_sendmsg+0xa5d/0xc30 [ 292.431053][T27019] ? copy_msghdr_from_user+0x10a/0x160 [ 292.431071][T27019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.431105][T27019] ___sys_sendmsg+0x134/0x1d0 [ 292.431124][T27019] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.431172][T27019] __sys_sendmsg+0x16d/0x220 [ 292.431190][T27019] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.431223][T27019] do_syscall_64+0xcd/0xf80 [ 292.431249][T27019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.431266][T27019] RIP: 0033:0x7fe729d8f7c9 [ 292.431282][T27019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.431297][T27019] RSP: 002b:00007fe72ac70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.431316][T27019] RAX: ffffffffffffffda RBX: 00007fe729fe5fa0 RCX: 00007fe729d8f7c9 [ 292.431327][T27019] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 292.431337][T27019] RBP: 00007fe72ac70090 R08: 0000000000000000 R09: 0000000000000000 [ 292.431349][T27019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.431359][T27019] R13: 00007fe729fe6038 R14: 00007fe729fe5fa0 R15: 00007fff7879e9d8 [ 292.431384][T27019] [ 292.543865][T27008] syzkaller0: entered allmulticast mode [ 293.588069][T27021] syzkaller0: entered promiscuous mode [ 293.590018][T27021] syzkaller0: entered allmulticast mode [ 293.595367][T27028] syz_tun: refused to change device tx_queue_len [ 293.641778][T27036] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 293.643957][T27036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 293.646551][T27036] vhci_hcd vhci_hcd.0: Device attached [ 293.650714][T27036] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(8) [ 293.652857][T27036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 293.656198][T27036] vhci_hcd vhci_hcd.0: Device attached [ 293.660102][ T40] kauditd_printk_skb: 27157 callbacks suppressed [ 293.660116][ T40] audit: type=1400 audit(1766660012.707:80435): avc: denied { ioctl } for pid=27035 comm="syz.7.4185" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 293.663739][T27042] syzkaller0: entered promiscuous mode [ 293.676948][T27042] syzkaller0: entered allmulticast mode [ 293.688073][T27042] netlink: 65 bytes leftover after parsing attributes in process `syz.2.4186'. [ 293.720426][T27039] vhci_hcd: connection closed [ 293.721358][T27037] vhci_hcd: connection closed [ 293.723510][ T7013] vhci_hcd vhci_hcd.7: stop threads [ 293.727602][ T7013] vhci_hcd vhci_hcd.7: release socket [ 293.729866][ T7013] vhci_hcd vhci_hcd.7: disconnect device [ 293.732525][ T7013] vhci_hcd vhci_hcd.7: stop threads [ 293.734823][ T7013] vhci_hcd vhci_hcd.7: release socket [ 293.737213][ T7013] vhci_hcd vhci_hcd.7: disconnect device [ 293.746996][T27052] syzkaller0: entered promiscuous mode [ 293.748851][T27052] syzkaller0: entered allmulticast mode [ 293.875886][T27064] tipc: Enabled bearer , priority 0 [ 293.878528][T27064] syzkaller0: entered promiscuous mode [ 293.880289][T27064] syzkaller0: entered allmulticast mode [ 293.884084][T27064] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 293.905044][T27064] FAULT_INJECTION: forcing a failure. [ 293.905044][T27064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.909541][T27064] CPU: 2 UID: 0 PID: 27064 Comm: syz.6.4191 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.909560][T27064] Tainted: [L]=SOFTLOCKUP [ 293.909564][T27064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.909591][T27064] Call Trace: [ 293.909597][T27064] [ 293.909602][T27064] dump_stack_lvl+0x16c/0x1f0 [ 293.909620][T27064] should_fail_ex+0x512/0x640 [ 293.909640][T27064] _copy_from_user+0x2e/0xd0 [ 293.909658][T27064] get_user_ifreq+0xf1/0x250 [ 293.909677][T27064] sock_do_ioctl+0x16b/0x280 [ 293.909691][T27064] ? __pfx_sock_do_ioctl+0x10/0x10 [ 293.909708][T27064] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 293.909723][T27064] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 293.909742][T27064] sock_ioctl+0x227/0x6b0 [ 293.909758][T27064] ? __pfx_sock_ioctl+0x10/0x10 [ 293.909772][T27064] ? hook_file_ioctl_common+0x144/0x410 [ 293.909793][T27064] ? selinux_file_ioctl+0x180/0x270 [ 293.909806][T27064] ? selinux_file_ioctl+0xb4/0x270 [ 293.909821][T27064] ? __pfx_sock_ioctl+0x10/0x10 [ 293.909837][T27064] __x64_sys_ioctl+0x18e/0x210 [ 293.909850][T27064] do_syscall_64+0xcd/0xf80 [ 293.909866][T27064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.909879][T27064] RIP: 0033:0x7fe729d8f7c9 [ 293.909888][T27064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.909899][T27064] RSP: 002b:00007fe72ac70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.909910][T27064] RAX: ffffffffffffffda RBX: 00007fe729fe5fa0 RCX: 00007fe729d8f7c9 [ 293.909917][T27064] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 293.909924][T27064] RBP: 00007fe72ac70090 R08: 0000000000000000 R09: 0000000000000000 [ 293.909930][T27064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.909937][T27064] R13: 00007fe729fe6038 R14: 00007fe729fe5fa0 R15: 00007fff7879e9d8 [ 293.909951][T27064] [ 293.910721][T27063] tipc: Resetting bearer [ 293.991241][T27063] tipc: Disabling bearer [ 294.040748][ T829] libceph: connect (1)[c::]:6789 error -101 [ 294.043266][ T829] libceph: mon0 (1)[c::]:6789 connect error [ 294.068446][T27081] syzkaller0: entered promiscuous mode [ 294.070778][T27081] syzkaller0: entered allmulticast mode [ 294.140495][T27075] ceph: No mds server is up or the cluster is laggy [ 294.222646][T27093] syzkaller0: entered promiscuous mode [ 294.224614][T27093] syzkaller0: entered allmulticast mode [ 294.235319][T27093] netlink: 65 bytes leftover after parsing attributes in process `syz.6.4197'. [ 294.275052][T27100] FAULT_INJECTION: forcing a failure. [ 294.275052][T27100] name failslab, interval 1, probability 0, space 0, times 0 [ 294.280259][T27100] CPU: 3 UID: 0 PID: 27100 Comm: syz.7.4198 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.280278][T27100] Tainted: [L]=SOFTLOCKUP [ 294.280282][T27100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.280290][T27100] Call Trace: [ 294.280294][T27100] [ 294.280298][T27100] dump_stack_lvl+0x16c/0x1f0 [ 294.280317][T27100] should_fail_ex+0x512/0x640 [ 294.280335][T27100] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 294.280347][T27100] should_failslab+0xc2/0x120 [ 294.280362][T27100] kmem_cache_alloc_noprof+0x83/0x770 [ 294.280374][T27100] ? skb_clone+0x190/0x3f0 [ 294.280389][T27100] ? skb_clone+0x190/0x3f0 [ 294.280399][T27100] skb_clone+0x190/0x3f0 [ 294.280411][T27100] netlink_deliver_tap+0xabd/0xd30 [ 294.280427][T27100] netlink_unicast+0x64c/0x870 [ 294.280443][T27100] ? __pfx_netlink_unicast+0x10/0x10 [ 294.280462][T27100] netlink_sendmsg+0x8c8/0xdd0 [ 294.280477][T27100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.280502][T27100] ____sys_sendmsg+0xa5d/0xc30 [ 294.280524][T27100] ? copy_msghdr_from_user+0x10a/0x160 [ 294.280539][T27100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.280568][T27100] ___sys_sendmsg+0x134/0x1d0 [ 294.280594][T27100] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.280623][T27100] __sys_sendmsg+0x16d/0x220 [ 294.280634][T27100] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.280651][T27100] ? fput+0x70/0xf0 [ 294.280663][T27100] do_syscall_64+0xcd/0xf80 [ 294.280679][T27100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.280691][T27100] RIP: 0033:0x7f035e98f7c9 [ 294.280700][T27100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.280711][T27100] RSP: 002b:00007f035f8b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.280723][T27100] RAX: ffffffffffffffda RBX: 00007f035ebe5fa0 RCX: 00007f035e98f7c9 [ 294.280730][T27100] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 294.280736][T27100] RBP: 00007f035f8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 294.280743][T27100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.280749][T27100] R13: 00007f035ebe6038 R14: 00007f035ebe5fa0 R15: 00007ffc4825bd48 [ 294.280764][T27100] [ 294.420294][T27109] syzkaller0: entered promiscuous mode [ 294.422595][T27109] syzkaller0: entered allmulticast mode [ 294.453538][T27116] FAULT_INJECTION: forcing a failure. [ 294.453538][T27116] name failslab, interval 1, probability 0, space 0, times 0 [ 294.458297][T27116] CPU: 1 UID: 0 PID: 27116 Comm: syz.2.4202 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.458316][T27116] Tainted: [L]=SOFTLOCKUP [ 294.458320][T27116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.458327][T27116] Call Trace: [ 294.458332][T27116] [ 294.458336][T27116] dump_stack_lvl+0x16c/0x1f0 [ 294.458355][T27116] should_fail_ex+0x512/0x640 [ 294.458374][T27116] should_failslab+0xc2/0x120 [ 294.458390][T27116] kmem_cache_alloc_noprof+0x83/0x770 [ 294.458402][T27116] ? skb_clone+0x190/0x3f0 [ 294.458416][T27116] ? skb_clone+0x190/0x3f0 [ 294.458426][T27116] skb_clone+0x190/0x3f0 [ 294.458438][T27116] skb_checksum_trimmed+0x148/0x530 [ 294.458534][T27116] ? __pfx_ip_mc_validate_checksum+0x10/0x10 [ 294.458549][T27116] ip_mc_check_igmp+0x585/0x11c0 [ 294.458567][T27116] br_multicast_rcv+0x153e/0x6a50 [ 294.458590][T27116] ? __pfx_br_multicast_rcv+0x10/0x10 [ 294.458610][T27116] ? __skb_flow_dissect+0x11b2/0x7d90 [ 294.458625][T27116] ? sock_alloc_send_pskb+0x7f9/0x980 [ 294.458642][T27116] ? packet_sendmsg+0x1fe4/0x54a0 [ 294.458656][T27116] ? br_allowed_ingress+0xdd/0x1420 [ 294.458671][T27116] ? br_dev_xmit+0x994/0x1880 [ 294.458686][T27116] br_dev_xmit+0x994/0x1880 [ 294.458703][T27116] ? __pfx_br_dev_xmit+0x10/0x10 [ 294.458718][T27116] ? __pfx_passthru_features_check+0x10/0x10 [ 294.458735][T27116] ? netif_skb_features+0x439/0x1270 [ 294.458753][T27116] ? __pfx_sk_tx_queue_get+0x10/0x10 [ 294.458768][T27116] ? __pfx_netif_skb_features+0x10/0x10 [ 294.458784][T27116] ? validate_xmit_xfrm+0x432/0x1330 [ 294.458798][T27116] ? rcu_lockdep_current_cpu_online+0x35/0x150 [ 294.458814][T27116] dev_hard_start_xmit+0x97/0x6e0 [ 294.458833][T27116] __dev_queue_xmit+0x6d7/0x4650 [ 294.458850][T27116] ? find_held_lock+0x2b/0x80 [ 294.458867][T27116] ? __might_fault+0xe3/0x190 [ 294.458878][T27116] ? __might_fault+0xe3/0x190 [ 294.458887][T27116] ? __might_fault+0x13b/0x190 [ 294.458898][T27116] ? __pfx___dev_queue_xmit+0x10/0x10 [ 294.458916][T27116] ? _copy_from_iter+0x161/0x16c0 [ 294.458938][T27116] ? packet_parse_headers+0x79a/0xb10 [ 294.458955][T27116] ? packet_parse_headers+0x7a6/0xb10 [ 294.458972][T27116] ? packet_parse_headers+0x21d/0xb10 [ 294.458991][T27116] ? __pfx_packet_parse_headers+0x10/0x10 [ 294.459009][T27116] ? skb_copy_datagram_from_iter+0x4f0/0x740 [ 294.459025][T27116] ? dev_get_by_index+0x17c/0x380 [ 294.459038][T27116] packet_xmit+0x23e/0x350 [ 294.459049][T27116] packet_sendmsg+0x26e3/0x54a0 [ 294.459067][T27116] ? sock_has_perm+0x258/0x2f0 [ 294.459080][T27116] ? __pfx_sock_has_perm+0x10/0x10 [ 294.459093][T27116] ? __pfx_packet_sendmsg+0x10/0x10 [ 294.459111][T27116] ____sys_sendmsg+0xa5d/0xc30 [ 294.459126][T27116] ? copy_msghdr_from_user+0x10a/0x160 [ 294.459138][T27116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.459159][T27116] ___sys_sendmsg+0x134/0x1d0 [ 294.459170][T27116] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.459197][T27116] __sys_sendmsg+0x16d/0x220 [ 294.459208][T27116] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.459228][T27116] do_syscall_64+0xcd/0xf80 [ 294.459243][T27116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.459255][T27116] RIP: 0033:0x7f8ae618f7c9 [ 294.459264][T27116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.459275][T27116] RSP: 002b:00007f8ae43f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.459286][T27116] RAX: ffffffffffffffda RBX: 00007f8ae63e5fa0 RCX: 00007f8ae618f7c9 [ 294.459293][T27116] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 294.459300][T27116] RBP: 00007f8ae43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.459307][T27116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.459313][T27116] R13: 00007f8ae63e6038 R14: 00007f8ae63e5fa0 R15: 00007ffce11fa4c8 [ 294.459327][T27116] [ 294.707159][ T6031] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 294.710129][T27135] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4205'. [ 294.715265][T27135] validate_nla: 27 callbacks suppressed [ 294.715275][T27135] netlink: 'syz.2.4205': attribute type 15 has an invalid length. [ 294.729433][T27137] syzkaller0: entered promiscuous mode [ 294.731897][T27137] syzkaller0: entered allmulticast mode [ 294.888111][ T6031] usb 12-1: config index 0 descriptor too short (expected 65237, got 45) [ 294.893709][ T6031] usb 12-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 294.898015][ T6031] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.901294][ T6031] usb 12-1: Product: syz [ 294.903189][ T6031] usb 12-1: Manufacturer: syz [ 294.904759][ T6031] usb 12-1: SerialNumber: syz [ 294.967555][T27158] netlink: 'syz.2.4213': attribute type 16 has an invalid length. [ 294.983307][T27155] openvswitch: netlink: Flow actions attr not present in new flow. [ 295.046760][T27167] syzkaller0: entered promiscuous mode [ 295.048620][T27167] syzkaller0: entered allmulticast mode [ 295.126481][T27173] syzkaller0: entered promiscuous mode [ 295.128873][T27173] syzkaller0: entered allmulticast mode [ 295.168958][T27179] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27179 comm=syz.2.4217 [ 295.177035][ T40] audit: type=1400 audit(1766660014.227:80436): avc: denied { write } for pid=27178 comm="syz.2.4217" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 295.177182][ T839] IPVS: starting estimator thread 0... [ 295.228318][T27182] input: syz1 as /devices/virtual/input/input25 [ 295.232235][ T1025] usb 10-1: USB disconnect, device number 14 [ 295.268994][T27195] syzkaller0: entered promiscuous mode [ 295.270918][T27195] syzkaller0: entered allmulticast mode [ 295.296868][T27180] IPVS: using max 45 ests per chain, 108000 per kthread [ 295.352189][ T6031] rtl8150 12-1:1.0: couldn't reset the device [ 295.354433][ T6031] rtl8150 12-1:1.0: probe with driver rtl8150 failed with error -5 [ 295.364672][ T6031] usb 12-1: USB disconnect, device number 6 [ 295.428302][T27228] syzkaller0: entered promiscuous mode [ 295.430232][T27228] syzkaller0: entered allmulticast mode [ 295.507007][T27239] syzkaller0: entered promiscuous mode [ 295.509029][T27239] syzkaller0: entered allmulticast mode [ 295.549786][T27245] netlink: 'syz.6.4229': attribute type 1 has an invalid length. [ 295.553334][T27245] netlink: 'syz.6.4229': attribute type 1 has an invalid length. [ 295.555930][T27245] FAULT_INJECTION: forcing a failure. [ 295.555930][T27245] name failslab, interval 1, probability 0, space 0, times 0 [ 295.562284][T27245] CPU: 1 UID: 0 PID: 27245 Comm: syz.6.4229 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.562311][T27245] Tainted: [L]=SOFTLOCKUP [ 295.562317][T27245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.562329][T27245] Call Trace: [ 295.562335][T27245] [ 295.562342][T27245] dump_stack_lvl+0x16c/0x1f0 [ 295.562368][T27245] should_fail_ex+0x512/0x640 [ 295.562394][T27245] ? __kmalloc_cache_noprof+0x5f/0x800 [ 295.562426][T27245] should_failslab+0xc2/0x120 [ 295.562451][T27245] __kmalloc_cache_noprof+0x80/0x800 [ 295.562498][T27245] ? qfq_change_class+0xcf8/0x1da0 [ 295.562525][T27245] ? qfq_change_class+0xcf8/0x1da0 [ 295.562541][T27245] qfq_change_class+0xcf8/0x1da0 [ 295.562557][T27245] ? __pfx_qfq_change_class+0x10/0x10 [ 295.562575][T27245] ? qdisc_match_from_root+0x16f/0x260 [ 295.562591][T27245] ? __pfx_qfq_change_class+0x10/0x10 [ 295.562604][T27245] tc_ctl_tclass+0x59d/0x16c0 [ 295.562623][T27245] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 295.562638][T27245] ? __mutex_lock+0x27b/0x1ca0 [ 295.562654][T27245] ? rtnetlink_rcv_msg+0x371/0xe90 [ 295.562670][T27245] ? __lock_acquire+0x436/0x2890 [ 295.562704][T27245] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 295.562727][T27245] rtnetlink_rcv_msg+0x3c9/0xe90 [ 295.562747][T27245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.562767][T27245] ? ref_tracker_free+0x37c/0x830 [ 295.562786][T27245] netlink_rcv_skb+0x158/0x420 [ 295.562800][T27245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.562819][T27245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.562838][T27245] ? netlink_deliver_tap+0x1ae/0xd30 [ 295.562854][T27245] netlink_unicast+0x5aa/0x870 [ 295.562869][T27245] ? __pfx_netlink_unicast+0x10/0x10 [ 295.562888][T27245] netlink_sendmsg+0x8c8/0xdd0 [ 295.562904][T27245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.562923][T27245] ____sys_sendmsg+0xa5d/0xc30 [ 295.562939][T27245] ? copy_msghdr_from_user+0x10a/0x160 [ 295.562951][T27245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.562972][T27245] ___sys_sendmsg+0x134/0x1d0 [ 295.562984][T27245] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.563013][T27245] __sys_sendmsg+0x16d/0x220 [ 295.563024][T27245] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.563045][T27245] do_syscall_64+0xcd/0xf80 [ 295.563061][T27245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.563073][T27245] RIP: 0033:0x7fe729d8f7c9 [ 295.563083][T27245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.563094][T27245] RSP: 002b:00007fe72ac70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.563105][T27245] RAX: ffffffffffffffda RBX: 00007fe729fe5fa0 RCX: 00007fe729d8f7c9 [ 295.563112][T27245] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 295.563119][T27245] RBP: 00007fe72ac70090 R08: 0000000000000000 R09: 0000000000000000 [ 295.563126][T27245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.563132][T27245] R13: 00007fe729fe6038 R14: 00007fe729fe5fa0 R15: 00007fff7879e9d8 [ 295.563147][T27245] [ 295.565091][T27244] ================================================================== [ 295.667188][T27244] BUG: KASAN: slab-use-after-free in qfq_reset_qdisc+0x323/0x420 [ 295.669812][T27244] Read of size 8 at addr ffff888029fc4b50 by task syz.6.4229/27244 [ 295.673272][T27244] [ 295.674648][T27244] CPU: 1 UID: 0 PID: 27244 Comm: syz.6.4229 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.674665][T27244] Tainted: [L]=SOFTLOCKUP [ 295.674670][T27244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.674677][T27244] Call Trace: [ 295.674683][T27244] [ 295.674688][T27244] dump_stack_lvl+0x116/0x1f0 [ 295.674707][T27244] print_report+0xcd/0x630 [ 295.674723][T27244] ? __virt_addr_valid+0x81/0x610 [ 295.674734][T27244] ? __phys_addr+0xe8/0x180 [ 295.674744][T27244] ? qfq_reset_qdisc+0x323/0x420 [ 295.674757][T27244] kasan_report+0xe0/0x110 [ 295.674771][T27244] ? qfq_reset_qdisc+0x323/0x420 [ 295.674785][T27244] qfq_reset_qdisc+0x323/0x420 [ 295.674799][T27244] ? synchronize_rcu_expedited+0x3b9/0x460 [ 295.674814][T27244] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 295.674827][T27244] qdisc_reset+0xe0/0x630 [ 295.674845][T27244] __qdisc_destroy+0xd3/0x4a0 [ 295.674855][T27244] qdisc_put+0xab/0xe0 [ 295.674864][T27244] dev_shutdown+0x1d0/0x430 [ 295.674876][T27244] unregister_netdevice_many_notify+0xb37/0x2590 [ 295.674891][T27244] ? do_raw_spin_unlock+0x172/0x230 [ 295.674907][T27244] ? ref_tracker_alloc+0x305/0x5b0 [ 295.674918][T27244] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 295.674932][T27244] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 295.674942][T27244] ? linkwatch_fire_event+0x20c/0x270 [ 295.674957][T27244] ? netif_carrier_off+0xa3/0xc0 [ 295.674976][T27244] unregister_netdevice_queue+0x305/0x3c0 [ 295.674990][T27244] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 295.675003][T27244] ? linkwatch_schedule_work+0x181/0x1c0 [ 295.675018][T27244] ? linkwatch_fire_event+0x6f/0x270 [ 295.675034][T27244] __tun_detach+0x119c/0x1490 [ 295.675050][T27244] ? __pfx_tun_chr_close+0x10/0x10 [ 295.675064][T27244] tun_chr_close+0xc2/0x230 [ 295.675078][T27244] __fput+0x402/0xb70 [ 295.675090][T27244] task_work_run+0x150/0x240 [ 295.675104][T27244] ? __pfx_task_work_run+0x10/0x10 [ 295.675118][T27244] ? __do_sys_close_range+0x278/0x730 [ 295.675137][T27244] exit_to_user_mode_loop+0xfb/0x540 [ 295.675153][T27244] do_syscall_64+0x4ee/0xf80 [ 295.675168][T27244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.675180][T27244] RIP: 0033:0x7fe729d8f7c9 [ 295.675190][T27244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.675202][T27244] RSP: 002b:00007fff7879eb38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 295.675213][T27244] RAX: 0000000000000000 RBX: 000000000004820c RCX: 00007fe729d8f7c9 [ 295.675220][T27244] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 295.675227][T27244] RBP: 00007fe729fe7da0 R08: 0000000000000001 R09: 0000000f7879ee2f [ 295.675234][T27244] R10: 0000001b2dd20000 R11: 0000000000000246 R12: 00007fe729fe5fac [ 295.675241][T27244] R13: 00007fe729fe5fa0 R14: ffffffffffffffff R15: 00007fff7879ec50 [ 295.675251][T27244] [ 295.675255][T27244] [ 295.781801][T27244] Allocated by task 27245: [ 295.783226][T27244] kasan_save_stack+0x33/0x60 [ 295.784940][T27244] kasan_save_track+0x14/0x30 [ 295.786491][T27244] __kasan_kmalloc+0xaa/0xb0 [ 295.788020][T27244] qfq_change_class+0x2ba/0x1da0 [ 295.789694][T27244] tc_ctl_tclass+0x59d/0x16c0 [ 295.791258][T27244] rtnetlink_rcv_msg+0x3c9/0xe90 [ 295.792936][T27244] netlink_rcv_skb+0x158/0x420 [ 295.794562][T27244] netlink_unicast+0x5aa/0x870 [ 295.796146][T27244] netlink_sendmsg+0x8c8/0xdd0 [ 295.797732][T27244] ____sys_sendmsg+0xa5d/0xc30 [ 295.799281][T27244] ___sys_sendmsg+0x134/0x1d0 [ 295.800835][T27244] __sys_sendmsg+0x16d/0x220 [ 295.802385][T27244] do_syscall_64+0xcd/0xf80 [ 295.803922][T27244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.805800][T27244] [ 295.806583][T27244] Freed by task 27245: [ 295.807888][T27244] kasan_save_stack+0x33/0x60 [ 295.809407][T27244] kasan_save_track+0x14/0x30 [ 295.810928][T27244] kasan_save_free_info+0x3b/0x60 [ 295.812579][T27244] __kasan_slab_free+0x5f/0x80 [ 295.814218][T27244] kfree+0x2f8/0x6e0 [ 295.815535][T27244] qfq_change_class+0x1576/0x1da0 [ 295.817192][T27244] tc_ctl_tclass+0x59d/0x16c0 [ 295.818865][T27244] rtnetlink_rcv_msg+0x3c9/0xe90 [ 295.820494][T27244] netlink_rcv_skb+0x158/0x420 [ 295.822062][T27244] netlink_unicast+0x5aa/0x870 [ 295.823641][T27244] netlink_sendmsg+0x8c8/0xdd0 [ 295.825193][T27244] ____sys_sendmsg+0xa5d/0xc30 [ 295.826872][T27244] ___sys_sendmsg+0x134/0x1d0 [ 295.828425][T27244] __sys_sendmsg+0x16d/0x220 [ 295.829984][T27244] do_syscall_64+0xcd/0xf80 [ 295.831469][T27244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.833407][T27244] [ 295.834304][T27244] The buggy address belongs to the object at ffff888029fc4b00 [ 295.834304][T27244] which belongs to the cache kmalloc-128 of size 128 [ 295.838867][T27244] The buggy address is located 80 bytes inside of [ 295.838867][T27244] freed 128-byte region [ffff888029fc4b00, ffff888029fc4b80) [ 295.843304][T27244] [ 295.844131][T27244] The buggy address belongs to the physical page: [ 295.846223][T27244] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29fc4 [ 295.849065][T27244] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 295.851592][T27244] page_type: f5(slab) [ 295.852959][T27244] raw: 00fff00000000000 ffff88801b442a00 ffffea0000ab66c0 dead000000000003 [ 295.856390][T27244] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 295.860006][T27244] page dumped because: kasan: bad access detected [ 295.862734][T27244] page_owner tracks the page as allocated [ 295.865103][T27244] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6579, tgid 6578 (syz.3.169), ts 66228796371, free_ts 57483453240 [ 295.872924][T27244] post_alloc_hook+0x1af/0x220 [ 295.874998][T27244] get_page_from_freelist+0xd0b/0x31a0 [ 295.877268][T27244] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 295.879693][T27244] alloc_pages_mpol+0x1fb/0x550 [ 295.881784][T27244] new_slab+0x2c3/0x430 [ 295.883572][T27244] ___slab_alloc+0xe18/0x1c90 [ 295.885526][T27244] __slab_alloc.constprop.0+0x63/0x110 [ 295.887758][T27244] __kmalloc_noprof+0x4fc/0x910 [ 295.889835][T27244] constrain_params_by_rules+0x175/0xca0 [ 295.892223][T27244] snd_pcm_hw_refine+0x7de/0xad0 [ 295.894378][T27244] snd_pcm_hw_params+0x422/0x1ba0 [ 295.896492][T27244] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 295.898770][T27244] snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 295.901536][T27244] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 295.904112][T27244] snd_pcm_oss_sync+0x32e/0x840 [ 295.906250][T27244] snd_pcm_oss_release+0x28b/0x310 [ 295.908432][T27244] page last free pid 6186 tgid 6185 stack trace: [ 295.911127][T27244] __free_frozen_pages+0x7df/0x1170 [ 295.913304][T27244] __folio_put+0x329/0x450 [ 295.915227][T27244] page_pool_return_netmem+0x54b/0x740 [ 295.917591][T27244] page_pool_release+0x142/0xc20 [ 295.919740][T27244] page_pool_destroy+0x10a/0x4e0 [ 295.921905][T27244] bpf_test_run_xdp_live+0x44b/0x770 [ 295.924174][T27244] bpf_prog_test_run_xdp+0xd3d/0x1660 [ 295.926032][T27244] __sys_bpf+0x1035/0x4980 [ 295.927497][T27244] __x64_sys_bpf+0x78/0xc0 [ 295.928950][T27244] do_syscall_64+0xcd/0xf80 [ 295.930432][T27244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.932297][T27244] [ 295.933099][T27244] Memory state around the buggy address: [ 295.934913][T27244] ffff888029fc4a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 295.937710][T27244] ffff888029fc4a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 295.940280][T27244] >ffff888029fc4b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.942780][T27244] ^ [ 295.944981][T27244] ffff888029fc4b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 295.947567][T27244] ffff888029fc4c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 295.950153][T27244] ================================================================== [ 295.955958][T27244] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 295.958309][T27244] CPU: 1 UID: 0 PID: 27244 Comm: syz.6.4229 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.961780][T27244] Tainted: [L]=SOFTLOCKUP [ 295.963225][T27244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.966714][T27244] Call Trace: [ 295.967825][T27244] [ 295.968789][T27244] dump_stack_lvl+0x3d/0x1f0 [ 295.970294][T27244] vpanic+0x640/0x6f0 [ 295.971603][T27244] panic+0xca/0xd0 [ 295.972875][T27244] ? __pfx_panic+0x10/0x10 [ 295.974433][T27244] ? qfq_reset_qdisc+0x323/0x420 [ 295.976079][T27244] ? preempt_schedule_common+0x44/0xc0 [ 295.977823][T27244] ? preempt_schedule_thunk+0x16/0x30 [ 295.979513][T27244] ? check_panic_on_warn+0x1f/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 295.981138][T27244] check_panic_on_warn+0xab/0xb0 [ 295.982882][T27244] end_report+0x107/0x160 [ 295.984423][T27244] kasan_report+0xee/0x110 [ 295.985971][T27244] ? qfq_reset_qdisc+0x323/0x420 [ 295.987591][T27244] qfq_reset_qdisc+0x323/0x420 [ 295.989144][T27244] ? synchronize_rcu_expedited+0x3b9/0x460 [ 295.991082][T27244] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 295.992850][T27244] qdisc_reset+0xe0/0x630 [ 295.994291][T27244] __qdisc_destroy+0xd3/0x4a0 [ 295.995842][T27244] qdisc_put+0xab/0xe0 [ 295.997191][T27244] dev_shutdown+0x1d0/0x430 [ 295.998713][T27244] unregister_netdevice_many_notify+0xb37/0x2590 [ 296.000801][T27244] ? do_raw_spin_unlock+0x172/0x230 [ 296.002548][T27244] ? ref_tracker_alloc+0x305/0x5b0 [ 296.004249][T27244] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 296.006402][T27244] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 296.008200][T27244] ? linkwatch_fire_event+0x20c/0x270 [ 296.009949][T27244] ? netif_carrier_off+0xa3/0xc0 [ 296.011591][T27244] unregister_netdevice_queue+0x305/0x3c0 [ 296.013422][T27244] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 296.015559][T27244] ? linkwatch_schedule_work+0x181/0x1c0 [ 296.017313][T27244] ? linkwatch_fire_event+0x6f/0x270 [ 296.018998][T27244] __tun_detach+0x119c/0x1490 [ 296.020488][T27244] ? __pfx_tun_chr_close+0x10/0x10 [ 296.022110][T27244] tun_chr_close+0xc2/0x230 [ 296.023559][T27244] __fput+0x402/0xb70 [ 296.024993][T27244] task_work_run+0x150/0x240 [ 296.026504][T27244] ? __pfx_task_work_run+0x10/0x10 [ 296.028120][T27244] ? __do_sys_close_range+0x278/0x730 [ 296.029839][T27244] exit_to_user_mode_loop+0xfb/0x540 [ 296.031517][T27244] do_syscall_64+0x4ee/0xf80 [ 296.033021][T27244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.034923][T27244] RIP: 0033:0x7fe729d8f7c9 [ 296.036301][T27244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.042291][T27244] RSP: 002b:00007fff7879eb38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 296.045143][T27244] RAX: 0000000000000000 RBX: 000000000004820c RCX: 00007fe729d8f7c9 [ 296.047614][T27244] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 296.050083][T27244] RBP: 00007fe729fe7da0 R08: 0000000000000001 R09: 0000000f7879ee2f [ 296.052555][T27244] R10: 0000001b2dd20000 R11: 0000000000000246 R12: 00007fe729fe5fac [ 296.055137][T27244] R13: 00007fe729fe5fa0 R14: ffffffffffffffff R15: 00007fff7879ec50 [ 296.057817][T27244] [ 296.059491][T27244] Kernel Offset: disabled [ 296.060864][T27244] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:49:18 Registers: info registers vcpu 0 CPU#0 RAX=00000000002f4473 RBX=0000000000000000 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dacdf23 RDI=ffffffff8bf2b400 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100d48673d R10=ffff88806a4339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088b4d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555588f49808 CR3=0000000032142000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000001 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4825c0d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f035ea15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f035ea1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f035ea15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f035ea1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f035ea150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f035ea151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853265a5 RDI=ffffffff9aeedc00 RBP=ffffffff9aeedbc0 RSP=ffffc9000d017440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9aeedbc0 R15=ffffffff85326540 RIP=ffffffff853265cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555859ab500 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000012c0 CR3=0000000012091000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffe Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe72ac70060 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe729e15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe729e1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe729e15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe729e1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe729e150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe729e151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73697664616d2065 74616c75706f7000 757a253d657a6973 2070253d72747000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 564c534144480540 51444950554a5500 505f0018405f4c56 0555001857515500 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88806a543060 RCX=ffffffff81b28b61 RDX=ffff888032a824c0 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004a7f800 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff888032a82ff0 R12=dffffc0000000000 R13=ffffed100d4a860d R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81bedf8c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdcfa693e9c CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcfaa038f0 00007fdcfaa03310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcfa9c4050 00007fdcfa9c30c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcfa9c4580 00007fdcfa9c3b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcfa6c60c0 00007fdcfa9c4ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcfaa02da0 00007fdcfa9c35f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcfa6c66b0 00007fdcfa6c60c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcfa9c4ab0 00007fdcfa9c4580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcfa9c3b20 00007fdcfa9c4050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002c51c9 RBX=0000000000000003 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dacdf23 RDI=ffffffff8bf2b400 RBP=ffffed1003bde000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=ffff88801def0b30 R12=0000000000000003 R13=ffff88801def0000 R14=ffffffff9088b4d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d9517 CR3=000000005b3cf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce11fa850 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae6215050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae621505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae6215057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae621506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae62150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae62151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000330 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000330 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000