last executing test programs: 4m57.88131405s ago: executing program 3 (id=328): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) setuid(0xee01) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x7) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) 4m57.87838876s ago: executing program 3 (id=330): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "7d421435fe8d8e089decf74f82a4385b64bb143fa63a7ba0f11aec4f6740a736", "67c31ab5aa1b0ad3a1fe632cacfd99f7add7cf74b66a6f000000004000", "0f2b892a0bf4a91cc4251e8d0472450e39695858a93e73a61daf6ee1cd67db07", "ba2a854aa728996f331a51f9d8106975525f989948e0256e0d275d5830c08003", "5913cbe76f232daf0e36ede064b7ee82d21073000000000000c20daf3b20f1bd", "3316eaf5335ee436c6e545b1", 0xfffffffa, 0x8000000, 0xaec, 0xf336, 0x200}}) 4m57.691669739s ago: executing program 3 (id=332): r0 = userfaultfd(0x801) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0x3, 0x4, 0x12, 0x0, 0x6}) close(r1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "15146236f84d834662eec48dbe3c5383fc272641edc82b67d86daf7a"}, 0x2c) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 4m57.580699988s ago: executing program 3 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="28000000400007012bbd700000000000047c0000085ce080040007000c0001800600060008"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904000000000000000000020000", @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r4], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4m42.319321429s ago: executing program 3 (id=342): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001900000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 4m42.318983014s ago: executing program 32 (id=342): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001900000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 4m34.650973346s ago: executing program 4 (id=475): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x40040, &(0x7f0000000200)={@_ha_fsid={[0x400, 0x1e3]}, {0x9, 0x8a, 0x4, 0x9}}, 0x7fffffff, &(0x7f0000000240), &(0x7f0000000300)=0x3}) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f00000003c0)={0x200, 0x5}) gettid() r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0xc0000484) rseq(0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4040880) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) read(r2, &(0x7f00000000c0)=""/175, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0xcb2a, &(0x7f0000000040)) 4m34.380253022s ago: executing program 4 (id=477): openat$hpet(0xffffffffffffff9c, 0x0, 0x20800, 0x0) 4m34.379927279s ago: executing program 4 (id=478): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8000) r1 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) syslog(0x4, &(0x7f0000000080)=""/79, 0x4f) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf5) syslog(0x3, 0x0, 0x0) dup3(r3, r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = memfd_create(&(0x7f0000000340)='-&:{-\xaa]{\x00', 0x2) writev(r4, &(0x7f0000000740)=[{&(0x7f00000000c0)="0a294eff445f876a61a41c2b8f2cebfbf712b20b0303910abe93b85412729bdb57dceb9b2b67d031db8e0bfcde2364eaa4920ac971b98fa6b266d22ec5b3674c63c2e1bacbcb6071ef0dee0348e719d801c3ea74ab2c69ae1d4f1ddd8443d7d78dbe7cecd3ab71da033fc1d0df6e916839", 0xfffffdc0}], 0x1) fcntl$addseals(r4, 0x409, 0xc) syslog(0x2, &(0x7f0000000180), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0xc, @empty, 0x7}, 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b00"], 0x48}}, 0x20000084) pwritev(r6, &(0x7f0000000000)=[{&(0x7f00000002c0)="2d90", 0x2}], 0x1, 0x4, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 4m33.829549148s ago: executing program 4 (id=485): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x1}}}}]}, 0x40}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 4m33.740439884s ago: executing program 4 (id=487): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000080000000000000000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 4m33.510883849s ago: executing program 4 (id=492): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) bind$packet(r3, &(0x7f0000000200)={0x11, 0x9, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00f90067656e6576652100200002801400070020010000000000000000000000000000080001000100000008000a0057502cec27ab3b6ca1b000b1f8a766a8909fec1c19af28d7abfce5df4a235de44b7a29f8ba498f241710d768254e9d2c943afbab67c39295758cab843021667fef70cf7add9975066d1dd8b2742ea606ec896ec094727db7f71fcd0e112d67f6f2d0d674ca1638b972447fc89b1fff411bb9a269f56707e928198b139d33d091a2c1546dc2480106ddf77753f1bb3669512f1d6d3c0433fd11396f", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000002100)={0x802, 0x0, 0x6, 0xfd}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x40, 0x800, 0x70bd29, 0x25dfdbff, {0x18}, [@typed={0x7, 0x15a, 0x0, 0x0, @str=' \x01\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) 4m33.398021991s ago: executing program 33 (id=492): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) bind$packet(r3, &(0x7f0000000200)={0x11, 0x9, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00f90067656e6576652100200002801400070020010000000000000000000000000000080001000100000008000a0057502cec27ab3b6ca1b000b1f8a766a8909fec1c19af28d7abfce5df4a235de44b7a29f8ba498f241710d768254e9d2c943afbab67c39295758cab843021667fef70cf7add9975066d1dd8b2742ea606ec896ec094727db7f71fcd0e112d67f6f2d0d674ca1638b972447fc89b1fff411bb9a269f56707e928198b139d33d091a2c1546dc2480106ddf77753f1bb3669512f1d6d3c0433fd11396f", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000002100)={0x802, 0x0, 0x6, 0xfd}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x40, 0x800, 0x70bd29, 0x25dfdbff, {0x18}, [@typed={0x7, 0x15a, 0x0, 0x0, @str=' \x01\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) 4m30.050968765s ago: executing program 5 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008020) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x3f4, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x3bc, 0x8, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x50b6}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x408, @private1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5a9ef4fa8bb6fb5803f18c2e8d629916f9b023f4ff47626b1bace5054d432e7e"}]}, {0x19c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @loopback, 0xd39}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0xcab3, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x164, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc}, @WGPEER_A_ALLOWEDIPS={0x158, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x24000084) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x0, 0x4e20, 0x8, 0x2}, {0x0, 0x4, 0x1, 0x1, 0x0, 0x6, 0x80, 0x1}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x9cc, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d4, 0x32}, 0xa, @in6=@local, 0x3502, 0x1, 0x3, 0x0, 0x1, 0xfffffffd}}, 0xe8) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) fcntl$setlease(r7, 0x400, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000b80)={0x0, 0x1, &(0x7f0000000980)=""/245, &(0x7f0000000a80)=""/146, &(0x7f0000000b40)=""/46, 0x8000000}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 4m30.000825231s ago: executing program 5 (id=540): madvise(&(0x7f0000086000/0x4000)=nil, 0x4000, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48895) r0 = socket$inet6(0xa, 0x5, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x200401, @loopback, 0x4}, 0x80, 0x0}, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1, 0x31c}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff}) io_uring_enter(r2, 0x7a91, 0x0, 0x0, 0x0, 0x18) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r1, 0x0, 0x0, 0x0, 0x44040001, 0x1}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000580)={0x0}, 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x30a400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r5, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) socket$inet_udp(0x2, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0/file0\x00', 0x200, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=nonw') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 4m29.790773888s ago: executing program 5 (id=541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x37) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x6, 0x0, 0x100, 0x4, 0x0, r2}) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x20}, @private0, 0x7, 0x6, 0x0, 0x100, 0x6, 0x110022, r2}) 4m29.790376463s ago: executing program 5 (id=542): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r3, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000) process_mrelease(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001600ffffff6f70000000000017"], 0x14}, 0x1, 0x0, 0x0, 0x25238faddd3d601f}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000580)='./bus\x00', 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') 4m29.680852991s ago: executing program 5 (id=543): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca83740000000000000000200000000000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 4m27.560113843s ago: executing program 5 (id=572): socket$nl_xfrm(0x10, 0x3, 0x6) gettid() mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) 4m27.504475158s ago: executing program 34 (id=572): socket$nl_xfrm(0x10, 0x3, 0x6) gettid() mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) 1m24.689227352s ago: executing program 1 (id=4217): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') mlock(&(0x7f0000627000/0x1000)=nil, 0x1000) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0x0, 0x5, 0x3, 0x8, 0x100, 0x8, 0x25}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0xff, 0x24, &(0x7f0000002d80)="f0c46000", 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850094000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m24.55181831s ago: executing program 1 (id=4221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x15c, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2954fb1b7308d9b4}]}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xec}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x2d, 0x6, "5a28d2f4e3801f4db591c3855d637d181ca8e32898eb5d32fa4d731d7313b84e242ecb9ebf375cc459"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x338}}, 0x0) 1m24.500131986s ago: executing program 1 (id=4223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000009}, 0xc880) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@delchain={0x8a0, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x870, 0x2, [@TCA_FLOW_POLICE={0x85c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x9, 0x7, 0x400, 0xa, 0x7, 0x8, 0xfffffffa, 0x6, 0x4, 0x7, 0x0, 0x0, 0x3, 0xc3c, 0x9, 0x8, 0x9, 0x7, 0x3, 0x7, 0x7fff, 0x4, 0xa000, 0x6, 0xc6, 0x1, 0xfffffff8, 0x9, 0x9, 0xa40, 0x7fffffff, 0x1000, 0xc, 0x1, 0x1ff, 0x5, 0x0, 0x7, 0x6, 0xc0000, 0x4, 0x2b4a, 0x3, 0x7, 0x0, 0x8001, 0x3, 0x6, 0x7, 0x10001, 0x80000000, 0x6, 0xcaac, 0x1, 0x100, 0x2, 0x6, 0x4e1a, 0x5, 0x7fffffff, 0x5, 0x4, 0x4, 0x101, 0x8, 0x0, 0x7, 0x7, 0x5, 0x4, 0xffff, 0x2, 0x9, 0x6, 0x7, 0x6, 0xffffffff, 0xeef8, 0x5, 0xb, 0x4, 0x34, 0x7, 0x7ff, 0xc, 0x10000, 0x5, 0xa0, 0x10, 0x8000, 0xc, 0x0, 0x1, 0x0, 0x400, 0x3, 0x3, 0xfffffff8, 0x30, 0x1, 0x8, 0xa, 0xfffff832, 0x1, 0x2, 0xfffffe01, 0x5, 0x9, 0xbd, 0x1, 0xf, 0x2, 0x7, 0xa, 0x9, 0x8, 0x0, 0x3, 0x200, 0x7f, 0x4, 0x10000, 0x8, 0x8, 0x7, 0x1, 0x9, 0x3, 0x2, 0x9, 0x73, 0x9, 0xfff, 0x5, 0x2, 0x9, 0x7, 0x1ff, 0xea, 0x1, 0x1, 0x8422, 0xb, 0x101, 0x7, 0xfffffffe, 0x80, 0xaf2, 0x2, 0x2, 0xc, 0x8, 0x0, 0x3, 0x0, 0x1, 0x9, 0x6, 0x9, 0x7, 0x5, 0x8, 0x3, 0x3, 0xe5, 0xfffffff7, 0x7103, 0x7ff, 0xce7, 0xa6, 0x1a9, 0x7ff, 0x33, 0xffffffff, 0x3ff, 0x551, 0x0, 0x7f, 0x80000000, 0x6e, 0x9, 0x10, 0x2, 0x4, 0x7893, 0x7, 0x6, 0x4, 0x1, 0x8, 0x2800, 0x8, 0x8b, 0x41e, 0xffffffff, 0x9, 0x6, 0x6, 0x4, 0xffffab2f, 0xce, 0x2, 0x3ff, 0xa, 0x2, 0xb5a1, 0x1, 0x687e2262, 0x4, 0xf, 0x5, 0x4693, 0x5, 0x2, 0xff, 0x1, 0x0, 0x9, 0x7, 0x7, 0x7f, 0x9, 0x6, 0xfffffffd, 0x7, 0x6, 0xda36, 0x40, 0x4, 0x7, 0x9, 0xd, 0xfc, 0x3, 0x7, 0xffff, 0x6, 0x0, 0x2, 0xe68, 0x4, 0xc, 0x9, 0x3, 0x7277, 0x2, 0x4, 0x101, 0xfffffb30, 0x10001, 0x6, 0xe07, 0x1, 0x8000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x6, 0x3, 0x1000, {0x4, 0x2, 0x4, 0x8, 0x7, 0xdfb}, {0x1, 0x2, 0x7fff, 0x7, 0x4, 0x4}, 0x3, 0x7, 0x6c}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfffffffd, 0x7, 0x5ee, 0x1, 0x2, 0x9, 0x80000000, 0xfffffffa, 0xc, 0x101, 0x0, 0x4, 0x9, 0x10001, 0x8, 0x10, 0xb, 0x4, 0x1, 0x3, 0x922, 0x5, 0x1000, 0x1, 0x1, 0x2, 0x0, 0x6, 0x3, 0x6, 0x2, 0x0, 0x800, 0x4, 0x5fd, 0x10, 0xac61, 0x8, 0xff, 0x1, 0x3, 0x6, 0xfff, 0x7193, 0x20d43b70, 0x3, 0x7969, 0x4, 0x2, 0x1, 0x3, 0x2a2, 0x6f, 0x7, 0x401, 0x7f, 0x7bb, 0x85, 0x8, 0x49, 0x17, 0x72695516, 0x7fffffff, 0x23, 0x3, 0x2, 0x4, 0xa3, 0x0, 0x0, 0x5, 0xa89, 0x6, 0x4, 0xb, 0x100, 0xd9f, 0x9, 0x9, 0x8, 0x6, 0x1, 0x8, 0x1, 0x36, 0x3, 0x7f, 0x7, 0x2, 0x7, 0x1000, 0x8001, 0xb, 0x4, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0x2d7f2462, 0x3, 0x0, 0x1, 0x7fffffff, 0x18c, 0x2, 0x8b, 0x4, 0x8001, 0xfffffffa, 0x6, 0xff, 0x1, 0x9, 0x7, 0x8, 0x4, 0xa8, 0x9, 0x3, 0x0, 0x1, 0x80000001, 0xfa, 0x9, 0x85, 0xfffffc01, 0xd, 0x2, 0xbd26, 0x4, 0x7, 0x5f, 0x613, 0x5, 0xab1, 0x9f43, 0x400, 0x8, 0x326a, 0x1, 0x7, 0x3ff, 0x4, 0x7, 0x3, 0xff, 0x6, 0x7, 0x3, 0x1, 0x6a32, 0x6, 0x134, 0x1ff80, 0x5, 0x2, 0x1, 0x9, 0x3, 0x3, 0x800, 0x7f, 0x7, 0x5, 0x3, 0xfff, 0xba, 0x22f, 0x5, 0x3, 0xfffffff8, 0x9, 0x3, 0xffffffff, 0x0, 0x8d23, 0x8, 0x3, 0x5, 0x309, 0x7, 0x71, 0x6, 0x9, 0x0, 0x3, 0x2, 0x401, 0x9, 0x6, 0x8, 0x0, 0x4, 0xff, 0x10000, 0xa3e7, 0x6b3b, 0xd18, 0xffff9668, 0xd75c, 0x7, 0x40, 0x7fffffff, 0xfffff718, 0x60, 0x7ff, 0x0, 0x5, 0x1, 0x100, 0x5, 0x3, 0xfffffff7, 0x1000, 0x6, 0x1, 0x3, 0x82, 0x9, 0x9, 0xfd75837, 0xffffffc0, 0x81, 0x9, 0x0, 0x42a6b6f4, 0x40, 0x0, 0x8, 0x12ef848c, 0x2, 0x2, 0x91, 0xfffffffe, 0x1fe, 0x0, 0x9, 0x0, 0x4f9a5d4, 0x5, 0x8, 0x200040, 0x6, 0x8, 0x200, 0x3, 0x80000000, 0x14, 0x10000, 0x480, 0x38, 0x7fff, 0x8, 0x3]}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x8a0}, 0x1, 0x0, 0x86c, 0x800}, 0x0) 1m24.499108155s ago: executing program 1 (id=4224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) lseek(r2, 0x600000000000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) close(r8) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYBLOB="050000000000000000002e0000000a000300", @ANYRES32=r7, @ANYBLOB="0a00340002020212020200000a00c800ffffffffffff00001000b0000000000c0200020007004b641e00bc0000041308000000000000000800930005000000010007030000000400000400d0b1d113f8d619a7fb1185430c60ba1ad9f8de52e9566fedd8d3531eb8ca75822f9700bee2336ef4e5c651d7ff05cfbf50891cdcd1680da9e8cb9099ec1e9f7bc1ab1d7d046af7ef73a6d9dca0afce3c867347bab55e0c5d03367f6b0a8ee673c71800c45ef0a808ee07be"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x41a6, &(0x7f0000000140)={0x0, 0x800bcbf, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) read$FUSE(r2, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000500)={0x50, 0x0, r10, {0x7, 0x2d, 0x2, 0x1280004, 0x800, 0x5, 0x7, 0x6, 0x0, 0x0, 0x80, 0x3}}, 0x50) 1m24.394008445s ago: executing program 1 (id=4225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000d4c3a866a65c29d202657bc94a4f366b6bd60be95db93b7d5dade4b1d0bedee9d4ae3090d7a1036bcffca62ba1ffff9a76448bf1edf93bc810e30e8c1e433341fe4571b4516a3bd3b1a62aaac8e7b24fce6c4b692b6b14e6235da6ccbf6ec869c035ecd50220f913382b236f9065977d565f23f2e103c1f82acb", @ANYRES32=r0, @ANYBLOB="000000000000000071008b01000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4000003e, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {0x68c0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x2, @in6=@remote, 0x6, 0x4, 0x3, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18, 0x8800}}], 0x1, 0x20040804) accept4$unix(r6, 0x0, 0x0, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1m23.478074972s ago: executing program 1 (id=4240): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="8f2e", 0x2}], 0x1}}], 0x1, 0x4015) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000840)=""/185, 0xb9}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/58, 0x3a}], 0x5}, 0x180) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004091}, 0x4000000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x80000) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r7, 0x894c, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa1000000000000b5010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 1m7.454713291s ago: executing program 35 (id=4240): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="8f2e", 0x2}], 0x1}}], 0x1, 0x4015) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000840)=""/185, 0xb9}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/58, 0x3a}], 0x5}, 0x180) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004091}, 0x4000000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x80000) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r7, 0x894c, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa1000000000000b5010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 45.402007879s ago: executing program 0 (id=4848): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount$afs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@t={0x81, 0x3, 0x0, 0x0, @generic}], 0x8) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd_index=0x2, 0x720e, 0x0, 0x0, 0x2, 0x1, {0x2, r4}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 45.397291196s ago: executing program 0 (id=4849): arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r9 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a4a91146ba4b5fd90000000000000000c8737ec062f461ea000000000000008000c00000c2530ec9afc64d7539a018a9d9979bcbc577767e49baa8b2241dbf67671f90534770606075821982e8cda59ffc564b6c1911e726997deffe7af96350b3f8dee03e1bb13b2b9b2f1a1b47201d5e17f3"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18d9e646b6364f8a5689d5000008000000eaff03f700110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008", @ANYRES8=r9, @ANYRES8=0x0, @ANYRES16=r1, @ANYRES64=r2, @ANYBLOB, @ANYRESHEX, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r10, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r11, 0x0, 0x0}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r9, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r9, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) keyctl$session_to_parent(0x12) socket(0x10, 0x3, 0x0) 44.378466747s ago: executing program 0 (id=4896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0xffffffff, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x15c, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2954fb1b7308d9b4}]}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xec}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x2d, 0x6, "5a28d2f4e3801f4db591c3855d637d181ca8e32898eb5d32fa4d731d7313b84e242ecb9ebf375cc459"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2cc}}, 0x0) 44.314012583s ago: executing program 0 (id=4897): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r1, 0x2000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7a6e, 0xd18b, 0x34d, 0x5}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={0xffffffffffffffff, r1}, 0xc) write$selinux_load(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYRES8=r1, @ANYBLOB="8c826b9c2fe3894e5438c2a0a3c938a74a4c445a1ac97d7a7f2fcadabc29585e21155da755d6847bd7877177c48f6bd34af88cc8eb4cdd22", @ANYRES32=r1, @ANYBLOB="bb1744ff398061a97c5108cb0ca2dde7d2d0533ec07fd349171aeeb15a932519a658b278044a72ed5fe8a37d7a831c002bd7293e10b5ea859dacc13b386eafb8a086d56dfc5144f68d7976855e7151c26c90593f4d1401f0ccfb6f7938f35358bb0488fb31bbaea71eb69f908bf40adab4b166d2732178717cd939ea4b290b2c1cd2b6d7df34ecf4b2ff654c82565373b3e8e6a03621722c2c7380966f558e459c50ad54bd1122476687adbdf80b62c71e72028d66520e614b25e3539361c77a41bef3e7bdb957693c0a69cd9fe3c5dbe67f984d0fb953f036bb3c2215770722c93ebf4238cde813323c83dc0e3f9a4dfa0ebaeb7f306a"], 0xfd59) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xd1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x811}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2, 0x3, 0x4, 0xfffffffe}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="40008000", @ANYRES16=r9, @ANYBLOB="01002fbd7010040000000500000008000b0004000000080009000200000008000b000000000008000c00a80a00000c0016006200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 44.229258861s ago: executing program 0 (id=4901): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) 43.955219429s ago: executing program 2 (id=4911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3fb, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xed, 0xa00, &(0x7f0000000240)="e4e1ad7532fb861460b28632345e6ef25f4690a6b34a9da3efedad70c2a6e5c9ef16c33e04366d6b958d63a9293a1c1dc94e9f4c6bf3fd2d6e5f71c15edeb0f900a01c2a0f9bd17e0d5f4bcf3cf0a94f32b340bca0372ff7f94d467f1168681f70dc14e9cc1f4be902ea3df4716f56edad993a83374f6ffcb537cc518531e258df55f742e9db22e1088baa44a3f8f5d49f4f3ad6693c6702a99573f179c32aa586f1591c57708175f1878aaea5987694d64305fe1f4850684a39085d519d4bb76727c136dca448cd4e3561de8fb6272b1e309b5b995644908175dc6755e89bed9c6e079f47530bd71109bfcd09"}) 43.863507246s ago: executing program 0 (id=4913): r0 = semget(0x2, 0x1, 0x4) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000300)=""/250) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x10, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) r4 = fsopen(&(0x7f0000000100)='jfs\x00', 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TUNSETIFF(r6, 0x40480923, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r5, 0x1d, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x20004808) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='gid', &(0x7f0000000740)='0\x00M\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbd\t\x00\x00\x00\x00\x00\x00\x00\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xffNh\x19\xee#\xcc\x0f\xee\xfea\xdc\x88\xcb%bW\xd35\xda=\xc6\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x90\xf4\xb7\xdf\xae\xf3\x02\x19_\xe1.f>>\xa5\xc7@\xfb\"\xab\xdb\x06\x12e\x14\x11~\xa8\xdfRL \xf0\xee>(\xb1\xa2\xe8\a\xb8-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\'\x13', 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) unshare(0x40000a00) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0xd, 0xd, 0xfb, 0x64, 0x45, 0x80, 0x0, 0x3, 0x15}, {0x58000, 0x2000, 0xe, 0x0, 0x40, 0x5, 0x0, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0x8080000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x3, 0x9, 0x1, 0xa7, 0x2, 0x81}, {0x80a0000, 0x6000, 0xb, 0x23, 0x4, 0x42, 0xb, 0xff, 0x8, 0x1, 0xe, 0xf8}, {0x10000, 0x10000, 0xb, 0x3, 0x3, 0x6, 0xa3, 0x7f, 0x7, 0x2, 0xde, 0x83}, {0x1000, 0xa000, 0x8, 0xd, 0xb1, 0x8, 0x84, 0xa0, 0x80, 0x3, 0x1}, {0x3000, 0xffff1000, 0x4, 0x5, 0x7, 0x1, 0x7, 0x0, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0xf, 0x5, 0x1, 0x7, 0x11, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xffffffff, 0x1000}, {0x30000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x102024, 0x5, 0xbd00, 0x0, [0xaffe, 0x4, 0x80, 0x9]}) r10 = syz_open_dev$MSR(&(0x7f0000000040), 0x1, 0x0) ioctl$X86_IOC_RDMSR_REGS(r10, 0xc02063a0, &(0x7f0000000440)=[0x66, 0x2, 0x6, 0xe3, 0x6, 0xb13, 0x3, 0x7]) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000007138caa31880515"]) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r12 = dup3(r10, r10, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000500)='%pB \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000880)={'ip6gre0\x00', 0x0, 0x4, 0xc, 0x0, 0x1000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x17, 0xb4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000300000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018100000", @ANYRES32=r12, @ANYBLOB="000000000000000018100000", @ANYRES32=r13, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x9d9, 0x5f, &(0x7f0000000680)=""/95, 0x41100, 0x1, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x2, 0xb, 0x127a9b4d}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 43.755973506s ago: executing program 36 (id=4913): r0 = semget(0x2, 0x1, 0x4) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000300)=""/250) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x10, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) r4 = fsopen(&(0x7f0000000100)='jfs\x00', 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TUNSETIFF(r6, 0x40480923, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r5, 0x1d, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x20004808) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='gid', &(0x7f0000000740)='0\x00M\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbd\t\x00\x00\x00\x00\x00\x00\x00\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xffNh\x19\xee#\xcc\x0f\xee\xfea\xdc\x88\xcb%bW\xd35\xda=\xc6\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x90\xf4\xb7\xdf\xae\xf3\x02\x19_\xe1.f>>\xa5\xc7@\xfb\"\xab\xdb\x06\x12e\x14\x11~\xa8\xdfRL \xf0\xee>(\xb1\xa2\xe8\a\xb8-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\'\x13', 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) unshare(0x40000a00) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0xd, 0xd, 0xfb, 0x64, 0x45, 0x80, 0x0, 0x3, 0x15}, {0x58000, 0x2000, 0xe, 0x0, 0x40, 0x5, 0x0, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0x8080000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x3, 0x9, 0x1, 0xa7, 0x2, 0x81}, {0x80a0000, 0x6000, 0xb, 0x23, 0x4, 0x42, 0xb, 0xff, 0x8, 0x1, 0xe, 0xf8}, {0x10000, 0x10000, 0xb, 0x3, 0x3, 0x6, 0xa3, 0x7f, 0x7, 0x2, 0xde, 0x83}, {0x1000, 0xa000, 0x8, 0xd, 0xb1, 0x8, 0x84, 0xa0, 0x80, 0x3, 0x1}, {0x3000, 0xffff1000, 0x4, 0x5, 0x7, 0x1, 0x7, 0x0, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0xf, 0x5, 0x1, 0x7, 0x11, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xffffffff, 0x1000}, {0x30000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x102024, 0x5, 0xbd00, 0x0, [0xaffe, 0x4, 0x80, 0x9]}) r10 = syz_open_dev$MSR(&(0x7f0000000040), 0x1, 0x0) ioctl$X86_IOC_RDMSR_REGS(r10, 0xc02063a0, &(0x7f0000000440)=[0x66, 0x2, 0x6, 0xe3, 0x6, 0xb13, 0x3, 0x7]) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000007138caa31880515"]) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r12 = dup3(r10, r10, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000500)='%pB \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000880)={'ip6gre0\x00', 0x0, 0x4, 0xc, 0x0, 0x1000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x17, 0xb4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000300000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018100000", @ANYRES32=r12, @ANYBLOB="000000000000000018100000", @ANYRES32=r13, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x9d9, 0x5f, &(0x7f0000000680)=""/95, 0x41100, 0x1, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x2, 0xb, 0x127a9b4d}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 43.064545899s ago: executing program 2 (id=4921): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) 42.970680966s ago: executing program 2 (id=4923): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) fcntl$setsig(r1, 0xa, 0x1f) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5326, 0x0) 42.84381084s ago: executing program 2 (id=4925): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000640)={0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000600)={0x124ed, 0x7, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb", 0x4d}], 0x3}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000880)=""/257, 0x101}, {&(0x7f0000000700)=""/38, 0x26}], 0x4}, 0x18101) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}, 0x1c) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x2a40, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = fsmount(0xffffffffffffffff, 0x1, 0x88) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000ad", @ANYRES16=r8, @ANYBLOB="200025bd7000fbdbdf250a0000008000018008000300020000001400010069623a76657468315f746f5f6873720008000300010000002c0004001400010002004e206401010000000000000000001400020002004e227f00000100000000000000002c0004001400010002004e230a01010200000000000000001400020002004e21e000000100000000000000000c00068004000500040002003c0007800c00040004000000000000000800020003000000080002000700000008000200fffeffff08000100600000000c0003000700000000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4044010}, 0x20044810) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 42.700424416s ago: executing program 2 (id=4929): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x3006042, &(0x7f00000003c0)={[{@metacopy_on, 0x3a}], [], 0x2f}) userfaultfd(0x801) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r0, &(0x7f0000000340)="732f7f3bab58959d", 0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace(0x11, r3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x6860, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x89) 42.585443992s ago: executing program 2 (id=4933): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x125e, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1}, {0x7ffa}, @device_a, @device_b, @from_mac=@device_b, {0x3, 0x1}}, 0xc, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xde0}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) 26.255797845s ago: executing program 37 (id=4933): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x125e, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1}, {0x7ffa}, @device_a, @device_b, @from_mac=@device_b, {0x3, 0x1}}, 0xc, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xde0}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) 18.629259327s ago: executing program 9 (id=5131): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0000001000"/20], 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='&C'], 0x1c}, 0x1, 0x0, 0x0, 0x45a3c1901f775339}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000200)={{0x2, 0x3, 0x81, 0x5, 0x3, 0x3}, 0x238, [0xe, 0x4, 0xc, 0x2f7a, 0x6, 0x1, 0x636170bb, 0xfffffffa, 0x3, 0x1ff, 0x1, 0x0, 0x8001, 0xec9, 0x1, 0x7fff, 0x28, 0x8, 0xeb71, 0xc2c, 0x7, 0x901d, 0x3, 0x8, 0x6, 0xfffffff5, 0xfff, 0x10000, 0x4, 0x81, 0x5, 0x0, 0x5, 0x0, 0x9, 0x10001, 0x80000000, 0x6, 0xffffaef9, 0x3, 0x8001, 0xa, 0x4, 0xd9d, 0xf4c6, 0x0, 0xb, 0x5, 0x8001, 0x8, 0x1, 0x4, 0xb59, 0x4, 0x200, 0x8, 0x1, 0xa, 0xb8, 0x6aa2, 0x9, 0x10, 0x1, 0xc3, 0x6, 0x3, 0x4, 0xfffffffd, 0x9, 0xd, 0x5, 0x7ff, 0x4, 0x2, 0x8, 0x2, 0x4, 0xfff, 0x2, 0x1d, 0x9, 0x2, 0x1, 0x7, 0x9, 0x0, 0x5, 0x4, 0x8, 0x10001, 0x9, 0x2, 0x4, 0xfffffff7, 0x6, 0x10001, 0x5, 0x1, 0x5, 0x5, 0x3, 0x4, 0x800, 0x5, 0x2, 0x7, 0xffffffff, 0xfffffffa, 0x8, 0xd, 0x7fffffff, 0x6, 0x5, 0x2, 0x3eb0, 0x8, 0x2, 0xf1, 0x286, 0xe, 0x2, 0x4, 0x7ff, 0xfffffffc, 0x2, 0x5, 0x8, 0x42e, 0x80, 0xb35, 0x3, 0x9, 0xd, 0x4, 0x7, 0x0, 0x2, 0x3, 0x80000001, 0x2, 0x6, 0x0, 0xe5a, 0x116a, 0x40, 0x7, 0x6, 0x6, 0x8001, 0x9, 0x80, 0x4df, 0x9, 0x8, 0xb9bc, 0x1, 0x9, 0x3ff, 0x3, 0x9ad, 0xc83, 0xf, 0xffe00000, 0x99a, 0x76f4339d, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x7, 0x5000, 0x5, 0x5, 0x8, 0xe7f, 0x6, 0x4, 0x245, 0x8, 0xfff, 0xffff8000, 0x9, 0xb47d, 0x3, 0x7, 0x2, 0x8, 0x3, 0x8, 0xb, 0x4, 0x9, 0x1, 0x419b, 0x4, 0xffff, 0x3, 0xe, 0x1000, 0x5, 0x0, 0x8000, 0x8000, 0x9, 0x3, 0xfffffffe, 0xe, 0x5, 0x2be8, 0x7a1b, 0x9, 0x3, 0x0, 0xce, 0x2, 0x8001, 0x80000000, 0x1, 0x7, 0x10, 0xe3, 0x9, 0x200, 0x6, 0xe, 0x4, 0x6, 0x2, 0x0, 0x8, 0x10, 0x8, 0x4, 0x1, 0x7, 0x0, 0xfffffff3, 0x9, 0x2, 0x1, 0x7, 0x5, 0x3ff, 0x0, 0x0, 0x2, 0x8f6, 0x71cb4757, 0x4, 0xffff0000, 0x0, 0xc, 0x2, 0x21, 0x7, 0x8, 0x10000, 0x3ff, 0x6, 0x400, 0x7, 0x10000, 0x1800, 0x4, 0x7, 0x4, 0x9, 0x0, 0x40, 0x7, 0x200, 0x1, 0xe, 0xb23e, 0x80000000, 0xfb0, 0xa47, 0x2, 0xfffffffa, 0x1, 0x4, 0x6cf7, 0x4, 0x8836, 0x5, 0xfffffffd, 0x0, 0xa, 0xfff, 0x3, 0x9, 0x749678d3, 0x401, 0xf, 0x7, 0x106, 0xdf, 0xe, 0x3, 0x0, 0x401, 0xfffffb0b, 0xaa1f, 0x7, 0x8, 0x80000001, 0x6, 0x8, 0x9, 0x4, 0x5, 0x9, 0x3b9f, 0xecd, 0xfffffffe, 0x6, 0xfffffffc, 0x10000, 0x4, 0x200, 0x1ff, 0x3, 0x200, 0x100, 0xffff037a, 0x3, 0x8, 0xfffffffb, 0x0, 0xffff8001, 0xffffffa5, 0x7, 0xffff, 0x10000, 0x0, 0x4, 0x8, 0x2, 0x8000, 0x10001, 0x5, 0xb, 0x6, 0x0, 0xff, 0x65b30741, 0xa589, 0x2, 0xee, 0x8000, 0xe, 0x5, 0x2, 0x4, 0x9, 0x2, 0x8001, 0xfffffbac, 0x1000, 0x7, 0xffffffb1, 0x1, 0x5, 0x8, 0x2213, 0x9, 0x12c, 0x7, 0x5, 0x6e, 0x5, 0x10000, 0x5, 0x7, 0x7f, 0x9, 0x9, 0x4, 0x8, 0x0, 0x34cc, 0x8d0, 0x5, 0x5, 0x6, 0x7, 0x4, 0x4, 0x9, 0x43, 0x8, 0x74, 0x8, 0xfffffffb, 0x10001, 0x2, 0x3, 0x5, 0x3, 0xe9, 0x3ff, 0x0, 0xb, 0x200, 0xff, 0x8000000, 0x6, 0x80d, 0x6, 0x1000, 0x3, 0x4, 0x800, 0x80000001, 0x7, 0x1ff, 0x749, 0x4, 0x3, 0x401, 0x9, 0x81, 0x0, 0x0, 0x2, 0x9, 0xf, 0x7d4, 0x3, 0x2, 0x1, 0x3, 0x3, 0xf3e, 0x3d, 0x8, 0x1, 0x2, 0x4, 0x6, 0xc5ab, 0x0, 0x7, 0x0, 0x78a30d9a, 0xb87e, 0x80, 0x80000000, 0x401, 0x4, 0x8, 0x3, 0x100, 0x2, 0x4, 0x40, 0x6, 0x28d, 0xff, 0xe, 0x2, 0x10000000, 0x1, 0xffffffff, 0xfffffffc, 0xfff, 0x5f8, 0x400, 0xfffffffe, 0xfff, 0xf840, 0x8, 0x5, 0x400, 0x7fffffff, 0x5, 0x4, 0x80000001, 0xa, 0x1, 0xfffffe01, 0x3ff, 0x6, 0x8, 0x5ac8, 0x1, 0x7, 0x6, 0x1ff, 0x6, 0x5, 0x7f, 0x5, 0x5, 0x2, 0x101, 0x80000001, 0xcf, 0x1, 0x9, 0x7fff, 0x34, 0x7, 0xa44, 0x8, 0x10001, 0x3ff, 0x7, 0x5, 0x4, 0x0, 0x6, 0x797, 0xb0e8, 0xffffff00, 0x4, 0x6, 0x5, 0x80000000, 0x5f058163, 0x8, 0x4a35, 0xe, 0x90000000, 0x800, 0x6, 0x8001, 0x2, 0x3, 0x800, 0x6, 0x0, 0x1, 0x4, 0x4b56, 0x400, 0x5, 0x0, 0x42b15c4a, 0x5, 0x0, 0x3, 0x800, 0x100, 0x5, 0x8, 0x1, 0x0, 0x4, 0x7f, 0x6, 0x533, 0x5, 0x5, 0x3, 0xc2fc, 0xd599, 0x0, 0xffffffff, 0xf, 0x5, 0x1000, 0x7, 0x5, 0x1ff, 0x3, 0x1847, 0x2, 0x7, 0x9, 0x5, 0x6ea3, 0x6, 0x0, 0x2, 0x3, 0x5, 0xfffffffe, 0xa27f, 0x3, 0xfff, 0x500, 0xbf, 0x1d, 0x8, 0x9, 0xd4f, 0x2, 0x0, 0x63ff8430, 0x1ff, 0x598e, 0x6, 0x6dc3, 0x7, 0x5, 0x8, 0x1000, 0x400, 0x6, 0x1c000, 0x7897, 0x401, 0x9, 0x4, 0x100, 0x5, 0x3, 0xff, 0x9, 0x4, 0x1ff, 0x6, 0x0, 0x4, 0x100, 0x2, 0xfffff800, 0x3, 0x7, 0x8001, 0x2, 0x9, 0x3, 0x673, 0x3, 0x3, 0xab9, 0x9, 0x8, 0x7, 0xb8, 0x6, 0xfffffffc, 0x0, 0x400, 0xd8e8, 0x10, 0x7, 0x6, 0x1, 0x0, 0x81, 0x3, 0x6, 0x10, 0x9, 0x6, 0xffffffff, 0x205d36e4, 0x40, 0x5, 0x8, 0x2, 0x5, 0x0, 0xefe2, 0xe, 0x3, 0x2b, 0xde, 0x9, 0xa, 0x0, 0x80000000, 0x9, 0x7fff, 0x6, 0xaf, 0x6, 0x0, 0x2, 0x101, 0x3, 0x930, 0xfffffffc, 0x4, 0x7, 0x8, 0xd7eb, 0x8, 0xdb, 0x10001, 0x3, 0x6, 0x33, 0x81, 0x2, 0xf287, 0x3, 0xb3f, 0x1, 0x8f9, 0x9, 0x80000000, 0x2, 0x3, 0x9, 0x9, 0xffff, 0x8, 0x0, 0x10000, 0x5, 0xac, 0x9a88, 0x7, 0x5, 0x81, 0x5, 0x7f, 0x1, 0x80000001, 0x4, 0x0, 0x3, 0x0, 0x4, 0x3, 0x2, 0x3, 0xffff, 0x1d95, 0x2, 0x5, 0x7fff, 0xfffffffe, 0x21, 0xfffffff9, 0x0, 0x8, 0x8, 0x2, 0x8001, 0xe, 0x9, 0x946, 0x33d8, 0x5, 0x57, 0x4, 0x1, 0x97, 0xc8, 0x0, 0xc76, 0x8, 0x3ff, 0x9, 0x5d0ae1a, 0x5322, 0x1, 0x3, 0xa, 0xf, 0x3, 0x2, 0x9, 0x4, 0x40, 0x8, 0x100, 0x2, 0x4ae, 0x800, 0xfd, 0x197, 0xfffffffd, 0xfffffff9, 0x0, 0x8, 0x5e3, 0x7fffffff, 0xd1b3, 0x7, 0x3ee, 0x0, 0x1, 0x8000, 0x7, 0x101, 0x0, 0x4e, 0x1, 0x1, 0x7fff, 0x5, 0x8a, 0x8, 0x4, 0xc, 0x6, 0x2, 0x8, 0xfffffff8, 0x2, 0x5, 0x3606f9d3, 0xe25b, 0x1, 0x8, 0x6, 0xfffff001, 0x2, 0x9, 0x0, 0x0, 0x5, 0x7, 0x6, 0x7fffffff, 0x80, 0x3, 0x7, 0x8000, 0x3, 0x5, 0x7f, 0xfffff258, 0x7fff, 0xd0, 0x0, 0x9, 0x1, 0x3, 0x4, 0x3, 0x7, 0x1, 0x4, 0x5, 0x80000000, 0xd9, 0x3, 0xa, 0x8, 0x6, 0x8, 0x80, 0x612be0f7, 0x0, 0x8, 0x5, 0x0, 0x1, 0x95d1, 0x4, 0x2, 0xfffffff8, 0x80000001, 0x0, 0x10001, 0x7, 0xffff1c05, 0x6, 0x6, 0xd06, 0x1df, 0x5, 0x5, 0x2, 0x1, 0xc, 0xd, 0xf607, 0x8d, 0x2, 0x2, 0x2, 0xf406, 0x6, 0x747, 0x8e, 0x5, 0xb, 0x5, 0x5, 0x7fffffff, 0x21, 0x8, 0xffffffff, 0x200, 0x5, 0x8001, 0x2, 0x4, 0x5, 0xa437, 0x8, 0x1, 0x0, 0x1, 0x34e00, 0x2, 0x401, 0x9, 0x2b55216, 0x3, 0x66, 0x3, 0x6, 0xe, 0x5, 0x5, 0x400, 0x2, 0x40, 0x0, 0xffffffff, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x5, 0x3486, 0x7, 0x62a, 0x1, 0x80, 0x8001, 0x8, 0x0, 0x7, 0x1, 0x8, 0x4, 0x712, 0x5, 0xfffffffd, 0x3d3c, 0x29, 0x8, 0x2ea, 0x5, 0x4, 0x4, 0x7ff, 0x59, 0x4, 0x16000, 0x5, 0x1, 0x7ff, 0x7, 0x8, 0x48000000, 0x9, 0x7fffffff, 0x9, 0x2, 0x1, 0x1f22, 0x7, 0x1, 0x7, 0x5, 0x8, 0x7, 0x0, 0x58dc, 0xfffffff8, 0x1, 0x6, 0x7434, 0x8, 0x2, 0x8, 0x1, 0x0, 0x2e91, 0x4, 0x1, 0x4, 0x1ff, 0x8, 0x4, 0xa, 0x7fff, 0x5, 0xfffffc08, 0xd7, 0x7, 0x8001, 0x2941, 0x6, 0x7, 0x10001, 0x1000, 0x6, 0x3ff, 0x7, 0x8001, 0x9, 0x1, 0x3ff, 0x100, 0x5bc, 0x1, 0x3, 0x27, 0x5, 0x1, 0x7ff, 0xf11e, 0x7, 0x6, 0x80, 0x9, 0x9, 0x2, 0x4f, 0x3, 0x0, 0x2, 0x2, 0x1, 0x1, 0x4, 0x9, 0x740, 0xfffffff8, 0x6]}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000000140)={0x68, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0xc, 0x6, 0x0, 0x8]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x9, 0x2]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0xd3]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 9.655840129s ago: executing program 9 (id=5131): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0000001000"/20], 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='&C'], 0x1c}, 0x1, 0x0, 0x0, 0x45a3c1901f775339}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000200)={{0x2, 0x3, 0x81, 0x5, 0x3, 0x3}, 0x238, [0xe, 0x4, 0xc, 0x2f7a, 0x6, 0x1, 0x636170bb, 0xfffffffa, 0x3, 0x1ff, 0x1, 0x0, 0x8001, 0xec9, 0x1, 0x7fff, 0x28, 0x8, 0xeb71, 0xc2c, 0x7, 0x901d, 0x3, 0x8, 0x6, 0xfffffff5, 0xfff, 0x10000, 0x4, 0x81, 0x5, 0x0, 0x5, 0x0, 0x9, 0x10001, 0x80000000, 0x6, 0xffffaef9, 0x3, 0x8001, 0xa, 0x4, 0xd9d, 0xf4c6, 0x0, 0xb, 0x5, 0x8001, 0x8, 0x1, 0x4, 0xb59, 0x4, 0x200, 0x8, 0x1, 0xa, 0xb8, 0x6aa2, 0x9, 0x10, 0x1, 0xc3, 0x6, 0x3, 0x4, 0xfffffffd, 0x9, 0xd, 0x5, 0x7ff, 0x4, 0x2, 0x8, 0x2, 0x4, 0xfff, 0x2, 0x1d, 0x9, 0x2, 0x1, 0x7, 0x9, 0x0, 0x5, 0x4, 0x8, 0x10001, 0x9, 0x2, 0x4, 0xfffffff7, 0x6, 0x10001, 0x5, 0x1, 0x5, 0x5, 0x3, 0x4, 0x800, 0x5, 0x2, 0x7, 0xffffffff, 0xfffffffa, 0x8, 0xd, 0x7fffffff, 0x6, 0x5, 0x2, 0x3eb0, 0x8, 0x2, 0xf1, 0x286, 0xe, 0x2, 0x4, 0x7ff, 0xfffffffc, 0x2, 0x5, 0x8, 0x42e, 0x80, 0xb35, 0x3, 0x9, 0xd, 0x4, 0x7, 0x0, 0x2, 0x3, 0x80000001, 0x2, 0x6, 0x0, 0xe5a, 0x116a, 0x40, 0x7, 0x6, 0x6, 0x8001, 0x9, 0x80, 0x4df, 0x9, 0x8, 0xb9bc, 0x1, 0x9, 0x3ff, 0x3, 0x9ad, 0xc83, 0xf, 0xffe00000, 0x99a, 0x76f4339d, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x7, 0x5000, 0x5, 0x5, 0x8, 0xe7f, 0x6, 0x4, 0x245, 0x8, 0xfff, 0xffff8000, 0x9, 0xb47d, 0x3, 0x7, 0x2, 0x8, 0x3, 0x8, 0xb, 0x4, 0x9, 0x1, 0x419b, 0x4, 0xffff, 0x3, 0xe, 0x1000, 0x5, 0x0, 0x8000, 0x8000, 0x9, 0x3, 0xfffffffe, 0xe, 0x5, 0x2be8, 0x7a1b, 0x9, 0x3, 0x0, 0xce, 0x2, 0x8001, 0x80000000, 0x1, 0x7, 0x10, 0xe3, 0x9, 0x200, 0x6, 0xe, 0x4, 0x6, 0x2, 0x0, 0x8, 0x10, 0x8, 0x4, 0x1, 0x7, 0x0, 0xfffffff3, 0x9, 0x2, 0x1, 0x7, 0x5, 0x3ff, 0x0, 0x0, 0x2, 0x8f6, 0x71cb4757, 0x4, 0xffff0000, 0x0, 0xc, 0x2, 0x21, 0x7, 0x8, 0x10000, 0x3ff, 0x6, 0x400, 0x7, 0x10000, 0x1800, 0x4, 0x7, 0x4, 0x9, 0x0, 0x40, 0x7, 0x200, 0x1, 0xe, 0xb23e, 0x80000000, 0xfb0, 0xa47, 0x2, 0xfffffffa, 0x1, 0x4, 0x6cf7, 0x4, 0x8836, 0x5, 0xfffffffd, 0x0, 0xa, 0xfff, 0x3, 0x9, 0x749678d3, 0x401, 0xf, 0x7, 0x106, 0xdf, 0xe, 0x3, 0x0, 0x401, 0xfffffb0b, 0xaa1f, 0x7, 0x8, 0x80000001, 0x6, 0x8, 0x9, 0x4, 0x5, 0x9, 0x3b9f, 0xecd, 0xfffffffe, 0x6, 0xfffffffc, 0x10000, 0x4, 0x200, 0x1ff, 0x3, 0x200, 0x100, 0xffff037a, 0x3, 0x8, 0xfffffffb, 0x0, 0xffff8001, 0xffffffa5, 0x7, 0xffff, 0x10000, 0x0, 0x4, 0x8, 0x2, 0x8000, 0x10001, 0x5, 0xb, 0x6, 0x0, 0xff, 0x65b30741, 0xa589, 0x2, 0xee, 0x8000, 0xe, 0x5, 0x2, 0x4, 0x9, 0x2, 0x8001, 0xfffffbac, 0x1000, 0x7, 0xffffffb1, 0x1, 0x5, 0x8, 0x2213, 0x9, 0x12c, 0x7, 0x5, 0x6e, 0x5, 0x10000, 0x5, 0x7, 0x7f, 0x9, 0x9, 0x4, 0x8, 0x0, 0x34cc, 0x8d0, 0x5, 0x5, 0x6, 0x7, 0x4, 0x4, 0x9, 0x43, 0x8, 0x74, 0x8, 0xfffffffb, 0x10001, 0x2, 0x3, 0x5, 0x3, 0xe9, 0x3ff, 0x0, 0xb, 0x200, 0xff, 0x8000000, 0x6, 0x80d, 0x6, 0x1000, 0x3, 0x4, 0x800, 0x80000001, 0x7, 0x1ff, 0x749, 0x4, 0x3, 0x401, 0x9, 0x81, 0x0, 0x0, 0x2, 0x9, 0xf, 0x7d4, 0x3, 0x2, 0x1, 0x3, 0x3, 0xf3e, 0x3d, 0x8, 0x1, 0x2, 0x4, 0x6, 0xc5ab, 0x0, 0x7, 0x0, 0x78a30d9a, 0xb87e, 0x80, 0x80000000, 0x401, 0x4, 0x8, 0x3, 0x100, 0x2, 0x4, 0x40, 0x6, 0x28d, 0xff, 0xe, 0x2, 0x10000000, 0x1, 0xffffffff, 0xfffffffc, 0xfff, 0x5f8, 0x400, 0xfffffffe, 0xfff, 0xf840, 0x8, 0x5, 0x400, 0x7fffffff, 0x5, 0x4, 0x80000001, 0xa, 0x1, 0xfffffe01, 0x3ff, 0x6, 0x8, 0x5ac8, 0x1, 0x7, 0x6, 0x1ff, 0x6, 0x5, 0x7f, 0x5, 0x5, 0x2, 0x101, 0x80000001, 0xcf, 0x1, 0x9, 0x7fff, 0x34, 0x7, 0xa44, 0x8, 0x10001, 0x3ff, 0x7, 0x5, 0x4, 0x0, 0x6, 0x797, 0xb0e8, 0xffffff00, 0x4, 0x6, 0x5, 0x80000000, 0x5f058163, 0x8, 0x4a35, 0xe, 0x90000000, 0x800, 0x6, 0x8001, 0x2, 0x3, 0x800, 0x6, 0x0, 0x1, 0x4, 0x4b56, 0x400, 0x5, 0x0, 0x42b15c4a, 0x5, 0x0, 0x3, 0x800, 0x100, 0x5, 0x8, 0x1, 0x0, 0x4, 0x7f, 0x6, 0x533, 0x5, 0x5, 0x3, 0xc2fc, 0xd599, 0x0, 0xffffffff, 0xf, 0x5, 0x1000, 0x7, 0x5, 0x1ff, 0x3, 0x1847, 0x2, 0x7, 0x9, 0x5, 0x6ea3, 0x6, 0x0, 0x2, 0x3, 0x5, 0xfffffffe, 0xa27f, 0x3, 0xfff, 0x500, 0xbf, 0x1d, 0x8, 0x9, 0xd4f, 0x2, 0x0, 0x63ff8430, 0x1ff, 0x598e, 0x6, 0x6dc3, 0x7, 0x5, 0x8, 0x1000, 0x400, 0x6, 0x1c000, 0x7897, 0x401, 0x9, 0x4, 0x100, 0x5, 0x3, 0xff, 0x9, 0x4, 0x1ff, 0x6, 0x0, 0x4, 0x100, 0x2, 0xfffff800, 0x3, 0x7, 0x8001, 0x2, 0x9, 0x3, 0x673, 0x3, 0x3, 0xab9, 0x9, 0x8, 0x7, 0xb8, 0x6, 0xfffffffc, 0x0, 0x400, 0xd8e8, 0x10, 0x7, 0x6, 0x1, 0x0, 0x81, 0x3, 0x6, 0x10, 0x9, 0x6, 0xffffffff, 0x205d36e4, 0x40, 0x5, 0x8, 0x2, 0x5, 0x0, 0xefe2, 0xe, 0x3, 0x2b, 0xde, 0x9, 0xa, 0x0, 0x80000000, 0x9, 0x7fff, 0x6, 0xaf, 0x6, 0x0, 0x2, 0x101, 0x3, 0x930, 0xfffffffc, 0x4, 0x7, 0x8, 0xd7eb, 0x8, 0xdb, 0x10001, 0x3, 0x6, 0x33, 0x81, 0x2, 0xf287, 0x3, 0xb3f, 0x1, 0x8f9, 0x9, 0x80000000, 0x2, 0x3, 0x9, 0x9, 0xffff, 0x8, 0x0, 0x10000, 0x5, 0xac, 0x9a88, 0x7, 0x5, 0x81, 0x5, 0x7f, 0x1, 0x80000001, 0x4, 0x0, 0x3, 0x0, 0x4, 0x3, 0x2, 0x3, 0xffff, 0x1d95, 0x2, 0x5, 0x7fff, 0xfffffffe, 0x21, 0xfffffff9, 0x0, 0x8, 0x8, 0x2, 0x8001, 0xe, 0x9, 0x946, 0x33d8, 0x5, 0x57, 0x4, 0x1, 0x97, 0xc8, 0x0, 0xc76, 0x8, 0x3ff, 0x9, 0x5d0ae1a, 0x5322, 0x1, 0x3, 0xa, 0xf, 0x3, 0x2, 0x9, 0x4, 0x40, 0x8, 0x100, 0x2, 0x4ae, 0x800, 0xfd, 0x197, 0xfffffffd, 0xfffffff9, 0x0, 0x8, 0x5e3, 0x7fffffff, 0xd1b3, 0x7, 0x3ee, 0x0, 0x1, 0x8000, 0x7, 0x101, 0x0, 0x4e, 0x1, 0x1, 0x7fff, 0x5, 0x8a, 0x8, 0x4, 0xc, 0x6, 0x2, 0x8, 0xfffffff8, 0x2, 0x5, 0x3606f9d3, 0xe25b, 0x1, 0x8, 0x6, 0xfffff001, 0x2, 0x9, 0x0, 0x0, 0x5, 0x7, 0x6, 0x7fffffff, 0x80, 0x3, 0x7, 0x8000, 0x3, 0x5, 0x7f, 0xfffff258, 0x7fff, 0xd0, 0x0, 0x9, 0x1, 0x3, 0x4, 0x3, 0x7, 0x1, 0x4, 0x5, 0x80000000, 0xd9, 0x3, 0xa, 0x8, 0x6, 0x8, 0x80, 0x612be0f7, 0x0, 0x8, 0x5, 0x0, 0x1, 0x95d1, 0x4, 0x2, 0xfffffff8, 0x80000001, 0x0, 0x10001, 0x7, 0xffff1c05, 0x6, 0x6, 0xd06, 0x1df, 0x5, 0x5, 0x2, 0x1, 0xc, 0xd, 0xf607, 0x8d, 0x2, 0x2, 0x2, 0xf406, 0x6, 0x747, 0x8e, 0x5, 0xb, 0x5, 0x5, 0x7fffffff, 0x21, 0x8, 0xffffffff, 0x200, 0x5, 0x8001, 0x2, 0x4, 0x5, 0xa437, 0x8, 0x1, 0x0, 0x1, 0x34e00, 0x2, 0x401, 0x9, 0x2b55216, 0x3, 0x66, 0x3, 0x6, 0xe, 0x5, 0x5, 0x400, 0x2, 0x40, 0x0, 0xffffffff, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x5, 0x3486, 0x7, 0x62a, 0x1, 0x80, 0x8001, 0x8, 0x0, 0x7, 0x1, 0x8, 0x4, 0x712, 0x5, 0xfffffffd, 0x3d3c, 0x29, 0x8, 0x2ea, 0x5, 0x4, 0x4, 0x7ff, 0x59, 0x4, 0x16000, 0x5, 0x1, 0x7ff, 0x7, 0x8, 0x48000000, 0x9, 0x7fffffff, 0x9, 0x2, 0x1, 0x1f22, 0x7, 0x1, 0x7, 0x5, 0x8, 0x7, 0x0, 0x58dc, 0xfffffff8, 0x1, 0x6, 0x7434, 0x8, 0x2, 0x8, 0x1, 0x0, 0x2e91, 0x4, 0x1, 0x4, 0x1ff, 0x8, 0x4, 0xa, 0x7fff, 0x5, 0xfffffc08, 0xd7, 0x7, 0x8001, 0x2941, 0x6, 0x7, 0x10001, 0x1000, 0x6, 0x3ff, 0x7, 0x8001, 0x9, 0x1, 0x3ff, 0x100, 0x5bc, 0x1, 0x3, 0x27, 0x5, 0x1, 0x7ff, 0xf11e, 0x7, 0x6, 0x80, 0x9, 0x9, 0x2, 0x4f, 0x3, 0x0, 0x2, 0x2, 0x1, 0x1, 0x4, 0x9, 0x740, 0xfffffff8, 0x6]}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000000140)={0x68, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0xc, 0x6, 0x0, 0x8]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x9, 0x2]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0xd3]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 3.303929953s ago: executing program 8 (id=5448): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r1 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$pagemap(r1, &(0x7f00000001c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)="c21c92", 0x3}, {&(0x7f0000000400)="06cc", 0x2}, {&(0x7f0000000140)='+\a', 0x2}], 0x3) 3.298683732s ago: executing program 8 (id=5449): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.238421057s ago: executing program 8 (id=5450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x208, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xc}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x54}, 0x20000083) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000080)=0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="2441eba4b60dbb71003507ff9d455132619c819b90a2b5ce82528a6f63806f543156fc57defed9467e6c6942b0c2548996eb075947b585c186df1adf7edd2f9a8050024e2791e7c61389286737f0d0dba3984fd8c95777e54b4d0fe7c4cfb41e3052b2a5d7c235ade0956a705534e1216827953229c22a818fb92842bf64e7270a622542caa30e4bfe95a513c2cd241e2d4d3ee9170cb225ed6a2e5c4062a46980e32028215a32b81fe9b404955c24fca9472dabd10117c8f01a917a7a631ac7574d8aa3c5590e1ea35de0526942f78278cb00ce307bd7fa618b7f48864a716eaf3fcf5d00"/243, 0xf3}], 0x1}, 0x24000014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.23832507s ago: executing program 8 (id=5461): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}]}}, &(0x7f00000001c0)=""/20, 0x32, 0x14, 0x1, 0x5, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x3eda65d110a8c4d1, 0x18, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0xd, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0x10, 0xa44}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r4, &(0x7f0000006340)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1}}], 0x2, 0xc044) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write$binfmt_misc(r4, 0x0, 0x0) 2.237957865s ago: executing program 8 (id=5462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000000)=[@cr4={0x1, 0x200026}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.954339551s ago: executing program 9 (id=5131): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0000001000"/20], 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='&C'], 0x1c}, 0x1, 0x0, 0x0, 0x45a3c1901f775339}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000200)={{0x2, 0x3, 0x81, 0x5, 0x3, 0x3}, 0x238, [0xe, 0x4, 0xc, 0x2f7a, 0x6, 0x1, 0x636170bb, 0xfffffffa, 0x3, 0x1ff, 0x1, 0x0, 0x8001, 0xec9, 0x1, 0x7fff, 0x28, 0x8, 0xeb71, 0xc2c, 0x7, 0x901d, 0x3, 0x8, 0x6, 0xfffffff5, 0xfff, 0x10000, 0x4, 0x81, 0x5, 0x0, 0x5, 0x0, 0x9, 0x10001, 0x80000000, 0x6, 0xffffaef9, 0x3, 0x8001, 0xa, 0x4, 0xd9d, 0xf4c6, 0x0, 0xb, 0x5, 0x8001, 0x8, 0x1, 0x4, 0xb59, 0x4, 0x200, 0x8, 0x1, 0xa, 0xb8, 0x6aa2, 0x9, 0x10, 0x1, 0xc3, 0x6, 0x3, 0x4, 0xfffffffd, 0x9, 0xd, 0x5, 0x7ff, 0x4, 0x2, 0x8, 0x2, 0x4, 0xfff, 0x2, 0x1d, 0x9, 0x2, 0x1, 0x7, 0x9, 0x0, 0x5, 0x4, 0x8, 0x10001, 0x9, 0x2, 0x4, 0xfffffff7, 0x6, 0x10001, 0x5, 0x1, 0x5, 0x5, 0x3, 0x4, 0x800, 0x5, 0x2, 0x7, 0xffffffff, 0xfffffffa, 0x8, 0xd, 0x7fffffff, 0x6, 0x5, 0x2, 0x3eb0, 0x8, 0x2, 0xf1, 0x286, 0xe, 0x2, 0x4, 0x7ff, 0xfffffffc, 0x2, 0x5, 0x8, 0x42e, 0x80, 0xb35, 0x3, 0x9, 0xd, 0x4, 0x7, 0x0, 0x2, 0x3, 0x80000001, 0x2, 0x6, 0x0, 0xe5a, 0x116a, 0x40, 0x7, 0x6, 0x6, 0x8001, 0x9, 0x80, 0x4df, 0x9, 0x8, 0xb9bc, 0x1, 0x9, 0x3ff, 0x3, 0x9ad, 0xc83, 0xf, 0xffe00000, 0x99a, 0x76f4339d, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x7, 0x5000, 0x5, 0x5, 0x8, 0xe7f, 0x6, 0x4, 0x245, 0x8, 0xfff, 0xffff8000, 0x9, 0xb47d, 0x3, 0x7, 0x2, 0x8, 0x3, 0x8, 0xb, 0x4, 0x9, 0x1, 0x419b, 0x4, 0xffff, 0x3, 0xe, 0x1000, 0x5, 0x0, 0x8000, 0x8000, 0x9, 0x3, 0xfffffffe, 0xe, 0x5, 0x2be8, 0x7a1b, 0x9, 0x3, 0x0, 0xce, 0x2, 0x8001, 0x80000000, 0x1, 0x7, 0x10, 0xe3, 0x9, 0x200, 0x6, 0xe, 0x4, 0x6, 0x2, 0x0, 0x8, 0x10, 0x8, 0x4, 0x1, 0x7, 0x0, 0xfffffff3, 0x9, 0x2, 0x1, 0x7, 0x5, 0x3ff, 0x0, 0x0, 0x2, 0x8f6, 0x71cb4757, 0x4, 0xffff0000, 0x0, 0xc, 0x2, 0x21, 0x7, 0x8, 0x10000, 0x3ff, 0x6, 0x400, 0x7, 0x10000, 0x1800, 0x4, 0x7, 0x4, 0x9, 0x0, 0x40, 0x7, 0x200, 0x1, 0xe, 0xb23e, 0x80000000, 0xfb0, 0xa47, 0x2, 0xfffffffa, 0x1, 0x4, 0x6cf7, 0x4, 0x8836, 0x5, 0xfffffffd, 0x0, 0xa, 0xfff, 0x3, 0x9, 0x749678d3, 0x401, 0xf, 0x7, 0x106, 0xdf, 0xe, 0x3, 0x0, 0x401, 0xfffffb0b, 0xaa1f, 0x7, 0x8, 0x80000001, 0x6, 0x8, 0x9, 0x4, 0x5, 0x9, 0x3b9f, 0xecd, 0xfffffffe, 0x6, 0xfffffffc, 0x10000, 0x4, 0x200, 0x1ff, 0x3, 0x200, 0x100, 0xffff037a, 0x3, 0x8, 0xfffffffb, 0x0, 0xffff8001, 0xffffffa5, 0x7, 0xffff, 0x10000, 0x0, 0x4, 0x8, 0x2, 0x8000, 0x10001, 0x5, 0xb, 0x6, 0x0, 0xff, 0x65b30741, 0xa589, 0x2, 0xee, 0x8000, 0xe, 0x5, 0x2, 0x4, 0x9, 0x2, 0x8001, 0xfffffbac, 0x1000, 0x7, 0xffffffb1, 0x1, 0x5, 0x8, 0x2213, 0x9, 0x12c, 0x7, 0x5, 0x6e, 0x5, 0x10000, 0x5, 0x7, 0x7f, 0x9, 0x9, 0x4, 0x8, 0x0, 0x34cc, 0x8d0, 0x5, 0x5, 0x6, 0x7, 0x4, 0x4, 0x9, 0x43, 0x8, 0x74, 0x8, 0xfffffffb, 0x10001, 0x2, 0x3, 0x5, 0x3, 0xe9, 0x3ff, 0x0, 0xb, 0x200, 0xff, 0x8000000, 0x6, 0x80d, 0x6, 0x1000, 0x3, 0x4, 0x800, 0x80000001, 0x7, 0x1ff, 0x749, 0x4, 0x3, 0x401, 0x9, 0x81, 0x0, 0x0, 0x2, 0x9, 0xf, 0x7d4, 0x3, 0x2, 0x1, 0x3, 0x3, 0xf3e, 0x3d, 0x8, 0x1, 0x2, 0x4, 0x6, 0xc5ab, 0x0, 0x7, 0x0, 0x78a30d9a, 0xb87e, 0x80, 0x80000000, 0x401, 0x4, 0x8, 0x3, 0x100, 0x2, 0x4, 0x40, 0x6, 0x28d, 0xff, 0xe, 0x2, 0x10000000, 0x1, 0xffffffff, 0xfffffffc, 0xfff, 0x5f8, 0x400, 0xfffffffe, 0xfff, 0xf840, 0x8, 0x5, 0x400, 0x7fffffff, 0x5, 0x4, 0x80000001, 0xa, 0x1, 0xfffffe01, 0x3ff, 0x6, 0x8, 0x5ac8, 0x1, 0x7, 0x6, 0x1ff, 0x6, 0x5, 0x7f, 0x5, 0x5, 0x2, 0x101, 0x80000001, 0xcf, 0x1, 0x9, 0x7fff, 0x34, 0x7, 0xa44, 0x8, 0x10001, 0x3ff, 0x7, 0x5, 0x4, 0x0, 0x6, 0x797, 0xb0e8, 0xffffff00, 0x4, 0x6, 0x5, 0x80000000, 0x5f058163, 0x8, 0x4a35, 0xe, 0x90000000, 0x800, 0x6, 0x8001, 0x2, 0x3, 0x800, 0x6, 0x0, 0x1, 0x4, 0x4b56, 0x400, 0x5, 0x0, 0x42b15c4a, 0x5, 0x0, 0x3, 0x800, 0x100, 0x5, 0x8, 0x1, 0x0, 0x4, 0x7f, 0x6, 0x533, 0x5, 0x5, 0x3, 0xc2fc, 0xd599, 0x0, 0xffffffff, 0xf, 0x5, 0x1000, 0x7, 0x5, 0x1ff, 0x3, 0x1847, 0x2, 0x7, 0x9, 0x5, 0x6ea3, 0x6, 0x0, 0x2, 0x3, 0x5, 0xfffffffe, 0xa27f, 0x3, 0xfff, 0x500, 0xbf, 0x1d, 0x8, 0x9, 0xd4f, 0x2, 0x0, 0x63ff8430, 0x1ff, 0x598e, 0x6, 0x6dc3, 0x7, 0x5, 0x8, 0x1000, 0x400, 0x6, 0x1c000, 0x7897, 0x401, 0x9, 0x4, 0x100, 0x5, 0x3, 0xff, 0x9, 0x4, 0x1ff, 0x6, 0x0, 0x4, 0x100, 0x2, 0xfffff800, 0x3, 0x7, 0x8001, 0x2, 0x9, 0x3, 0x673, 0x3, 0x3, 0xab9, 0x9, 0x8, 0x7, 0xb8, 0x6, 0xfffffffc, 0x0, 0x400, 0xd8e8, 0x10, 0x7, 0x6, 0x1, 0x0, 0x81, 0x3, 0x6, 0x10, 0x9, 0x6, 0xffffffff, 0x205d36e4, 0x40, 0x5, 0x8, 0x2, 0x5, 0x0, 0xefe2, 0xe, 0x3, 0x2b, 0xde, 0x9, 0xa, 0x0, 0x80000000, 0x9, 0x7fff, 0x6, 0xaf, 0x6, 0x0, 0x2, 0x101, 0x3, 0x930, 0xfffffffc, 0x4, 0x7, 0x8, 0xd7eb, 0x8, 0xdb, 0x10001, 0x3, 0x6, 0x33, 0x81, 0x2, 0xf287, 0x3, 0xb3f, 0x1, 0x8f9, 0x9, 0x80000000, 0x2, 0x3, 0x9, 0x9, 0xffff, 0x8, 0x0, 0x10000, 0x5, 0xac, 0x9a88, 0x7, 0x5, 0x81, 0x5, 0x7f, 0x1, 0x80000001, 0x4, 0x0, 0x3, 0x0, 0x4, 0x3, 0x2, 0x3, 0xffff, 0x1d95, 0x2, 0x5, 0x7fff, 0xfffffffe, 0x21, 0xfffffff9, 0x0, 0x8, 0x8, 0x2, 0x8001, 0xe, 0x9, 0x946, 0x33d8, 0x5, 0x57, 0x4, 0x1, 0x97, 0xc8, 0x0, 0xc76, 0x8, 0x3ff, 0x9, 0x5d0ae1a, 0x5322, 0x1, 0x3, 0xa, 0xf, 0x3, 0x2, 0x9, 0x4, 0x40, 0x8, 0x100, 0x2, 0x4ae, 0x800, 0xfd, 0x197, 0xfffffffd, 0xfffffff9, 0x0, 0x8, 0x5e3, 0x7fffffff, 0xd1b3, 0x7, 0x3ee, 0x0, 0x1, 0x8000, 0x7, 0x101, 0x0, 0x4e, 0x1, 0x1, 0x7fff, 0x5, 0x8a, 0x8, 0x4, 0xc, 0x6, 0x2, 0x8, 0xfffffff8, 0x2, 0x5, 0x3606f9d3, 0xe25b, 0x1, 0x8, 0x6, 0xfffff001, 0x2, 0x9, 0x0, 0x0, 0x5, 0x7, 0x6, 0x7fffffff, 0x80, 0x3, 0x7, 0x8000, 0x3, 0x5, 0x7f, 0xfffff258, 0x7fff, 0xd0, 0x0, 0x9, 0x1, 0x3, 0x4, 0x3, 0x7, 0x1, 0x4, 0x5, 0x80000000, 0xd9, 0x3, 0xa, 0x8, 0x6, 0x8, 0x80, 0x612be0f7, 0x0, 0x8, 0x5, 0x0, 0x1, 0x95d1, 0x4, 0x2, 0xfffffff8, 0x80000001, 0x0, 0x10001, 0x7, 0xffff1c05, 0x6, 0x6, 0xd06, 0x1df, 0x5, 0x5, 0x2, 0x1, 0xc, 0xd, 0xf607, 0x8d, 0x2, 0x2, 0x2, 0xf406, 0x6, 0x747, 0x8e, 0x5, 0xb, 0x5, 0x5, 0x7fffffff, 0x21, 0x8, 0xffffffff, 0x200, 0x5, 0x8001, 0x2, 0x4, 0x5, 0xa437, 0x8, 0x1, 0x0, 0x1, 0x34e00, 0x2, 0x401, 0x9, 0x2b55216, 0x3, 0x66, 0x3, 0x6, 0xe, 0x5, 0x5, 0x400, 0x2, 0x40, 0x0, 0xffffffff, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x5, 0x3486, 0x7, 0x62a, 0x1, 0x80, 0x8001, 0x8, 0x0, 0x7, 0x1, 0x8, 0x4, 0x712, 0x5, 0xfffffffd, 0x3d3c, 0x29, 0x8, 0x2ea, 0x5, 0x4, 0x4, 0x7ff, 0x59, 0x4, 0x16000, 0x5, 0x1, 0x7ff, 0x7, 0x8, 0x48000000, 0x9, 0x7fffffff, 0x9, 0x2, 0x1, 0x1f22, 0x7, 0x1, 0x7, 0x5, 0x8, 0x7, 0x0, 0x58dc, 0xfffffff8, 0x1, 0x6, 0x7434, 0x8, 0x2, 0x8, 0x1, 0x0, 0x2e91, 0x4, 0x1, 0x4, 0x1ff, 0x8, 0x4, 0xa, 0x7fff, 0x5, 0xfffffc08, 0xd7, 0x7, 0x8001, 0x2941, 0x6, 0x7, 0x10001, 0x1000, 0x6, 0x3ff, 0x7, 0x8001, 0x9, 0x1, 0x3ff, 0x100, 0x5bc, 0x1, 0x3, 0x27, 0x5, 0x1, 0x7ff, 0xf11e, 0x7, 0x6, 0x80, 0x9, 0x9, 0x2, 0x4f, 0x3, 0x0, 0x2, 0x2, 0x1, 0x1, 0x4, 0x9, 0x740, 0xfffffff8, 0x6]}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000000140)={0x68, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0xc, 0x6, 0x0, 0x8]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x9, 0x2]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0xd3]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 1.808211902s ago: executing program 8 (id=5463): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x9, 0xf3, {0xf3, 0x23, "52de7dfd336184223af00359c44efe58d150004024ca6ccdb89069ae3b8743fa679bcc64cbedb9415248cd083a79db084cfe14d013f29d667fbe3ca81856d73192e2a686de40188821c3ecafe4f326ea25e0e71f8831a0f01843fbc9200ab5a14f4a13317fc7651b88a1e0fca4c8f0d6f5c38a8bb4bd3c7851fc1558d4c0e5ee021891748976c638d54329fa1baf456fb521213800d8b0954d0f51136728e27a6255acf388579abd7ca8aa959781d3be154cdb5a3762e3c2fcf9c1af99c47f834203c9e5037335bd6b490bd3d364b8ddc70d4ed393cabc29b3bd24872b16172db8c5ee87c52a4a12fffc9c395cf3dc519f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x40, 0x15, 0x3a, "9caec862c6d1e8f7e9a5828a45241ef2baa1538347f4aebaa778d5590bfe083cc06a57ed411acd979721cb948f93b8da3788be2f172be9bc81d5"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000240)={0xc0, 0x5, 0x1, "8c"}, &(0x7f00000002c0)={0x40, 0x5, 0x4, "b674df3e"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 1.416742461s ago: executing program 6 (id=5465): r0 = socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) (async) clock_gettime(0x3, &(0x7f0000000400)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x10000, r2, r2, 0x2b4988, 0x2, 0x9, 0xb0561}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) (async, rerun: 32) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r4, 0x560b, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtfilter={0x48, 0x2c, 0xd27, 0x70b52c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc}, {0x0, 0xfff3}, {0x4, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="856f12e5d7a4"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc010}, 0x4800) (async) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x5, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc810}, 0x40040) 1.416386951s ago: executing program 6 (id=5466): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) (async) r5 = dup2(r4, r3) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) write$nci(r5, &(0x7f0000000100)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x6, {0x6, 0x9}}, 0x5) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) sendmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4854}, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000001c0)={0x2c9f, 0xfff, 0x0, 0x81, 0x2, 0x0, [{0x9, 0x5, 0x4, '\x00', 0x3602}, {0x0, 0x6000000000000000, 0x6720, '\x00', 0x80}]}) 1.32180396s ago: executing program 6 (id=5467): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000001840)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x01\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86zm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\x00\x91.~\xf8\x11\x91\x13L:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\xcc\xe8\ba\x19\x00\x84\xc9\xe4a4\x83\xf1\xa1^\xcb\xb3\xd5\n\xbc\xb9\x9a\x9d?8\xe3=\xb3{\xb5\xf4\xc0\xef\xfe\xe0:\xcb\xca\x95\xc2\x0e\x89\x89\'T\xde\xd5\xba3,\xd2f\xe2\r\x96K\x83\x8a\x16 \x9a\x9200}Y\xbc\xd0\x14z\xba\xca\x10\x98\x16\xff\xa5\xa50\x96&\xfd\xb7\xb0o\x8e}\xfe\xfa$i\xc4\xa1\xde\xc8.\xc4\x1bP\x01i\xc9\x88\xb5_\x00\xfa\xc8\x8aXVF\x16\\\xac/\xb5\x88%\xebf\xaa\xc9\xf1E\xf0\x18\t\x80\xfd\xa4\xe0\xde\x14J@2U\aR\x89\xc6g(\xc8\x85\x17B\x16m\xfe\x05MR7\x16\xc1\x84l\xed\x84\x97\xc0\xda9\x9b\x11\x91\xef\xd7:\xc0@d\x0e\x14\x0f8\xf1$;\x8dcF\x03A\x1fi\xc6T\xe1\x95\x16V\x19e\x14\xd4\xdf\xfb\xba\x90\xcdyq^0x0}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x882, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', r1, 0x4, 0x4, 0x5, 0x36, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x200, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_setlink={0x74, 0x13, 0x100, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x0, 0x8000}, [@IFLA_PHYS_PORT_ID={0x15, 0x22, "b0a030d7f6c0578f8d1dc5fc69ff911d96"}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_RX_QUEUES={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) (async) open(&(0x7f0000000000)='./file0\x00', 0x882, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', r1, 0x4, 0x4, 0x5, 0x36, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x200, 0x8}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_setlink={0x74, 0x13, 0x100, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x0, 0x8000}, [@IFLA_PHYS_PORT_ID={0x15, 0x22, "b0a030d7f6c0578f8d1dc5fc69ff911d96"}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_RX_QUEUES={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 930.428293ms ago: executing program 6 (id=5471): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xed, 0xa00, &(0x7f0000000240)="e4e1ad7532fb861460b28632345e6ef25f4690a6b34a9da3efedad70c2a6e5c9ef16c33e04366d6b958d63a9293a1c1dc94e9f4c6bf3fd2d6e5f71c15edeb0f900a01c2a0f9bd17e0d5f4bcf3cf0a94f32b340bca0372ff7f94d467f1168681f70dc14e9cc1f4be902ea3df4716f56edad993a83374f6ffcb537cc518531e258df55f742e9db22e1088baa44a3f8f5d49f4f3ad6693c6702a99573f179c32aa586f1591c57708175f1878aaea5987694d64305fe1f4850684a39085d519d4bb76727c136dca448cd4e3561de8fb6272b1e309b5b995644908175dc6755e89bed9c6e079f47530bd71109bfcd09"}) 848.425438ms ago: executing program 38 (id=5471): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xed, 0xa00, &(0x7f0000000240)="e4e1ad7532fb861460b28632345e6ef25f4690a6b34a9da3efedad70c2a6e5c9ef16c33e04366d6b958d63a9293a1c1dc94e9f4c6bf3fd2d6e5f71c15edeb0f900a01c2a0f9bd17e0d5f4bcf3cf0a94f32b340bca0372ff7f94d467f1168681f70dc14e9cc1f4be902ea3df4716f56edad993a83374f6ffcb537cc518531e258df55f742e9db22e1088baa44a3f8f5d49f4f3ad6693c6702a99573f179c32aa586f1591c57708175f1878aaea5987694d64305fe1f4850684a39085d519d4bb76727c136dca448cd4e3561de8fb6272b1e309b5b995644908175dc6755e89bed9c6e079f47530bd71109bfcd09"}) 799.536984ms ago: executing program 7 (id=5473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x10, 0x4}, {0x5, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x1f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) 668.233559ms ago: executing program 7 (id=5474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x15c, 0x8, 0xa, 0x101, 0x0, 0x2000000, {0xa, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2954fb1b7308d9b4}]}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xec}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x2d, 0x6, "5a28d2f4e3801f4db591c3855d637d181ca8e32898eb5d32fa4d731d7313b84e242ecb9ebf375cc459"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2cc}}, 0x0) 617.223438ms ago: executing program 7 (id=5475): r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4059, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1000}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newqdisc={0x180, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x150, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x2}, [@TCA_NETEM_DELAY_DIST={0x61, 0x2, "f72cc1e20fe5eb9cdcc25e0eb67ed7f15e911f9b61f2cd9245a501e3754fe01bd66d64180eb1543afe76428a59ce2a9bd3b11f5d9bcb24d62a014f29270d7cea27d24b4911159c38e2a5dc8250e47fba1c407fc6c134a46e99a8d404b5"}, @TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xd340, 0x0, 0x3, 0x2, 0xf}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x8, 0x3, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x4, 0x0, 0x3ff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x9, 0x10000, 0x8}}]}, @TCA_NETEM_RATE={0x14, 0x6, {0xf5, 0x4a4, 0x400, 0x8a82}}, @TCA_NETEM_CORR={0x10, 0x1, {0x7, 0xffff, 0x9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x6, 0x9}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x227, 0x4}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x1ae}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xd46e, 0x3, 0x7, 0x1, 0x9, 0x7}}]}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x20003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) splice(r0, 0x0, r1, 0x0, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r8 = io_uring_setup(0x27, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x20) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600a7"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0407ff02aaaaaaaa"], 0x102) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080), 0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, 0x2024}) 472.272705ms ago: executing program 3 (id=5472): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$cgroup(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000200), 0x40000, &(0x7f0000000240)={[{@noprefix}, {@name}, {@name}]}) get_robust_list(0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB="2c8499d30f5ed4472e77252ded6d660f1995970b9a5945fe07c1445391d13bb0025bc90c", @ANYBLOB="9da7ef9b13d499ce6a5f3c4c13de28ae65b007ff5b0ba115edf823677b7aa6b8caab94b8b276a888c8f9d40b68b7be54a2f167464421e563", @ANYRES32=r2]) 361.730641ms ago: executing program 7 (id=5476): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/kernel/vmcoreinfo', 0x400, 0xe4) read$FUSE(r3, &(0x7f0000000b80)={0x2020}, 0x7a2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x59) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x59) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r6, r5, 0x4, r5}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0), 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000020017000000090006"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa000086dd61bc4a0600462f00fe80000000550e81f1ad70b15bc575ef3ba5d6951300000000000000000000bbfe8000000000000000000000000000aa0c2088be0000000101008100db050000400088a888be000000031c"], 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x16, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5e32}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0xd, 0x7, 0x2, 0x18, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @ldst={0x0, 0x1, 0x6, 0x4, 0x8, 0x100, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x2cfad50290f02647, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) 0s ago: executing program 7 (id=5477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x20, 0x8, 0xa, 0x1ff, {{0x1a, 0x4, 0x1, 0x24, 0x68, 0x65, 0x0, 0x40, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@noop, @timestamp_addr={0x44, 0x4c, 0xfe, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x793}, {@remote, 0x7}, {@local, 0x7}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast}, {@remote, 0x2}]}, @ra={0x94, 0x4}]}}}}}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x4, 0x5b, 0x200c, r1, 0x8, '\x00', r2, r3, 0x0, 0x1, 0x5, 0xf}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x3, 0x1d}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) kernel console output (not intermixed with test programs): miscuous mode [ 319.523648][T19734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.531272][T19734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.537034][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.540613][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.545107][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.549048][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.581339][T19779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.599953][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.604512][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.620905][ T9532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.623834][ T9532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.677914][T19900] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 319.744375][T19779] veth0_vlan: entered promiscuous mode [ 319.752873][T19779] veth1_vlan: entered promiscuous mode [ 319.769360][T19779] veth0_macvtap: entered promiscuous mode [ 319.775978][T19779] veth1_macvtap: entered promiscuous mode [ 319.785205][T19779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.791212][T19779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.797180][ T1153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.800139][ T1153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.803615][ T1153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.807627][ T1153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.990555][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.993249][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.026133][ T9532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.039013][ T9532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.072502][T19912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4452'. [ 320.174088][T19922] overlayfs: failed to resolve './file0': -2 [ 320.379157][T19933] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4463'. [ 320.507741][ T5937] Bluetooth: hci0: command tx timeout [ 320.651793][T19947] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 320.654058][T19947] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 320.659282][T19947] vhci_hcd vhci_hcd.0: Device attached [ 320.661729][T19948] vhci_hcd: cannot find the pending unlink 1023 [ 320.663893][T19948] vhci_hcd: connection closed [ 320.664059][ T9527] vhci_hcd vhci_hcd.7: stop threads [ 320.669237][ T9527] vhci_hcd vhci_hcd.7: release socket [ 320.671801][ T9527] vhci_hcd vhci_hcd.7: disconnect device [ 320.678257][ T5937] Bluetooth: hci1: command tx timeout [ 321.163709][T19962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=19962 comm=syz.6.4473 [ 321.260479][T19968] CUSE: info not properly terminated [ 321.264360][T19966] team0 (unregistering): Port device team_slave_0 removed [ 321.275204][T19966] team0 (unregistering): Port device team_slave_1 removed [ 321.311864][T19969] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 321.315701][T19969] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 321.445824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.473135][T19985] could not open pipe file descriptor [ 321.526400][T19988] fuse: Bad value for 'fd' [ 321.552568][T19989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4482'. [ 321.847997][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4494'. [ 321.857215][T20020] loop5: detected capacity change from 0 to 7 [ 321.865117][T20020] Dev loop5: unable to read RDB block 7 [ 321.868962][T20020] loop5: unable to read partition table [ 321.872183][T20020] loop5: partition table beyond EOD, truncated [ 321.874966][T20020] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 321.922939][T19930] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 321.925177][T19930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.929418][T19930] vhci_hcd vhci_hcd.0: Device attached [ 322.021404][T20028] vhci_hcd: connection closed [ 322.021748][ T61] vhci_hcd vhci_hcd.0: stop threads [ 322.028897][ T61] vhci_hcd vhci_hcd.0: release socket [ 322.030748][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 322.223943][ T8259] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 322.227883][T20037] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.4501'. [ 322.384602][ T8259] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 322.388649][ T8259] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.392368][ T8259] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.396006][ T8259] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 322.401108][ T8259] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 322.404452][ T8259] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 322.407383][ T8259] usb 7-1: Manufacturer: syz [ 322.417283][ T8259] usb 7-1: config 0 descriptor?? [ 322.724735][ T5937] Bluetooth: hci0: command tx timeout [ 322.847406][T20050] netlink: 'syz.0.4504': attribute type 11 has an invalid length. [ 322.850011][T20050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4504'. [ 322.992651][ T8259] usbhid 7-1:0.0: can't add hid device: -71 [ 322.995176][ T8259] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 323.015221][ T8259] usb 7-1: USB disconnect, device number 21 [ 323.293655][ T40] kauditd_printk_skb: 282 callbacks suppressed [ 323.293667][ T40] audit: type=1400 audit(5744470836.584:10603): avc: denied { read write } for pid=20071 comm="syz.7.4512" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 323.304217][ T40] audit: type=1400 audit(5744470836.584:10604): avc: denied { open } for pid=20071 comm="syz.7.4512" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 323.312293][ T40] audit: type=1400 audit(5744470836.584:10605): avc: denied { ioctl } for pid=20071 comm="syz.7.4512" path="socket:[88264]" dev="sockfs" ino=88264 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.321009][ T40] audit: type=1400 audit(5744470836.584:10606): avc: denied { bind } for pid=20071 comm="syz.7.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.340603][ T40] audit: type=1400 audit(5744470836.584:10607): avc: denied { ioctl } for pid=20071 comm="syz.7.4512" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 323.350147][ T40] audit: type=1400 audit(5744470836.593:10608): avc: denied { create } for pid=20070 comm="syz.6.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.357081][ T40] audit: type=1400 audit(5744470836.593:10609): avc: denied { write } for pid=20070 comm="syz.6.4513" path="socket:[88267]" dev="sockfs" ino=88267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.373673][ T40] audit: type=1400 audit(5744470836.649:10610): avc: denied { create } for pid=20075 comm="syz.7.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.380672][ T40] audit: type=1400 audit(5744470836.659:10611): avc: denied { setopt } for pid=20075 comm="syz.7.4514" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.397491][ T40] audit: type=1400 audit(5744470836.677:10612): avc: denied { read write } for pid=20075 comm="syz.7.4514" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 323.640835][T20087] input: syz1 as /devices/virtual/input/input77 [ 323.672601][T20091] overlayfs: failed to resolve './file1': -2 [ 323.695095][T20087] netlink: 'syz.2.4516': attribute type 39 has an invalid length. [ 323.713753][T20087] veth0_macvtap: left promiscuous mode [ 323.900005][T20111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4527'. [ 323.922920][T20111] bond1 (unregistering): Released all slaves [ 323.935882][T20116] overlayfs: failed to resolve './file1': -2 [ 323.984418][T20119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4529'. [ 323.987534][T20119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4529'. [ 324.151296][T20127] SELinux: Context system_u:object_r:cpu_online_t:s0 is not valid (left unmapped). [ 324.156587][T20142] overlayfs: failed to resolve './file1': -2 [ 324.228203][ T5937] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 324.598447][T20197] random: crng reseeded on system resumption [ 324.612462][T20193] netlink: 'syz.7.4556': attribute type 4 has an invalid length. [ 324.783123][T20165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4544'. [ 324.943050][ T5937] Bluetooth: hci0: command tx timeout [ 325.300425][T20265] team0 (unregistering): Port device team_slave_0 removed [ 325.308215][T20265] team0 (unregistering): Port device team_slave_1 removed [ 325.345620][T20267] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 325.350000][T20267] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 325.384530][T20271] netlink: 'syz.6.4584': attribute type 1 has an invalid length. [ 325.398149][T20271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.430940][T20271] bond2: (slave geneve2): making interface the new active one [ 325.434647][T20271] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 325.475476][ T9] IPVS: starting estimator thread 0... [ 325.593893][T20282] IPVS: using max 44 ests per chain, 105600 per kthread [ 325.818812][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4596'. [ 325.822792][T20309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4596'. [ 325.947493][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4597'. [ 325.999393][T20321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 326.006323][T20321] overlayfs: failed lookup in lower (newroot/50, name='file0', err=-40): overlapping layers [ 326.014725][T20321] overlayfs: failed lookup in lower (newroot/50, name='file0', err=-40): overlapping layers [ 326.020045][T20321] overlayfs: failed lookup in lower (newroot/50, name='file0', err=-40): overlapping layers [ 326.243707][T20328] FAULT_INJECTION: forcing a failure. [ 326.243707][T20328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.248141][T20328] CPU: 1 UID: 0 PID: 20328 Comm: syz.7.4603 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.248160][T20328] Tainted: [L]=SOFTLOCKUP [ 326.248164][T20328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 326.248170][T20328] Call Trace: [ 326.248175][T20328] [ 326.248180][T20328] dump_stack_lvl+0x100/0x190 [ 326.248209][T20328] should_fail_ex.cold+0x5/0xa [ 326.248224][T20328] _copy_from_user+0x2e/0xd0 [ 326.248246][T20328] copy_msghdr_from_user+0x9f/0x4f0 [ 326.248268][T20328] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 326.248291][T20328] ___sys_sendmsg+0x106/0x1e0 [ 326.248307][T20328] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.248339][T20328] __sys_sendmsg+0x170/0x220 [ 326.248351][T20328] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.248371][T20328] do_syscall_64+0x106/0xf80 [ 326.248383][T20328] ? clear_bhb_loop+0x40/0x90 [ 326.248397][T20328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.248409][T20328] RIP: 0033:0x7f5aa919c799 [ 326.248418][T20328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.248429][T20328] RSP: 002b:00007f5aaa043028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.248440][T20328] RAX: ffffffffffffffda RBX: 00007f5aa9415fa0 RCX: 00007f5aa919c799 [ 326.248447][T20328] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 326.248454][T20328] RBP: 00007f5aaa043090 R08: 0000000000000000 R09: 0000000000000000 [ 326.248461][T20328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.248467][T20328] R13: 00007f5aa9416038 R14: 00007f5aa9415fa0 R15: 00007ffc8f4dddf8 [ 326.248481][T20328] [ 326.298969][T20330] delete_channel: no stack [ 326.319361][T20330] delete_channel: no stack [ 326.474678][T20344] overlayfs: missing 'lowerdir' [ 326.621741][T20350] openvswitch: netlink: Flow actions attr not present in new flow. [ 326.812021][T20361] xfrm0 speed is unknown, defaulting to 1000 [ 326.815491][T20361] wg1 speed is unknown, defaulting to 1000 [ 326.862237][T20363] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 326.907417][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.910384][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.361335][T20378] gfs2: error -5 reading superblock [ 327.380442][T20380] qrtr: Invalid version 0 [ 327.486921][T20389] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 327.502064][T20389] tmpfs: Unknown parameter 'nr´ @é:7úg' [ 327.762511][T20398] FAULT_INJECTION: forcing a failure. [ 327.762511][T20398] name failslab, interval 1, probability 0, space 0, times 0 [ 327.767816][T20398] CPU: 3 UID: 0 PID: 20398 Comm: syz.2.4630 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.767845][T20398] Tainted: [L]=SOFTLOCKUP [ 327.767851][T20398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 327.767860][T20398] Call Trace: [ 327.767869][T20398] [ 327.767878][T20398] dump_stack_lvl+0x100/0x190 [ 327.767910][T20398] should_fail_ex.cold+0x5/0xa [ 327.767933][T20398] ? tomoyo_encode2+0xfb/0x3c0 [ 327.767956][T20398] should_failslab+0xc2/0x120 [ 327.767999][T20398] __kmalloc_noprof+0xe0/0x850 [ 327.768024][T20398] ? d_absolute_path+0x136/0x1b0 [ 327.768054][T20398] tomoyo_encode2+0xfb/0x3c0 [ 327.768086][T20398] tomoyo_encode+0x29/0x50 [ 327.768107][T20398] tomoyo_realpath_from_path+0x18c/0x690 [ 327.768136][T20398] tomoyo_path_number_perm+0x23c/0x580 [ 327.768154][T20398] ? tomoyo_path_number_perm+0x22e/0x580 [ 327.768172][T20398] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 327.768217][T20398] ? find_held_lock+0x2b/0x80 [ 327.768237][T20398] ? __fget_files+0x215/0x3d0 [ 327.768256][T20398] ? hook_file_ioctl_common+0x146/0x410 [ 327.768285][T20398] ? __fget_files+0x21f/0x3d0 [ 327.768305][T20398] security_file_ioctl+0xd3/0x230 [ 327.768329][T20398] __x64_sys_ioctl+0xb7/0x210 [ 327.768357][T20398] do_syscall_64+0x106/0xf80 [ 327.768374][T20398] ? clear_bhb_loop+0x40/0x90 [ 327.768398][T20398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.768418][T20398] RIP: 0033:0x7fa3ca39c799 [ 327.768433][T20398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.768448][T20398] RSP: 002b:00007fa3cb1f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.768467][T20398] RAX: ffffffffffffffda RBX: 00007fa3ca615fa0 RCX: 00007fa3ca39c799 [ 327.768479][T20398] RDX: 0000200000000400 RSI: 0000000000004b72 RDI: 0000000000000003 [ 327.768489][T20398] RBP: 00007fa3cb1f3090 R08: 0000000000000000 R09: 0000000000000000 [ 327.768499][T20398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.768509][T20398] R13: 00007fa3ca616038 R14: 00007fa3ca615fa0 R15: 00007ffdfb1cb9a8 [ 327.768534][T20398] [ 327.857709][T20398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.994385][T20408] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 328.005252][T20408] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4635'. [ 328.015922][T20410] overlayfs: missing 'lowerdir' [ 328.648805][T20424] tmpfs: Bad value for 'mpol' [ 328.651371][ T40] kauditd_printk_skb: 338 callbacks suppressed [ 328.651382][ T40] audit: type=1400 audit(5744470841.601:10951): avc: denied { execmem } for pid=20423 comm="syz.7.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 328.768395][ T40] audit: type=1400 audit(5744470841.713:10952): avc: denied { create } for pid=20423 comm="syz.7.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 328.776251][ T40] audit: type=1400 audit(5744470841.713:10953): avc: denied { mounton } for pid=20423 comm="syz.7.4643" path="/47/file1" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 328.784825][ T40] audit: type=1400 audit(5744470841.723:10954): avc: denied { mount } for pid=20423 comm="syz.7.4643" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 328.820614][ T40] audit: type=1400 audit(5744470841.760:10955): avc: denied { setopt } for pid=20427 comm="syz.6.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 328.827734][ T40] audit: type=1400 audit(5744470841.760:10956): avc: denied { create } for pid=20427 comm="syz.6.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 328.829672][T20430] 9p: Unknown access argument 18446744073709551615: -34 [ 328.835095][ T40] audit: type=1400 audit(5744470841.760:10957): avc: denied { write } for pid=20427 comm="syz.6.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 328.846924][ T40] audit: type=1400 audit(5744470841.770:10958): avc: denied { ioctl } for pid=20429 comm="syz.0.4644" path="pid:[4026532719]" dev="nsfs" ino=4026532719 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 328.857328][ T40] audit: type=1400 audit(5744470841.770:10959): avc: denied { append } for pid=20429 comm="syz.0.4644" name="media2" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.866821][ T40] audit: type=1400 audit(5744470841.770:10960): avc: denied { read } for pid=20429 comm="syz.0.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 329.014873][T20448] FAULT_INJECTION: forcing a failure. [ 329.014873][T20448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.020615][T20448] CPU: 2 UID: 0 PID: 20448 Comm: syz.7.4651 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.020645][T20448] Tainted: [L]=SOFTLOCKUP [ 329.020651][T20448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.020660][T20448] Call Trace: [ 329.020667][T20448] [ 329.020675][T20448] dump_stack_lvl+0x100/0x190 [ 329.020707][T20448] should_fail_ex.cold+0x5/0xa [ 329.020730][T20448] _copy_to_user+0x32/0xd0 [ 329.020758][T20448] con_font_op+0xd7d/0x1040 [ 329.020781][T20448] ? __pfx_con_font_op+0x10/0x10 [ 329.020801][T20448] ? __might_fault+0xc5/0x140 [ 329.020824][T20448] ? __might_fault+0xc5/0x140 [ 329.020855][T20448] vt_ioctl+0xde8/0x31a0 [ 329.020882][T20448] ? __pfx_vt_ioctl+0x10/0x10 [ 329.020902][T20448] ? find_held_lock+0x2b/0x80 [ 329.020940][T20448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.020967][T20448] ? __pfx_vt_ioctl+0x10/0x10 [ 329.020991][T20448] tty_ioctl+0x26a/0x1690 [ 329.021011][T20448] ? __pfx_tty_ioctl+0x10/0x10 [ 329.021029][T20448] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 329.021059][T20448] ? __fget_files+0x215/0x3d0 [ 329.021077][T20448] ? hook_file_ioctl_common+0x146/0x410 [ 329.021108][T20448] ? selinux_file_ioctl+0x139/0x290 [ 329.021126][T20448] ? selinux_file_ioctl+0xb4/0x290 [ 329.021147][T20448] ? __pfx_tty_ioctl+0x10/0x10 [ 329.021167][T20448] __x64_sys_ioctl+0x18e/0x210 [ 329.021194][T20448] do_syscall_64+0x106/0xf80 [ 329.021212][T20448] ? clear_bhb_loop+0x40/0x90 [ 329.021233][T20448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.021251][T20448] RIP: 0033:0x7f5aa919c799 [ 329.021267][T20448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.021283][T20448] RSP: 002b:00007f5aaa043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.021300][T20448] RAX: ffffffffffffffda RBX: 00007f5aa9415fa0 RCX: 00007f5aa919c799 [ 329.021311][T20448] RDX: 0000200000000400 RSI: 0000000000004b72 RDI: 0000000000000003 [ 329.021322][T20448] RBP: 00007f5aaa043090 R08: 0000000000000000 R09: 0000000000000000 [ 329.021331][T20448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.021341][T20448] R13: 00007f5aa9416038 R14: 00007f5aa9415fa0 R15: 00007ffc8f4dddf8 [ 329.021366][T20448] [ 329.118812][T20457] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4654'. [ 329.141068][T20457] overlayfs: failed to resolve './file0': -2 [ 329.376937][T20494] ip6t_srh: unknown srh invflags 4000 [ 329.441036][T20508] netlink: 'syz.0.4672': attribute type 21 has an invalid length. [ 329.444911][T20508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.447438][T20508] IPv6: NLM_F_CREATE should be set when creating new route [ 329.449901][T20508] IPv6: NLM_F_CREATE should be set when creating new route [ 329.452099][T20508] IPv6: NLM_F_CREATE should be set when creating new route [ 329.474735][T20508] netlink: 'syz.0.4672': attribute type 21 has an invalid length. [ 329.477561][T20508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.543192][T20506] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 329.574022][T20506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.589854][ T2307] wg1 speed is unknown, defaulting to 1000 [ 329.595031][T20506] netlink: 'syz.6.4674': attribute type 10 has an invalid length. [ 329.597604][T20506] mac80211_hwsim hwsim34 wlan1: left allmulticast mode [ 329.610581][T20506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.619227][T20506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.658456][T20525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4679'. [ 329.770181][T20537] fuse: Unknown parameter 'nd' [ 329.923737][T20554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.166858][T20580] FAULT_INJECTION: forcing a failure. [ 330.166858][T20580] name failslab, interval 1, probability 0, space 0, times 0 [ 330.172321][T20580] CPU: 0 UID: 0 PID: 20580 Comm: syz.2.4700 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.172348][T20580] Tainted: [L]=SOFTLOCKUP [ 330.172354][T20580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.172364][T20580] Call Trace: [ 330.172370][T20580] [ 330.172377][T20580] dump_stack_lvl+0x100/0x190 [ 330.172402][T20580] should_fail_ex.cold+0x5/0xa [ 330.172417][T20580] should_failslab+0xc2/0x120 [ 330.172435][T20580] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 330.172452][T20580] ? __alloc_skb+0x140/0x710 [ 330.172467][T20580] __alloc_skb+0x140/0x710 [ 330.172476][T20580] ? __alloc_skb+0x5b7/0x710 [ 330.172486][T20580] ? __pfx___alloc_skb+0x10/0x10 [ 330.172495][T20580] ? ethnl_parse_header_dev_get+0x35c/0x930 [ 330.172509][T20580] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 330.172522][T20580] netlink_dump+0x19b/0xd30 [ 330.172535][T20580] ? rcu_is_watching+0x12/0xc0 [ 330.172553][T20580] ? __pfx_netlink_dump+0x10/0x10 [ 330.172582][T20580] ? __pfx_ethnl_default_start+0x10/0x10 [ 330.172599][T20580] ? genl_start+0x67a/0x970 [ 330.172624][T20580] __netlink_dump_start+0x6d6/0x990 [ 330.172645][T20580] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 330.172670][T20580] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 330.172712][T20580] ? __pfx_genl_get_cmd+0x10/0x10 [ 330.172726][T20580] ? __pfx_genl_start+0x10/0x10 [ 330.172739][T20580] ? __pfx_genl_dumpit+0x10/0x10 [ 330.172755][T20580] ? __pfx_genl_done+0x10/0x10 [ 330.172777][T20580] ? kasan_save_track+0x14/0x30 [ 330.172799][T20580] ? __kasan_slab_alloc+0x89/0x90 [ 330.172821][T20580] ? __radix_tree_lookup+0x217/0x2b0 [ 330.172844][T20580] genl_rcv_msg+0x471/0x800 [ 330.172861][T20580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.172876][T20580] ? __pfx_ethnl_default_start+0x10/0x10 [ 330.172886][T20580] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 330.172898][T20580] ? __pfx_ethnl_default_done+0x10/0x10 [ 330.172910][T20580] ? __lock_acquire+0x4a5/0x2630 [ 330.172930][T20580] netlink_rcv_skb+0x159/0x420 [ 330.172944][T20580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.172960][T20580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.172979][T20580] ? netlink_deliver_tap+0x1ae/0xcc0 [ 330.172993][T20580] genl_rcv+0x28/0x40 [ 330.173007][T20580] netlink_unicast+0x5aa/0x870 [ 330.173022][T20580] ? __pfx_netlink_unicast+0x10/0x10 [ 330.173041][T20580] netlink_sendmsg+0x8b0/0xda0 [ 330.173057][T20580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.173069][T20580] ? __might_fault+0xc0/0x140 [ 330.173090][T20580] ____sys_sendmsg+0xa54/0xc30 [ 330.173106][T20580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.173127][T20580] ___sys_sendmsg+0x190/0x1e0 [ 330.173144][T20580] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.173181][T20580] __sys_sendmsg+0x170/0x220 [ 330.173193][T20580] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.173214][T20580] do_syscall_64+0x106/0xf80 [ 330.173225][T20580] ? clear_bhb_loop+0x40/0x90 [ 330.173240][T20580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.173251][T20580] RIP: 0033:0x7fa3ca39c799 [ 330.173261][T20580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.173272][T20580] RSP: 002b:00007fa3cb1f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.173284][T20580] RAX: ffffffffffffffda RBX: 00007fa3ca615fa0 RCX: 00007fa3ca39c799 [ 330.173291][T20580] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 330.173298][T20580] RBP: 00007fa3cb1f3090 R08: 0000000000000000 R09: 0000000000000000 [ 330.173304][T20580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.173311][T20580] R13: 00007fa3ca616038 R14: 00007fa3ca615fa0 R15: 00007ffdfb1cb9a8 [ 330.173326][T20580] [ 330.457889][T20596] tmpfs: Bad value for 'mpol' [ 330.461267][T20597] Bluetooth: MGMT ver 1.23 [ 330.513190][T20604] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 330.516966][T20604] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 330.566311][T20609] FAULT_INJECTION: forcing a failure. [ 330.566311][T20609] name failslab, interval 1, probability 0, space 0, times 0 [ 330.571843][T20609] CPU: 2 UID: 0 PID: 20609 Comm: syz.7.4711 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.571872][T20609] Tainted: [L]=SOFTLOCKUP [ 330.571879][T20609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.571890][T20609] Call Trace: [ 330.571898][T20609] [ 330.571905][T20609] dump_stack_lvl+0x100/0x190 [ 330.571938][T20609] should_fail_ex.cold+0x5/0xa [ 330.571961][T20609] should_failslab+0xc2/0x120 [ 330.571989][T20609] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 330.572015][T20609] ? __alloc_skb+0x140/0x710 [ 330.572037][T20609] __alloc_skb+0x140/0x710 [ 330.572052][T20609] ? __alloc_skb+0x5b7/0x710 [ 330.572068][T20609] ? __pfx___alloc_skb+0x10/0x10 [ 330.572084][T20609] ? ethnl_parse_header_dev_get+0x35c/0x930 [ 330.572106][T20609] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 330.572128][T20609] netlink_dump+0x19b/0xd30 [ 330.572147][T20609] ? rcu_is_watching+0x12/0xc0 [ 330.572175][T20609] ? __pfx_netlink_dump+0x10/0x10 [ 330.572207][T20609] ? __pfx_ethnl_default_start+0x10/0x10 [ 330.572225][T20609] ? genl_start+0x67a/0x970 [ 330.572252][T20609] __netlink_dump_start+0x6d6/0x990 [ 330.572276][T20609] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 330.572300][T20609] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 330.572329][T20609] ? __pfx_genl_get_cmd+0x10/0x10 [ 330.572347][T20609] ? __pfx_genl_start+0x10/0x10 [ 330.572360][T20609] ? __pfx_genl_dumpit+0x10/0x10 [ 330.572374][T20609] ? __pfx_genl_done+0x10/0x10 [ 330.572390][T20609] ? kasan_save_track+0x14/0x30 [ 330.572406][T20609] ? __kasan_slab_alloc+0x89/0x90 [ 330.572436][T20609] ? __radix_tree_lookup+0x217/0x2b0 [ 330.572458][T20609] genl_rcv_msg+0x471/0x800 [ 330.572475][T20609] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.572490][T20609] ? __pfx_ethnl_default_start+0x10/0x10 [ 330.572501][T20609] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 330.572512][T20609] ? __pfx_ethnl_default_done+0x10/0x10 [ 330.572525][T20609] ? __lock_acquire+0x4a5/0x2630 [ 330.572545][T20609] netlink_rcv_skb+0x159/0x420 [ 330.572559][T20609] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.572575][T20609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.572594][T20609] ? netlink_deliver_tap+0x1ae/0xcc0 [ 330.572609][T20609] genl_rcv+0x28/0x40 [ 330.572623][T20609] netlink_unicast+0x5aa/0x870 [ 330.572638][T20609] ? __pfx_netlink_unicast+0x10/0x10 [ 330.572657][T20609] netlink_sendmsg+0x8b0/0xda0 [ 330.572689][T20609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.572702][T20609] ? __might_fault+0xc0/0x140 [ 330.572722][T20609] ____sys_sendmsg+0xa54/0xc30 [ 330.572739][T20609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.572761][T20609] ___sys_sendmsg+0x190/0x1e0 [ 330.572777][T20609] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.572811][T20609] __sys_sendmsg+0x170/0x220 [ 330.572823][T20609] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.572844][T20609] do_syscall_64+0x106/0xf80 [ 330.572855][T20609] ? clear_bhb_loop+0x40/0x90 [ 330.572870][T20609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.572881][T20609] RIP: 0033:0x7f5aa919c799 [ 330.572892][T20609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.572903][T20609] RSP: 002b:00007f5aaa043028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.572914][T20609] RAX: ffffffffffffffda RBX: 00007f5aa9415fa0 RCX: 00007f5aa919c799 [ 330.572921][T20609] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 330.572928][T20609] RBP: 00007f5aaa043090 R08: 0000000000000000 R09: 0000000000000000 [ 330.572935][T20609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.572941][T20609] R13: 00007f5aa9416038 R14: 00007f5aa9415fa0 R15: 00007ffc8f4dddf8 [ 330.572956][T20609] [ 330.636539][ T6015] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 330.849869][ T6015] usb 5-1: device descriptor read/64, error -71 [ 330.854315][T20627] 9p: Unknown access argument 18446744073709551615: -34 [ 331.127044][ T6015] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 331.265466][ T6015] usb 5-1: device descriptor read/64, error -71 [ 331.350902][T20647] erspan1: entered promiscuous mode [ 331.393577][ T6015] usb usb5-port1: attempt power cycle [ 331.781594][ T6015] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 331.798982][ T6015] usb 5-1: device descriptor read/8, error -71 [ 331.806235][T20660] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 331.821672][T20660] bridge_slave_0: left allmulticast mode [ 331.823686][T20660] bridge_slave_0: left promiscuous mode [ 331.825581][T20660] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.835306][T20660] bridge_slave_1: left allmulticast mode [ 331.837219][T20660] bridge_slave_1: left promiscuous mode [ 331.841323][T20660] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.848347][T20660] bond0: (slave bond_slave_0): Releasing backup interface [ 331.871369][T20661] netlink: 'syz.7.4729': attribute type 10 has an invalid length. [ 331.884261][T20660] bond0: (slave bond_slave_1): Releasing backup interface [ 331.911273][T20660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.914934][T20660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.935827][T20660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.940113][T20660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.947116][T20660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 331.956183][T20661] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 331.980419][T20661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.986661][T20661] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 332.069271][ T6015] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 332.110229][T20665] overlayfs: missing 'lowerdir' [ 332.173876][ T6015] usb 5-1: device descriptor read/8, error -71 [ 332.289100][ T6015] usb usb5-port1: unable to enumerate USB device [ 332.381988][T20676] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 332.401731][T20675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.403381][T20615] Set syz1 is full, maxelem 65536 reached [ 332.410134][T20675] netlink: 'syz.7.4733': attribute type 10 has an invalid length. [ 332.412692][T20675] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 332.730503][T20699] netlink: 'syz.7.4742': attribute type 178 has an invalid length. [ 332.843575][T20708] /dev/nullb0: Can't lookup blockdev [ 333.017351][T20716] 9p: Unknown access argument 18446744073709551615: -34 [ 333.054232][T20721] overlayfs: missing 'lowerdir' [ 333.534065][T20740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26644 sclass=netlink_tcpdiag_socket pid=20740 comm=syz.0.4757 [ 333.631311][T20707] Set syz1 is full, maxelem 65536 reached [ 333.641495][T20743] kvm: kvm [20742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 333.647939][T20743] kvm: kvm [20742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 333.666925][T20743] kvm: kvm [20742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 333.704501][T20743] kvm: kvm [20742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 333.712712][T20743] kvm: kvm [20742]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 333.928058][T20772] SELinux: ebitmap start bit (2137064448) is beyond the end of the bitmap (1472) [ 333.929799][T20773] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4762'. [ 333.935853][T20772] SELinux: failed to load policy [ 333.995406][ T40] kauditd_printk_skb: 281 callbacks suppressed [ 333.995423][ T40] audit: type=1400 audit(5745519422.613:11242): avc: denied { create } for pid=20776 comm="syz.0.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.007304][ T40] audit: type=1400 audit(5745519422.632:11243): avc: denied { setopt } for pid=20776 comm="syz.0.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.072153][ T40] audit: type=1400 audit(5745519422.688:11244): avc: denied { create } for pid=20780 comm="syz.0.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.081467][ T40] audit: type=1400 audit(5745519422.698:11245): avc: denied { read write } for pid=20780 comm="syz.0.4771" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 334.093156][ T40] audit: type=1400 audit(5745519422.698:11246): avc: denied { open } for pid=20780 comm="syz.0.4771" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 334.104351][ T40] audit: type=1400 audit(5745519422.698:11247): avc: denied { ioctl } for pid=20780 comm="syz.0.4771" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 334.193645][ T40] audit: type=1400 audit(5745519422.801:11248): avc: denied { create } for pid=20786 comm="syz.0.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.199863][ T40] audit: type=1400 audit(5745519422.801:11249): avc: denied { connect } for pid=20786 comm="syz.0.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.206766][ T40] audit: type=1400 audit(5745519422.801:11250): avc: denied { write } for pid=20786 comm="syz.0.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 334.214883][ T40] audit: type=1400 audit(5745519422.801:11251): avc: denied { read } for pid=20786 comm="syz.0.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 334.363016][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4773'. [ 334.366580][T20789] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4773'. [ 334.369712][T20789] netlink: 'syz.0.4773': attribute type 3 has an invalid length. [ 334.372906][T20789] netlink: 'syz.0.4773': attribute type 2 has an invalid length. [ 334.375680][T20789] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4773'. [ 334.416319][T20805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4776'. [ 334.450458][T20807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4778'. [ 334.453569][T20807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4778'. [ 334.580964][ T5285] Bluetooth: hci2: command 0x0401 tx timeout [ 334.617547][T20824] xt_limit: Overflow, try lower: 271964/0 [ 334.732246][T20835] binder: 20833:20835 ioctl c0306201 0 returned -14 [ 334.737118][T20835] binder: 20833:20835 ioctl c0306201 0 returned -14 [ 334.917478][T20846] fuse: Bad value for 'fd' [ 334.918330][T20843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=20843 comm=syz.7.4794 [ 335.316387][ T8263] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 335.477771][ T8263] usb 12-1: Using ep0 maxpacket: 8 [ 335.481025][ T8263] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.484796][ T8263] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 335.489728][ T8263] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 335.493735][ T8263] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.500141][ T8263] usb 12-1: config 0 descriptor?? [ 335.722072][ T8263] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 335.938038][T20856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.942875][T20856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.948157][ T6013] usb 12-1: USB disconnect, device number 2 [ 336.123822][T20928] syzkaller0: entered promiscuous mode [ 336.126251][T20928] syzkaller0: entered allmulticast mode [ 336.387849][T20939] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4830'. [ 336.499685][ T6013] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 336.662116][ T6013] usb 7-1: Using ep0 maxpacket: 8 [ 336.673909][ T6013] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 336.677515][ T6013] usb 7-1: config 179 has no interface number 0 [ 336.680306][ T6013] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 336.685344][ T6013] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 336.690136][ T6013] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 336.694798][ T6013] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 336.700596][ T6013] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 336.706354][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.717317][T20937] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.124087][ T6015] usb 7-1: USB disconnect, device number 22 [ 337.837194][T20968] uprobe: syz.6.4840:20968 failed to unregister, leaking uprobe [ 337.891564][T20973] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4841'. [ 337.899134][T20973] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4841'. [ 337.902896][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4841'. [ 337.907151][T20973] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4841'. [ 337.915500][ T1153] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.918948][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4841'. [ 337.919418][ T9532] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.921827][T20973] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4841'. [ 337.924676][ T9532] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.931042][ T9532] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.996245][T20980] kAFS: Can only specify source 'none' with -o dyn [ 338.211295][T21011] fuse: Unknown parameter 'rootmod¦ç̶_èÙ –Be' [ 338.237870][T21013] tmpfs: Unknown parameter '00000000000000000000004' [ 338.300872][T21015] xt_recent: Unsupported userspace flags (000000b2) [ 338.435821][T21033] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4864'. [ 338.586901][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4874'. [ 338.602571][T21059] : entered promiscuous mode [ 338.861142][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4888'. [ 338.865130][T21103] netlink: 'syz.6.4888': attribute type 11 has an invalid length. [ 338.869715][T21103] netlink: 'syz.6.4888': attribute type 7 has an invalid length. [ 339.244592][T21150] netlink: 'syz.7.4903': attribute type 3 has an invalid length. [ 339.250897][T21152] netlink: 'syz.7.4903': attribute type 3 has an invalid length. [ 339.319064][T21154] QAT: Invalid ioctl 1074310803 [ 339.319537][T21158] siw: device registration error -23 [ 339.321532][T21154] QAT: Invalid ioctl 44672 [ 339.356292][ T40] kauditd_printk_skb: 401 callbacks suppressed [ 339.356304][ T40] audit: type=1400 audit(5745519427.641:11653): avc: denied { create } for pid=21159 comm="syz.7.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 339.366726][ T40] audit: type=1400 audit(5745519427.651:11654): avc: denied { bind } for pid=21159 comm="syz.7.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 339.375258][ T40] audit: type=1400 audit(5745519427.651:11655): avc: denied { write } for pid=21159 comm="syz.7.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 339.375956][T21162] /dev/nullb0: Can't lookup blockdev [ 339.383644][ T40] audit: type=1400 audit(5745519427.660:11656): avc: denied { mounton } for pid=21161 comm="syz.6.4908" path="/492/bus" dev="tmpfs" ino=2785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 339.454969][ T40] audit: type=1400 audit(5745519427.726:11657): avc: denied { create } for pid=21166 comm="syz.2.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 339.467070][ T40] audit: type=1400 audit(5745519427.744:11658): avc: denied { mount } for pid=21163 comm="syz.6.4909" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 339.477008][T21167] binder_alloc: 21166: binder_alloc_buf, no vma [ 339.481421][ T40] audit: type=1400 audit(5745519427.744:11659): avc: denied { connect } for pid=21165 comm="syz.7.4910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 339.489780][ T40] audit: type=1400 audit(5745519427.744:11660): avc: denied { name_connect } for pid=21165 comm="syz.7.4910" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 339.498651][ T40] audit: type=1400 audit(5745519427.754:11661): avc: denied { write } for pid=21166 comm="syz.2.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 339.505532][ T40] audit: type=1400 audit(5745519427.773:11662): avc: denied { write } for pid=21163 comm="syz.6.4909" path="socket:[95268]" dev="sockfs" ino=95268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 339.520536][T21171] 9p filesystem being mounted at /118/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 339.536851][T21171] program syz.7.4910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.742546][ T5285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.747929][ T5285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.752501][ T5285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.756498][ T5285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.761048][ T5285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.797574][T21178] xfrm0 speed is unknown, defaulting to 1000 [ 339.800306][T21178] wg1 speed is unknown, defaulting to 1000 [ 339.904022][T21189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.061784][T21178] chnl_net:caif_netlink_parms(): no params data found [ 340.086571][ T9532] bridge_slave_1: left allmulticast mode [ 340.088760][ T9532] bridge_slave_1: left promiscuous mode [ 340.093493][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.098992][ T9532] bridge_slave_0: left allmulticast mode [ 340.101506][ T9532] bridge_slave_0: left promiscuous mode [ 340.105689][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.248617][ T9532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.253837][ T9532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.258956][ T9532] bond0 (unregistering): (slave ): Releasing backup interface [ 340.261945][ T9532] bond0 (unregistering): Released all slaves [ 340.266458][ T9532] bond1 (unregistering): Released all slaves [ 340.272937][ T9532] bond2 (unregistering): Released all slaves [ 340.337142][T21199] x_tables: duplicate underflow at hook 2 [ 340.339970][T21178] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.342909][T21178] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.349550][T21178] bridge_slave_0: entered allmulticast mode [ 340.353610][T21178] bridge_slave_0: entered promiscuous mode [ 340.358486][T21178] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.374255][T21178] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.377385][T21178] bridge_slave_1: entered allmulticast mode [ 340.386983][T21178] bridge_slave_1: entered promiscuous mode [ 340.405645][ T9532] tipc: Disabling bearer [ 340.408738][ T9532] tipc: Left network mode [ 340.424529][T21178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.434192][T21178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.458242][ T9532] IPVS: stopping master sync thread 18508 ... [ 340.478619][T21178] team0: Port device team_slave_0 added [ 340.482064][T21178] team0: Port device team_slave_1 added [ 340.509377][T21178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.512456][T21178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.521474][T21178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.531798][T21178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.537747][T21178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.549059][T21178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.589719][T21178] hsr_slave_0: entered promiscuous mode [ 340.592100][T21178] hsr_slave_1: entered promiscuous mode [ 340.594615][T21178] debugfs: 'hsr0' already exists in 'hsr' [ 340.596460][T21178] Cannot create hsr debugfs directory [ 340.738554][T21178] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 340.748185][T21178] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 340.764864][T21178] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 340.778854][T21178] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 340.824236][T21178] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.826604][T21178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.829154][T21178] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.831465][T21178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.908361][T21178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.920138][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.923113][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.946611][T21178] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.953388][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.956686][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.970190][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.972601][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.005749][ T9532] hsr_slave_0: left promiscuous mode [ 341.008009][ T9532] hsr_slave_1: left promiscuous mode [ 341.011431][ T9532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.014266][ T9532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.109395][T21271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21271 comm=syz.6.4939 [ 341.202775][ T9532] lo (unregistering): left allmulticast mode [ 341.208090][T21262] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 341.208674][T21265] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 341.472180][T21297] xt_hashlimit: size too large, truncated to 1048576 [ 341.476952][T21178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.538316][T21302] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 341.555519][T21302] binder: 21296:21302 ioctl c0306201 200000000440 returned -14 [ 341.558514][T21302] binder: 21296:21302 ioctl 4602 200000000240 returned -22 [ 341.628574][ T9532] IPVS: stop unused estimator thread 0... [ 341.674754][T21178] veth0_vlan: entered promiscuous mode [ 341.687293][T21178] veth1_vlan: entered promiscuous mode [ 341.715259][T21178] veth0_macvtap: entered promiscuous mode [ 341.720024][T21178] veth1_macvtap: entered promiscuous mode [ 341.729229][T21178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.745030][T21178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.750964][ T9532] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.753988][ T9532] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.758787][ T9532] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.762638][ T9532] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.828366][T21324] __nla_validate_parse: 15 callbacks suppressed [ 341.828379][T21324] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.4948'. [ 341.839451][ T9532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.847174][ T9532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.878520][ T9532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.883157][ T9532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.915107][ T5937] Bluetooth: hci2: command tx timeout [ 341.931163][T21327] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 342.123147][T21327] netlink: 27 bytes leftover after parsing attributes in process `syz.7.4949'. [ 342.448335][ T6015] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 342.608125][ T6015] usb 13-1: Using ep0 maxpacket: 32 [ 342.613183][ T6015] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 342.621838][ T6015] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 342.624992][ T6015] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.627601][ T6015] usb 13-1: Product: syz [ 342.629049][ T6015] usb 13-1: Manufacturer: syz [ 342.637006][ T6015] usb 13-1: SerialNumber: syz [ 342.662355][ T6015] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 342.664941][ T6015] imon 13-1:155.0: unable to initialize intf0, err -19 [ 342.667180][ T6015] imon:imon_probe: failed to initialize context! [ 342.668497][T21364] FAULT_INJECTION: forcing a failure. [ 342.668497][T21364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.669345][ T6015] imon 13-1:155.0: unable to register, err -19 [ 342.675246][T21364] CPU: 2 UID: 0 PID: 21364 Comm: syz.7.4960 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.675266][T21364] Tainted: [L]=SOFTLOCKUP [ 342.675270][T21364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.675277][T21364] Call Trace: [ 342.675281][T21364] [ 342.675286][T21364] dump_stack_lvl+0x100/0x190 [ 342.675308][T21364] should_fail_ex.cold+0x5/0xa [ 342.675327][T21364] _copy_from_user+0x2e/0xd0 [ 342.675350][T21364] move_addr_to_kernel+0x65/0x170 [ 342.675377][T21364] copy_msghdr_from_user+0x417/0x4f0 [ 342.675402][T21364] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 342.675435][T21364] ___sys_sendmsg+0x106/0x1e0 [ 342.675461][T21364] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.675513][T21364] __sys_sendmsg+0x170/0x220 [ 342.675535][T21364] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.675567][T21364] do_syscall_64+0x106/0xf80 [ 342.675581][T21364] ? clear_bhb_loop+0x40/0x90 [ 342.675595][T21364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.675606][T21364] RIP: 0033:0x7f5aa919c799 [ 342.675617][T21364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.675627][T21364] RSP: 002b:00007f5aaa043028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.675639][T21364] RAX: ffffffffffffffda RBX: 00007f5aa9415fa0 RCX: 00007f5aa919c799 [ 342.675646][T21364] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 342.675652][T21364] RBP: 00007f5aaa043090 R08: 0000000000000000 R09: 0000000000000000 [ 342.675659][T21364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.675665][T21364] R13: 00007f5aa9416038 R14: 00007f5aa9415fa0 R15: 00007ffc8f4dddf8 [ 342.675679][T21364] [ 343.196360][T21405] netlink: 'syz.6.4974': attribute type 10 has an invalid length. [ 343.778471][T21417] xfrm0 speed is unknown, defaulting to 1000 [ 343.781285][T21417] wg1 speed is unknown, defaulting to 1000 [ 344.132711][ T5937] Bluetooth: hci2: command tx timeout [ 345.368106][ T2307] usb 13-1: USB disconnect, device number 2 [ 345.404456][T21443] netlink: 'syz.8.4986': attribute type 10 has an invalid length. [ 345.418296][T21443] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 345.456782][ T40] kauditd_printk_skb: 434 callbacks suppressed [ 345.456796][ T40] audit: type=1400 audit(5745519433.373:12097): avc: denied { mount } for pid=21446 comm="syz.7.4988" name="/" dev="9p" ino=74973223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 345.471556][ T40] audit: type=1400 audit(5745519433.373:12098): avc: denied { add_name } for pid=21446 comm="syz.7.4988" name="blkio.bfq.sectors" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.479402][ T40] audit: type=1400 audit(5745519433.373:12099): avc: denied { create } for pid=21446 comm="syz.7.4988" name="blkio.bfq.sectors" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 345.481427][T21449] team0 (unregistering): Port device team_slave_0 removed [ 345.488801][ T40] audit: type=1400 audit(5745519433.373:12100): avc: denied { associate } for pid=21446 comm="syz.7.4988" name="blkio.bfq.sectors" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 345.501412][ T40] audit: type=1400 audit(5745519433.373:12101): avc: denied { append open } for pid=21446 comm="syz.7.4988" path="/147/file0/blkio.bfq.sectors" dev="9p" ino=74973457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 345.504298][T21449] team0 (unregistering): Port device team_slave_1 removed [ 345.513173][ T40] audit: type=1400 audit(5745519433.382:12102): avc: denied { create } for pid=21448 comm="syz.8.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.523882][ T40] audit: type=1400 audit(5745519433.382:12103): avc: denied { map_create } for pid=21448 comm="syz.8.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 345.526672][T21453] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 345.532365][ T40] audit: type=1400 audit(5745519433.382:12104): avc: denied { prog_load } for pid=21448 comm="syz.8.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 345.540832][T21453] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 345.543173][ T40] audit: type=1400 audit(5745519433.382:12105): avc: denied { read } for pid=21446 comm="syz.7.4988" path="/147/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=74973459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 345.554502][ T40] audit: type=1400 audit(5745519433.392:12106): avc: denied { setopt } for pid=21446 comm="syz.7.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.928115][T21467] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 346.350589][ T5937] Bluetooth: hci2: command tx timeout [ 347.030566][T21506] /dev/sr0: Can't lookup blockdev [ 347.074703][ T8265] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 347.248562][T21518] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 347.254239][T21518] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 347.266493][ T8265] usb 12-1: Using ep0 maxpacket: 32 [ 347.269833][ T8265] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 347.273238][ T8265] usb 12-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 347.294076][ T8265] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 347.297051][ T8265] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.301822][ T8265] usb 12-1: Product: syz [ 347.303331][ T8265] usb 12-1: Manufacturer: syz [ 347.304887][ T8265] usb 12-1: SerialNumber: syz [ 347.315538][ T8265] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 347.318067][ T8265] imon 12-1:155.0: unable to initialize intf0, err -19 [ 347.321869][ T8265] imon:imon_probe: failed to initialize context! [ 347.324012][ T8265] imon 12-1:155.0: unable to register, err -19 [ 347.486800][T21532] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 347.489503][T21532] overlayfs: failed to set xattr on upper [ 347.493361][T21532] overlayfs: ...falling back to redirect_dir=nofollow. [ 347.496068][T21532] overlayfs: ...falling back to index=off. [ 347.498229][T21532] overlayfs: ...falling back to uuid=null. [ 347.508269][T21532] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 348.100653][T21554] fuse: Bad value for 'fd' [ 348.578090][ T5937] Bluetooth: hci2: command tx timeout [ 348.838376][T21576] binder: BINDER_SET_CONTEXT_MGR already set [ 348.840412][T21576] binder: 21575:21576 ioctl 4018620d 200000000040 returned -16 [ 349.897831][T21587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.006628][ T8264] usb 12-1: USB disconnect, device number 3 [ 350.074402][T21593] FAULT_INJECTION: forcing a failure. [ 350.074402][T21593] name failslab, interval 1, probability 0, space 0, times 0 [ 350.078680][T21593] CPU: 0 UID: 0 PID: 21593 Comm: syz.7.5038 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.078698][T21593] Tainted: [L]=SOFTLOCKUP [ 350.078702][T21593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.078708][T21593] Call Trace: [ 350.078713][T21593] [ 350.078717][T21593] dump_stack_lvl+0x100/0x190 [ 350.078740][T21593] should_fail_ex.cold+0x5/0xa [ 350.078755][T21593] should_failslab+0xc2/0x120 [ 350.078774][T21593] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 350.078790][T21593] ? do_getname+0x35/0x390 [ 350.078807][T21593] do_getname+0x35/0x390 [ 350.078822][T21593] __x64_sys_unlink+0x36/0x70 [ 350.078835][T21593] do_syscall_64+0x106/0xf80 [ 350.078847][T21593] ? clear_bhb_loop+0x40/0x90 [ 350.078860][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.078872][T21593] RIP: 0033:0x7f5aa919c799 [ 350.078881][T21593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.078891][T21593] RSP: 002b:00007f5aaa043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 350.078903][T21593] RAX: ffffffffffffffda RBX: 00007f5aa9415fa0 RCX: 00007f5aa919c799 [ 350.078910][T21593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 350.078916][T21593] RBP: 00007f5aaa043090 R08: 0000000000000000 R09: 0000000000000000 [ 350.078923][T21593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.078929][T21593] R13: 00007f5aa9416038 R14: 00007f5aa9415fa0 R15: 00007ffc8f4dddf8 [ 350.078943][T21593] [ 350.272097][T21599] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5040'. [ 350.378790][T21609] binder: BINDER_SET_CONTEXT_MGR already set [ 350.387687][T21609] binder: 21608:21609 ioctl 4018620d 200000000040 returned -16 [ 350.763283][ T8265] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 350.923013][ T8265] usb 12-1: Using ep0 maxpacket: 32 [ 350.926154][ T8265] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 350.929697][ T8265] usb 12-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 350.935912][ T8265] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 350.938860][ T8265] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.941795][ T8265] usb 12-1: Product: syz [ 350.943227][ T8265] usb 12-1: Manufacturer: syz [ 350.944856][ T8265] usb 12-1: SerialNumber: syz [ 350.951220][ T8265] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 350.954721][ T8265] imon 12-1:155.0: unable to initialize intf0, err -19 [ 350.957660][ T8265] imon:imon_probe: failed to initialize context! [ 350.960261][ T8265] imon 12-1:155.0: unable to register, err -19 [ 351.353119][ T40] kauditd_printk_skb: 216 callbacks suppressed [ 351.353131][ T40] audit: type=1400 audit(5745519438.898:12323): avc: denied { search } for pid=21618 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.363830][ T40] audit: type=1400 audit(5745519438.898:12324): avc: denied { create } for pid=21616 comm="syz.8.5047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 351.372249][ T40] audit: type=1400 audit(5745519438.907:12325): avc: denied { search } for pid=21618 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.383278][ T40] audit: type=1400 audit(5745519438.907:12326): avc: denied { search } for pid=21618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.393450][ T40] audit: type=1400 audit(5745519438.907:12327): avc: denied { search } for pid=21618 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.403171][ T40] audit: type=1400 audit(5745519438.907:12328): avc: denied { read open } for pid=21620 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.411305][ T40] audit: type=1400 audit(5745519438.907:12329): avc: denied { getattr } for pid=21620 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.420727][T21617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.423184][T21617] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 351.424455][ T40] audit: type=1400 audit(5745519438.917:12330): avc: denied { add_name } for pid=21618 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.441610][ T40] audit: type=1400 audit(5745519438.917:12331): avc: denied { create } for pid=21618 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.451524][ T40] audit: type=1400 audit(5745519438.917:12332): avc: denied { write open } for pid=21618 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb5.link" dev="tmpfs" ino=11068 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.485094][T21617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 351.487140][T21617] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 351.506663][T21617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 351.508637][T21617] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 351.536169][T21617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.538166][T21617] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 352.202241][ T2307] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 352.394356][ T2307] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 352.397791][ T2307] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.400716][ T2307] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.404213][ T2307] usb 13-1: config 0 interface 0 has no altsetting 0 [ 352.405074][T21651] fuse: Bad value for 'fd' [ 352.409534][ T2307] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.409876][T21651] netlink: 'syz.6.5053': attribute type 1 has an invalid length. [ 352.412514][ T2307] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.412531][ T2307] usb 13-1: config 0 interface 0 has no altsetting 0 [ 352.413425][ T2307] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.424110][ T2307] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.432059][ T2307] usb 13-1: config 0 interface 0 has no altsetting 0 [ 352.435228][ T2307] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.438299][ T2307] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.442290][ T2307] usb 13-1: config 0 interface 0 has no altsetting 0 [ 352.442350][T21651] bond4: entered promiscuous mode [ 352.445325][ T2307] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.446369][T21651] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.449403][ T2307] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.454998][ T2307] usb 13-1: config 0 interface 0 has no altsetting 0 [ 352.455809][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5053'. [ 352.458197][ T2307] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.461670][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5053'. [ 352.463145][ T2307] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.469613][ T2307] usb 13-1: config 0 interface 0 has no altsetting 0 [ 352.472654][ T2307] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.475622][ T2307] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.479141][ T2307] usb 13-1: config 0 interface 0 has no altsetting 0 [ 352.482388][ T2307] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 352.483722][T21651] bond4: (slave bridge2): making interface the new active one [ 352.485231][ T2307] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 352.488519][T21651] bridge2: entered promiscuous mode [ 352.490101][T21651] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 352.492147][ T2307] usb 13-1: config 0 interface 0 has no altsetting 0 [ 352.501316][ T2307] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 352.504442][ T2307] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 352.507182][ T2307] usb 13-1: Product: syz [ 352.508617][ T2307] usb 13-1: Manufacturer: syz [ 352.510184][ T2307] usb 13-1: SerialNumber: syz [ 352.514865][ T2307] usb 13-1: config 0 descriptor?? [ 352.521528][ T2307] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 352.738030][ T2307] usb 13-1: USB disconnect, device number 3 [ 352.751839][ T2307] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 352.772847][T21649] autofs: Unknown parameter 'ò#ÂýçŸ [ 352.772847][T21649] §)ª‘7Áȉ^`5(S§æNzÀZÞ“ã{— q«g‡º&ûYº‹' [ 352.856054][T21673] netlink: 344 bytes leftover after parsing attributes in process `syz.6.5060'. [ 353.698848][ T9] usb 12-1: USB disconnect, device number 4 [ 353.734923][T21705] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.5069'. [ 353.827537][T21708] : entered promiscuous mode [ 353.861994][T21708] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5070'. [ 353.869175][T21708] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5070'. [ 354.187211][T21755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.192660][T21754] netlink: 'syz.6.5083': attribute type 10 has an invalid length. [ 354.237294][T21751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21751 comm=syz.7.5081 [ 354.569722][T21793] netlink: 'syz.7.5095': attribute type 13 has an invalid length. [ 355.083054][T21815] binder: BINDER_SET_CONTEXT_MGR already set [ 355.085580][T21815] binder: 21814:21815 ioctl 4018620d 200000000040 returned -16 [ 355.207591][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5101'. [ 355.528080][T21848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5112'. [ 355.616497][T21857] 9p: Bad value for 'rfdno' [ 355.647915][T21859] ªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 355.778324][T21830] kvm: kvm [21828]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xfc00 [ 355.782495][T21830] kvm: kvm [21828]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xfbf0 [ 355.808969][T21830] kvm: kvm [21828]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xf900 [ 355.839071][T21830] kvm: kvm [21828]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 355.842243][T21830] kvm: kvm [21828]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf7f0 [ 356.538449][T21898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5128'. [ 356.538515][T21899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5128'. [ 356.551306][T21898] sp0: Synchronizing with TNC [ 357.126712][ T40] kauditd_printk_skb: 392 callbacks suppressed [ 357.126727][ T40] audit: type=1400 audit(5745519444.311:12725): avc: denied { read write } for pid=21178 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.140538][ T40] audit: type=1400 audit(5745519444.311:12726): avc: denied { open } for pid=21178 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.150533][ T40] audit: type=1400 audit(5745519444.311:12727): avc: denied { ioctl } for pid=21178 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.162228][ T40] audit: type=1400 audit(5745519444.329:12728): avc: denied { execute } for pid=21906 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 357.171263][ T40] audit: type=1400 audit(5745519444.329:12729): avc: denied { execute_no_trans } for pid=21906 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 357.179247][ T40] audit: type=1400 audit(5745519444.339:12730): avc: denied { allowed } for pid=21907 comm="syz.8.5132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 357.186173][ T40] audit: type=1400 audit(5745519444.339:12731): avc: denied { create } for pid=21907 comm="syz.8.5132" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 357.193554][ T40] audit: type=1400 audit(5745519444.339:12732): avc: denied { map } for pid=21907 comm="syz.8.5132" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 357.201975][ T40] audit: type=1400 audit(5745519444.339:12733): avc: denied { read write } for pid=21907 comm="syz.8.5132" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 357.210057][ T40] audit: type=1400 audit(5745519444.367:12734): avc: denied { create } for pid=21909 comm="syz.8.5133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 357.242980][ T5285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.249531][ T5285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.252571][ T5285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.256966][ T5285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.259596][ T5285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.275358][ T5937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.281660][ T5937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.284242][ T5937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.287931][ T5937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.290594][ T5937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.307326][T21913] Failed to initialize the IGMP autojoin socket (err -2) [ 357.360988][T21896] [U] è [ 357.502718][T21925] binder: 21922:21925 ioctl c0306201 200000000240 returned -11 [ 357.505915][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.652041][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.687242][T21913] chnl_net:caif_netlink_parms(): no params data found [ 357.829583][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.880837][T21913] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.884037][T21913] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.892276][T21913] bridge_slave_0: entered allmulticast mode [ 357.897379][T21913] bridge_slave_0: entered promiscuous mode [ 357.902404][T21913] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.906432][T21913] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.909000][T21913] bridge_slave_1: entered allmulticast mode [ 357.912205][T21913] bridge_slave_1: entered promiscuous mode [ 357.972323][T21913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.988231][T21913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.032625][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.035199][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5142'. [ 358.044214][ T840] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 358.064487][T21947] gtp1: entered promiscuous mode [ 358.066392][T21947] gtp1: entered allmulticast mode [ 358.089694][T21913] team0: Port device team_slave_0 added [ 358.109085][T21913] team0: Port device team_slave_1 added [ 358.148799][T21913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.152566][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.166507][T21913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.172822][T21913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.175185][T21913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.186155][T21913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.215763][ T840] usb 12-1: Using ep0 maxpacket: 32 [ 358.221081][ T840] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 358.224583][ T840] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 358.231072][ T840] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.234803][ T840] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 358.255087][ T840] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 358.258880][ T840] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.261640][ T840] usb 12-1: Product: syz [ 358.263287][ T840] usb 12-1: Manufacturer: syz [ 358.264876][ T840] usb 12-1: SerialNumber: syz [ 358.271625][ T840] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 358.274611][ T840] imon 12-1:155.0: unable to initialize intf0, err -19 [ 358.276840][ T840] imon:imon_probe: failed to initialize context! [ 358.279554][ T840] imon 12-1:155.0: unable to register, err -19 [ 358.281066][T21958] delete_channel: no stack [ 358.323437][T21913] hsr_slave_0: entered promiscuous mode [ 358.326480][T21913] hsr_slave_1: entered promiscuous mode [ 358.329122][T21913] debugfs: 'hsr0' already exists in 'hsr' [ 358.332887][T21913] Cannot create hsr debugfs directory [ 358.382317][T21966] Invalid ELF header type: 0 != 1 [ 358.389697][ T12] bridge_slave_1: left allmulticast mode [ 358.391925][T21966] /dev/nullb0: Can't lookup blockdev [ 358.396467][T21966] zonefs: Unknown parameter '/dev/nullb0' [ 358.396579][ T12] bridge_slave_1: left promiscuous mode [ 358.401780][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.406823][ T12] bridge_slave_0: left allmulticast mode [ 358.408740][ T12] bridge_slave_0: left promiscuous mode [ 358.410606][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.575801][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.582814][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.588626][ T12] bond0 (unregistering): Released all slaves [ 358.665289][ T12] : left promiscuous mode [ 358.748179][ T6012] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 358.819350][T21913] netdevsim netdevsim9 netdevsim0: renamed from eth18 [ 358.825182][T21913] netdevsim netdevsim9 netdevsim1: renamed from eth19 [ 358.830073][T21913] netdevsim netdevsim9 netdevsim2: renamed from eth20 [ 358.841026][T21913] netdevsim netdevsim9 netdevsim3: renamed from eth21 [ 358.918163][ T6012] usb 13-1: Using ep0 maxpacket: 8 [ 358.931064][ T6012] usb 13-1: config 0 has no interfaces? [ 358.936362][ T6012] usb 13-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 358.939476][ T6012] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.942421][ T6012] usb 13-1: Product: syz [ 358.943932][ T6012] usb 13-1: Manufacturer: syz [ 358.945526][ T6012] usb 13-1: SerialNumber: syz [ 358.948551][ T6012] usb 13-1: config 0 descriptor?? [ 358.986947][T21913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.032386][T21913] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.066793][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.070117][ T9527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.099920][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.103116][ T9527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.214180][ T5992] usb 13-1: USB disconnect, device number 4 [ 359.290393][ T12] hsr_slave_0: left promiscuous mode [ 359.302698][ T12] hsr_slave_1: left promiscuous mode [ 359.305920][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.309401][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.315384][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.318681][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.325085][ T12] veth1_macvtap: left promiscuous mode [ 359.327383][ T12] veth1_vlan: left promiscuous mode [ 359.329534][ T12] veth0_vlan: left promiscuous mode [ 359.483658][ T5285] Bluetooth: hci4: command tx timeout [ 359.726859][T21913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.933276][ T12] IPVS: stop unused estimator thread 0... [ 360.041412][T21913] veth0_vlan: entered promiscuous mode [ 360.046608][T21913] veth1_vlan: entered promiscuous mode [ 360.129865][T21913] veth0_macvtap: entered promiscuous mode [ 360.153019][T21913] veth1_macvtap: entered promiscuous mode [ 360.223473][T21913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.250433][T21913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.259497][T21913] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 360.263957][T22030] xt_limit: Overflow, try lower: 271964/0 [ 360.274302][T22030] netlink: 'syz.6.5167': attribute type 2 has an invalid length. [ 360.278111][T21913] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 360.278115][T22030] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5167'. [ 360.291973][T21913] wireguard: wg0: Could not create IPv4 socket [ 360.300992][T21913] wireguard: wg1: Could not create IPv4 socket [ 360.309165][T21913] wireguard: wg2: Could not create IPv4 socket [ 360.375628][T22036] CIFS mount error: No usable UNC path provided in device string! [ 360.375628][T22036] [ 360.379891][T22036] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 360.616609][T22050] binder: 22044:22050 ioctl c0306201 200000000240 returned -11 [ 360.986668][ T8265] usb 12-1: USB disconnect, device number 5 [ 361.250420][T22066] binder: 22064:22066 ioctl 8008f511 2000000028c0 returned -22 [ 361.395318][T22079] overlayfs: failed to resolve './file1': -2 [ 361.433216][T22083] 9p filesystem being mounted at /617/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 361.759049][T22116] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.5188'. [ 361.973151][T22128] Failed to initialize the IGMP autojoin socket (err -2) [ 362.496141][T22164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.665740][T22171] syz.7.5196 (22171): attempted to duplicate a private mapping with mremap. This is not supported. [ 362.673882][ T40] kauditd_printk_skb: 358 callbacks suppressed [ 362.673893][ T40] audit: type=1400 audit(5745519449.517:13093): avc: denied { allowed } for pid=22163 comm="syz.7.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 362.690646][ T40] audit: type=1400 audit(5745519449.526:13094): avc: denied { create } for pid=22163 comm="syz.7.5196" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 362.699737][ T40] audit: type=1400 audit(5745519449.526:13095): avc: denied { map } for pid=22163 comm="syz.7.5196" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 362.708381][ T40] audit: type=1400 audit(5745519449.526:13096): avc: denied { read write } for pid=22163 comm="syz.7.5196" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 362.717312][ T40] audit: type=1400 audit(5745519449.526:13097): avc: denied { execute } for pid=22163 comm="syz.7.5196" path="/195/freezer.parent_freezing" dev="tmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 362.725832][ T40] audit: type=1400 audit(5745519449.526:13098): avc: denied { read } for pid=22163 comm="syz.7.5196" dev="nsfs" ino=4026533187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 362.733493][ T40] audit: type=1400 audit(5745519449.526:13099): avc: denied { open } for pid=22163 comm="syz.7.5196" path="net:[4026533187]" dev="nsfs" ino=4026533187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 362.743877][ T40] audit: type=1400 audit(5745519449.536:13100): avc: denied { create } for pid=22163 comm="syz.7.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 362.751184][ T40] audit: type=1400 audit(5745519449.536:13101): avc: denied { bind } for pid=22163 comm="syz.7.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 362.757882][ T40] audit: type=1400 audit(5745519449.536:13102): avc: denied { write } for pid=22163 comm="syz.7.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 362.913491][T22200] 9pnet_virtio: no channels available for device syz [ 362.916036][T22200] 9pnet_virtio: no channels available for device syz [ 362.918401][T22200] 9pnet_virtio: no channels available for device syz [ 362.920905][T22200] 9pnet_virtio: no channels available for device syz [ 362.923382][T22200] 9pnet_virtio: no channels available for device syz [ 362.925766][T22200] 9pnet_virtio: no channels available for device syz [ 362.929626][T22200] 9pnet_virtio: no channels available for device syz [ 362.932193][T22200] 9pnet_virtio: no channels available for device syz [ 362.934621][T22200] 9pnet_virtio: no channels available for device syz [ 362.937166][T22200] 9pnet_virtio: no channels available for device syz [ 362.939710][T22200] 9pnet_virtio: no channels available for device syz [ 362.942140][T22200] 9pnet_virtio: no channels available for device syz [ 362.945669][T22200] 9pnet_virtio: no channels available for device syz [ 362.949650][T22200] 9pnet_virtio: no channels available for device syz [ 362.952946][T22200] 9pnet_virtio: no channels available for device syz [ 362.956182][T22200] 9pnet_virtio: no channels available for device syz [ 362.960033][T22200] 9pnet_virtio: no channels available for device syz [ 362.963284][T22200] 9pnet_virtio: no channels available for device syz [ 362.970054][T22200] 9pnet_virtio: no channels available for device syz [ 362.975108][T22200] 9pnet_virtio: no channels available for device syz [ 363.123855][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5206'. [ 363.815023][T22276] bridge_slave_1: left allmulticast mode [ 363.816989][T22276] bridge_slave_1: left promiscuous mode [ 363.818983][T22276] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.826359][T22276] bridge_slave_0: left allmulticast mode [ 363.828275][T22276] bridge_slave_0: left promiscuous mode [ 363.830258][T22276] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.841983][T22278] netlink: 160 bytes leftover after parsing attributes in process `syz.6.5220'. [ 363.852000][T22278] netlink: 'syz.6.5220': attribute type 1 has an invalid length. [ 363.956209][T22287] bond5: option downdelay: invalid value (18446744073709551615) [ 363.958929][T22287] bond5: option downdelay: allowed values 0 - 2147483647 [ 363.966900][T22287] bond5 (unregistering): Released all slaves [ 364.973071][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.980099][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.983253][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.987663][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.990327][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.007865][T22362] Failed to initialize the IGMP autojoin socket (err -2) [ 365.168209][T22384] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5242'. [ 365.227860][T22378] overlayfs: failed to resolve './file2': -2 [ 365.356670][T22408] CIFS mount error: No usable UNC path provided in device string! [ 365.356670][T22408] [ 365.365506][T22408] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 365.444400][T22405] /dev/sr0: Can't open blockdev [ 365.539660][T22410] /dev/sr0: Can't open blockdev [ 365.713502][T22435] binder: 22424:22435 ioctl c0306201 200000000240 returned -11 [ 365.814159][T22447] ptrace attach of "/syz-executor exec"[16740] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸ [ 365.948445][T22460] bad cache= option: nonw [ 365.948445][T22460] [ 365.984885][T22460] CIFS: VFS: bad cache= option: nonw [ 366.332051][T22487] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.5267'. [ 366.624278][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.627218][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.629778][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.632380][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.635255][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.638213][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.640752][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.643306][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.645872][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.648831][T22509] netlink: 'syz.7.5271': attribute type 3 has an invalid length. [ 366.740831][T22362] netdevsim netdevsim9 netdevsim0: renamed from eth18 [ 366.758677][T22362] netdevsim netdevsim9 netdevsim1: renamed from eth19 [ 366.769339][T22362] netdevsim netdevsim9 netdevsim2: renamed from eth20 [ 366.786310][T22362] netdevsim netdevsim9 netdevsim3: renamed from eth21 [ 367.041299][ T2307] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 367.124999][T22362] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 367.134225][T22362] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 367.146147][T22362] wireguard: wg0: Could not create IPv4 socket [ 367.149645][T22362] wireguard: wg1: Could not create IPv4 socket [ 367.159806][T22362] wireguard: wg2: Could not create IPv4 socket [ 367.169582][ T5937] Bluetooth: hci1: command tx timeout [ 367.227983][ T2307] usb 13-1: Using ep0 maxpacket: 8 [ 367.241194][ T2307] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 367.247140][ T2307] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 367.252903][ T2307] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 367.259684][ T2307] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.268911][ T2307] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 367.273372][ T2307] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.340679][T22577] kvm: kvm [22576]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 367.344629][T22577] kvm: kvm [22576]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 367.345427][T22584] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 367.353059][T22584] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5284'. [ 367.367555][T22577] kvm: kvm [22576]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 367.390133][T22577] kvm: kvm [22576]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 367.393881][T22577] kvm: kvm [22576]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 367.505880][ T2307] usb 13-1: GET_CAPABILITIES returned 0 [ 367.508386][ T2307] usbtmc 13-1:16.0: can't read capabilities [ 367.722166][ T6015] usb 13-1: USB disconnect, device number 5 [ 367.895007][T22618] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5290'. [ 367.944722][T22622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5291'. [ 368.067222][ T40] kauditd_printk_skb: 483 callbacks suppressed [ 368.067235][ T40] audit: type=1400 audit(5745519454.582:13586): avc: denied { execute } for pid=22629 comm="syz.6.5293" name="file1" dev="tmpfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 368.160609][ T40] audit: type=1400 audit(5745519454.657:13587): avc: denied { read write } for pid=19779 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.183606][ T40] audit: type=1400 audit(5745519454.657:13588): avc: denied { open } for pid=19779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.193967][ T40] audit: type=1400 audit(5745519454.657:13589): avc: denied { ioctl } for pid=19779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.208211][ T40] audit: type=1400 audit(5745519454.667:13590): avc: denied { create } for pid=22635 comm="dhcpcd-run-hook" name="resolv.conf.eth16.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.217401][ T40] audit: type=1400 audit(5745519454.667:13591): avc: denied { write open } for pid=22635 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth16.link" dev="tmpfs" ino=11793 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.226449][ T40] audit: type=1400 audit(5745519454.667:13592): avc: denied { append } for pid=22635 comm="dhcpcd-run-hook" name="resolv.conf.eth16.link" dev="tmpfs" ino=11793 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.237406][ T40] audit: type=1400 audit(5745519454.667:13593): avc: denied { getattr } for pid=22635 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.247554][ T40] audit: type=1400 audit(5745519454.686:13594): avc: denied { read } for pid=22638 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.255768][ T40] audit: type=1400 audit(5745519454.686:13595): avc: denied { create } for pid=22639 comm="syz.7.5294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 368.267151][T22643] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5294'. [ 368.597722][ T29] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 368.758961][ T29] usb 13-1: Using ep0 maxpacket: 32 [ 368.764673][ T29] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 368.771026][ T29] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 368.774716][ T29] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 368.777441][ T29] usb 13-1: Product: syz [ 368.779199][ T29] usb 13-1: Manufacturer: syz [ 368.780830][ T29] usb 13-1: SerialNumber: syz [ 368.784133][ T29] usb 13-1: config 0 descriptor?? [ 368.793262][T22651] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 368.799090][ T29] hub 13-1:0.0: bad descriptor, ignoring hub [ 368.805500][ T29] hub 13-1:0.0: probe with driver hub failed with error -5 [ 368.887266][T22695] binder: 22694:22695 ioctl 4018620d 0 returned -22 [ 369.434635][T22728] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 370.081509][ T5990] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 370.192171][T22669] usb 13-1: USB disconnect, device number 6 [ 370.239478][ T5990] usb 12-1: Using ep0 maxpacket: 32 [ 370.246034][ T5990] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 370.251210][ T5990] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 370.255498][ T5990] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.259857][ T5990] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.264788][ T5990] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 370.272887][ T5990] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 370.276170][ T5990] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.278869][ T5990] usb 12-1: Product: syz [ 370.280300][ T5990] usb 12-1: Manufacturer: syz [ 370.281928][ T5990] usb 12-1: SerialNumber: syz [ 370.287397][ T5990] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 370.289933][ T5990] imon 12-1:155.0: unable to initialize intf0, err -90 [ 370.292670][ T5990] imon:imon_probe: failed to initialize context! [ 370.294784][ T5990] imon 12-1:155.0: unable to register, err -19 [ 370.679216][T22796] overlayfs: failed to resolve './bus': -2 [ 370.763927][T22811] Failed to initialize the IGMP autojoin socket (err -2) [ 371.971056][T22868] validate_nla: 45 callbacks suppressed [ 371.971068][T22868] netlink: 'syz.6.5326': attribute type 21 has an invalid length. [ 371.976756][T22868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5326'. [ 371.980925][T22868] netlink: 'syz.6.5326': attribute type 21 has an invalid length. [ 371.983586][T22868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5326'. [ 372.007230][T22868] netlink: 'syz.6.5326': attribute type 2 has an invalid length. [ 372.416514][T22904] 9p: Unknown access argument 18446744073709551615: -34 [ 372.525105][T22914] [syz.8.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 372.593275][T22914] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.699183][T22914] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.791046][T22914] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.882215][T22914] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.997719][ T9532] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.006172][ T9532] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.023770][ T9532] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.030707][ T6015] usb 12-1: USB disconnect, device number 6 [ 373.055951][ T9532] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.407751][ T40] kauditd_printk_skb: 310 callbacks suppressed [ 373.407768][ T40] audit: type=1400 audit(5745519459.592:13906): avc: denied { execute } for pid=22977 comm="syz.6.5343" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=102129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 373.443390][ T40] audit: type=1400 audit(5745519459.620:13907): avc: denied { read open } for pid=22983 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.458804][ T40] audit: type=1400 audit(5745519459.629:13908): avc: denied { getattr } for pid=22983 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.474285][ T40] audit: type=1400 audit(5745519459.648:13909): avc: denied { add_name } for pid=22981 comm="dhcpcd-run-hook" name="resolv.conf.lapb24.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.557618][ T40] audit: type=1400 audit(5745519459.732:13910): avc: denied { create } for pid=22989 comm="syz.6.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 373.565481][ T40] audit: type=1400 audit(5745519459.732:13911): avc: denied { mounton } for pid=22989 comm="syz.6.5345" path="/690" dev="tmpfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 373.620295][ T40] audit: type=1400 audit(5745519459.789:13912): avc: denied { read write } for pid=21178 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 373.629378][ T40] audit: type=1400 audit(5745519459.789:13913): avc: denied { open } for pid=21178 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 373.641145][ T40] audit: type=1400 audit(5745519459.789:13914): avc: denied { ioctl } for pid=21178 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 373.653862][ T40] audit: type=1400 audit(5745519459.807:13915): avc: denied { map_create } for pid=22996 comm="syz.8.5346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 373.955614][T23018] binder: 23011:23018 ioctl c0306201 200000000240 returned -11 [ 374.008716][ T1153] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.017672][ T5285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.024457][ T5285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.027933][ T5285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.030780][ T5285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.033427][ T5285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.060640][T23025] Failed to initialize the IGMP autojoin socket (err -2) [ 374.431596][T23083] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5358'. [ 374.437069][T23083] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5358'. [ 374.531982][T23092] syz.7.5362(23092): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 374.822272][T23025] netdevsim netdevsim9 netdevsim0: renamed from eth18 [ 374.830767][T23025] netdevsim netdevsim9 netdevsim1: renamed from eth19 [ 374.835195][T23025] netdevsim netdevsim9 netdevsim2: renamed from eth20 [ 374.847946][T23025] netdevsim netdevsim9 netdevsim3: renamed from eth21 [ 374.850020][T23110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5368'. [ 374.858722][T23110] Failed to initialize the IGMP autojoin socket (err -2) [ 374.997639][T23122] netlink: 'syz.8.5370': attribute type 3 has an invalid length. [ 375.062983][T23128] delete_channel: no stack [ 375.115529][T23025] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 375.126164][T23025] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 375.136708][T23025] wireguard: wg0: Could not create IPv4 socket [ 375.141645][T23025] wireguard: wg1: Could not create IPv4 socket [ 375.147111][T23025] wireguard: wg2: Could not create IPv4 socket [ 375.274301][T23139] binder: 23138:23139 ioctl c0306201 0 returned -14 [ 375.513496][T23148] netlink: 'syz.6.5376': attribute type 1 has an invalid length. [ 375.557069][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5378'. [ 375.561179][T23150] kAFS: No cell specified [ 375.685430][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5380'. [ 375.894110][T23181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=23181 comm=syz.6.5386 [ 375.898830][T23178] netlink: 26332 bytes leftover after parsing attributes in process `syz.7.5381'. [ 375.898993][T23181] netlink: 'syz.6.5386': attribute type 4 has an invalid length. [ 376.062696][T23194] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5389'. [ 376.541128][T23240] bpf: Bad value for 'mode' [ 376.786883][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.790050][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.793054][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.797757][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.800822][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.803903][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.807141][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.810210][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.813029][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.815412][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.821644][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.825161][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.827729][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.830241][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.832653][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.835089][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 376.837628][T23276] fuse: Unknown parameter 'groqp_id<00000000000000000000' [ 377.139316][T23320] netlink: 'syz.6.5420': attribute type 1 has an invalid length. [ 377.174336][T23324] syz.6.5421 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 377.573680][ T8264] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 377.744319][ T8264] usb 12-1: Using ep0 maxpacket: 32 [ 377.748159][ T8264] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 377.751602][ T8264] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 377.755697][ T8264] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.760395][ T8264] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 377.769638][ T8264] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 377.773481][ T8264] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.776967][ T8264] usb 12-1: Product: syz [ 377.778815][ T8264] usb 12-1: Manufacturer: syz [ 377.780379][ T8264] usb 12-1: SerialNumber: syz [ 377.789917][ C2] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 377.793137][ T8264] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input80 [ 377.980977][T23370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5428'. [ 378.019566][T23373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5429'. [ 378.023323][ T8264] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 378.026496][ T8264] (id 0x00) [ 378.085572][ T8264] rc_core: IR keymap rc-imon-pad not found [ 378.087913][ T8264] Registered IR keymap rc-empty [ 378.089823][ T8264] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 378.093746][ T8264] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 378.117450][ T8263] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 378.247858][ T8264] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 378.254762][ T8264] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input81 [ 378.264770][ T8264] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:7> initialized [ 378.277262][ T8263] usb 13-1: Using ep0 maxpacket: 8 [ 378.286493][ T8263] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.306068][ T8263] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.322800][ T8263] usb 13-1: config 0 interface 0 has no altsetting 0 [ 378.327362][ T8263] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 378.347262][ T8263] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.372012][ T8263] usb 13-1: config 0 descriptor?? [ 378.440079][T23337] imon:vfd_write: invalid payload size [ 378.659526][ T8264] usb 12-1: USB disconnect, device number 7 [ 378.809353][ T8263] hid_parser_main: 5 callbacks suppressed [ 378.809368][ T8263] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 378.813887][ T8263] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 378.816214][ T8263] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 378.818533][ T8263] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 378.820930][ T8263] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 378.823700][ T8263] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 378.894496][ T40] kauditd_printk_skb: 529 callbacks suppressed [ 378.894508][ T40] audit: type=1400 audit(5745519464.732:14445): avc: denied { create } for pid=23403 comm="dhcpcd-run-hook" name="resolv.conf.lapb32.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 378.904130][ T40] audit: type=1400 audit(5745519464.732:14446): avc: denied { write } for pid=23403 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb32.link" dev="tmpfs" ino=12018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 378.912808][ T40] audit: type=1400 audit(5745519464.732:14447): avc: denied { append } for pid=23403 comm="dhcpcd-run-hook" name="resolv.conf.lapb32.link" dev="tmpfs" ino=12018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 378.940798][ T40] audit: type=1400 audit(5745519464.779:14448): avc: denied { recv } for pid=5912 comm="syz-executor" saddr=127.0.0.1 src=41770 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 378.954669][ T40] audit: type=1400 audit(5745519464.788:14449): avc: denied { create } for pid=23407 comm="syz.6.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 378.961258][ T40] audit: type=1400 audit(5745519464.788:14450): avc: denied { map_create } for pid=23407 comm="syz.6.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 378.967412][ T40] audit: type=1400 audit(5745519464.788:14451): avc: denied { prog_load } for pid=23407 comm="syz.6.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 378.973896][ T40] audit: type=1400 audit(5745519464.788:14452): avc: denied { bpf } for pid=23407 comm="syz.6.5432" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 378.980563][ T40] audit: type=1400 audit(5745519464.788:14453): avc: denied { perfmon } for pid=23407 comm="syz.6.5432" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 378.987564][ T40] audit: type=1400 audit(5745519464.798:14454): avc: denied { module_request } for pid=23407 comm="syz.6.5432" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.021400][ T8263] usb 13-1: USB disconnect, device number 7 [ 379.167084][T23424] netlink: 'syz.6.5435': attribute type 2 has an invalid length. [ 379.638985][T23463] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 379.651325][T23463] netlink: 'syz.8.5443': attribute type 1 has an invalid length. [ 379.654842][T23463] netlink: 160 bytes leftover after parsing attributes in process `syz.8.5443'. [ 379.799516][T23473] tmpfs: Unexpected value for 'usrquota' [ 380.003346][T23487] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 380.007535][T23487] overlayfs: failed to set uuid (743/file0, err=-13); falling back to uuid=null. [ 380.761166][ T8259] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 380.930111][ T8259] usb 12-1: Using ep0 maxpacket: 32 [ 380.934289][ T8259] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 380.938838][ T8259] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 380.944290][ T8259] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.948063][ T8259] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 380.954917][ T8259] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 380.958002][ T8259] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.960695][ T8259] usb 12-1: Product: syz [ 380.963718][ T8259] usb 12-1: Manufacturer: syz [ 380.965581][ T8259] usb 12-1: SerialNumber: syz [ 380.977987][ C0] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 380.981211][ T8259] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input82 [ 381.219455][ T8259] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 381.223520][ T8259] (id 0x00) [ 381.283387][ T8259] rc_core: IR keymap rc-imon-pad not found [ 381.285401][ T8259] Registered IR keymap rc-empty [ 381.287027][ T8259] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 381.290336][ T8259] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 381.444142][ T8259] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 381.456796][ T8259] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input83 [ 381.468510][ T8259] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:8> initialized [ 381.646498][T23524] imon:vfd_write: invalid payload size [ 381.649175][ T6013] usb 12-1: USB disconnect, device number 8 [ 381.654033][ T5285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.663512][ T5285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.666653][ T5285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.670096][ T5285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.672640][ T5285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.704128][T23585] Failed to initialize the IGMP autojoin socket (err -2) [ 381.901691][ T6015] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 382.061719][ T6015] usb 13-1: Using ep0 maxpacket: 32 [ 382.069923][ T6015] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 382.073700][ T6015] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 382.077442][ T6015] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.081298][ T6015] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 382.087696][ T6015] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 382.090634][ T6015] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.093605][ T6015] usb 13-1: Product: syz [ 382.095327][ T6015] usb 13-1: Manufacturer: syz [ 382.096880][ T6015] usb 13-1: SerialNumber: syz [ 382.102101][ C0] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 382.103403][T23624] openvswitch: netlink: Multiple metadata blocks provided [ 382.106106][ T6015] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input84 [ 382.338873][ T6015] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 382.341591][ T6015] (id 0x00) [ 382.384960][T23585] netdevsim netdevsim9 netdevsim0: renamed from eth18 [ 382.389682][T23585] netdevsim netdevsim9 netdevsim1: renamed from eth19 [ 382.392087][ T6015] rc_core: IR keymap rc-imon-pad not found [ 382.394045][ T6015] Registered IR keymap rc-empty [ 382.395663][ T6015] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 382.398957][ T6015] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 382.405897][T23585] netdevsim netdevsim9 netdevsim2: renamed from eth20 [ 382.410574][T23585] netdevsim netdevsim9 netdevsim3: renamed from eth21 [ 382.529616][ T1146] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.563127][ T6015] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 382.568546][ T6015] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input85 [ 382.575012][ T6015] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:8> initialized [ 382.650931][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5473'. [ 382.654271][T23654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5473'. [ 382.657494][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5473'. [ 382.678485][ T1146] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.686715][ T5937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.697101][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.702095][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.705549][ T5937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.710266][ T5937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.728512][T23657] Failed to initialize the IGMP autojoin socket (err -2) [ 382.811273][ T1146] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.838539][T23678] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 382.846200][T23678] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 383.028868][ T8262] wg1 speed is unknown, defaulting to 1000 [ 383.031531][ T8262] syz2: Port: 1 Link DOWN [ 383.039956][ T8262] wg1 speed is unknown, defaulting to 1000 [ 383.134703][T23731] imon:vfd_write: invalid payload size [ 383.148465][T23585] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 383.162981][T23585] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 383.237660][ T5937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.252413][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.266194][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.269390][ T5937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.272912][ T5937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.308430][ T1146] bond2 (unregistering): (slave geneve2): Releasing active interface [ 383.557733][ T1146] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 383.561276][ T1146] bridge2 (unregistering): left promiscuous mode [ 383.729913][ T1146] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 383.734120][ T1146] bond0 (unregistering): Released all slaves [ 383.741983][ T1146] bond1 (unregistering): Released all slaves [ 383.753214][ T1146] bond2 (unregistering): Released all slaves [ 383.764229][ T1146] bond3 (unregistering): Released all slaves [ 383.781147][ T1146] bond4 (unregistering): Released all slaves [ 383.816510][T23585] wireguard: wg0: Could not create IPv4 socket [ 383.830025][T23585] wireguard: wg1: Could not create IPv4 socket [ 383.830149][T23734] Failed to initialize the IGMP autojoin socket (err -2) [ 383.836116][T23585] wireguard: wg2: Could not create IPv4 socket [ 383.873852][ C1] ------------[ cut here ]------------ [ 383.876329][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 383.878952][ C1] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#1: dhcpcd/5636 [ 383.882242][ C1] Modules linked in: [ 383.883844][ C1] CPU: 1 UID: 0 PID: 5636 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 383.887572][ C1] Tainted: [L]=SOFTLOCKUP [ 383.888991][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 383.892277][ C1] RIP: 0010:__queue_work+0xd0c/0x1150 [ 383.894047][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 88 b2 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 55 cc 38 00 90 0f 0b 90 e9 b2 f5 [ 383.900212][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010046 [ 383.902238][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100b07d951 [ 383.904794][ C1] RDX: ffff8880346be178 RSI: ffffffff8a838bb0 RDI: ffffffff90dc84e0 [ 383.907312][ C1] RBP: ffff8880583eca70 R08: 0000000000000005 R09: 0000000000000000 [ 383.907444][T23743] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5479'. [ 383.909901][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880346be000 [ 383.916119][ C1] R13: 1ffff920000d418f R14: ffffffff81cfe370 R15: 0000000000000001 [ 383.919269][ C1] FS: 00007f36bf2ab740(0000) GS:ffff8880d6444000(0000) knlGS:0000000000000000 [ 383.922171][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.924305][ C1] CR2: 00007f5aa91e9e80 CR3: 000000002ea23000 CR4: 0000000000352ef0 [ 383.926870][ C1] Call Trace: [ 383.927981][ C1] [ 383.928943][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 383.930891][ C1] call_timer_fn+0x19a/0x670 [ 383.932468][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 383.934192][ C1] ? __run_timers+0x560/0xb30 [ 383.936002][ C1] ? __run_timers+0x560/0xb30 [ 383.938094][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 383.940338][ C1] __run_timers+0x570/0xb30 [ 383.941878][ C1] ? __pfx___run_timers+0x10/0x10 [ 383.943548][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 383.945201][ C1] run_timer_base+0x114/0x190 [ 383.946782][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 383.948491][ C1] run_timer_softirq+0x1a/0x50 [ 383.950082][ C1] handle_softirqs+0x1eb/0x9e0 [ 383.951618][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 383.953392][ C1] __irq_exit_rcu+0xef/0x150 [ 383.954918][ C1] irq_exit_rcu+0x9/0x30 [ 383.956317][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 383.958179][ C1] [ 383.959165][ C1] [ 383.960149][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 383.962117][ C1] RIP: 0010:lock_acquire+0xb/0x380 [ 383.963804][ C1] Code: 67 48 0f b9 3a e9 28 fc ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 89 f6 <41> 55 45 89 c5 41 54 41 89 cc 55 48 89 fd 53 89 d3 48 83 ec 38 65 [ 383.969998][ C1] RSP: 0018:ffffc900047978c0 EFLAGS: 00000246 [ 383.972003][ C1] RAX: ffffffff81b7fadd RBX: 0000000000000001 RCX: 0000000000000002 [ 383.974587][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e93e0 [ 383.977149][ C1] RBP: ffffc90004797998 R08: 0000000000000000 R09: 0000000000000000 [ 383.979715][ C1] R10: 0000000000000200 R11: 000000000001691a R12: ffffffff81f32ed0 [ 383.982300][ C1] R13: ffffc90004797950 R14: 0000000000000000 R15: ffff888032434900 [ 383.984890][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 383.986910][ C1] ? unwind_next_frame+0xbd/0x1ea0 [ 383.988591][ C1] unwind_next_frame+0xd1/0x1ea0 [ 383.990181][ C1] ? unwind_next_frame+0xbd/0x1ea0 [ 383.991843][ C1] ? putname+0xb1/0x110 [ 383.993264][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 383.995271][ C1] arch_stack_walk+0x94/0xf0 [ 383.996794][ C1] ? putname+0xb1/0x110 [ 383.998180][ C1] ? putname+0xb1/0x110 [ 383.999549][ C1] stack_trace_save+0x8e/0xc0 [ 384.001104][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 384.002882][ C1] ? __lock_acquire+0x4a5/0x2630 [ 384.004515][ C1] ? path_lookupat+0x774/0xc40 [ 384.006092][ C1] kasan_save_stack+0x30/0x50 [ 384.007613][ C1] ? kasan_save_stack+0x30/0x50 [ 384.009235][ C1] ? kasan_save_track+0x14/0x30 [ 384.010813][ C1] ? kasan_save_free_info+0x3b/0x70 [ 384.012532][ C1] ? __kasan_slab_free+0x5f/0x80 [ 384.014176][ C1] ? kmem_cache_free+0x124/0x6a0 [ 384.015803][ C1] ? putname+0xb1/0x110 [ 384.017171][ C1] kasan_save_track+0x14/0x30 [ 384.018729][ C1] kasan_save_free_info+0x3b/0x70 [ 384.020386][ C1] __kasan_slab_free+0x5f/0x80 [ 384.021991][ C1] kmem_cache_free+0x124/0x6a0 [ 384.023577][ C1] putname+0xb1/0x110 [ 384.024906][ C1] vfs_fstatat+0x86/0xe0 [ 384.026279][ C1] __do_sys_newfstatat+0x9d/0x120 [ 384.027901][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 384.029712][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 384.031433][ C1] ? __pfx_ksys_read+0x10/0x10 [ 384.033036][ C1] do_syscall_64+0x106/0xf80 [ 384.034536][ C1] ? clear_bhb_loop+0x40/0x90 [ 384.036075][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.038010][ C1] RIP: 0033:0x7f36bf39fb0a [ 384.039478][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 384.045652][ C1] RSP: 002b:00007fff5307f2c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 384.048326][ C1] RAX: ffffffffffffffda RBX: 00007f36bf2a801e RCX: 00007f36bf39fb0a [ 384.050948][ C1] RDX: 00007fff5307f2e0 RSI: 00007fff5307f570 RDI: 00000000ffffff9c [ 384.053851][ C1] RBP: 00007fff5307f570 R08: 00007f36bf29b0bd R09: 00007fff5308fbc0 [ 384.057017][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5308fbc0 [ 384.059690][ C1] R13: 000056399d3cc850 R14: 00007fff5307f2e0 R15: 00007fff5308fb30 [ 384.062308][ C1] [ 384.063353][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 384.065727][ C1] CPU: 1 UID: 0 PID: 5636 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 384.069101][ C1] Tainted: [L]=SOFTLOCKUP [ 384.070549][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.073821][ C1] Call Trace: [ 384.074932][ C1] [ 384.075893][ C1] dump_stack_lvl+0x100/0x190 [ 384.077460][ C1] vpanic+0x552/0x970 [ 384.078780][ C1] ? __pfx_vpanic+0x10/0x10 [ 384.080285][ C1] panic+0xd1/0xe0 [ 384.081544][ C1] ? __pfx_panic+0x10/0x10 [ 384.083030][ C1] ? check_panic_on_warn+0x1f/0x90 [ 384.084708][ C1] check_panic_on_warn.cold+0x19/0x34 [ 384.086474][ C1] ? __queue_work+0xd08/0x1150 [ 384.088052][ C1] __warn.cold+0x191/0x348 [ 384.089530][ C1] __report_bug+0x296/0x3d0 [ 384.091028][ C1] ? __queue_work+0xd08/0x1150 [ 384.092609][ C1] ? __pfx___report_bug+0x10/0x10 [ 384.094267][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 384.095998][ C1] ? try_to_wake_up+0xcf1/0x1a80 [ 384.097586][ C1] ? try_to_wake_up+0xcf1/0x1a80 [ 384.099184][ C1] ? look_up_lock_class+0x64/0x120 [ 384.100862][ C1] report_bug_entry+0xe1/0x290 [ 384.102469][ C1] ? __queue_work+0xd0c/0x1150 [ 384.104046][ C1] handle_bug+0x1c9/0x2a0 [ 384.105478][ C1] exc_invalid_op+0x17/0x50 [ 384.106983][ C1] asm_exc_invalid_op+0x1a/0x20 [ 384.108549][ C1] RIP: 0010:__queue_work+0xd0c/0x1150 [ 384.110283][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 88 b2 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 55 cc 38 00 90 0f 0b 90 e9 b2 f5 [ 384.116419][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010046 [ 384.118394][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100b07d951 [ 384.120948][ C1] RDX: ffff8880346be178 RSI: ffffffff8a838bb0 RDI: ffffffff90dc84e0 [ 384.123505][ C1] RBP: ffff8880583eca70 R08: 0000000000000005 R09: 0000000000000000 [ 384.126064][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880346be000 [ 384.128617][ C1] R13: 1ffff920000d418f R14: ffffffff81cfe370 R15: 0000000000000001 [ 384.131180][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 384.133106][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 384.134856][ C1] ? __queue_work+0xcda/0x1150 [ 384.136430][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 384.138337][ C1] call_timer_fn+0x19a/0x670 [ 384.139860][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 384.141542][ C1] ? __run_timers+0x560/0xb30 [ 384.143106][ C1] ? __run_timers+0x560/0xb30 [ 384.144650][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 384.146553][ C1] __run_timers+0x570/0xb30 [ 384.148004][ C1] ? __pfx___run_timers+0x10/0x10 [ 384.149546][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 384.151204][ C1] run_timer_base+0x114/0x190 [ 384.152760][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 384.154481][ C1] run_timer_softirq+0x1a/0x50 [ 384.156062][ C1] handle_softirqs+0x1eb/0x9e0 [ 384.157645][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 384.159387][ C1] __irq_exit_rcu+0xef/0x150 [ 384.160909][ C1] irq_exit_rcu+0x9/0x30 [ 384.162323][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 384.164147][ C1] [ 384.165127][ C1] [ 384.166118][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 384.168036][ C1] RIP: 0010:lock_acquire+0xb/0x380 [ 384.169670][ C1] Code: 67 48 0f b9 3a e9 28 fc ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 89 f6 <41> 55 45 89 c5 41 54 41 89 cc 55 48 89 fd 53 89 d3 48 83 ec 38 65 [ 384.175849][ C1] RSP: 0018:ffffc900047978c0 EFLAGS: 00000246 [ 384.177827][ C1] RAX: ffffffff81b7fadd RBX: 0000000000000001 RCX: 0000000000000002 [ 384.180384][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e93e0 [ 384.182946][ C1] RBP: ffffc90004797998 R08: 0000000000000000 R09: 0000000000000000 [ 384.185502][ C1] R10: 0000000000000200 R11: 000000000001691a R12: ffffffff81f32ed0 [ 384.188060][ C1] R13: ffffc90004797950 R14: 0000000000000000 R15: ffff888032434900 [ 384.190619][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.192665][ C1] ? unwind_next_frame+0xbd/0x1ea0 [ 384.194358][ C1] unwind_next_frame+0xd1/0x1ea0 [ 384.195982][ C1] ? unwind_next_frame+0xbd/0x1ea0 [ 384.197659][ C1] ? putname+0xb1/0x110 [ 384.199030][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.201037][ C1] arch_stack_walk+0x94/0xf0 [ 384.202579][ C1] ? putname+0xb1/0x110 [ 384.203949][ C1] ? putname+0xb1/0x110 [ 384.205330][ C1] stack_trace_save+0x8e/0xc0 [ 384.206879][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 384.208634][ C1] ? __lock_acquire+0x4a5/0x2630 [ 384.210266][ C1] ? path_lookupat+0x774/0xc40 [ 384.211846][ C1] kasan_save_stack+0x30/0x50 [ 384.213432][ C1] ? kasan_save_stack+0x30/0x50 [ 384.215053][ C1] ? kasan_save_track+0x14/0x30 [ 384.216639][ C1] ? kasan_save_free_info+0x3b/0x70 [ 384.218341][ C1] ? __kasan_slab_free+0x5f/0x80 [ 384.219962][ C1] ? kmem_cache_free+0x124/0x6a0 [ 384.221596][ C1] ? putname+0xb1/0x110 [ 384.223000][ C1] kasan_save_track+0x14/0x30 [ 384.224558][ C1] kasan_save_free_info+0x3b/0x70 [ 384.226216][ C1] __kasan_slab_free+0x5f/0x80 [ 384.227786][ C1] kmem_cache_free+0x124/0x6a0 [ 384.229366][ C1] putname+0xb1/0x110 [ 384.230683][ C1] vfs_fstatat+0x86/0xe0 [ 384.232083][ C1] __do_sys_newfstatat+0x9d/0x120 [ 384.233750][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 384.235580][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 384.237358][ C1] ? __pfx_ksys_read+0x10/0x10 [ 384.238937][ C1] do_syscall_64+0x106/0xf80 [ 384.240461][ C1] ? clear_bhb_loop+0x40/0x90 [ 384.242038][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.243963][ C1] RIP: 0033:0x7f36bf39fb0a [ 384.245449][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 384.251528][ C1] RSP: 002b:00007fff5307f2c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 384.254274][ C1] RAX: ffffffffffffffda RBX: 00007f36bf2a801e RCX: 00007f36bf39fb0a [ 384.256826][ C1] RDX: 00007fff5307f2e0 RSI: 00007fff5307f570 RDI: 00000000ffffff9c [ 384.259408][ C1] RBP: 00007fff5307f570 R08: 00007f36bf29b0bd R09: 00007fff5308fbc0 [ 384.261987][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5308fbc0 [ 384.264549][ C1] R13: 000056399d3cc850 R14: 00007fff5307f2e0 R15: 00007fff5308fb30 [ 384.267130][ C1] [ 384.268911][ C1] Kernel Offset: disabled [ 384.270343][ C1] Rebooting in 86400 seconds..