last executing test programs: 2m47.934230427s ago: executing program 32 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x20000ba) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x2, 0x7, 0x3631564e, 0x7, 0x9, [{0x20, 0x3}, {0x1ff, 0x4}, {0x1, 0x4}, {0x8000, 0x100}, {0x2081, 0xcaf}, {0xfff, 0x7}, {0x101, 0x8}, {0x7, 0xf}], 0xd, 0x3, 0x4, 0x1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, 0x0, &(0x7f0000022800)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc469, 0x0, 0x2, 0x296}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8100, 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r7) mknodat$loop(r8, &(0x7f0000000180)='./file0/file0\x00', 0x1000, 0x0) vmsplice(r8, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 2m42.944469426s ago: executing program 33 (id=51): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2m25.615775617s ago: executing program 34 (id=192): close(0x3) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400), 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000) 2m22.324969615s ago: executing program 35 (id=211): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x7}, 0x2) 2m17.305550073s ago: executing program 36 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0x4}, {}, {0xfff1, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x3f00000000000000, 0x20041090}, 0x0) 2m8.395204922s ago: executing program 4 (id=446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff99}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r2, &(0x7f0000000340)="851973d247c96b863ee1"}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x5, 0x5, 0x0, @loopback, @empty, 0x700, 0x8, 0x4a7, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl0\x00', r3, 0x1, 0x0, 0xb, 0xd48b, {{0x10, 0x4, 0x1, 0x3b, 0x40, 0x64, 0x0, 0x10, 0x2f, 0x0, @loopback, @private=0xa010100, {[@rr={0x7, 0xb, 0x96, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}]}, @timestamp_addr={0x44, 0x1c, 0x5, 0x1, 0x6, [{@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100, 0xfffffff9}]}, @ra={0x94, 0x4}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x88, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x43067, 0x218ad}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xfc}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8000}]}}}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000002) 2m8.24254838s ago: executing program 4 (id=447): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0xfffffffe, 0x180) 2m8.184590813s ago: executing program 4 (id=452): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xfffffff6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 1m53.057951153s ago: executing program 37 (id=452): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xfffffff6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 1m43.976011113s ago: executing program 6 (id=634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000100feffffff000100286401010000000000000000000000000020010000000000000000000000000001000107164e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x80) 1m43.80377307s ago: executing program 6 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000006c0)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x7d}}]}, 0x50}, 0x1, 0x0, 0xffffff7f, 0x81}, 0x4c094) 1m43.686906265s ago: executing program 6 (id=640): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x42, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r2) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000c80)={"43d064455ca79c3698dcca60005c1ba163b1d8f04d69d873792c0cbfc95dacc7cd39a49df12a052d0d8f1bd04b722b4f262437efc030e706916de618763f4600660b41f320706e06860fe29f1bb455ef507156d0a5738f130784a1aad99f74b3e592254eede14eb1b64af356cfaa8ff002c4deed28995dc5e6ee13c4a1b39ba72979c5f3ed91ff89e73e09f7f88fe58bce505f0500764c95c8bed7499213d10731b60ed6c8806ab094843295ac02f06dc46485bb56f2eb2eb3c5ef1e50a2431a2082b54c4b0e1357daaefd30e08322fb5f922f6d9fa3226faf7aeb9630aabe81617fe2849d8ab92fb80f07dfa9d831f4f7ef48923e28553f0c31cf1343d4c0d4dee937e639670fc2ceab9e5048d5bcd9f52a9c90ddd1fee1fda90a114fdf7298b7607c5294efdea04743a0045e96aae496fcb06636a8620f6e007ee5f5c24ab0d0f85cfb3a7820dbe2241b017e917eafb27d13feba7de3a28dd4c29c7959ae5c0724c848f8960fbea5f7b7a35ac32fa6bbf869030a1b61fb0d20a5631dcea68ffa7d456869c4e79f6033f38fa88ccd53dc1feb5381c01dd71ec0446e3633270b7fb961e04ad7e1f44e3fd0d96c724499e1ec2cff23a3d5a97952ec0a44dd967491dc45d4df48ad83027df0be02e35ca4c107bdf957f4c7a831dff89f998a2e1302445dc02b5fc38f7c8a6260723e535062319cb68cb309e91b88c55014bb436c5d9f6bf35cbe24605821baf9ea6aaa31cb2dd74e29863a0c71e3367846cffe17c4a29a76eb635e95c6d7f4d846f3369aedbfb70b3716c1c0234a0deb9abfac12686d45ba97952e8a50480c5f44e038b1a4d5cd9301d02b942afacfaa30b6ef315d72eaf41dddda4983608dc2f5d5e92392a141b0f2f8d34042d1a6cd45d9f9df4c83b8c8b55959d58843ab3564d3f49d81ed2ccd42bb8ad9c8e4b92c2df872c9383c88f4b1bbaf116fff233f55d99b43677eb29ad63e00ea4eee69c72a604b2cdd7641d9c682d1d4ea8e5bd0de857ac1a55b2d6374a4a18af8f27887ffb4b2168e764a5aa9b303a35873d2177de8c5a00be39726baa6d336b6a36b8ec6743454b4542f3fb3ca678a0ecca17ba7c2655931f38ed26219fde45ab8469db2a156953b028abec63c6b841c8bd9f9f0861e7aeb8195013444d2d326cad53718e40be06aea644573a9ef22b13692a17ed8a451af9e2de15b4bfce7c257063e28c07e4c3301a1bff37d72efc14d34ddabbb286f53264e0c8122f215de4f2e06f6e0472674c2476a61ad2e309abfed7e3367bc7373876507764e60b193e8c5abbe95f42adfc74dd25c9098dfba8272f7361d0000000000000000000000000000000000000000000000000000e000"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r4, &(0x7f00000000c0)=""/26, 0x1a, 0x40010001, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtaction={0x22c, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x218, 0x1, [@m_xt={0x214, 0x6, 0x0, 0x0, {{0x7}, {0x1cc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x59, 0x6, {0x4, 'security\x00', 0x7, 0x0, "f6d1efc106f467323b9e93a97dc8f899828a035f6b2cef3a78ac36c91c570a7e7e56a48492d3cae1a4ab72d10bebde"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xa5, 0x6, {0x2, 'nat\x00', 0x5, 0x7, "9169b704f2a2833d03c7e843942b52d33058f8eb972214e8b30a3a44f5b1468b191990a93c1f80cd5b5de49e1e9c5a8b9f73a7943b90de4467dd3ab1827a18885a9ba04852095046d603bb17ef57c9703b544eae47daadd251b2f8f0ed10f4b621fce66c7898e67f54fdac3a79a2fbf19894fd8d781c2bec40218d"}}, @TCA_IPT_TARG={0x98, 0x6, {0x7, 'mangle\x00', 0xb, 0x5, "fb4fbf8ec8fe4663599bcb4a07bf31fbd815766e77caa418be034fa3fb51fa7248687e77fb0eea6f7595ca4464bc042dc5b8d99060749b6db5686ca5808caf8e099d237ddd7c934bc8ac76d9efc149677a7b866c48bd45948529ad87c71720eae3c1a4d63e0bbc3f62fde88e8c22"}}]}, {0x23, 0x6, "dbab230469dc31a60722c260a121f7eaeabaafe58eef0c9b967e043971fcd7"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x22c}}, 0x4010) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000080)=[@wr_drn={0x68, 0x20, {0x1, 0x8000000000000001}}, @uexit={0x0, 0x18, 0xe}, @nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18}], 0x60}) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, 0x0, &(0x7f0000005500)) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f0000000480)={0x9, 0xffff, [{0xbe, 0x0, 0xfffffffffffffff0}, {0x7, 0x0, 0x10001}, {0x6}, {0x3, 0x0, 0x6}, {0x5, 0x0, 0x8}, {0x180, 0x0, 0x10001}, {0x2, 0x0, 0x5}, {0x3, 0x0, 0xfe}, {0x401fa, 0x0, 0x1ee38000000}, {0x8, 0x0, 0x10}, {0x7ff, 0x0, 0x800}, {0x8, 0x0, 0xfffffffffffffff6}, {0x1, 0x0, 0xee}, {0x2, 0x0, 0xfffffffffffffff7}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}]}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001300050000000000feffffff07000000", @ANYRES32=r8, @ANYBLOB="00300000000000003c001a803800048034"], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 1m43.38865639s ago: executing program 9 (id=642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802559fed1d508b309a1fe47d3ced2c631f110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 1m43.337427621s ago: executing program 9 (id=643): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xe1000d00) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0xc0000484) r2 = inotify_init1(0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x102030405060708, {0x0, 0x0, 0x2}, 0x2}, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0xa200) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f00000000c0)={0xa, "45f3d3942fd068910c10e9408fa9dc2be0afae49e2b66d76d972ae4c0e33363dd63daec7fa938c402b8b26f7bf2bff88dceec495f37026e0b199369d8bb7c9d2"}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x1, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0xa}, {0x0, 0x0, 0x0, 0x1}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1m43.236283921s ago: executing program 6 (id=645): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007dfeff0005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f0004"], 0x232) 1m43.146153008s ago: executing program 6 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500"], 0x1c}}, 0x8050) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x4008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) getpriority(0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) close_range(r6, 0xffffffffffffffff, 0x600000000000000) 1m42.997318698s ago: executing program 7 (id=650): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0) 1m42.817770104s ago: executing program 7 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000020180001003ebd7000fedbdf2502003008fd0400010070000008000700ac1e0001080005007f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8c4) 1m42.311789715s ago: executing program 6 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0xffffffffffffff73, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xd0, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x72}]}}}]}, @NFT_MSG_DELOBJ={0x148, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x14, 0x8, "4a0ef0240d5a205aa673dd2b61470f76"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xca, 0x8, "d5b52e9e8f1680cb0e77103515efe658149f097e07a58b282e2e9634d9ffa24d56fae88b8dbc70a6de6760be7d90fa20b62db6c7674d2564e0a81825044cc5225f47d90a200985db9eb3e5ceda1d39a95ba773f80744bcc5728d26855ea3d856c007d907d5b3792c3c5dc6315d8d612fbeba8491bcb7efd4322da846d5006d03b458ac52d5ba7a5ce64da2fd4edf5d6c07da05c4d28a5b3a4834f39fb543ff247f61c8533d5a84bf363eee1e281ae67976452ca67f4db6bb13605f6a50a7e22eae0f1382fd78"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x2c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x18, 0x4, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3727}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}]}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xd6e4}]}, @NFT_MSG_NEWTABLE={0x158, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xba, 0x6, "62e9b79d7728c5c2c3b9950916cbedad2dbb91c0e97a9987bfaa95a272c39d962fdef12c8d4228983be324a6d8cab21bc9568cf7efbb78ef1e78f27f330f712d2bb37461f5741ed2aa9eb289529f4d4bc023591fda6b15bd69e7040f2a87b1e8111a7fbb093888c3497f5a28ee1ce71b30827d0c19138ed33e4fbc8780429df6ea7770ce35bf5d339129a4e0625182cb9484b2d190daa4fc0ea59a0c6443ee6019432963d462d7f0c9fc5b8d2b1d1fe7ed4f2c28bfa5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "5a9694d4e956503eb033bac021e7bf5f809ad2ac5d9aa960739075adb71d92dd80836e8dcf8d597c37e23bf3fa560a8de28d39f500a326e4b386b4ad633dbcd6e69a412f693817c1a4c8f3a750dfcbf98b3c433c5dce"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4b4}}, 0x8040) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0xb5, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100), 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) sendto$inet6(r1, &(0x7f0000000180)="8e", 0x1, 0x10040000, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x1c) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1m42.309178075s ago: executing program 7 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500"], 0x1c}}, 0x8050) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x4008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) getpriority(0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) close_range(r6, 0xffffffffffffffff, 0x600000000000000) 1m41.576969352s ago: executing program 8 (id=656): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x13, 0x6, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x7, 0x8, 0xa, 0x800, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x7}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0x9, 0xfff, 0x7, 0x34001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000900)='stat\x00') lseek(r8, 0x7, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3d67c3afef264641, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x6cf}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000180)='GPL\x00', 0x65f, 0x3e, &(0x7f00000001c0)=""/62, 0x41100, 0x8, '\x00', r3, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x8, 0x400}, 0x10, r4, 0xffffffffffffffff, 0xa, &(0x7f0000000840)=[r5, r6, r7, r8, r9, r10, r11, 0x1], &(0x7f0000000880)=[{0x2, 0x5, 0x4, 0xc}, {0x2, 0x2, 0x8}, {0x4, 0x1, 0xc}, {0x0, 0x1, 0xf, 0xb}, {0x4, 0x4, 0xc, 0x2}, {0x0, 0x5, 0x6}, {0x3, 0x3, 0x10, 0x5}, {0x3, 0x5, 0xe}, {0x2, 0x4, 0xe, 0x9}, {0x3, 0x4, 0x1, 0x5}], 0x10, 0x2}, 0x94) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m41.576086022s ago: executing program 9 (id=657): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x8001, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000038000000000000ff02000000000000000000000000000100000000ff"], 0x0) 1m41.486055524s ago: executing program 9 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000f5ffffff0000009600000a30000000020a010100000000000000000a0000060900010073797a310000000008000240000000020800024000000000e8010000140a010100000000000000000a0000070900010073797a310000000008000340000000040900010073797a31000000000800034000000007090002"], 0x280}, 0x1, 0x0, 0x0, 0x80}, 0xc004) 1m41.485631727s ago: executing program 9 (id=659): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@loopback, 0x0}, &(0x7f0000000400)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x2, 0x0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000840)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x3, 0x1}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3, 0x0}, 0x8) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r8, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) select(0x40, &(0x7f0000000080)={0x8, 0x8000, 0x2, 0x7, 0x3, 0x9, 0xb8e, 0x101}, 0x0, 0x0, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000009c0), 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x2, &(0x7f0000000880)=@raw=[@jmp={0x5, 0x0, 0x5, 0x3, 0x4, 0x6, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f00000008c0)='syzkaller\x00', 0xa15, 0x2b, &(0x7f0000000900)=""/43, 0x41000, 0x2, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000940)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x3, 0x80000001, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000a00)=[r9, r8, r1, r4, r5, r4], &(0x7f0000000a40)=[{0x0, 0x4, 0xe, 0x6}, {0xfffffffe, 0x2, 0xc, 0x4}, {0x8000005, 0x2, 0xf, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x4, 0x6, 0x6}, {0x5, 0x2, 0x4, 0x4}, {0x5, 0x2, 0x10, 0x5}, {0x3, 0x10000001, 0x6, 0xb}, {0x3, 0x2, 0xd, 0xa}, {0x2, 0x2, 0x5, 0x6}], 0x10, 0x81}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000f503000000080000000100000080100000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="181a0000", @ANYRES32=r1, @ANYBLOB="0000000000000000852000000400000018210000", @ANYRES32=r0, @ANYBLOB="00000000030000001b14000110000000184a0000060000000000000000000000067291d78e23bd0257ab43488b973ac56826c3c828dc17f4b3ddd5"], &(0x7f0000000340)='GPL\x00', 0x8, 0x6, &(0x7f0000000380)=""/6, 0x41000, 0x10, '\x00', r2, @fallback=0x5, r3, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x1, 0x7, 0x2}, 0x10, r6, r7, 0x0, &(0x7f0000000740)=[r10, r11, r12, r0], 0x0, 0x10, 0x1}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x40, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) r13 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r13, &(0x7f0000000180)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1}, 0x2060) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) 1m41.383970391s ago: executing program 7 (id=660): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0) 1m41.383373552s ago: executing program 7 (id=662): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x80, 0x81, 0x5, {{0x15, 0x4, 0x2, 0x5, 0x54, 0x67, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@end, @end, @timestamp_addr={0x44, 0x14, 0xe7, 0x1, 0x8, [{@broadcast, 0x3}, {@multicast1, 0xfffffff9}]}, @ssrr={0x89, 0x27, 0xf8, [@dev={0xac, 0x14, 0x14, 0x20}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @empty]}]}}}}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', r1, 0x8000, 0x10, 0x401, 0x8, {{0x2f, 0x4, 0x0, 0x3f, 0xbc, 0x66, 0x0, 0x3, 0x0, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x17, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x5c, 0x1, [{0x6, 0x4, "edb2"}, {0x5, 0x4, "70d5"}, {0x1, 0xe, "caef80627d9f4875723f7293"}, {0x58cacdee1f500a9f, 0xf, "419a18746d2cbf268aeb76c323"}, {0x0, 0x2}, {0x0, 0x7, "f4b3892266"}, {0x2, 0xa, "0d85def6b7a13c68"}, {0x6, 0xc, "4689a7b5110fe2cc8b12"}, {0x7, 0x12, "444e88906493ba324ded862223812038"}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x4, [{@multicast2, 0x2f4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010101, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x19}}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x5}]}]}}}}}) (async) socket$nl_route(0x10, 0x3, 0x0) 1m41.307166431s ago: executing program 8 (id=663): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x101) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0xfffffffffffffff1, 0x548a80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000001f80)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1m41.24744048s ago: executing program 8 (id=664): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xe50500, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0xff, 0x2, 0x87, 0xffffffff, 0x2}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x20000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) fcntl$setlease(r6, 0x400, 0x0) fremovexattr(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="4cbce82a945c99dcfd72befdfa8074003ee90434c5e10899c69136995d741e53ed465bac0dcdc03ac88781ed0abf7bebf58b450315b0a56884e23a700ab9b6afb03e9e83c365539a523d289c4febf10ed3912aa33afa7b8dc151b464e76fc59664c4adbaf26329f5d69e3cd81f40950d24d850576975431d43be3a942e8ff591a2a7d0e2e1a6"]) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000001200)={0x34, r3, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc081}, 0x0) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x80084, 0x3, 0xe, 0x8e, "0060730000efa489040401000000000000f600"}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2) fchdir(r10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84) chdir(&(0x7f0000000080)='./file1\x00') r11 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r11, 0x0) setpgid(0x0, r11) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0xbc45, 0x0, 0x0, 0x0, 0x3, 0x10, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfff]}}) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PIO_FONT(r12, 0x4b61, &(0x7f0000000100)="51e9548a479e3c008d6ede72235813e5809756efc59e89e374a883300ff91e89cb8a7e737dea1e6123d2553822e34e6bd9f39334769749cc402956d1f19adcae8ddec5dafb219cd95f14b2fee2b28ac969b8c89403bb69a518aab301de2422fcc0bb68dc180a66485d651383953c2c72d09b1e43d03bdc") ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xff) 1m41.150905s ago: executing program 8 (id=665): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8007, 0x8001, 0x4, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x6}, &(0x7f0000000100)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r2, 0xa}, 0x8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@private1, 0x0}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0x5, 0x2, 0x20, 0x0, 0x6c, r3, r4}, {0x3, 0x5, 0x6, 0x3, 0xdb2, 0x7, 0x4, 0xff}, {0x7, 0x1, 0x20000000000, 0x5dd}, 0x3ff, 0x6e6bb7, 0x2, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d5, 0x6c}, 0x2, @in=@multicast2, 0x3500, 0x3, 0x0, 0xdb, 0xa35f, 0x2, 0x6}}, 0xe8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) r6 = socket(0x2, 0x80805, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000040)=0xfffffffd) chdir(&(0x7f0000000000)='./file0\x00') mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r7, 0x0) 1m41.150746146s ago: executing program 8 (id=666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xa65b8fb4a478de99, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) close_range(r0, 0xffffffffffffffff, 0xff0f000000000000) 1m35.923978894s ago: executing program 9 (id=667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)="bdc99118158ffb3222a77dce29e913c7fa56753b708da3c283982b260ce5abd73c63ebd0b452b90f91943532f9d9b862c0ea33a403e4296db241fea24984873479c48ab65e8a04715da0a09b9100da082e1ef81b1b2e9c09b2cdf5c8b51d073cb8d0b31622fbdfa82a7f4098302d956b7b9603b9119bd83b0ae863bf29bfb5ff0fdec352e751f2002915b9a97ccb11880df592aa6e77c60a33c8", 0x9a}], 0x1) readv(r0, &(0x7f0000000500)=[{&(0x7f0000003a00)=""/4115, 0x1013}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x8040) 1m30.95366767s ago: executing program 7 (id=668): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x48}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x23, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x8000000000000000, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0xcc78, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m12.996188943s ago: executing program 8 (id=669): syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100000086dd602e5cea629c4200403c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c910fc020000000000000000000000000000c910fc0100000000000000000000000000000000000000000000001090780200000000000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) r7 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r7, 0x0, 0x1, 0x0, &(0x7f0000001600)) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff020000000000000000000000000001890090780000000000fc0000000000000000000000000000010201703b744dc5c6"], 0x0) 50.840417979s ago: executing program 38 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0xffffffffffffff73, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xd0, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x72}]}}}]}, @NFT_MSG_DELOBJ={0x148, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x14, 0x8, "4a0ef0240d5a205aa673dd2b61470f76"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xca, 0x8, "d5b52e9e8f1680cb0e77103515efe658149f097e07a58b282e2e9634d9ffa24d56fae88b8dbc70a6de6760be7d90fa20b62db6c7674d2564e0a81825044cc5225f47d90a200985db9eb3e5ceda1d39a95ba773f80744bcc5728d26855ea3d856c007d907d5b3792c3c5dc6315d8d612fbeba8491bcb7efd4322da846d5006d03b458ac52d5ba7a5ce64da2fd4edf5d6c07da05c4d28a5b3a4834f39fb543ff247f61c8533d5a84bf363eee1e281ae67976452ca67f4db6bb13605f6a50a7e22eae0f1382fd78"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x2c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x18, 0x4, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3727}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}]}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xd6e4}]}, @NFT_MSG_NEWTABLE={0x158, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xba, 0x6, "62e9b79d7728c5c2c3b9950916cbedad2dbb91c0e97a9987bfaa95a272c39d962fdef12c8d4228983be324a6d8cab21bc9568cf7efbb78ef1e78f27f330f712d2bb37461f5741ed2aa9eb289529f4d4bc023591fda6b15bd69e7040f2a87b1e8111a7fbb093888c3497f5a28ee1ce71b30827d0c19138ed33e4fbc8780429df6ea7770ce35bf5d339129a4e0625182cb9484b2d190daa4fc0ea59a0c6443ee6019432963d462d7f0c9fc5b8d2b1d1fe7ed4f2c28bfa5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "5a9694d4e956503eb033bac021e7bf5f809ad2ac5d9aa960739075adb71d92dd80836e8dcf8d597c37e23bf3fa560a8de28d39f500a326e4b386b4ad633dbcd6e69a412f693817c1a4c8f3a750dfcbf98b3c433c5dce"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4b4}}, 0x8040) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0xb5, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100), 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) sendto$inet6(r1, &(0x7f0000000180)="8e", 0x1, 0x10040000, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x1c) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 48.257224213s ago: executing program 39 (id=667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)="bdc99118158ffb3222a77dce29e913c7fa56753b708da3c283982b260ce5abd73c63ebd0b452b90f91943532f9d9b862c0ea33a403e4296db241fea24984873479c48ab65e8a04715da0a09b9100da082e1ef81b1b2e9c09b2cdf5c8b51d073cb8d0b31622fbdfa82a7f4098302d956b7b9603b9119bd83b0ae863bf29bfb5ff0fdec352e751f2002915b9a97ccb11880df592aa6e77c60a33c8", 0x9a}], 0x1) readv(r0, &(0x7f0000000500)=[{&(0x7f0000003a00)=""/4115, 0x1013}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x8040) 47.635688407s ago: executing program 40 (id=668): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x48}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x23, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x8000000000000000, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0xcc78, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 46.737398494s ago: executing program 41 (id=669): syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100000086dd602e5cea629c4200403c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c910fc020000000000000000000000000000c910fc0100000000000000000000000000000000000000000000001090780200000000000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) r7 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r7, 0x0, 0x1, 0x0, &(0x7f0000001600)) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff020000000000000000000000000001890090780000000000fc0000000000000000000000000000010201703b744dc5c6"], 0x0) 15.201642354s ago: executing program 5 (id=1070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006900)={0x0, 0x0, &(0x7f00000068c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0xf5ffffffffffffff, 0x20004004}, 0x24008000) 15.200137389s ago: executing program 5 (id=1071): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x5, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x8, 0xb, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xc}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x140, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000070000000004000000000a0000000000000059045bd9d3a84b652acf006cbb2744b7c063761139203698e6e80718b6dc68a610633e0318b3bc9754e3d7af9e3e09072dab161eeb9de2e7349d59a554b4c001e6e22a5d68a4e11407daff59c38420b33bb220034c01d8b0ee385f30", @ANYRES64=r8, @ANYRES64=0x0], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r12}, 0x94) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r13 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001400b59500000000000002000a402200", @ANYRES32=r14, @ANYBLOB="14465500ab7fad5033d3f2270b5f500a6c00000000000000000000ffff0000000014000100fe8000"], 0x40}}, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 15.033752356s ago: executing program 5 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25110000000800", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 14.956581026s ago: executing program 5 (id=1075): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x20010, r0, 0x428d8000) r1 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x4000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x8000003, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2d) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) 14.854637248s ago: executing program 5 (id=1078): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xf75}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c015}, 0x4008000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x6}, 0x2) socket$kcm(0x2d, 0x2, 0x0) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x3}, 0x2) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) write$cgroup_devices(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800110001000000140003"], 0x50}}, 0x0) getdents64(r4, &(0x7f0000000100)=""/42, 0x2a) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r2]) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c840) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@setlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x4a288, 0x21010}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xfffffff1}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xfffffffa}, @IFLA_IFALIAS={0x14, 0x14, 'batadv_slave_0\x00'}]}, 0x48}}, 0x0) 14.486213303s ago: executing program 5 (id=1082): r0 = socket(0xa, 0x3, 0xfe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x9, @mcast2, 0x9}, 0x1c) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0xfffffff5, 0x1, 0x8, r0, 0x0, 0x300, 0x0, 0x0, 0x2}]) 14.340799717s ago: executing program 42 (id=1082): r0 = socket(0xa, 0x3, 0xfe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x9, @mcast2, 0x9}, 0x1c) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0xfffffff5, 0x1, 0x8, r0, 0x0, 0x300, 0x0, 0x0, 0x2}]) 11.314374139s ago: executing program 0 (id=1113): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r1, 0x0, r2, 0x0, 0x40000004, 0xb) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x100}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={r3, 0xb, 0xc3, 0x4, 0x4, 0x7, 0x5, 0x97b1, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0x8, 0x5, 0x1, 0xfff}}, &(0x7f0000000240)=0xb0) r4 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) futex$unlock_wake_list64(&(0x7f0000000000)=0x1, 0x201, 0x0, 0x0, 0x0, 0x7f) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 11.196981516s ago: executing program 0 (id=1115): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x100000000000000}}, 0x1c) 11.098820391s ago: executing program 0 (id=1117): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1a, 0x1, 0x0, 0x921, 0x40800, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000060a09040000000000000000020000000900020073797a32000007000900010073797a30000000001c0004801800018008000100666962"], 0x70}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff02000000000288ca5bf0004c0000123400000000010010020000126700000001020000"], 0x0) 11.070980635s ago: executing program 0 (id=1119): setns(0xc9, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001"], 0x58}}, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101146, 0x0) (async) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r1, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, &(0x7f0000000000)) (async) listen(0xffffffffffffffff, 0x5) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000a000000bfa3000000000000b704000000000000850000003f00ff000000000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f0000000700)="01", 0x11, 0x0, 0x0, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000380)="f3732e94", &(0x7f0000000740)=""/202, 0x4}, 0x20) (async) pipe(&(0x7f0000000040)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)={{0x14, 0x10, 0x4}, [@NFT_MSG_DELOBJ={0x204, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xa2, 0x8, "eccd9f49ac8d1718ca6f54a8641d84c955f5c66e76296e9240868f89dbf9fef98701a200d664e4a1b32e3077c7a3efe6b5c6192ccffb8b6c006db12a06ef978d402a6c52c968327d30e247d9e9871dffc47bd5222e01db02bb20608977f6ac456b9f80b197df121e1570f5fb65f276aa92b28091aacb262dae359dd48c3c44b6eea4a3a466bd451a8b0f8e02bf7970ac8e2380db247b90a04663fd19ce15"}, @NFTA_OBJ_USERDATA={0x104, 0x8, "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"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x2d4}}, 0x0) 10.305257885s ago: executing program 0 (id=1123): ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0xa, 0x3, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x2) (async) ptrace(0x11, 0x0) (async) r1 = memfd_secret(0x0) (async, rerun: 32) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async, rerun: 64) unshare(0x6a040000) (async, rerun: 64) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4, 0x0, 0x5d}) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000000c0)=0x6, 0x4) (async) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x19fb, @private1={0xfc, 0x1, '\x00', 0x80}, 0x542}, 0x1c) (async) r5 = socket$inet6(0xa, 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f00000000c0)=0x6, 0x4) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x6}, 0x1c) (async) listen(r5, 0x2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000ee010663ac0601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000500050083d3ab7f340a0000000500010006"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(r1, &(0x7f0000000200)='./file1\x00', 0x12c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount$overlay(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000080), 0x3a34000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 9.906218833s ago: executing program 1 (id=1126): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x5, 0x3}, 0x20) syz_clone(0x2048000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.796384764s ago: executing program 0 (id=1128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0xe}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd27, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4f}]}}]}, 0x3c}}, 0x20040091) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.632246596s ago: executing program 43 (id=1128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0xe}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd27, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4f}]}}]}, 0x3c}}, 0x20040091) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.607960188s ago: executing program 1 (id=1131): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000f00069a5e457c90f895c24f1649d7f1ad6a3bfe03a063fc9f7fdcd261f23c0641bf164b45e084574557fcaec35b68614f03a75a6d05950bea442c6e8167d1a7fe9ffb4af6b69e4fd675e7defdc"], 0x96) 9.524770975s ago: executing program 1 (id=1133): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14f5ff001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) 9.524623888s ago: executing program 1 (id=1134): syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@random="591a1d9a2bdb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x8e, 0x0, @opaque="d0e4b909c912328e99d50de1a9d50452c0be09f8acaf63cd38b329c24adc54798e82daf5251deb2207f0"}}}}}, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 9.326784691s ago: executing program 1 (id=1135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/device\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/16, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000380)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x17, r7, 0x1, 0x40, 0x6, @broadcast}, 0x14) getsockname$packet(r6, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.947231651s ago: executing program 1 (id=1137): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4000, '\x00', 0x0, 0x0}, 0x48) 2.836239239s ago: executing program 4 (id=1130): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x2, {0x10, 0x3, 0x7}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x8000, 0x9, 0xffff}) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000280)={0x20, 0x10000001}) prctl$PR_CAPBSET_DROP(0x2f, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x42a04, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x414000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_GET_PIT(r5, 0xc048ae65, &(0x7f0000000380)) ptrace$setopts(0x4206, r3, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) modify_ldt$read_default(0x2, 0x0, 0x17) umount2(&(0x7f0000000400)='./file0\x00', 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x3, 0x4) 2.692575437s ago: executing program 4 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2511000000080003", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 2.126184882s ago: executing program 2 (id=1170): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 2.076850974s ago: executing program 3 (id=1171): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4050000000000006110140000000a00000000000000c9b8da8a8a84fd4ef24d3bd7111e2f976198f4c19f65b0069004528fc291df4d07fb252afcde90dca49afbb76ac1b9224b72e4c2f3464220a9e8abb3ee953b00ed5d12a27f88dc3030719ddb09e8f4dcb000cd1a7e61d4bd40d1195f82df090239d40e49f8e2d545fbecbfcd6d715845bfbc0af22db6a76f9759059c7caa14df68ca31ec"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @sched_cls}, 0x94) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e0b0a42b820a8"], 0x97) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfs\x00', 0x200013, 0x0) 2.02699046s ago: executing program 2 (id=1172): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000300800000001a000000280022802400008004000380040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) 1.92159199s ago: executing program 2 (id=1173): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x7000000, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb03}, {0x4}], 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 1.806911357s ago: executing program 2 (id=1174): syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r0 = socket(0x1d, 0x2, 0x6) (rerun: 64) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x20, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x40000021}) (async, rerun: 32) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) r7 = gettid() r8 = syz_clone(0x0, 0x0, 0xfffffffffffffcd9, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x2, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x23, 0x4, @tid=r7}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000190002002cbd7000fddbdf258080200d0002c809002b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r11]}}], 0x18}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42400, 0x0) close(r12) (async, rerun: 32) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) (rerun: 32) ioctl$TUNSETOFFLOAD(r13, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r12, 0x80047441, &(0x7f0000000180)) (async) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0xffffffffffffff35, 0x0}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0xacc2, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (rerun: 32) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f0000000c00078008000200010000006407974fd1450094f14903334f560cd663"], 0x20}}, 0x0) (async) r14 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x5, 0x153283) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r14, 0xc1105518, &(0x7f0000000480)={{0x9, 0x4, 0xffffff38, 0x401, 'syz0\x00', 0x80000000}, 0x5, 0x20000000, 0x9, r7, 0x5, 0x40, 'syz1\x00', &(0x7f0000000200)=['gcm(aes)\x00', 'TIPCv2\x00', '/dev/ppp\x00', ']\x00', '\\\x00'], 0x1d}) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="68000000c9f2304c9456f7eb19e29671c8de88085c669766a467f214263f9838cf264a39eb6c04e68c86bdf29408b3e7408fdc87822e882380a2", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000005400068014000300313233343536373839303132333435363c00040067636d28616573290000000000000000000000000000000000000000000000001400000000112233445566778899aabbccddeeff00112233"], 0x68}}, 0x0) 1.676468001s ago: executing program 3 (id=1175): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000, 0x240}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) 1.526528014s ago: executing program 2 (id=1176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xdeff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.456454721s ago: executing program 2 (id=1177): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r1 = socket(0xa, 0x3, 0xff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x20000008}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x40000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80c0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x20000041}, 0x40811) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4054850}, 0xc0c1) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000180)=0x10001, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2}, 0xd}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000100, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r5, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x10007, 0xff, 0xd92}) write(r0, &(0x7f0000000800)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x4}, @ib={0x1b, 0x6, 0x6, {"b849245b1fe9a3a2ffb24f696a6e5584"}, 0xf10f, 0x7, 0xc}}}, 0x118) 886.989581ms ago: executing program 4 (id=1178): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000007b40)="fb9f", 0x2}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0xfb9f}}], 0x2, 0x40000) 740.849783ms ago: executing program 44 (id=1178): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000007b40)="fb9f", 0x2}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0xfb9f}}], 0x2, 0x40000) 697.006525ms ago: executing program 3 (id=1180): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRESDEC, @ANYRES64=r0], 0x6) (async, rerun: 64) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_VMCI_VERSION(r3, 0x79f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) (async, rerun: 64) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x180, 0xff}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x400) 204.770433ms ago: executing program 3 (id=1181): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x18, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) 97.025044ms ago: executing program 3 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 0s ago: executing program 3 (id=1183): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=@newqdisc={0xb4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0xb4}}, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x101}, 0x16, 0x2) signalfd4(r3, &(0x7f0000000000)={[0x92b5]}, 0x8, 0x800) socket$inet_icmp(0x2, 0x2, 0x1) kernel console output (not intermixed with test programs): 1-1.4.0.fw, size: 51008 [ 207.250233][ T9060] FAULT_INJECTION: forcing a failure. [ 207.250233][ T9060] name failslab, interval 1, probability 0, space 0, times 0 [ 207.250257][ T9060] CPU: 0 UID: 0 PID: 9060 Comm: syz.3.801 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.250273][ T9060] Tainted: [L]=SOFTLOCKUP [ 207.250277][ T9060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.250284][ T9060] Call Trace: [ 207.250289][ T9060] [ 207.250294][ T9060] dump_stack_lvl+0x100/0x190 [ 207.250316][ T9060] should_fail_ex.cold+0x5/0xa [ 207.250332][ T9060] should_failslab+0xc2/0x120 [ 207.250348][ T9060] __kmalloc_cache_noprof+0x91/0x6d0 [ 207.250367][ T9060] ? register_bcache+0x14b/0x4160 [ 207.250387][ T9060] register_bcache+0x14b/0x4160 [ 207.250411][ T9060] ? __pfx_register_bcache+0x10/0x10 [ 207.250428][ T9060] ? lock_acquire+0x1d1/0x380 [ 207.250441][ T9060] ? sysfs_file_kobj+0x21/0x290 [ 207.250455][ T9060] ? find_held_lock+0x2b/0x80 [ 207.250471][ T9060] ? sysfs_file_kobj+0xe4/0x290 [ 207.250485][ T9060] ? sysfs_file_kobj+0xe4/0x290 [ 207.250499][ T9060] ? __pfx_register_bcache+0x10/0x10 [ 207.250516][ T9060] kobj_attr_store+0x58/0x80 [ 207.250535][ T9060] ? __pfx_kobj_attr_store+0x10/0x10 [ 207.250581][ T9060] sysfs_kf_write+0xf2/0x150 [ 207.250597][ T9060] kernfs_fop_write_iter+0x3e0/0x5f0 [ 207.250609][ T9060] ? __pfx_sysfs_kf_write+0x10/0x10 [ 207.250624][ T9060] vfs_write+0x6af/0x1050 [ 207.250637][ T9060] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 207.250651][ T9060] ? __pfx_vfs_write+0x10/0x10 [ 207.250662][ T9060] ? find_held_lock+0x2b/0x80 [ 207.250688][ T9060] ksys_write+0x12a/0x250 [ 207.250700][ T9060] ? __pfx_ksys_write+0x10/0x10 [ 207.250716][ T9060] do_syscall_64+0x123/0x790 [ 207.250733][ T9060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.250746][ T9060] RIP: 0033:0x7fb57e99e159 [ 207.250756][ T9060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.250767][ T9060] RSP: 002b:00007fb57f7c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.250779][ T9060] RAX: ffffffffffffffda RBX: 00007fb57ec25fa0 RCX: 00007fb57e99e159 [ 207.250787][ T9060] RDX: 000000000000000a RSI: 0000200000000400 RDI: 0000000000000003 [ 207.250793][ T9060] RBP: 00007fb57f7c1090 R08: 0000000000000000 R09: 0000000000000000 [ 207.250800][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.250807][ T9060] R13: 00007fb57ec26038 R14: 00007fb57ec25fa0 R15: 00007fff4513e8f8 [ 207.250822][ T9060] [ 207.260155][ T9060] bcache: register_bcache() error : cannot allocate memory [ 207.329992][ T43] audit: type=1400 audit(1789435217.878:761): avc: denied { write } for pid=9063 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.417439][ T5841] usb 10-1: USB disconnect, device number 2 [ 207.467334][ T9074] bcache: register_bcache() error : failed to open device [ 207.489322][ T43] audit: type=1400 audit(1789435218.028:762): avc: denied { write } for pid=9073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.585852][ T43] audit: type=1400 audit(1789435218.128:763): avc: denied { write } for pid=9081 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.719399][ T43] audit: type=1400 audit(1789435218.258:764): avc: denied { write } for pid=9092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.769146][ T9103] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.8323072.0), cmd(2) [ 207.791290][ T43] audit: type=1400 audit(1789435218.328:765): avc: denied { write } for pid=9102 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.805569][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 207.832210][ T9108] tipc: Started in network mode [ 207.832230][ T9108] tipc: Node identity eecad33f44da, cluster identity 4711 [ 207.832381][ T9108] tipc: Enabled bearer , priority 0 [ 207.850765][ T9106] tipc: Disabling bearer [ 207.958256][ T9119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.274380][ T7013] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 208.274494][ T7013] ath9k_htc: Failed to initialize the device [ 208.274827][ T5841] usb 10-1: ath9k_htc: USB layer deinitialized [ 208.780672][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 208.857841][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 209.016284][ T9182] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 209.033344][ T9170] geneve2: entered promiscuous mode [ 209.033359][ T9170] geneve2: entered allmulticast mode [ 209.055898][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.055947][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.055967][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.055987][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.176071][ T5884] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 209.214586][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 209.310583][ T9217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.841'. [ 209.346317][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 209.347221][ T5884] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.348372][ T5884] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 209.348431][ T5884] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.348461][ T5884] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.348483][ T5884] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.348506][ T5884] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.348544][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.367598][ T9215] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 209.561078][ T5884] usb 5-1: usb_control_msg returned -32 [ 209.561119][ T5884] usbtmc 5-1:16.0: can't read capabilities [ 209.708836][ T9250] bond1: option xmit_hash_policy: invalid value (6) [ 209.711830][ T9250] bond1 (unregistering): Released all slaves [ 209.753005][ T9255] FAULT_INJECTION: forcing a failure. [ 209.753005][ T9255] name fail_futex, interval 1, probability 0, space 0, times 0 [ 209.753039][ T9255] CPU: 2 UID: 0 PID: 9255 Comm: syz.1.854 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.753066][ T9255] Tainted: [L]=SOFTLOCKUP [ 209.753073][ T9255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.753085][ T9255] Call Trace: [ 209.753092][ T9255] [ 209.753099][ T9255] dump_stack_lvl+0x100/0x190 [ 209.753135][ T9255] should_fail_ex.cold+0x5/0xa [ 209.753164][ T9255] get_futex_key+0x1d0/0x14f0 [ 209.753193][ T9255] ? __pfx_get_futex_key+0x10/0x10 [ 209.753228][ T9255] futex_wait_setup+0x91/0x540 [ 209.753254][ T9255] __futex_wait+0x19f/0x300 [ 209.753276][ T9255] ? __pfx___futex_wait+0x10/0x10 [ 209.753293][ T9255] ? __pfx_try_to_wake_up+0x10/0x10 [ 209.753316][ T9255] ? futex_hash+0x311/0x400 [ 209.753344][ T9255] ? __pfx_futex_wake_mark+0x10/0x10 [ 209.753381][ T9255] ? find_held_lock+0x2b/0x80 [ 209.753406][ T9255] ? futex_wake+0x4ea/0x5e0 [ 209.753449][ T9255] futex_wait+0xe6/0x370 [ 209.753468][ T9255] ? __pfx_futex_wait+0x10/0x10 [ 209.753494][ T9255] ? rcu_read_lock_any_held+0x6a/0x90 [ 209.753520][ T9255] ? find_held_lock+0x2b/0x80 [ 209.753541][ T9255] ? ksys_write+0x190/0x250 [ 209.753561][ T9255] ? ksys_write+0x190/0x250 [ 209.753581][ T9255] do_futex+0x265/0x440 [ 209.753605][ T9255] ? __pfx_do_futex+0x10/0x10 [ 209.753635][ T9255] __x64_sys_futex+0x34f/0x4d0 [ 209.753665][ T9255] ? __pfx___x64_sys_futex+0x10/0x10 [ 209.753702][ T9255] do_syscall_64+0x123/0x790 [ 209.753730][ T9255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.753751][ T9255] RIP: 0033:0x7fe69359e159 [ 209.753769][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.753788][ T9255] RSP: 002b:00007fe6945440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.753807][ T9255] RAX: ffffffffffffffda RBX: 00007fe693825fa8 RCX: 00007fe69359e159 [ 209.753820][ T9255] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe693825fa8 [ 209.753832][ T9255] RBP: 00007fe693825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 209.753865][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.753878][ T9255] R13: 00007fe693826038 R14: 00007ffc95c183d0 R15: 00007ffc95c184b8 [ 209.753906][ T9255] [ 209.756999][ T5445] 8021q: adding VLAN 0 to HW filter on device eth29 [ 209.962454][ T9265] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 209.974453][ T9267] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 209.975838][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.978257][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.980061][ T9276] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 210.014077][ T5445] 8021q: adding VLAN 0 to HW filter on device eth30 [ 210.154863][ T9298] fuse: Bad value for 'user_id' [ 210.154879][ T9298] fuse: Bad value for 'user_id' [ 210.156470][ T9298] netlink: 'syz.3.864': attribute type 10 has an invalid length. [ 210.161090][ T9298] syz_tun: entered promiscuous mode [ 210.174473][ T9298] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 210.237412][ T5445] 8021q: adding VLAN 0 to HW filter on device eth31 [ 210.287240][ T9295] null_blk: disk rnullb0 created [ 210.325507][ T9309] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 210.520143][ T9322] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 210.520166][ T9322] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 210.520175][ T9322] PKCS7: Unsupported data type 106 [ 210.599851][ T9329] FAULT_INJECTION: forcing a failure. [ 210.599851][ T9329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.599901][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.1.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.599937][ T9329] Tainted: [L]=SOFTLOCKUP [ 210.599947][ T9329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.599963][ T9329] Call Trace: [ 210.599974][ T9329] [ 210.599986][ T9329] dump_stack_lvl+0x100/0x190 [ 210.600032][ T9329] should_fail_ex.cold+0x5/0xa [ 210.600070][ T9329] _copy_from_user+0x2e/0xd0 [ 210.600099][ T9329] copy_msghdr_from_user+0x9f/0x4c0 [ 210.600142][ T9329] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 210.600190][ T9329] ? __lock_acquire+0x5c0/0x1f40 [ 210.600226][ T9329] ___sys_recvmsg+0xdd/0x1a0 [ 210.600268][ T9329] ? __pfx____sys_recvmsg+0x10/0x10 [ 210.600306][ T9329] ? lock_acquire+0x1d1/0x380 [ 210.600358][ T9329] do_recvmmsg+0x2f3/0x740 [ 210.600402][ T9329] ? __pfx_do_recvmmsg+0x10/0x10 [ 210.600435][ T9329] ? lock_acquire+0x1d1/0x380 [ 210.600660][ T9329] ? __mutex_unlock_slowpath+0x35d/0x930 [ 210.600708][ T9329] ? __fget_files+0x21f/0x3d0 [ 210.600740][ T9329] __x64_sys_recvmmsg+0x22a/0x280 [ 210.600771][ T9329] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 210.600805][ T9329] do_syscall_64+0x123/0x790 [ 210.600836][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.600858][ T9329] RIP: 0033:0x7fe69359e159 [ 210.600875][ T9329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.600894][ T9329] RSP: 002b:00007fe694544028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 210.600914][ T9329] RAX: ffffffffffffffda RBX: 00007fe693825fa0 RCX: 00007fe69359e159 [ 210.600929][ T9329] RDX: 040000000000002e RSI: 0000200000000000 RDI: 0000000000000003 [ 210.600941][ T9329] RBP: 00007fe694544090 R08: 0000000000000000 R09: 0000000000000000 [ 210.600953][ T9329] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 210.600967][ T9329] R13: 00007fe693826038 R14: 00007fe693825fa0 R15: 00007ffc95c184b8 [ 210.600994][ T9329] [ 210.648235][ T9333] overlayfs: failed to resolve 'ower2': -2 [ 210.741045][ T9336] overlayfs: missing 'lowerdir' [ 211.005290][ T9355] netlink: 'syz.1.881': attribute type 20 has an invalid length. [ 211.005318][ T9355] __nla_validate_parse: 6 callbacks suppressed [ 211.005331][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 211.016102][ T9355] netlink: 'syz.1.881': attribute type 20 has an invalid length. [ 211.016123][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 211.016300][ T9355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9355 comm=syz.1.881 [ 211.017948][ T9355] netlink: 'syz.1.881': attribute type 20 has an invalid length. [ 211.017961][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 211.018056][ T9355] netlink: 'syz.1.881': attribute type 20 has an invalid length. [ 211.018064][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 211.018127][ T9355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9355 comm=syz.1.881 [ 211.034390][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.034434][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.034463][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.034492][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.091211][ T9361] FAULT_INJECTION: forcing a failure. [ 211.091211][ T9361] name failslab, interval 1, probability 0, space 0, times 0 [ 211.091246][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.5.882 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.091271][ T9361] Tainted: [L]=SOFTLOCKUP [ 211.091279][ T9361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.091290][ T9361] Call Trace: [ 211.091297][ T9361] [ 211.091304][ T9361] dump_stack_lvl+0x100/0x190 [ 211.091370][ T9361] should_fail_ex.cold+0x5/0xa [ 211.091399][ T9361] should_failslab+0xc2/0x120 [ 211.091426][ T9361] __kmalloc_cache_noprof+0x91/0x6d0 [ 211.091454][ T9361] ? copy_mount_options+0x55/0x190 [ 211.091484][ T9361] copy_mount_options+0x55/0x190 [ 211.091505][ T9361] __x64_sys_mount+0x1ab/0x310 [ 211.091534][ T9361] ? __pfx___x64_sys_mount+0x10/0x10 [ 211.091567][ T9361] do_syscall_64+0x123/0x790 [ 211.091594][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.091628][ T9361] RIP: 0033:0x7f969379e159 [ 211.091649][ T9361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.091667][ T9361] RSP: 002b:00007f96945d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 211.091686][ T9361] RAX: ffffffffffffffda RBX: 00007f9693a25fa0 RCX: 00007f969379e159 [ 211.091699][ T9361] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 211.091712][ T9361] RBP: 00007f96945d8090 R08: 0000200000000280 R09: 0000000000000000 [ 211.091723][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.091734][ T9361] R13: 00007f9693a26038 R14: 00007f9693a25fa0 R15: 00007ffd338aafa8 [ 211.091760][ T9361] [ 211.094046][ T9359] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 211.094073][ T9359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.883'. [ 211.094121][ T9359] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 211.096728][ T9359] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 211.099808][ T9359] FAULT_INJECTION: forcing a failure. [ 211.099808][ T9359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.099836][ T9359] CPU: 1 UID: 0 PID: 9359 Comm: syz.1.883 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.099859][ T9359] Tainted: [L]=SOFTLOCKUP [ 211.099864][ T9359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.099874][ T9359] Call Trace: [ 211.099879][ T9359] [ 211.099885][ T9359] dump_stack_lvl+0x100/0x190 [ 211.099921][ T9359] should_fail_ex.cold+0x5/0xa [ 211.099942][ T9359] ? prepare_alloc_pages+0x16d/0x5b0 [ 211.099964][ T9359] should_fail_alloc_page+0xeb/0x140 [ 211.099984][ T9359] prepare_alloc_pages+0x1f0/0x5b0 [ 211.100005][ T9359] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 211.100023][ T9359] ? __pfx_get_page_from_freelist+0x10/0x10 [ 211.100046][ T9359] ? prepare_alloc_pages+0x1f0/0x5b0 [ 211.100066][ T9359] ? rcu_is_watching+0x13/0xc0 [ 211.100085][ T9359] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 211.100100][ T9359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 211.100147][ T9359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 211.100166][ T9359] ? lock_acquire+0x1d1/0x380 [ 211.100185][ T9359] ? rcu_is_watching+0x13/0xc0 [ 211.100204][ T9359] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 211.100219][ T9359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.100238][ T9359] ? policy_nodemask+0xed/0x4f0 [ 211.100258][ T9359] alloc_pages_mpol+0x201/0x550 [ 211.100281][ T9359] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 211.100300][ T9359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 211.100314][ T9359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.100333][ T9359] ? __pfx_alloc_pgt_page+0x10/0x10 [ 211.100347][ T9359] alloc_pages_noprof+0x1a/0x160 [ 211.100368][ T9359] kimage_alloc_pages+0x72/0x380 [ 211.100385][ T9359] ? __pfx_alloc_pgt_page+0x10/0x10 [ 211.100399][ T9359] kimage_alloc_control_pages+0x157/0xa20 [ 211.100420][ T9359] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 211.100442][ T9359] ? __pfx_alloc_pgt_page+0x10/0x10 [ 211.100456][ T9359] alloc_pgt_page+0xc/0xa0 [ 211.100469][ T9359] ident_p4d_init+0xb6/0x330 [ 211.100489][ T9359] kernel_ident_mapping_init+0x334/0x4c0 [ 211.100510][ T9359] machine_kexec_prepare+0x2f5/0x1270 [ 211.100526][ T9359] ? kimage_free_page_list+0x185/0x240 [ 211.100545][ T9359] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 211.100561][ T9359] ? __pfx_alloc_pgt_page+0x10/0x10 [ 211.100583][ T9359] do_kexec_load+0x32c/0x810 [ 211.100602][ T9359] ? __pfx_do_kexec_load+0x10/0x10 [ 211.100621][ T9359] ? _copy_from_user+0x59/0xd0 [ 211.100638][ T9359] __x64_sys_kexec_load+0x1bf/0x230 [ 211.100657][ T9359] do_syscall_64+0x123/0x790 [ 211.100681][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.100698][ T9359] RIP: 0033:0x7fe69359e159 [ 211.100711][ T9359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.100727][ T9359] RSP: 002b:00007fe694544028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 211.100744][ T9359] RAX: ffffffffffffffda RBX: 00007fe693825fa0 RCX: 00007fe69359e159 [ 211.100754][ T9359] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 211.100764][ T9359] RBP: 00007fe69363503b R08: 0000000000000000 R09: 0000000000000000 [ 211.100773][ T9359] R10: 0800000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.100783][ T9359] R13: 00007fe693826038 R14: 00007fe693825fa0 R15: 00007ffc95c184b8 [ 211.100804][ T9359] [ 211.316510][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 211.398080][ T9369] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.398107][ T9369] overlayfs: missing 'lowerdir' [ 211.633705][ T9388] netlink: 2 bytes leftover after parsing attributes in process `syz.1.888'. [ 211.705242][ T9396] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 211.868604][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 211.868622][ T43] audit: type=1400 audit(1789435222.408:813): avc: denied { write } for pid=9400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.988475][ T6982] usb 5-1: USB disconnect, device number 4 [ 212.018081][ T43] audit: type=1400 audit(1789435222.568:814): avc: denied { write } for pid=9412 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.032874][ T9411] FAULT_INJECTION: forcing a failure. [ 212.032874][ T9411] name failslab, interval 1, probability 0, space 0, times 0 [ 212.032990][ T9411] CPU: 2 UID: 0 PID: 9411 Comm: syz.5.893 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.033020][ T9411] Tainted: [L]=SOFTLOCKUP [ 212.033028][ T9411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.033040][ T9411] Call Trace: [ 212.033046][ T9411] [ 212.033054][ T9411] dump_stack_lvl+0x100/0x190 [ 212.033091][ T9411] should_fail_ex.cold+0x5/0xa [ 212.033117][ T9411] should_failslab+0xc2/0x120 [ 212.033143][ T9411] __kvmalloc_node_noprof+0x113/0x9b0 [ 212.033163][ T9411] ? __pfx___mutex_lock+0x10/0x10 [ 212.033306][ T9411] ? nf_hook_entries_grow+0x255/0x870 [ 212.033348][ T9411] nf_hook_entries_grow+0x255/0x870 [ 212.033370][ T9411] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 212.033402][ T9411] __nf_register_net_hook+0x112/0x780 [ 212.033491][ T9411] nf_register_net_hook+0xdb/0x170 [ 212.033519][ T9411] nf_register_net_hooks+0x5d/0xd0 [ 212.033541][ T9411] nf_ct_netns_do_get+0x225/0x610 [ 212.033566][ T9411] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 212.033590][ T9411] ? xt_find_match+0x1dc/0x280 [ 212.033618][ T9411] nf_ct_netns_get+0x3d/0x160 [ 212.033639][ T9411] helper_mt_check+0x8b/0x150 [ 212.033666][ T9411] ? __pfx_helper_mt_check+0x10/0x10 [ 212.033689][ T9411] xt_check_match+0x117/0x1c0 [ 212.033713][ T9411] find_check_entry.isra.0+0x356/0xa00 [ 212.033738][ T9411] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 212.033766][ T9411] ? kasan_quarantine_put+0x104/0x240 [ 212.033786][ T9411] ? lockdep_hardirqs_on+0x7d/0x110 [ 212.033882][ T9411] ? translate_table+0xbc0/0x1770 [ 212.033904][ T9411] ? translate_table+0xbd8/0x1770 [ 212.033925][ T9411] ? kfree+0x22b/0x6d0 [ 212.033949][ T9411] ? xt_check_table_hooks+0x206/0x330 [ 212.033972][ T9411] translate_table+0xcb9/0x1770 [ 212.034002][ T9411] ? __pfx_translate_table+0x10/0x10 [ 212.034028][ T9411] do_ip6t_set_ctl+0x689/0xd00 [ 212.034047][ T9411] ? nf_sockopt_find.isra.0+0x222/0x290 [ 212.034068][ T9411] ? nf_sockopt_find.isra.0+0x222/0x290 [ 212.034092][ T9411] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 212.034112][ T9411] ? __mutex_unlock_slowpath+0x35d/0x930 [ 212.034148][ T9411] ? futex_wake+0x220/0x5e0 [ 212.034176][ T9411] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.034210][ T9411] ? nf_sockopt_find.isra.0+0x222/0x290 [ 212.034233][ T9411] nf_setsockopt+0x8d/0xf0 [ 212.034262][ T9411] ipv6_setsockopt+0x135/0x170 [ 212.034290][ T9411] udpv6_setsockopt+0x64/0xb0 [ 212.034314][ T9411] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 212.034341][ T9411] do_sock_setsockopt+0xf3/0x1d0 [ 212.034437][ T9411] __sys_setsockopt+0x195/0x220 [ 212.034475][ T9411] __x64_sys_setsockopt+0xbd/0x160 [ 212.034496][ T9411] ? do_syscall_64+0xae/0x790 [ 212.034518][ T9411] ? lockdep_hardirqs_on+0x7d/0x110 [ 212.034542][ T9411] do_syscall_64+0x123/0x790 [ 212.034576][ T9411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.034597][ T9411] RIP: 0033:0x7f969379e159 [ 212.034615][ T9411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.034631][ T9411] RSP: 002b:00007f96945d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.034649][ T9411] RAX: ffffffffffffffda RBX: 00007f9693a25fa0 RCX: 00007f969379e159 [ 212.034662][ T9411] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 212.034673][ T9411] RBP: 00007f969383503b R08: 00000000000003e0 R09: 0000000000000000 [ 212.034684][ T9411] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 212.034694][ T9411] R13: 00007f9693a26038 R14: 00007f9693a25fa0 R15: 00007ffd338aafa8 [ 212.034717][ T9411] [ 212.042157][ T9411] xt_helper: cannot load conntrack support for proto=10 [ 212.087731][ T43] audit: type=1400 audit(1789435222.628:815): avc: denied { read write } for pid=9415 comm="syz.3.896" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 212.088298][ T43] audit: type=1400 audit(1789435222.628:816): avc: denied { open } for pid=9415 comm="syz.3.896" path="/61/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 212.287041][ T9429] jffs2: notice: (9429) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 212.305361][ T9433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.899'. [ 212.311456][ T43] audit: type=1400 audit(1789435222.848:817): avc: denied { write } for pid=9425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.332323][ T9435] team0: Port device vlan3 added [ 212.391108][ T43] audit: type=1400 audit(1789435222.928:818): avc: denied { write } for pid=9443 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.412390][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 212.412423][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 212.579914][ T9470] random: crng reseeded on system resumption [ 212.608710][ T43] audit: type=1400 audit(1789435223.148:819): avc: denied { write } for pid=9467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.620150][ T9471] bond1: Unable to set up delay as MII monitoring is disabled [ 212.625064][ T9471] bond1 (unregistering): Released all slaves [ 212.645998][ T9470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.680512][ T43] audit: type=1400 audit(1789435223.218:820): avc: denied { write } for pid=9481 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.721450][ T9483] vlan4: entered promiscuous mode [ 212.721540][ T9483] hsr0: entered promiscuous mode [ 212.721713][ T9483] vlan4: entered allmulticast mode [ 212.721720][ T9483] hsr0: entered allmulticast mode [ 212.721726][ T9483] hsr_slave_0: entered allmulticast mode [ 212.721734][ T9483] hsr_slave_1: entered allmulticast mode [ 212.742090][ T43] audit: type=1400 audit(1789435223.278:821): avc: denied { bind } for pid=9490 comm="syz.3.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.803158][ T43] audit: type=1400 audit(1789435223.338:822): avc: denied { write } for pid=9494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.820956][ T9503] warning: `syz.3.920' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 213.404017][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 213.616166][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 213.818768][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 214.090126][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 214.327023][ T9621] FAULT_INJECTION: forcing a failure. [ 214.327023][ T9621] name fail_futex, interval 1, probability 0, space 0, times 0 [ 214.327057][ T9621] CPU: 0 UID: 0 PID: 9621 Comm: syz.0.947 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.327082][ T9621] Tainted: [L]=SOFTLOCKUP [ 214.327087][ T9621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.327097][ T9621] Call Trace: [ 214.327103][ T9621] [ 214.327111][ T9621] dump_stack_lvl+0x100/0x190 [ 214.327142][ T9621] should_fail_ex.cold+0x5/0xa [ 214.327167][ T9621] get_futex_key+0x1d0/0x14f0 [ 214.327195][ T9621] ? __pfx_get_futex_key+0x10/0x10 [ 214.327215][ T9621] ? __fsnotify_parent+0x2b4/0xd00 [ 214.327250][ T9621] futex_wake+0xf4/0x5e0 [ 214.327282][ T9621] ? __pfx_futex_wake+0x10/0x10 [ 214.327311][ T9621] ? vfs_write+0x914/0x1050 [ 214.327352][ T9621] ? vfs_write+0x15d/0x1050 [ 214.327377][ T9621] do_futex+0x2b2/0x440 [ 214.327405][ T9621] ? __pfx_do_futex+0x10/0x10 [ 214.327438][ T9621] __x64_sys_futex+0x34f/0x4d0 [ 214.327463][ T9621] ? fput+0x7c/0x100 [ 214.327488][ T9621] ? __pfx___x64_sys_futex+0x10/0x10 [ 214.327517][ T9621] ? ksys_write+0x1ac/0x250 [ 214.327535][ T9621] ? __pfx_ksys_write+0x10/0x10 [ 214.327559][ T9621] do_syscall_64+0x123/0x790 [ 214.327584][ T9621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.327603][ T9621] RIP: 0033:0x7fc500b9e159 [ 214.327619][ T9621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.327638][ T9621] RSP: 002b:00007fc4fedf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 214.327657][ T9621] RAX: ffffffffffffffda RBX: 00007fc500e25fa8 RCX: 00007fc500b9e159 [ 214.327670][ T9621] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc500e25fac [ 214.327679][ T9621] RBP: 00007fc500e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 214.327688][ T9621] R10: 0000000000000072 R11: 0000000000000246 R12: 0000000000000000 [ 214.327699][ T9621] R13: 00007fc500e26038 R14: 00007ffcb4fa5d50 R15: 00007ffcb4fa5e38 [ 214.327724][ T9621] [ 214.770432][ T9646] FAULT_INJECTION: forcing a failure. [ 214.770432][ T9646] name failslab, interval 1, probability 0, space 0, times 0 [ 214.770467][ T9646] CPU: 3 UID: 0 PID: 9646 Comm: syz.0.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.770491][ T9646] Tainted: [L]=SOFTLOCKUP [ 214.770498][ T9646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.770509][ T9646] Call Trace: [ 214.770515][ T9646] [ 214.770523][ T9646] dump_stack_lvl+0x100/0x190 [ 214.770555][ T9646] should_fail_ex.cold+0x5/0xa [ 214.770582][ T9646] should_failslab+0xc2/0x120 [ 214.770607][ T9646] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 214.770628][ T9646] ? sidtab_sid2str_get+0x84/0x670 [ 214.770652][ T9646] ? sidtab_sid2str_get+0x17a/0x670 [ 214.770681][ T9646] kmemdup_noprof+0x29/0x60 [ 214.770710][ T9646] sidtab_sid2str_get+0x17a/0x670 [ 214.770737][ T9646] security_sid_to_context_core+0x373/0x700 [ 214.770763][ T9646] selinux_inode_init_security+0x477/0x680 [ 214.770789][ T9646] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 214.770814][ T9646] ? __kmalloc_noprof+0x350/0x840 [ 214.770833][ T9646] ? security_inode_init_security+0x113/0x370 [ 214.770885][ T9646] security_inode_init_security+0x1bc/0x370 [ 214.770911][ T9646] ? __pfx_shmem_initxattrs+0x10/0x10 [ 214.770932][ T9646] ? __pfx_security_inode_init_security+0x10/0x10 [ 214.770966][ T9646] shmem_mknod+0x2ce/0x480 [ 214.770992][ T9646] ? __pfx_may_create+0x10/0x10 [ 214.771015][ T9646] ? __pfx_shmem_mknod+0x10/0x10 [ 214.771036][ T9646] ? inode_permission+0x374/0x620 [ 214.771069][ T9646] shmem_mkdir+0x31/0x80 [ 214.771091][ T9646] vfs_mkdir+0x364/0x850 [ 214.771113][ T9646] filename_mkdirat+0x48b/0x5e0 [ 214.771139][ T9646] ? __pfx_filename_mkdirat+0x10/0x10 [ 214.771164][ T9646] ? strncpy_from_user+0x19d/0x2d0 [ 214.771189][ T9646] ? do_getname+0x191/0x390 [ 214.771218][ T9646] __x64_sys_mkdirat+0x89/0xc0 [ 214.771242][ T9646] do_syscall_64+0x123/0x790 [ 214.771271][ T9646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.771289][ T9646] RIP: 0033:0x7fc500b9e159 [ 214.771310][ T9646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.771353][ T9646] RSP: 002b:00007fc4fedf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 214.771370][ T9646] RAX: ffffffffffffffda RBX: 00007fc500e25fa0 RCX: 00007fc500b9e159 [ 214.771381][ T9646] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 214.771391][ T9646] RBP: 00007fc4fedf6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.771400][ T9646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.771408][ T9646] R13: 00007fc500e26038 R14: 00007fc500e25fa0 R15: 00007ffcb4fa5e38 [ 214.771423][ T9646] [ 215.285570][ T9689] overlayfs: failed to resolve './file0/file1': -2 [ 215.872893][ T9715] FAULT_INJECTION: forcing a failure. [ 215.872893][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 215.872923][ T9715] CPU: 2 UID: 0 PID: 9715 Comm: syz.3.977 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.872945][ T9715] Tainted: [L]=SOFTLOCKUP [ 215.872950][ T9715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.872957][ T9715] Call Trace: [ 215.872960][ T9715] [ 215.872965][ T9715] dump_stack_lvl+0x100/0x190 [ 215.872993][ T9715] should_fail_ex.cold+0x5/0xa [ 215.873010][ T9715] should_failslab+0xc2/0x120 [ 215.873042][ T9715] kmem_cache_alloc_noprof+0x92/0x6a0 [ 215.873055][ T9715] ? do_getname_kernel+0x5d/0x250 [ 215.873073][ T9715] do_getname_kernel+0x5d/0x250 [ 215.873090][ T9715] kern_path+0x1f/0x50 [ 215.873105][ T9715] lookup_bdev+0xd8/0x2a0 [ 215.873122][ T9715] ? __pfx_lookup_bdev+0x10/0x10 [ 215.873143][ T9715] bdev_file_open_by_path+0x82/0x330 [ 215.873155][ T9715] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 215.873169][ T9715] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 215.873186][ T9715] ? register_bcache+0x14b/0x4160 [ 215.873210][ T9715] register_bcache+0x178/0x4160 [ 215.873233][ T9715] ? __pfx_register_bcache+0x10/0x10 [ 215.873249][ T9715] ? lock_acquire+0x1d1/0x380 [ 215.873261][ T9715] ? sysfs_file_kobj+0x21/0x290 [ 215.873274][ T9715] ? find_held_lock+0x2b/0x80 [ 215.873290][ T9715] ? sysfs_file_kobj+0xe4/0x290 [ 215.873302][ T9715] ? sysfs_file_kobj+0xe4/0x290 [ 215.873315][ T9715] ? __pfx_register_bcache+0x10/0x10 [ 215.873331][ T9715] kobj_attr_store+0x58/0x80 [ 215.873355][ T9715] ? __pfx_kobj_attr_store+0x10/0x10 [ 215.873379][ T9715] sysfs_kf_write+0xf2/0x150 [ 215.873429][ T9715] kernfs_fop_write_iter+0x3e0/0x5f0 [ 215.873453][ T9715] ? __pfx_sysfs_kf_write+0x10/0x10 [ 215.873476][ T9715] vfs_write+0x6af/0x1050 [ 215.873496][ T9715] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 215.873518][ T9715] ? __pfx_vfs_write+0x10/0x10 [ 215.873533][ T9715] ? find_held_lock+0x2b/0x80 [ 215.873575][ T9715] ksys_write+0x12a/0x250 [ 215.873587][ T9715] ? __pfx_ksys_write+0x10/0x10 [ 215.873603][ T9715] do_syscall_64+0x123/0x790 [ 215.873619][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.873632][ T9715] RIP: 0033:0x7fb57e99e159 [ 215.873642][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.873653][ T9715] RSP: 002b:00007fb57f7c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.873666][ T9715] RAX: ffffffffffffffda RBX: 00007fb57ec25fa0 RCX: 00007fb57e99e159 [ 215.873672][ T9715] RDX: 000000000000000a RSI: 0000200000000400 RDI: 0000000000000003 [ 215.873679][ T9715] RBP: 00007fb57f7c1090 R08: 0000000000000000 R09: 0000000000000000 [ 215.873687][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.873694][ T9715] R13: 00007fb57ec26038 R14: 00007fb57ec25fa0 R15: 00007fff4513e8f8 [ 215.873709][ T9715] [ 215.873755][ T9715] bcache: register_bcache() error : failed to open device [ 216.038540][ T9728] SELinux: syz.1.981 (9728) wrote to user. This is no longer supported. [ 216.214824][ T50] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 216.344724][ T50] usb 8-1: device descriptor read/64, error -71 [ 216.545816][ T7651] nvmet: connect request for invalid subsystem n! [ 216.549090][ T9752] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 216.586910][ T50] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 216.724650][ T50] usb 8-1: device descriptor read/64, error -71 [ 216.771859][ T7651] nvmet: connect request for invalid subsystem n! [ 216.772109][ T9768] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 216.794834][ T8463] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 216.837683][ T50] usb usb8-port1: attempt power cycle [ 216.859211][ T9781] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 216.945110][ T8463] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 216.945145][ T8463] usb 6-1: too many configurations: 188, using maximum allowed: 8 [ 216.946038][ T8463] usb 6-1: config index 0 descriptor too short (expected 32328, got 72) [ 216.948849][ T8463] usb 6-1: config index 1 descriptor too short (expected 32328, got 72) [ 216.952066][ T8463] usb 6-1: config index 2 descriptor too short (expected 32328, got 72) [ 216.953262][ T8463] usb 6-1: config index 3 descriptor too short (expected 32328, got 72) [ 216.954784][ T8463] usb 6-1: config index 4 descriptor too short (expected 32328, got 72) [ 216.959865][ T8463] usb 6-1: config index 5 descriptor too short (expected 32328, got 72) [ 216.960884][ T8463] usb 6-1: config index 6 descriptor too short (expected 32328, got 72) [ 216.964906][ T8463] usb 6-1: config index 7 descriptor too short (expected 32328, got 72) [ 216.967995][ T8463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.968012][ T8463] usb 6-1: Product: syz [ 216.968021][ T8463] usb 6-1: Manufacturer: syz [ 216.968030][ T8463] usb 6-1: SerialNumber: syz [ 217.015922][ T8463] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.231181][ T35] usb 6-1: USB disconnect, device number 5 [ 217.294414][ T50] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 217.315224][ T50] usb 8-1: device descriptor read/8, error -71 [ 217.554362][ T50] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 217.590356][ T50] usb 8-1: device descriptor read/8, error -71 [ 217.694668][ T50] usb usb8-port1: unable to enumerate USB device [ 217.917449][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 217.917468][ T43] audit: type=1400 audit(1789435228.458:848): avc: denied { append } for pid=9814 comm="syz.1.1008" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.943671][ T9815] FAULT_INJECTION: forcing a failure. [ 217.943671][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 217.943697][ T9815] CPU: 3 UID: 0 PID: 9815 Comm: syz.1.1008 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.943716][ T9815] Tainted: [L]=SOFTLOCKUP [ 217.943720][ T9815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.943730][ T9815] Call Trace: [ 217.943735][ T9815] [ 217.943740][ T9815] dump_stack_lvl+0x100/0x190 [ 217.943760][ T9815] should_fail_ex.cold+0x5/0xa [ 217.943776][ T9815] should_failslab+0xc2/0x120 [ 217.943796][ T9815] __kmalloc_cache_noprof+0x91/0x6d0 [ 217.943813][ T9815] ? __do_sys_fanotify_init+0x5c6/0xe30 [ 217.943830][ T9815] __do_sys_fanotify_init+0x5c6/0xe30 [ 217.943847][ T9815] do_syscall_64+0x123/0x790 [ 217.943865][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.943876][ T9815] RIP: 0033:0x7fe69359e159 [ 217.943885][ T9815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.943895][ T9815] RSP: 002b:00007fe694544028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 217.943907][ T9815] RAX: ffffffffffffffda RBX: 00007fe693825fa0 RCX: 00007fe69359e159 [ 217.943914][ T9815] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000f00 [ 217.943920][ T9815] RBP: 00007fe69363503b R08: 0000000000000000 R09: 0000000000000000 [ 217.943927][ T9815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.943933][ T9815] R13: 00007fe693826038 R14: 00007fe693825fa0 R15: 00007ffc95c184b8 [ 217.943947][ T9815] [ 218.035113][ T8463] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 218.035259][ T8463] ath9k_htc: Failed to initialize the device [ 218.035908][ T35] usb 6-1: ath9k_htc: USB layer deinitialized [ 218.142059][ T9828] __nla_validate_parse: 11 callbacks suppressed [ 218.142086][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1013'. [ 218.142712][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1013'. [ 218.890134][ T9821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.890266][ T9821] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 218.893774][ T9821] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 218.904136][ T9821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.904424][ T9821] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 218.909886][ T9821] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 218.917654][ T9821] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.917714][ T9821] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 218.923463][ T9821] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 218.935719][ T9821] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.935756][ T9821] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.958685][ T9821] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 219.118524][ T9860] FAULT_INJECTION: forcing a failure. [ 219.118524][ T9860] name fail_futex, interval 1, probability 0, space 0, times 0 [ 219.118558][ T9860] CPU: 0 UID: 0 PID: 9860 Comm: syz.1.1022 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.118584][ T9860] Tainted: [L]=SOFTLOCKUP [ 219.118591][ T9860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.118602][ T9860] Call Trace: [ 219.118609][ T9860] [ 219.118617][ T9860] dump_stack_lvl+0x100/0x190 [ 219.118651][ T9860] should_fail_ex.cold+0x5/0xa [ 219.118681][ T9860] get_futex_key+0x1d0/0x14f0 [ 219.118708][ T9860] ? __pfx_get_futex_key+0x10/0x10 [ 219.118778][ T9860] futex_wait_setup+0x91/0x540 [ 219.118807][ T9860] __futex_wait+0x19f/0x300 [ 219.118829][ T9860] ? __pfx___futex_wait+0x10/0x10 [ 219.118846][ T9860] ? __pfx_try_to_wake_up+0x10/0x10 [ 219.118870][ T9860] ? futex_hash+0x311/0x400 [ 219.118896][ T9860] ? __pfx_futex_wake_mark+0x10/0x10 [ 219.118941][ T9860] ? find_held_lock+0x2b/0x80 [ 219.118970][ T9860] ? futex_wake+0x4ea/0x5e0 [ 219.119012][ T9860] futex_wait+0xe6/0x370 [ 219.119035][ T9860] ? __pfx_futex_wait+0x10/0x10 [ 219.119063][ T9860] ? rcu_read_lock_any_held+0x6a/0x90 [ 219.119095][ T9860] ? find_held_lock+0x2b/0x80 [ 219.119124][ T9860] ? ksys_write+0x190/0x250 [ 219.119145][ T9860] ? ksys_write+0x190/0x250 [ 219.119170][ T9860] do_futex+0x265/0x440 [ 219.119201][ T9860] ? __pfx_do_futex+0x10/0x10 [ 219.119237][ T9860] __x64_sys_futex+0x34f/0x4d0 [ 219.119271][ T9860] ? __pfx___x64_sys_futex+0x10/0x10 [ 219.119347][ T9860] do_syscall_64+0x123/0x790 [ 219.119384][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.119408][ T9860] RIP: 0033:0x7fe69359e159 [ 219.119571][ T9860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.119598][ T9860] RSP: 002b:00007fe6945440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.119625][ T9860] RAX: ffffffffffffffda RBX: 00007fe693825fa8 RCX: 00007fe69359e159 [ 219.119642][ T9860] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe693825fa8 [ 219.119661][ T9860] RBP: 00007fe693825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 219.119675][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.119688][ T9860] R13: 00007fe693826038 R14: 00007ffc95c183d0 R15: 00007ffc95c184b8 [ 219.119723][ T9860] [ 219.149401][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 219.149421][ T9861] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1024'. [ 219.151255][ T9862] pim6reg1: entered promiscuous mode [ 219.151276][ T9862] pim6reg1: entered allmulticast mode [ 219.263837][ T9869] fuse: Unknown parameter '00000000000000000000003' [ 219.268635][ T9871] fuse: Unknown parameter '00000000000000000000003' [ 219.320938][ T9877] FAULT_INJECTION: forcing a failure. [ 219.320938][ T9877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.320976][ T9877] CPU: 0 UID: 0 PID: 9877 Comm: syz.0.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.321005][ T9877] Tainted: [L]=SOFTLOCKUP [ 219.321013][ T9877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.321025][ T9877] Call Trace: [ 219.321031][ T9877] [ 219.321040][ T9877] dump_stack_lvl+0x100/0x190 [ 219.321076][ T9877] should_fail_ex.cold+0x5/0xa [ 219.321106][ T9877] _copy_to_user+0x32/0xd0 [ 219.321132][ T9877] simple_read_from_buffer+0xcb/0x170 [ 219.321161][ T9877] proc_fail_nth_read+0x1af/0x230 [ 219.321190][ T9877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.321218][ T9877] ? rw_verify_area+0xce/0x6d0 [ 219.321249][ T9877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.321275][ T9877] vfs_read+0x1e4/0xb40 [ 219.321297][ T9877] ? lock_acquire+0x1d1/0x380 [ 219.321318][ T9877] ? __fget_files+0x34/0x3d0 [ 219.321344][ T9877] ? __pfx_vfs_read+0x10/0x10 [ 219.321362][ T9877] ? find_held_lock+0x2b/0x80 [ 219.321390][ T9877] ? __fget_files+0x215/0x3d0 [ 219.321421][ T9877] ? __fget_files+0x21f/0x3d0 [ 219.321455][ T9877] ksys_read+0x12a/0x250 [ 219.321475][ T9877] ? __pfx_ksys_read+0x10/0x10 [ 219.321504][ T9877] do_syscall_64+0x123/0x790 [ 219.321544][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.321567][ T9877] RIP: 0033:0x7fc500b5e98e [ 219.321583][ T9877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.321602][ T9877] RSP: 002b:00007fc4fedf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.321624][ T9877] RAX: ffffffffffffffda RBX: 00007fc4fedf66c0 RCX: 00007fc500b5e98e [ 219.321638][ T9877] RDX: 000000000000000f RSI: 00007fc4fedf60a0 RDI: 0000000000000004 [ 219.321650][ T9877] RBP: 00007fc4fedf6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.321663][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.321675][ T9877] R13: 00007fc500e26038 R14: 00007fc500e25fa0 R15: 00007ffcb4fa5e38 [ 219.321705][ T9877] [ 219.536809][ T9897] FAULT_INJECTION: forcing a failure. [ 219.536809][ T9897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.536845][ T9897] CPU: 1 UID: 0 PID: 9897 Comm: syz.1.1036 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.536872][ T9897] Tainted: [L]=SOFTLOCKUP [ 219.536879][ T9897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.536891][ T9897] Call Trace: [ 219.536897][ T9897] [ 219.536905][ T9897] dump_stack_lvl+0x100/0x190 [ 219.536938][ T9897] should_fail_ex.cold+0x5/0xa [ 219.536966][ T9897] _copy_to_iter+0x5a4/0x1720 [ 219.536990][ T9897] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 219.537022][ T9897] ? __pfx__copy_to_iter+0x10/0x10 [ 219.537046][ T9897] ? __skb_recv_datagram+0x1b2/0x220 [ 219.537071][ T9897] simple_copy_to_iter+0x46/0x90 [ 219.537101][ T9897] __skb_datagram_iter+0x129/0x900 [ 219.537131][ T9897] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 219.537165][ T9897] ? skb_recv_datagram+0x88/0xc0 [ 219.537188][ T9897] skb_copy_datagram_iter+0xa1/0x250 [ 219.537221][ T9897] netlink_recvmsg+0x27e/0xa90 [ 219.537245][ T9897] ? __pfx_netlink_recvmsg+0x10/0x10 [ 219.537264][ T9897] ? is_bpf_text_address+0x94/0x1a0 [ 219.537298][ T9897] ? __pfx_netlink_recvmsg+0x10/0x10 [ 219.537318][ T9897] sock_recvmsg+0x1d5/0x220 [ 219.537348][ T9897] ____sys_recvmsg+0x21e/0x670 [ 219.537380][ T9897] ? __pfx_____sys_recvmsg+0x10/0x10 [ 219.537418][ T9897] ? __lock_acquire+0x5c0/0x1f40 [ 219.537444][ T9897] ___sys_recvmsg+0x16a/0x1a0 [ 219.537475][ T9897] ? __pfx____sys_recvmsg+0x10/0x10 [ 219.537504][ T9897] ? lock_acquire+0x1d1/0x380 [ 219.537543][ T9897] do_recvmmsg+0x2f3/0x740 [ 219.537576][ T9897] ? __pfx_do_recvmmsg+0x10/0x10 [ 219.537606][ T9897] ? lock_acquire+0x1d1/0x380 [ 219.537629][ T9897] ? __mutex_unlock_slowpath+0x35d/0x930 [ 219.537660][ T9897] ? __fget_files+0x21f/0x3d0 [ 219.537691][ T9897] __x64_sys_recvmmsg+0x22a/0x280 [ 219.537717][ T9897] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 219.537751][ T9897] do_syscall_64+0x123/0x790 [ 219.537779][ T9897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.537799][ T9897] RIP: 0033:0x7fe69359e159 [ 219.537816][ T9897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.537834][ T9897] RSP: 002b:00007fe694544028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 219.537855][ T9897] RAX: ffffffffffffffda RBX: 00007fe693825fa0 RCX: 00007fe69359e159 [ 219.537867][ T9897] RDX: 040000000000002e RSI: 0000200000000000 RDI: 0000000000000003 [ 219.537879][ T9897] RBP: 00007fe694544090 R08: 0000000000000000 R09: 0000000000000000 [ 219.537892][ T9897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 219.537903][ T9897] R13: 00007fe693826038 R14: 00007fe693825fa0 R15: 00007ffc95c184b8 [ 219.537930][ T9897] [ 219.685515][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 219.706866][ T43] audit: type=1400 audit(1789435230.248:849): avc: denied { ioctl } for pid=9909 comm="syz.1.1040" path="socket:[36358]" dev="sockfs" ino=36358 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.795963][ T9923] FAULT_INJECTION: forcing a failure. [ 219.795963][ T9923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.795996][ T9923] CPU: 0 UID: 0 PID: 9923 Comm: syz.5.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.796035][ T9923] Tainted: [L]=SOFTLOCKUP [ 219.796041][ T9923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.796051][ T9923] Call Trace: [ 219.796058][ T9923] [ 219.796064][ T9923] dump_stack_lvl+0x100/0x190 [ 219.796095][ T9923] should_fail_ex.cold+0x5/0xa [ 219.796119][ T9923] _copy_from_user+0x2e/0xd0 [ 219.796138][ T9923] copy_mount_options+0x76/0x190 [ 219.796159][ T9923] __x64_sys_mount+0x1ab/0x310 [ 219.796184][ T9923] ? __pfx___x64_sys_mount+0x10/0x10 [ 219.796215][ T9923] do_syscall_64+0x123/0x790 [ 219.796240][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.796257][ T9923] RIP: 0033:0x7f969379e159 [ 219.796272][ T9923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.796286][ T9923] RSP: 002b:00007f96945d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.796305][ T9923] RAX: ffffffffffffffda RBX: 00007f9693a25fa0 RCX: 00007f969379e159 [ 219.796316][ T9923] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 219.796326][ T9923] RBP: 00007f96945d8090 R08: 0000200000000280 R09: 0000000000000000 [ 219.796337][ T9923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.796347][ T9923] R13: 00007f9693a26038 R14: 00007f9693a25fa0 R15: 00007ffd338aafa8 [ 219.796370][ T9923] [ 219.797964][ T9923] overlayfs: missing 'lowerdir' [ 219.836261][ T9927] netlink: 'syz.1.1045': attribute type 10 has an invalid length. [ 219.836284][ T9927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1045'. [ 219.836318][ T9927] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 219.836842][ T9927] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 219.849218][ T9929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1046'. [ 219.860379][ T9927] FAULT_INJECTION: forcing a failure. [ 219.860379][ T9927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.860416][ T9927] CPU: 1 UID: 0 PID: 9927 Comm: syz.1.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.860446][ T9927] Tainted: [L]=SOFTLOCKUP [ 219.860455][ T9927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.860469][ T9927] Call Trace: [ 219.860475][ T9927] [ 219.860490][ T9927] dump_stack_lvl+0x100/0x190 [ 219.860530][ T9927] should_fail_ex.cold+0x5/0xa [ 219.860555][ T9927] ? prepare_alloc_pages+0x16d/0x5b0 [ 219.860587][ T9927] should_fail_alloc_page+0xeb/0x140 [ 219.860619][ T9927] prepare_alloc_pages+0x1f0/0x5b0 [ 219.860649][ T9927] ? stack_trace_save+0x8e/0xc0 [ 219.860675][ T9927] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 219.860705][ T9927] ? reclaim_list_global.part.0+0x7de/0x1a60 [ 219.860732][ T9927] ? kasan_save_stack+0x3f/0x50 [ 219.860754][ T9927] ? kasan_save_stack+0x30/0x50 [ 219.860779][ T9927] ? kasan_save_track+0x14/0x30 [ 219.860800][ T9927] ? kasan_save_free_info+0x3b/0x70 [ 219.860832][ T9927] ? __kasan_slab_free+0x5f/0x80 [ 219.860856][ T9927] ? kmem_cache_free+0x127/0x6c0 [ 219.860885][ T9927] ? reclaim_list_global.part.0+0x7de/0x1a60 [ 219.861006][ T9927] ? purge_vmap_node+0x864/0xb40 [ 219.861023][ T9927] ? __purge_vmap_area_lazy+0x90a/0xc00 [ 219.861045][ T9927] ? _vm_unmap_aliases+0x40e/0x630 [ 219.861064][ T9927] ? change_page_attr_set_clr+0x2b3/0x10f0 [ 219.861088][ T9927] ? set_memory_rox+0xbd/0x110 [ 219.861113][ T9927] ? machine_kexec_prepare+0xbb7/0x1270 [ 219.861132][ T9927] ? do_kexec_load+0x32c/0x810 [ 219.861205][ T9927] ? __x64_sys_kexec_load+0x1bf/0x230 [ 219.861232][ T9927] ? do_syscall_64+0x123/0x790 [ 219.861257][ T9927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.861277][ T9927] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.861330][ T9927] ? __lock_acquire+0x5c0/0x1f40 [ 219.861355][ T9927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.861380][ T9927] ? policy_nodemask+0xed/0x4f0 [ 219.861409][ T9927] alloc_pages_mpol+0x201/0x550 [ 219.861433][ T9927] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 219.861457][ T9927] ? do_raw_spin_lock+0x128/0x260 [ 219.861480][ T9927] ? __pfx___up_read+0x10/0x10 [ 219.861502][ T9927] ? __change_page_attr_set_clr+0xc1e/0x2da0 [ 219.861524][ T9927] ? __change_page_attr_set_clr+0xc1e/0x2da0 [ 219.861542][ T9927] alloc_pages_noprof+0x1a/0x160 [ 219.861559][ T9927] __change_page_attr_set_clr+0x471/0x2da0 [ 219.861580][ T9927] ? find_held_lock+0x2b/0x80 [ 219.861603][ T9927] ? _vm_unmap_aliases+0x42e/0x630 [ 219.861637][ T9927] ? __pfx___change_page_attr_set_clr+0x10/0x10 [ 219.861664][ T9927] ? lock_acquire+0x1d1/0x380 [ 219.861682][ T9927] ? change_page_attr_set_clr+0x33d/0x10f0 [ 219.861711][ T9927] ? __pfx___might_resched+0x10/0x10 [ 219.861730][ T9927] ? _vm_unmap_aliases+0x433/0x630 [ 219.861752][ T9927] ? down_read+0x13b/0x4c0 [ 219.861780][ T9927] ? __pfx_down_read+0x10/0x10 [ 219.861812][ T9927] change_page_attr_set_clr+0x354/0x10f0 [ 219.861889][ T9927] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 219.861914][ T9927] ? find_next_res+0x440/0x510 [ 219.861940][ T9927] ? do_raw_read_unlock+0x3f/0x70 [ 219.861965][ T9927] ? _raw_read_unlock+0x28/0x50 [ 219.861989][ T9927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.862017][ T9927] ? alloc_pages_mpol+0x260/0x550 [ 219.862043][ T9927] set_memory_rox+0xbd/0x110 [ 219.862071][ T9927] ? __pfx_set_memory_rox+0x10/0x10 [ 219.862098][ T9927] ? alloc_pages_noprof+0xf9/0x160 [ 219.862127][ T9927] machine_kexec_prepare+0xbb7/0x1270 [ 219.862149][ T9927] ? kimage_free_page_list+0x185/0x240 [ 219.862171][ T9927] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 219.862197][ T9927] ? __pfx_alloc_pgt_page+0x10/0x10 [ 219.862227][ T9927] do_kexec_load+0x32c/0x810 [ 219.862253][ T9927] ? __pfx_do_kexec_load+0x10/0x10 [ 219.862279][ T9927] ? _copy_from_user+0x59/0xd0 [ 219.862302][ T9927] __x64_sys_kexec_load+0x1bf/0x230 [ 219.862325][ T9927] do_syscall_64+0x123/0x790 [ 219.862351][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.862372][ T9927] RIP: 0033:0x7fe69359e159 [ 219.862389][ T9927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.862406][ T9927] RSP: 002b:00007fe694544028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 219.862423][ T9927] RAX: ffffffffffffffda RBX: 00007fe693825fa0 RCX: 00007fe69359e159 [ 219.862437][ T9927] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 219.862448][ T9927] RBP: 00007fe69363503b R08: 0000000000000000 R09: 0000000000000000 [ 219.862460][ T9927] R10: 0900000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.862471][ T9927] R13: 00007fe693826038 R14: 00007fe693825fa0 R15: 00007ffc95c184b8 [ 219.862494][ T9927] [ 219.924467][ T43] audit: type=1400 audit(1789435230.458:850): avc: denied { read } for pid=9931 comm="syz.5.1047" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 219.924691][ T43] audit: type=1400 audit(1789435230.458:851): avc: denied { open } for pid=9931 comm="syz.5.1047" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 219.937649][ T43] audit: type=1400 audit(1789435230.488:852): avc: denied { write } for pid=9933 comm="syz.1.1048" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 219.939566][ T43] audit: type=1400 audit(1789435230.488:853): avc: denied { create } for pid=9933 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.939604][ T43] audit: type=1400 audit(1789435230.488:854): avc: denied { bind } for pid=9933 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 220.129451][ T43] audit: type=1400 audit(1789435230.668:855): avc: denied { read } for pid=9941 comm="syz.5.1050" path="socket:[36369]" dev="sockfs" ino=36369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.194375][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 220.263442][ T43] audit: type=1400 audit(1789435230.798:856): avc: denied { accept } for pid=9950 comm="syz.5.1053" lport=59014 faddr=2001::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.263910][ T43] audit: type=1400 audit(1789435230.798:857): avc: denied { getopt } for pid=9950 comm="syz.5.1053" lport=59014 faddr=2001::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 220.264172][ T8463] hsr0: entered promiscuous mode [ 220.276924][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1053'. [ 220.283274][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1053'. [ 220.283375][ T9953] hsr_slave_0: left promiscuous mode [ 220.293870][ T9953] hsr_slave_1: left promiscuous mode [ 220.459119][ T9957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1055'. [ 220.510630][ T9959] FAULT_INJECTION: forcing a failure. [ 220.510630][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 220.510669][ T9959] CPU: 3 UID: 0 PID: 9959 Comm: syz.0.1056 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.510697][ T9959] Tainted: [L]=SOFTLOCKUP [ 220.510704][ T9959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.510717][ T9959] Call Trace: [ 220.510725][ T9959] [ 220.510733][ T9959] dump_stack_lvl+0x100/0x190 [ 220.510771][ T9959] should_fail_ex.cold+0x5/0xa [ 220.510799][ T9959] should_failslab+0xc2/0x120 [ 220.510837][ T9959] __kvmalloc_node_noprof+0x113/0x9b0 [ 220.510865][ T9959] ? __pfx___mutex_lock+0x10/0x10 [ 220.510899][ T9959] ? nf_hook_entries_grow+0x255/0x870 [ 220.510929][ T9959] nf_hook_entries_grow+0x255/0x870 [ 220.510952][ T9959] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 220.510998][ T9959] __nf_register_net_hook+0x112/0x780 [ 220.511022][ T9959] nf_register_net_hook+0xdb/0x170 [ 220.511048][ T9959] nf_register_net_hooks+0x5d/0xd0 [ 220.511078][ T9959] nf_defrag_ipv6_enable+0xc1/0x130 [ 220.511110][ T9959] nf_ct_netns_do_get+0x1f9/0x610 [ 220.511136][ T9959] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 220.511179][ T9959] ? xt_find_match+0x1dc/0x280 [ 220.511217][ T9959] nf_ct_netns_get+0x3d/0x160 [ 220.511246][ T9959] helper_mt_check+0x8b/0x150 [ 220.511279][ T9959] ? __pfx_helper_mt_check+0x10/0x10 [ 220.511336][ T9959] xt_check_match+0x117/0x1c0 [ 220.511367][ T9959] find_check_entry.isra.0+0x356/0xa00 [ 220.511402][ T9959] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 220.511438][ T9959] ? kasan_quarantine_put+0x104/0x240 [ 220.511462][ T9959] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.511496][ T9959] ? translate_table+0xbc0/0x1770 [ 220.511518][ T9959] ? translate_table+0xbd8/0x1770 [ 220.511541][ T9959] ? kfree+0x22b/0x6d0 [ 220.511562][ T9959] ? xt_check_table_hooks+0x206/0x330 [ 220.511588][ T9959] translate_table+0xcb9/0x1770 [ 220.511621][ T9959] ? __pfx_translate_table+0x10/0x10 [ 220.511649][ T9959] do_ip6t_set_ctl+0x689/0xd00 [ 220.511670][ T9959] ? nf_sockopt_find.isra.0+0x222/0x290 [ 220.511694][ T9959] ? nf_sockopt_find.isra.0+0x222/0x290 [ 220.511722][ T9959] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 220.511746][ T9959] ? __mutex_unlock_slowpath+0x35d/0x930 [ 220.511776][ T9959] ? futex_wait+0x11e/0x370 [ 220.511793][ T9959] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 220.511832][ T9959] ? nf_sockopt_find.isra.0+0x222/0x290 [ 220.511858][ T9959] nf_setsockopt+0x8d/0xf0 [ 220.511883][ T9959] ipv6_setsockopt+0x135/0x170 [ 220.511909][ T9959] udpv6_setsockopt+0x64/0xb0 [ 220.511931][ T9959] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 220.511958][ T9959] do_sock_setsockopt+0xf3/0x1d0 [ 220.511988][ T9959] __sys_setsockopt+0x195/0x220 [ 220.512016][ T9959] __x64_sys_setsockopt+0xbd/0x160 [ 220.512035][ T9959] ? do_syscall_64+0xae/0x790 [ 220.512061][ T9959] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.512086][ T9959] do_syscall_64+0x123/0x790 [ 220.512110][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.512129][ T9959] RIP: 0033:0x7fc500b9e159 [ 220.512143][ T9959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.512159][ T9959] RSP: 002b:00007fc4fedf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 220.512179][ T9959] RAX: ffffffffffffffda RBX: 00007fc500e25fa0 RCX: 00007fc500b9e159 [ 220.512193][ T9959] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 220.512205][ T9959] RBP: 00007fc500c3503b R08: 00000000000003e0 R09: 0000000000000000 [ 220.512216][ T9959] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 220.512227][ T9959] R13: 00007fc500e26038 R14: 00007fc500e25fa0 R15: 00007ffcb4fa5e38 [ 220.512253][ T9959] [ 220.512407][ T9959] xt_helper: cannot load conntrack support for proto=10 [ 220.649298][ T9961] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 220.681812][ T9961] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 220.717567][ T9961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.746341][ T9961] bridge1: entered promiscuous mode [ 220.753184][ T9961] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 220.914568][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.983595][ T9980] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 220.984141][ T9980] syz_tun: entered promiscuous mode [ 220.990716][ T9980] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 220.994628][ T5738] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.994679][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.995287][ T1476] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 221.154378][ T1476] usb 8-1: Using ep0 maxpacket: 8 [ 221.155093][ T1476] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.158951][ T1476] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.158996][ T1476] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.159025][ T1476] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.159052][ T1476] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.159097][ T1476] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.370321][ T1476] usb 8-1: GET_CAPABILITIES returned 0 [ 221.370373][ T1476] usbtmc 8-1:16.0: can't read capabilities [ 221.425752][ T9998] random: crng reseeded on system resumption [ 221.504687][ T5883] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 221.665319][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 221.665909][ T5883] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 221.668843][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.670756][ T5883] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 221.670770][ T5883] usb 6-1: Product: syz [ 221.670779][ T5883] usb 6-1: Manufacturer: syz [ 221.670787][ T5883] usb 6-1: SerialNumber: syz [ 221.673168][ T5883] usb 6-1: config 0 descriptor?? [ 221.691325][ T5883] keyspan 6-1:0.0: Keyspan 4 port adapter converter detected [ 221.691513][ T5883] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 221.691543][ T5883] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 88 [ 221.692725][ T5883] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 221.712698][ T5883] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 221.726601][ T5883] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 221.728946][ T5883] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 221.737813][ T5883] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 221.739284][ T5883] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 221.741412][ T5883] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 221.748379][ T5883] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 221.882633][ T3272] usb 6-1: USB disconnect, device number 6 [ 221.888597][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.891167][ T3272] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 221.967971][ T3272] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 221.999144][ T3272] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 222.002362][ T3272] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 222.002866][ T3272] keyspan 6-1:0.0: device disconnected [ 222.103529][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.263392][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.275176][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.275323][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.278252][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.280221][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.281960][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.300712][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.366519][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.679598][ T13] bridge_slave_1: left allmulticast mode [ 222.679630][ T13] bridge_slave_1: left promiscuous mode [ 222.679918][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.695887][ T13] bridge_slave_0: left allmulticast mode [ 222.695919][ T13] bridge_slave_0: left promiscuous mode [ 222.696130][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.697412][T10045] ptrace attach of "/syz-executor exec"[10056] was attempted by "/syz-executor exec"[10045] [ 222.981578][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.988786][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.992368][ T13] bond0 (unregistering): Released all slaves [ 222.997223][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.057591][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 223.057609][ T43] audit: type=1400 audit(1789435233.598:873): avc: denied { write } for pid=10066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.079326][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 223.168608][ T43] audit: type=1400 audit(1789435233.708:874): avc: denied { write } for pid=10073 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.319595][ T43] audit: type=1400 audit(1789435233.858:875): avc: denied { write } for pid=10079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.433413][ T43] audit: type=1400 audit(1789435233.978:876): avc: denied { write } for pid=10084 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.489746][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.489776][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.490706][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.490727][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.503978][ T13] veth1_macvtap: left promiscuous mode [ 223.504029][ T13] veth0_macvtap: left promiscuous mode [ 223.504113][ T13] veth1_vlan: left promiscuous mode [ 223.773074][ T35] usb 8-1: USB disconnect, device number 10 [ 223.810042][ T13] team0 (unregistering): Port device team_slave_1 removed [ 223.841289][ T13] team0 (unregistering): Port device team_slave_0 removed [ 224.000601][T10095] __nla_validate_parse: 5 callbacks suppressed [ 224.000617][T10095] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1093'. [ 224.002216][T10024] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.002311][T10024] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.002460][T10024] bridge_slave_0: entered allmulticast mode [ 224.004164][T10024] bridge_slave_0: entered promiscuous mode [ 224.016395][T10024] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.016485][T10024] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.016595][T10024] bridge_slave_1: entered allmulticast mode [ 224.018061][T10024] bridge_slave_1: entered promiscuous mode [ 224.067774][ T43] audit: type=1400 audit(1789435234.608:877): avc: denied { write } for pid=10098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.074661][ T5820] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 224.102433][T10024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.119353][T10024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.162274][T10024] team0: Port device team_slave_0 added [ 224.163602][T10024] team0: Port device team_slave_1 added [ 224.173065][ T43] audit: type=1400 audit(1789435234.708:878): avc: denied { write } for pid=10109 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.213877][T10024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.213893][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.213907][T10024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.231258][T10024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.231272][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.231325][T10024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.232104][ T43] audit: type=1400 audit(1789435234.758:879): avc: denied { map } for pid=10113 comm="syz.1.1097" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 224.245296][ T5820] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.246076][ T5820] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.246091][ T5820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.246101][ T5820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.246122][ T5820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.247303][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.247316][ T5820] usb 5-1: Product: syz [ 224.247324][ T5820] usb 5-1: Manufacturer: syz [ 224.252578][ T5820] cdc_wdm 5-1:1.0: skipping garbage [ 224.252591][ T5820] cdc_wdm 5-1:1.0: skipping garbage [ 224.258299][ T5820] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 224.258323][ T5820] cdc_wdm 5-1:1.0: Unknown control protocol [ 224.340607][T10024] hsr_slave_0: entered promiscuous mode [ 224.344784][T10024] hsr_slave_1: entered promiscuous mode [ 224.354695][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.354786][ T66] Bluetooth: hci0: command tx timeout [ 224.436937][ T43] audit: type=1400 audit(1789435234.978:880): avc: denied { write } for pid=10119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.472303][ T43] audit: type=1400 audit(1789435235.018:881): avc: denied { read write } for pid=10091 comm="syz.0.1091" name="cdc-wdm0" dev="devtmpfs" ino=3108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 224.472358][ T43] audit: type=1400 audit(1789435235.018:882): avc: denied { open } for pid=10091 comm="syz.0.1091" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 224.514556][ T5820] usb 5-1: USB disconnect, device number 5 [ 224.679385][T10138] FAULT_INJECTION: forcing a failure. [ 224.679385][T10138] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.679422][T10138] CPU: 2 UID: 0 PID: 10138 Comm: syz.3.1104 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.679452][T10138] Tainted: [L]=SOFTLOCKUP [ 224.679460][T10138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.679470][T10138] Call Trace: [ 224.679478][T10138] [ 224.679504][T10138] dump_stack_lvl+0x100/0x190 [ 224.679541][T10138] should_fail_ex.cold+0x5/0xa [ 224.679571][T10138] get_futex_key+0x1d0/0x14f0 [ 224.679600][T10138] ? __pfx_get_futex_key+0x10/0x10 [ 224.679623][T10138] ? __fsnotify_parent+0x2b4/0xd00 [ 224.679671][T10138] futex_wake+0xf4/0x5e0 [ 224.679711][T10138] ? __pfx_futex_wake+0x10/0x10 [ 224.679746][T10138] ? vfs_write+0x914/0x1050 [ 224.679765][T10138] ? vfs_write+0x15d/0x1050 [ 224.679791][T10138] do_futex+0x2b2/0x440 [ 224.679818][T10138] ? __pfx_do_futex+0x10/0x10 [ 224.679853][T10138] __x64_sys_futex+0x34f/0x4d0 [ 224.679880][T10138] ? fput+0x7c/0x100 [ 224.679904][T10138] ? __pfx___x64_sys_futex+0x10/0x10 [ 224.679932][T10138] ? ksys_write+0x1ac/0x250 [ 224.679951][T10138] ? __pfx_ksys_write+0x10/0x10 [ 224.679983][T10138] do_syscall_64+0x123/0x790 [ 224.680010][T10138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.680037][T10138] RIP: 0033:0x7fb57e99e159 [ 224.680054][T10138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.680074][T10138] RSP: 002b:00007fb57f7c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.680093][T10138] RAX: ffffffffffffffda RBX: 00007fb57ec25fa8 RCX: 00007fb57e99e159 [ 224.680106][T10138] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb57ec25fac [ 224.680119][T10138] RBP: 00007fb57ec25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 224.680131][T10138] R10: 0000000000000072 R11: 0000000000000246 R12: 0000000000000000 [ 224.680143][T10138] R13: 00007fb57ec26038 R14: 00007fff4513e810 R15: 00007fff4513e8f8 [ 224.680169][T10138] [ 224.749283][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 224.749304][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 225.065438][T10164] FAULT_INJECTION: forcing a failure. [ 225.065438][T10164] name failslab, interval 1, probability 0, space 0, times 0 [ 225.065469][T10164] CPU: 1 UID: 0 PID: 10164 Comm: syz.1.1109 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.065494][T10164] Tainted: [L]=SOFTLOCKUP [ 225.065500][T10164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.065511][T10164] Call Trace: [ 225.065517][T10164] [ 225.065525][T10164] dump_stack_lvl+0x100/0x190 [ 225.065574][T10164] should_fail_ex.cold+0x5/0xa [ 225.065602][T10164] should_failslab+0xc2/0x120 [ 225.065626][T10164] __kvmalloc_node_noprof+0x113/0x9b0 [ 225.065647][T10164] ? do_raw_spin_lock+0x128/0x260 [ 225.065670][T10164] ? find_held_lock+0x2b/0x80 [ 225.065695][T10164] ? simple_xattr_alloc+0x6c/0xd0 [ 225.065717][T10164] simple_xattr_alloc+0x6c/0xd0 [ 225.065735][T10164] shmem_initxattrs+0x16a/0x650 [ 225.065761][T10164] security_inode_init_security+0x242/0x370 [ 225.065788][T10164] ? __pfx_shmem_initxattrs+0x10/0x10 [ 225.065809][T10164] ? __pfx_security_inode_init_security+0x10/0x10 [ 225.065843][T10164] shmem_mknod+0x2ce/0x480 [ 225.065861][T10164] ? __pfx_may_create+0x10/0x10 [ 225.065885][T10164] ? __pfx_shmem_mknod+0x10/0x10 [ 225.065912][T10164] ? inode_permission+0x374/0x620 [ 225.065943][T10164] shmem_mkdir+0x31/0x80 [ 225.065965][T10164] vfs_mkdir+0x364/0x850 [ 225.065986][T10164] filename_mkdirat+0x48b/0x5e0 [ 225.066013][T10164] ? __pfx_filename_mkdirat+0x10/0x10 [ 225.066036][T10164] ? strncpy_from_user+0x19d/0x2d0 [ 225.066060][T10164] ? do_getname+0x191/0x390 [ 225.066086][T10164] __x64_sys_mkdirat+0x89/0xc0 [ 225.066109][T10164] do_syscall_64+0x123/0x790 [ 225.066135][T10164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.066153][T10164] RIP: 0033:0x7fe69359e159 [ 225.066168][T10164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.066185][T10164] RSP: 002b:00007fe694544028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 225.066203][T10164] RAX: ffffffffffffffda RBX: 00007fe693825fa0 RCX: 00007fe69359e159 [ 225.066215][T10164] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 225.066226][T10164] RBP: 00007fe694544090 R08: 0000000000000000 R09: 0000000000000000 [ 225.066237][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.066247][T10164] R13: 00007fe693826038 R14: 00007fe693825fa0 R15: 00007ffc95c184b8 [ 225.066272][T10164] [ 225.085957][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 225.129367][T10167] netlink: 416 bytes leftover after parsing attributes in process `syz.0.1112'. [ 225.164308][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 225.270888][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.343572][T10181] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 225.351764][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 225.351837][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 225.407413][ T5812] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 225.452840][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 225.479575][T10181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.498324][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.548003][T10195] IPv6: sit1: Disabled Multicast RS [ 225.548921][T10195] sit1: entered allmulticast mode [ 225.738944][ T66] Bluetooth: hci4: unexpected event for opcode 0x0c14 [ 226.029047][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.217416][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.315088][T10024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.327014][T10024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.327856][T10024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.342462][T10024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.343593][T10024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.374126][T10024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.376366][T10024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.386589][T10024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.434408][ T66] Bluetooth: hci0: command tx timeout [ 226.601622][ T13] bridge_slave_1: left allmulticast mode [ 226.601653][ T13] bridge_slave_1: left promiscuous mode [ 226.601849][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.613518][ T13] bridge_slave_0: left allmulticast mode [ 226.613542][ T13] bridge_slave_0: left promiscuous mode [ 226.613741][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.886301][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.890267][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.891479][ T13] bond0 (unregistering): Released all slaves [ 226.935395][T10246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.999672][T10024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.014796][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.020547][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.023745][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.025972][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.026466][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.163827][T10024] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.176252][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.176306][ T720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.187370][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.187418][ T720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.341068][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 227.426316][ T13] hsr_slave_0: left promiscuous mode [ 227.428138][ T13] hsr_slave_1: left promiscuous mode [ 227.428871][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.428888][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.457218][ T13] veth1_macvtap: left promiscuous mode [ 227.457266][ T13] veth0_macvtap: left promiscuous mode [ 227.457362][ T13] veth1_vlan: left promiscuous mode [ 227.457450][ T13] veth0_vlan: left promiscuous mode [ 227.529966][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1136'. [ 227.530501][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1136'. [ 227.752180][ T13] team0 (unregistering): Port device team_slave_1 removed [ 227.770997][ T13] team0 (unregistering): Port device team_slave_0 removed [ 228.092407][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 228.092427][ T43] audit: type=1400 audit(1789435238.628:902): avc: denied { write } for pid=10282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.233764][ T43] audit: type=1400 audit(1789435238.768:903): avc: denied { write } for pid=10291 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.326669][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 228.342068][T10024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.410987][T10251] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.411117][T10251] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.411235][T10251] bridge_slave_0: entered allmulticast mode [ 228.412901][T10251] bridge_slave_0: entered promiscuous mode [ 228.425906][T10251] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.425974][T10251] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.426077][T10251] bridge_slave_1: entered allmulticast mode [ 228.427866][T10251] bridge_slave_1: entered promiscuous mode [ 228.512706][T10251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.520049][T10251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.522545][ T66] Bluetooth: hci0: command tx timeout [ 228.523543][ T43] audit: type=1400 audit(1789435239.068:904): avc: denied { write } for pid=10302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.599892][ T43] audit: type=1400 audit(1789435239.138:905): avc: denied { write } for pid=10305 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.617692][T10251] team0: Port device team_slave_0 added [ 228.620785][T10251] team0: Port device team_slave_1 added [ 228.706630][T10251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.706645][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.706662][T10251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.793776][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.811487][T10251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.811501][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.811515][T10251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.866776][T10024] veth0_vlan: entered promiscuous mode [ 228.937262][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.939007][ T43] audit: type=1400 audit(1789435239.478:906): avc: denied { write } for pid=10308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.969006][T10251] hsr_slave_0: entered promiscuous mode [ 228.969463][T10251] hsr_slave_1: entered promiscuous mode [ 228.969759][T10251] debugfs: 'hsr0' already exists in 'hsr' [ 228.969771][T10251] Cannot create hsr debugfs directory [ 228.970364][T10024] veth1_vlan: entered promiscuous mode [ 229.015970][ T43] audit: type=1400 audit(1789435239.558:907): avc: denied { write } for pid=10311 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.074731][ T66] Bluetooth: hci2: command tx timeout [ 229.113650][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.177128][T10024] veth0_macvtap: entered promiscuous mode [ 229.257115][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.285479][T10024] veth1_macvtap: entered promiscuous mode [ 229.366480][T10024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.412776][ T43] audit: type=1400 audit(1789435239.948:908): avc: denied { write } for pid=10315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.471432][ T43] audit: type=1400 audit(1789435240.008:909): avc: denied { write } for pid=10318 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.504095][T10024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.522466][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.522565][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.522630][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.522655][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.567093][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 229.746913][ T13] bridge_slave_1: left allmulticast mode [ 229.746940][ T13] bridge_slave_1: left promiscuous mode [ 229.747702][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.754087][ T13] bridge_slave_0: left allmulticast mode [ 229.754117][ T13] bridge_slave_0: left promiscuous mode [ 229.755780][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.928750][ T13] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 229.940565][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.942255][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.943158][ T13] bond0 (unregistering): Released all slaves [ 229.949679][ T13] bond1 (unregistering): Released all slaves [ 229.961100][ T13] bond2 (unregistering): Released all slaves [ 229.990836][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.990861][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.036356][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.036372][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.092503][ T43] audit: type=1400 audit(1789435240.638:910): avc: denied { write } for pid=10321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.120890][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'. [ 230.235035][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.235494][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.240629][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.240851][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.241011][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.241157][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.241300][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.241447][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.243972][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.246029][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.249867][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.250129][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.250363][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.250579][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.253173][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.253407][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.255193][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.255686][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.256183][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.256568][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.256810][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.256987][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.257100][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.257334][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.257542][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.257720][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.257880][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.262525][ T43] audit: type=1400 audit(1789435240.798:911): avc: denied { write } for pid=10328 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.262579][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.262772][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.262895][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.263162][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.265758][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.265931][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.266053][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.266172][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.266283][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.266394][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.266515][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.266627][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.266735][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.266841][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.266945][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.267061][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.267165][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.267305][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.268772][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.271200][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.271369][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.271507][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.271623][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.271740][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.271855][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.272029][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.272263][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.272395][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.272514][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.272624][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.275949][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.276705][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.276887][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.277028][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.279404][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.279551][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.279662][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.280226][T10331] program syz.2.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.335025][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11 [ 230.362324][T10330] ip6_vti0: entered promiscuous mode [ 230.592266][ T13] hsr_slave_0: left promiscuous mode [ 230.594964][ T66] Bluetooth: hci0: command tx timeout [ 230.597446][ T13] hsr_slave_1: left promiscuous mode [ 230.598302][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.598323][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.612119][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.612134][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.628490][ T13] veth1_macvtap: left promiscuous mode [ 230.628526][ T13] veth0_macvtap: left promiscuous mode [ 230.628634][ T13] veth1_vlan: left promiscuous mode [ 230.782983][ T13] team0 (unregistering): Port device vlan3 removed [ 230.805014][T10352] FAULT_INJECTION: forcing a failure. [ 230.805014][T10352] name fail_futex, interval 1, probability 0, space 0, times 0 [ 230.805045][T10352] CPU: 1 UID: 0 PID: 10352 Comm: syz.2.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.805070][T10352] Tainted: [L]=SOFTLOCKUP [ 230.805077][T10352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.805088][T10352] Call Trace: [ 230.805094][T10352] [ 230.805101][T10352] dump_stack_lvl+0x100/0x190 [ 230.805146][T10352] should_fail_ex.cold+0x5/0xa [ 230.805173][T10352] get_futex_key+0x1d0/0x14f0 [ 230.805198][T10352] ? __pfx_get_futex_key+0x10/0x10 [ 230.805229][T10352] futex_wait_setup+0x91/0x540 [ 230.805255][T10352] __futex_wait+0x19f/0x300 [ 230.805273][T10352] ? __pfx___futex_wait+0x10/0x10 [ 230.805287][T10352] ? __pfx_try_to_wake_up+0x10/0x10 [ 230.805307][T10352] ? futex_hash+0x311/0x400 [ 230.805332][T10352] ? __pfx_futex_wake_mark+0x10/0x10 [ 230.805363][T10352] ? find_held_lock+0x2b/0x80 [ 230.805396][T10352] ? futex_wake+0x4ea/0x5e0 [ 230.805432][T10352] futex_wait+0xe6/0x370 [ 230.805453][T10352] ? __pfx_futex_wait+0x10/0x10 [ 230.805478][T10352] ? rcu_read_lock_any_held+0x6a/0x90 [ 230.805506][T10352] ? find_held_lock+0x2b/0x80 [ 230.805530][T10352] ? ksys_write+0x190/0x250 [ 230.805554][T10352] ? ksys_write+0x190/0x250 [ 230.805576][T10352] do_futex+0x265/0x440 [ 230.805602][T10352] ? __pfx_do_futex+0x10/0x10 [ 230.805636][T10352] __x64_sys_futex+0x34f/0x4d0 [ 230.805662][T10352] ? __pfx___x64_sys_futex+0x10/0x10 [ 230.805693][T10352] do_syscall_64+0x123/0x790 [ 230.805726][T10352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.805745][T10352] RIP: 0033:0x7f932579e159 [ 230.805763][T10352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.805782][T10352] RSP: 002b:00007f93267040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.805803][T10352] RAX: ffffffffffffffda RBX: 00007f9325a25fa8 RCX: 00007f932579e159 [ 230.805814][T10352] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9325a25fa8 [ 230.805825][T10352] RBP: 00007f9325a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 230.805838][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.805850][T10352] R13: 00007f9325a26038 R14: 00007ffd9742f9f0 R15: 00007ffd9742fad8 [ 230.805873][T10352] [ 230.962056][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 231.042057][ T13] team0 (unregistering): Port device team_slave_1 removed [ 231.057210][ T13] team0 (unregistering): Port device team_slave_0 removed [ 231.144343][ T35] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 231.164421][ T66] Bluetooth: hci2: command tx timeout [ 231.228896][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 231.229115][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 231.327691][ T35] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 231.328901][ T35] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 231.328922][ T35] usb 8-1: config 1 has no interface number 0 [ 231.332913][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.332932][ T35] usb 8-1: Product: syz [ 231.332944][ T35] usb 8-1: Manufacturer: syz [ 231.332955][ T35] usb 8-1: SerialNumber: syz [ 231.351566][ T35] usb 8-1: 3:1 : does not exist [ 231.351586][ T35] usb 8-1: 3:2 : does not exist [ 231.499314][T10375] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 231.983089][T10356] syzkaller0: entered promiscuous mode [ 231.983103][T10356] syzkaller0: entered allmulticast mode [ 231.995006][T10356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.995327][T10356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.002232][T10376] cgroup: fork rejected by pids controller in /syz2 [ 232.051130][T10251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.061241][T10251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.062979][T10251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.067593][T10251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.068121][T10251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.086225][T10251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.086897][T10251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.092879][T10251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.205492][T10251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.218370][ T1476] usb 8-1: USB disconnect, device number 11 [ 232.226278][T10251] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.240212][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.240320][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.255643][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.255715][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.672931][T10251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.859950][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'. [ 233.041222][T10488] FAULT_INJECTION: forcing a failure. [ 233.041222][T10488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.041257][T10488] CPU: 3 UID: 0 PID: 10488 Comm: syz.2.1157 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.041274][T10488] Tainted: [L]=SOFTLOCKUP [ 233.041278][T10488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.041285][T10488] Call Trace: [ 233.041290][T10488] [ 233.041296][T10488] dump_stack_lvl+0x100/0x190 [ 233.041320][T10488] should_fail_ex.cold+0x5/0xa [ 233.041335][T10488] ? prepare_alloc_pages+0x16d/0x5b0 [ 233.041353][T10488] should_fail_alloc_page+0xeb/0x140 [ 233.041371][T10488] prepare_alloc_pages+0x1f0/0x5b0 [ 233.041386][T10488] ? unwind_get_return_address+0x59/0xa0 [ 233.041409][T10488] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 233.041430][T10488] ? kfree_skbmem+0x19a/0x210 [ 233.041462][T10488] ? stack_trace_save+0x8e/0xc0 [ 233.041474][T10488] ? __pfx_stack_trace_save+0x10/0x10 [ 233.041484][T10488] ? stack_depot_save_flags+0x27/0x9f0 [ 233.041500][T10488] ? __lock_acquire+0x5c0/0x1f40 [ 233.041514][T10488] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.041524][T10488] ? kfree_skbmem+0x19a/0x210 [ 233.041540][T10488] ? kasan_save_stack+0x3f/0x50 [ 233.041780][T10488] ? kasan_save_track+0x14/0x30 [ 233.041810][T10488] ? kasan_save_free_info+0x3b/0x70 [ 233.041830][T10488] ? __kasan_slab_free+0x5f/0x80 [ 233.041845][T10488] ? kmem_cache_free+0x127/0x6c0 [ 233.041865][T10488] ? kfree_skbmem+0x19a/0x210 [ 233.041885][T10488] ? consume_skb+0xd1/0x110 [ 233.041902][T10488] ? nlmon_xmit+0xa5/0xe0 [ 233.041921][T10488] ? dev_hard_start_xmit+0x121/0x760 [ 233.041934][T10488] ? __dev_queue_xmit+0x1bbf/0x4970 [ 233.041946][T10488] ? netlink_deliver_tap+0xa4d/0xcc0 [ 233.041960][T10488] ? netlink_dump+0x631/0xd00 [ 233.041971][T10488] ? __netlink_dump_start+0x6d6/0x990 [ 233.041984][T10488] ? rtnetlink_rcv_msg+0xb3e/0xe90 [ 233.042001][T10488] ? netlink_rcv_skb+0x159/0x420 [ 233.042015][T10488] ? netlink_unicast+0x585/0x850 [ 233.042029][T10488] ? netlink_sendmsg+0x8b0/0xda0 [ 233.042078][T10488] ? ____sys_sendmsg+0xa4d/0xbe0 [ 233.042097][T10488] ? ___sys_sendmsg+0x190/0x1e0 [ 233.042117][T10488] ? __sys_sendmsg+0x160/0x210 [ 233.042132][T10488] ? do_syscall_64+0x123/0x790 [ 233.042151][T10488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.042174][T10488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.042191][T10488] ? policy_nodemask+0xed/0x4f0 [ 233.042211][T10488] alloc_pages_mpol+0x201/0x550 [ 233.042231][T10488] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 233.042255][T10488] folio_alloc_mpol_noprof+0x36/0x260 [ 233.042279][T10488] vma_alloc_folio_noprof+0xed/0x1d0 [ 233.042304][T10488] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 233.042342][T10488] do_anonymous_page+0xac9/0x2050 [ 233.042377][T10488] ? __pfx_do_anonymous_page+0x10/0x10 [ 233.042403][T10488] ? rcu_read_unlock+0x2d/0xb0 [ 233.042433][T10488] ? rcu_read_unlock+0x2d/0xb0 [ 233.042461][T10488] ? __pte_offset_map+0x179/0x310 [ 233.042489][T10488] __handle_mm_fault+0x1ff3/0x2f60 [ 233.042519][T10488] ? __pfx___handle_mm_fault+0x10/0x10 [ 233.042537][T10488] ? __pfx_mt_find+0x10/0x10 [ 233.042568][T10488] ? find_vma+0xbf/0x140 [ 233.042582][T10488] ? __pfx_find_vma+0x10/0x10 [ 233.042599][T10488] handle_mm_fault+0x363/0xa20 [ 233.042622][T10488] do_user_addr_fault+0x745/0x12f0 [ 233.042647][T10488] exc_page_fault+0x6f/0xd0 [ 233.042666][T10488] asm_exc_page_fault+0x26/0x30 [ 233.042680][T10488] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 233.042695][T10488] Code: 00 e8 d4 d8 e3 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 bc 21 57 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 233.042708][T10488] RSP: 0018:ffffc90003a0f6b0 EFLAGS: 00050246 [ 233.042721][T10488] RAX: 0000000000000001 RBX: 0000000000000e5c RCX: 000000000000031c [ 233.042730][T10488] RDX: 0000000000000001 RSI: ffff88802e7feb40 RDI: 0000200000001000 [ 233.042738][T10488] RBP: ffffc90003a0fbd0 R08: 0000000000000000 R09: ffffed1005cffdcb [ 233.042746][T10488] R10: ffff88802e7fee5b R11: 0000000000000000 R12: ffff88802e7fe000 [ 233.042754][T10488] R13: 0000000000000000 R14: 00002000000004c0 R15: 0000000000000e5c [ 233.042783][T10488] ? __pfx__copy_to_iter+0x10/0x10 [ 233.042800][T10488] ? __skb_recv_datagram+0x1b2/0x220 [ 233.042819][T10488] simple_copy_to_iter+0x46/0x90 [ 233.042841][T10488] __skb_datagram_iter+0x129/0x900 [ 233.042863][T10488] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 233.042886][T10488] ? skb_recv_datagram+0x88/0xc0 [ 233.042902][T10488] skb_copy_datagram_iter+0xa1/0x250 [ 233.042926][T10488] netlink_recvmsg+0x27e/0xa90 [ 233.042947][T10488] ? __pfx_netlink_recvmsg+0x10/0x10 [ 233.043089][T10488] ? is_bpf_text_address+0x94/0x1a0 [ 233.043123][T10488] ? __pfx_netlink_recvmsg+0x10/0x10 [ 233.043142][T10488] sock_recvmsg+0x1d5/0x220 [ 233.043164][T10488] ____sys_recvmsg+0x21e/0x670 [ 233.043195][T10488] ? __pfx_____sys_recvmsg+0x10/0x10 [ 233.043224][T10488] ? __lock_acquire+0x5c0/0x1f40 [ 233.043319][T10488] ___sys_recvmsg+0x16a/0x1a0 [ 233.043342][T10488] ? __pfx____sys_recvmsg+0x10/0x10 [ 233.043364][T10488] ? lock_acquire+0x1d1/0x380 [ 233.043392][T10488] do_recvmmsg+0x2f3/0x740 [ 233.043415][T10488] ? __pfx_do_recvmmsg+0x10/0x10 [ 233.043437][T10488] ? lock_acquire+0x1d1/0x380 [ 233.043453][T10488] ? __mutex_unlock_slowpath+0x35d/0x930 [ 233.043604][T10488] ? __fget_files+0x21f/0x3d0 [ 233.043750][T10488] __x64_sys_recvmmsg+0x22a/0x280 [ 233.043776][T10488] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 233.043804][T10488] do_syscall_64+0x123/0x790 [ 233.043830][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.043845][T10488] RIP: 0033:0x7f932579e159 [ 233.043858][T10488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.043871][T10488] RSP: 002b:00007f9326704028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 233.043885][T10488] RAX: ffffffffffffffda RBX: 00007f9325a25fa0 RCX: 00007f932579e159 [ 233.043894][T10488] RDX: 040000000000002e RSI: 0000200000000000 RDI: 0000000000000003 [ 233.043904][T10488] RBP: 00007f9326704090 R08: 0000000000000000 R09: 0000000000000000 [ 233.043912][T10488] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 233.043921][T10488] R13: 00007f9325a26038 R14: 00007f9325a25fa0 R15: 00007ffd9742fad8 [ 233.043939][T10488] [ 233.061044][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 233.090739][T10251] veth0_vlan: entered promiscuous mode [ 233.105588][T10251] veth1_vlan: entered promiscuous mode [ 233.145227][T10494] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 233.161302][T10251] veth0_macvtap: entered promiscuous mode [ 233.165795][T10251] veth1_macvtap: entered promiscuous mode [ 233.179566][T10251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.189220][T10251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.193221][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.193367][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.236539][ T5785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.236682][ T5785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.238399][ T66] Bluetooth: hci2: command tx timeout [ 233.292164][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 233.292180][ T43] audit: type=1400 audit(1789435243.828:932): avc: denied { write } for pid=10497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.459618][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.459649][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.499091][ T43] audit: type=1400 audit(1789435244.038:933): avc: denied { write } for pid=10508 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.549894][ T5985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.549919][ T5985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.602201][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12 [ 233.671989][ T43] audit: type=1400 audit(1789435244.208:934): avc: denied { write } for pid=10517 comm="syz.4.1130" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 233.716852][T10520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10520 comm=syz.4.1130 [ 233.755020][ T43] audit: type=1400 audit(1789435244.298:935): avc: denied { write } for pid=10521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.809788][T10526] FAULT_INJECTION: forcing a failure. [ 233.809788][T10526] name failslab, interval 1, probability 0, space 0, times 0 [ 233.809828][T10526] CPU: 1 UID: 0 PID: 10526 Comm: syz.3.1162 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.809855][T10526] Tainted: [L]=SOFTLOCKUP [ 233.809863][T10526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.809874][T10526] Call Trace: [ 233.809881][T10526] [ 233.809889][T10526] dump_stack_lvl+0x100/0x190 [ 233.809924][T10526] should_fail_ex.cold+0x5/0xa [ 233.809953][T10526] should_failslab+0xc2/0x120 [ 233.810008][T10526] kmem_cache_alloc_noprof+0x92/0x6a0 [ 233.810031][T10526] ? do_getname+0x35/0x390 [ 233.810063][T10526] do_getname+0x35/0x390 [ 233.810094][T10526] user_path_at+0x26/0x60 [ 233.810118][T10526] __x64_sys_mount+0x1fb/0x310 [ 233.810148][T10526] ? __pfx___x64_sys_mount+0x10/0x10 [ 233.810184][T10526] do_syscall_64+0x123/0x790 [ 233.810214][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.810234][T10526] RIP: 0033:0x7fb57e99e159 [ 233.810252][T10526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.810271][T10526] RSP: 002b:00007fb57f7c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 233.810292][T10526] RAX: ffffffffffffffda RBX: 00007fb57ec25fa0 RCX: 00007fb57e99e159 [ 233.810305][T10526] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 233.810318][T10526] RBP: 00007fb57f7c1090 R08: 0000200000000280 R09: 0000000000000000 [ 233.810330][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.810342][T10526] R13: 00007fb57ec26038 R14: 00007fb57ec25fa0 R15: 00007fff4513e8f8 [ 233.810368][T10526] [ 233.846556][ T43] audit: type=1400 audit(1789435244.388:936): avc: denied { write } for pid=10527 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.928466][T10530] netlink: 'syz.2.1164': attribute type 10 has an invalid length. [ 233.928486][T10530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1164'. [ 234.007080][T10530] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 234.007625][T10530] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 234.011370][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13 [ 234.140077][ T43] audit: type=1400 audit(1789435244.678:937): avc: denied { write } for pid=10535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.201011][T10545] netlink: 'syz.3.1168': attribute type 29 has an invalid length. [ 234.231589][ T43] audit: type=1400 audit(1789435244.768:938): avc: denied { write } for pid=10543 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.452536][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 234.497784][T10553] hfs: can't find a HFS filesystem on dev sr0 [ 234.542830][ T43] audit: type=1400 audit(1789435245.078:939): avc: denied { write } for pid=10556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.561875][T10560] FAULT_INJECTION: forcing a failure. [ 234.561875][T10560] name failslab, interval 1, probability 0, space 0, times 0 [ 234.561912][T10560] CPU: 2 UID: 0 PID: 10560 Comm: syz.2.1173 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.561944][T10560] Tainted: [L]=SOFTLOCKUP [ 234.561952][T10560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.561965][T10560] Call Trace: [ 234.561972][T10560] [ 234.561981][T10560] dump_stack_lvl+0x100/0x190 [ 234.562052][T10560] should_fail_ex.cold+0x5/0xa [ 234.562085][T10560] should_failslab+0xc2/0x120 [ 234.562113][T10560] __kvmalloc_node_noprof+0x113/0x9b0 [ 234.562136][T10560] ? __pfx___mutex_lock+0x10/0x10 [ 234.562163][T10560] ? nf_hook_entries_grow+0x255/0x870 [ 234.562191][T10560] nf_hook_entries_grow+0x255/0x870 [ 234.562212][T10560] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 234.562262][T10560] __nf_register_net_hook+0x112/0x780 [ 234.562292][T10560] nf_register_net_hook+0xdb/0x170 [ 234.562318][T10560] nf_register_net_hooks+0x5d/0xd0 [ 234.562347][T10560] nf_ct_netns_do_get+0x225/0x610 [ 234.562371][T10560] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 234.562398][T10560] ? xt_find_match+0x1dc/0x280 [ 234.562430][T10560] nf_ct_netns_get+0x3d/0x160 [ 234.562455][T10560] helper_mt_check+0x8b/0x150 [ 234.562483][T10560] ? __pfx_helper_mt_check+0x10/0x10 [ 234.562511][T10560] xt_check_match+0x117/0x1c0 [ 234.562538][T10560] find_check_entry.isra.0+0x356/0xa00 [ 234.562568][T10560] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 234.562600][T10560] ? kasan_quarantine_put+0x104/0x240 [ 234.562621][T10560] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.562648][T10560] ? translate_table+0xbc0/0x1770 [ 234.562668][T10560] ? translate_table+0xbd8/0x1770 [ 234.562690][T10560] ? kfree+0x22b/0x6d0 [ 234.562716][T10560] ? xt_check_table_hooks+0x206/0x330 [ 234.562743][T10560] translate_table+0xcb9/0x1770 [ 234.562777][T10560] ? __pfx_translate_table+0x10/0x10 [ 234.562815][T10560] do_ip6t_set_ctl+0x689/0xd00 [ 234.562836][T10560] ? nf_sockopt_find.isra.0+0x222/0x290 [ 234.562863][T10560] ? nf_sockopt_find.isra.0+0x222/0x290 [ 234.562892][T10560] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 234.562916][T10560] ? __mutex_unlock_slowpath+0x35d/0x930 [ 234.562946][T10560] ? futex_wake+0x220/0x5e0 [ 234.562978][T10560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 234.563016][T10560] ? nf_sockopt_find.isra.0+0x222/0x290 [ 234.563044][T10560] nf_setsockopt+0x8d/0xf0 [ 234.563072][T10560] ipv6_setsockopt+0x135/0x170 [ 234.563098][T10560] udpv6_setsockopt+0x64/0xb0 [ 234.563125][T10560] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 234.563156][T10560] do_sock_setsockopt+0xf3/0x1d0 [ 234.563186][T10560] __sys_setsockopt+0x195/0x220 [ 234.563215][T10560] __x64_sys_setsockopt+0xbd/0x160 [ 234.563268][T10560] ? do_syscall_64+0xae/0x790 [ 234.563293][T10560] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.563318][T10560] do_syscall_64+0x123/0x790 [ 234.563348][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.563367][T10560] RIP: 0033:0x7f932579e159 [ 234.563385][T10560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.563405][T10560] RSP: 002b:00007f9326704028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 234.563426][T10560] RAX: ffffffffffffffda RBX: 00007f9325a25fa0 RCX: 00007f932579e159 [ 234.563439][T10560] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 234.563451][T10560] RBP: 00007f932583503b R08: 00000000000003e0 R09: 0000000000000000 [ 234.563462][T10560] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 234.563473][T10560] R13: 00007f9325a26038 R14: 00007f9325a25fa0 R15: 00007ffd9742fad8 [ 234.563499][T10560] [ 234.565353][T10560] xt_helper: cannot load conntrack support for proto=10 [ 234.688944][ T43] audit: type=1400 audit(1789435245.228:940): avc: denied { write } for pid=10561 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.738072][T10565] tipc: Started in network mode [ 234.738084][T10565] tipc: Node identity 1, cluster identity 4711 [ 234.738091][T10565] tipc: Node number set to 1 [ 234.826425][ T43] audit: type=1400 audit(1789435245.358:941): avc: denied { write } for pid=10570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.304468][ T7632] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 235.413242][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 235.477516][ T7632] usb 7-1: Using ep0 maxpacket: 8 [ 235.478252][ T7632] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.479310][ T7632] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 235.479352][ T7632] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 235.479374][ T7632] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 235.479393][ T7632] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 235.479415][ T7632] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 235.479434][ T7632] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.479466][ T7632] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.644584][ T5812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.700511][ T7632] usb 7-1: GET_CAPABILITIES returned 0 [ 235.700548][ T7632] usbtmc 7-1:16.0: can't read capabilities [ 235.857869][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.869312][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 235.873286][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.896674][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.898539][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.899350][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.090220][T10588] Console: switching to colour dummy device 80x25 [ 236.150583][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 236.446597][ T5445] 8021q: adding VLAN 0 to HW filter on device eth21 [ 236.503156][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 236.554383][T10588] ------------[ cut here ]------------ [ 236.554398][T10588] Memory manager not clean during takedown. [ 236.554405][T10588] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#3: syz.2.1177/10588 [ 236.564447][T10588] Modules linked in: [ 236.566509][T10588] CPU: 3 UID: 0 PID: 10588 Comm: syz.2.1177 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.570767][T10588] Tainted: [L]=SOFTLOCKUP [ 236.572508][T10588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.577460][T10588] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 236.580151][T10588] Code: 8b 43 38 48 39 c5 75 16 e8 8b b2 38 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e e9 4a bc 00 06 e8 75 b2 38 fc 48 8d 3d ee 25 7d 0b <67> 48 0f b9 3a 48 c7 c0 00 84 65 8e 48 ba 00 00 00 00 00 fc ff df [ 236.588500][T10588] RSP: 0018:ffffc90003a0f798 EFLAGS: 00010283 [ 236.591182][T10588] RAX: 000000000002a43d RBX: ffff8880274c3868 RCX: ffffc9000c001000 [ 236.595646][T10588] RDX: 0000000000080000 RSI: ffffffff85d36a9b RDI: ffffffff91509090 [ 236.599036][T10588] RBP: ffff8880274c38a0 R08: 0000000000000007 R09: 0000000000000000 [ 236.604874][T10588] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880282f4880 [ 236.608193][T10588] R13: ffff8880282f4898 R14: ffffffff85d23ce0 R15: 0000000000000000 [ 236.611601][T10588] FS: 00007f93266e36c0(0000) GS:ffff8880d5e59000(0000) knlGS:0000000000000000 [ 236.612584][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 236.620720][T10588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.623870][T10588] CR2: 00005575e29ff938 CR3: 00000000518f0000 CR4: 0000000000352ef0 [ 236.627178][T10588] Call Trace: [ 236.628959][T10588] [ 236.630311][T10588] ? __pfx_drm_gem_init_release+0x10/0x10 [ 236.632818][T10588] drm_managed_release+0x1bb/0x540 [ 236.635947][T10588] ? __pfx_virtio_gpu_release+0x10/0x10 [ 236.639260][T10588] drm_dev_put.part.0+0xca/0x140 [ 236.642259][T10588] drm_dev_put+0x1f/0x30 [ 236.643792][T10588] virtio_dev_remove+0xb8/0x170 [ 236.645585][T10588] ? __pfx_virtio_dev_remove+0x10/0x10 [ 236.647467][T10588] device_remove+0xcb/0x180 [ 236.649090][T10588] device_release_driver_internal+0x44e/0x620 [ 236.651851][T10588] bus_remove_device+0x2bc/0x560 [ 236.654171][T10588] ? __pfx_bus_remove_device+0x10/0x10 [ 236.657713][T10588] ? __pfx_device_remove_attrs+0x10/0x10 [ 236.661016][T10588] device_del+0x376/0x9b0 [ 236.662704][T10588] ? __pfx_device_del+0x10/0x10 [ 236.664762][T10588] ? __pfx___might_resched+0x10/0x10 [ 236.666739][T10588] ? __pfx_pci_device_is_present+0x10/0x10 [ 236.668825][T10588] device_unregister+0x1d/0xe0 [ 236.670969][T10588] unregister_virtio_device+0x39/0x60 [ 236.673056][T10588] virtio_pci_remove+0x7c/0x110 [ 236.675553][T10588] pci_device_remove+0xb2/0x1d0 [ 236.678815][T10588] ? __pfx_pci_device_remove+0x10/0x10 [ 236.682397][T10588] device_remove+0xcb/0x180 [ 236.684997][T10588] device_release_driver_internal+0x44e/0x620 [ 236.687167][T10588] pci_stop_bus_device+0x120/0x160 [ 236.689025][T10588] pci_stop_and_remove_bus_device+0x58/0xa0 [ 236.691613][T10588] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 236.695079][T10588] remove_store+0x123/0x140 [ 236.697569][T10588] ? __pfx_remove_store+0x10/0x10 [ 236.699737][T10588] ? find_held_lock+0x2b/0x80 [ 236.701533][T10588] ? sysfs_file_kobj+0xe4/0x290 [ 236.703788][T10588] ? sysfs_file_kobj+0xe4/0x290 [ 236.706190][T10588] ? __pfx_remove_store+0x10/0x10 [ 236.707836][T10588] dev_attr_store+0x58/0x80 [ 236.710071][T10588] ? __pfx_dev_attr_store+0x10/0x10 [ 236.712320][T10588] sysfs_kf_write+0xf2/0x150 [ 236.714561][T10588] kernfs_fop_write_iter+0x3e0/0x5f0 [ 236.716982][T10588] ? __pfx_sysfs_kf_write+0x10/0x10 [ 236.719450][T10588] vfs_write+0x6af/0x1050 [ 236.722109][T10588] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 236.725998][T10588] ? __pfx_vfs_write+0x10/0x10 [ 236.727965][T10588] ? find_held_lock+0x2b/0x80 [ 236.729660][T10588] ksys_write+0x12a/0x250 [ 236.731327][T10588] ? __pfx_ksys_write+0x10/0x10 [ 236.733247][T10588] do_syscall_64+0x123/0x790 [ 236.735552][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.737764][T10588] RIP: 0033:0x7f932579e159 [ 236.739945][T10588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.749791][T10588] RSP: 002b:00007f93266e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.753713][T10588] RAX: ffffffffffffffda RBX: 00007f9325a26090 RCX: 00007f932579e159 [ 236.757979][T10588] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 236.761273][T10588] RBP: 00007f932583503b R08: 0000000000000000 R09: 0000000000000000 [ 236.764912][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.768703][T10588] R13: 00007f9325a26128 R14: 00007f9325a26090 R15: 00007ffd9742fad8 [ 236.773405][T10588] [ 236.774940][T10588] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.777917][T10588] CPU: 3 UID: 0 PID: 10588 Comm: syz.2.1177 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.782537][T10588] Tainted: [L]=SOFTLOCKUP [ 236.784652][T10588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.790222][T10588] Call Trace: [ 236.791794][T10588] [ 236.793056][T10588] dump_stack_lvl+0x100/0x190 [ 236.795098][T10588] vpanic+0x553/0x970 [ 236.796796][T10588] ? __pfx_vpanic+0x10/0x10 [ 236.798709][T10588] panic+0xd1/0xe0 [ 236.800308][T10588] ? __pfx_panic+0x10/0x10 [ 236.802232][T10588] check_panic_on_warn.cold+0x19/0x34 [ 236.804674][T10588] ? drm_mm_takedown+0x62/0x280 [ 236.807416][T10588] __warn.cold+0x191/0x318 [ 236.810017][T10588] __report_bug+0x30f/0x440 [ 236.812087][T10588] ? drm_mm_takedown+0x62/0x280 [ 236.814187][T10588] ? __pfx___report_bug+0x10/0x10 [ 236.816413][T10588] ? device_remove+0xcb/0x180 [ 236.818542][T10588] ? device_release_driver_internal+0x44e/0x620 [ 236.821440][T10588] ? pci_stop_bus_device+0x120/0x160 [ 236.823737][T10588] ? drm_mm_takedown+0x5b/0x280 [ 236.825905][T10588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.828643][T10588] report_bug_entry+0xe2/0x290 [ 236.831063][T10588] ? drm_mm_takedown+0x62/0x280 [ 236.833388][T10588] handle_bug+0x1cd/0x2a0 [ 236.835352][T10588] exc_invalid_op+0x17/0x50 [ 236.837257][T10588] asm_exc_invalid_op+0x1a/0x20 [ 236.839078][T10588] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 236.841117][T10588] Code: 8b 43 38 48 39 c5 75 16 e8 8b b2 38 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e e9 4a bc 00 06 e8 75 b2 38 fc 48 8d 3d ee 25 7d 0b <67> 48 0f b9 3a 48 c7 c0 00 84 65 8e 48 ba 00 00 00 00 00 fc ff df [ 236.848342][T10588] RSP: 0018:ffffc90003a0f798 EFLAGS: 00010283 [ 236.850815][T10588] RAX: 000000000002a43d RBX: ffff8880274c3868 RCX: ffffc9000c001000 [ 236.853922][T10588] RDX: 0000000000080000 RSI: ffffffff85d36a9b RDI: ffffffff91509090 [ 236.856449][T10588] RBP: ffff8880274c38a0 R08: 0000000000000007 R09: 0000000000000000 [ 236.859057][T10588] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880282f4880 [ 236.861588][T10588] R13: ffff8880282f4898 R14: ffffffff85d23ce0 R15: 0000000000000000 [ 236.864035][T10588] ? __pfx_drm_gem_init_release+0x10/0x10 [ 236.865826][T10588] ? drm_mm_takedown+0x5b/0x280 [ 236.867388][T10588] ? drm_mm_takedown+0x5b/0x280 [ 236.869057][T10588] ? __pfx_drm_gem_init_release+0x10/0x10 [ 236.871298][T10588] drm_managed_release+0x1bb/0x540 [ 236.873275][T10588] ? __pfx_virtio_gpu_release+0x10/0x10 [ 236.875346][T10588] drm_dev_put.part.0+0xca/0x140 [ 236.876894][T10588] drm_dev_put+0x1f/0x30 [ 236.878237][T10588] virtio_dev_remove+0xb8/0x170 [ 236.879783][T10588] ? __pfx_virtio_dev_remove+0x10/0x10 [ 236.881515][T10588] device_remove+0xcb/0x180 [ 236.882953][T10588] device_release_driver_internal+0x44e/0x620 [ 236.884876][T10588] bus_remove_device+0x2bc/0x560 [ 236.886536][T10588] ? __pfx_bus_remove_device+0x10/0x10 [ 236.888562][T10588] ? __pfx_device_remove_attrs+0x10/0x10 [ 236.890645][T10588] device_del+0x376/0x9b0 [ 236.892098][T10588] ? __pfx_device_del+0x10/0x10 [ 236.893672][T10588] ? __pfx___might_resched+0x10/0x10 [ 236.895392][T10588] ? __pfx_pci_device_is_present+0x10/0x10 [ 236.897223][T10588] device_unregister+0x1d/0xe0 [ 236.898742][T10588] unregister_virtio_device+0x39/0x60 [ 236.900513][T10588] virtio_pci_remove+0x7c/0x110 [ 236.902441][T10588] pci_device_remove+0xb2/0x1d0 [ 236.904507][T10588] ? __pfx_pci_device_remove+0x10/0x10 [ 236.906703][T10588] device_remove+0xcb/0x180 [ 236.908251][T10588] device_release_driver_internal+0x44e/0x620 [ 236.910206][T10588] pci_stop_bus_device+0x120/0x160 [ 236.911859][T10588] pci_stop_and_remove_bus_device+0x58/0xa0 [ 236.913727][T10588] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 236.915843][T10588] remove_store+0x123/0x140 [ 236.917282][T10588] ? __pfx_remove_store+0x10/0x10 [ 236.918873][T10588] ? find_held_lock+0x2b/0x80 [ 236.920380][T10588] ? sysfs_file_kobj+0xe4/0x290 [ 236.921929][T10588] ? sysfs_file_kobj+0xe4/0x290 [ 236.923462][T10588] ? __pfx_remove_store+0x10/0x10 [ 236.925067][T10588] dev_attr_store+0x58/0x80 [ 236.926662][T10588] ? __pfx_dev_attr_store+0x10/0x10 [ 236.929027][T10588] sysfs_kf_write+0xf2/0x150 [ 236.931158][T10588] kernfs_fop_write_iter+0x3e0/0x5f0 [ 236.932771][T10588] ? __pfx_sysfs_kf_write+0x10/0x10 [ 236.934444][T10588] vfs_write+0x6af/0x1050 [ 236.935903][T10588] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 236.937763][T10588] ? __pfx_vfs_write+0x10/0x10 [ 236.939324][T10588] ? find_held_lock+0x2b/0x80 [ 236.940829][T10588] ksys_write+0x12a/0x250 [ 236.942213][T10588] ? __pfx_ksys_write+0x10/0x10 [ 236.943758][T10588] do_syscall_64+0x123/0x790 [ 236.945239][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.947104][T10588] RIP: 0033:0x7f932579e159 [ 236.948599][T10588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.956363][T10588] RSP: 002b:00007f93266e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.958995][T10588] RAX: ffffffffffffffda RBX: 00007f9325a26090 RCX: 00007f932579e159 [ 236.961527][T10588] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 236.964051][T10588] RBP: 00007f932583503b R08: 0000000000000000 R09: 0000000000000000 [ 236.966535][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.969075][T10588] R13: 00007f9325a26128 R14: 00007f9325a26090 R15: 00007ffd9742fad8 [ 236.971801][T10588] [ 236.973803][T10588] Kernel Offset: disabled [ 236.975130][T10588] Rebooting in 86400 seconds..