last executing test programs: 1m56.87208479s ago: executing program 3 (id=487): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)="ff80", 0x2) close(0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) unshare(0x22020600) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000695000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000692000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f0000693000/0x4000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x800c8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x1, 0x6, 0x4, 0x1, 0x4]}, &(0x7f0000000200)=0x54) connect$inet(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x101) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) write(r6, &(0x7f0000000000)='7', 0x1) ioctl$XFS_IOC_GOINGDOWN(r7, 0x8004587d, &(0x7f0000000240)=0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000007c0)={0x2, 'macsec0\x00', 0x3}, 0x18) 1m56.684603567s ago: executing program 3 (id=488): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x1406, 0x10, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1402, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m56.684114245s ago: executing program 3 (id=489): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0200000001"], 0x48) r12 = fsmount(r9, 0x1, 0xa) fchdir(r12) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r11}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e1304095c0009003f0020480a0000000d0085a168d0bf46c92345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902000000004a3200040016000b000a0000000000e0ddf66ed538f25232529c28bf00", 0x78, 0x40, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x106, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x7, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x3501, 0x4, 0x0, 0x4, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) 1m56.581499549s ago: executing program 3 (id=490): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r0, &(0x7f0000002080)=""/4108, 0x100c) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000000c0)={0x80}) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x104a8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto(r1, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0x80) getdents64(r0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='2', 0x1) r6 = syz_socket_connect_nvme_tcp() close(r6) getsockopt$packet_int(r4, 0x107, 0xa, 0x0, &(0x7f0000000040)) 1m56.144031699s ago: executing program 3 (id=491): syz_emit_ethernet(0xbe, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b0000000000011907800000000e000000100004e20004c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49f486e15c0c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc108bbf39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x0, 0x2) (async) r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x1000595f, 0x10000, 0xfffffffe, 0x51}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r0, 0x2000, 0x1, 0x9, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000810526bd70000001000000000000", @ANYRES32=0x0, @ANYBLOB="02200000200000001c0012800b00010062726964676500000c0002800600270001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) setns(0xc9, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f0000000300)='./sec\x00', r7, &(0x7f0000000140)='./file0\x00') (async) openat2(r7, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x11}, 0x18) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x7, 0x8008, 0x9, 0x7, {{0x25, 0x4, 0x1, 0x6, 0x94, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @private=0xa010102, {[@generic={0x82, 0x2}, @ssrr={0x89, 0x1b, 0xd1, [@multicast1, @rand_addr=0x64010101, @loopback, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0xc8, 0x0, 0x4, [0x80000001, 0x401, 0x6]}, @end, @ssrr={0x89, 0x7, 0x43, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x3a, 0x0, [{0x6, 0x7, "7cb252049c"}, {0x1, 0x3, "89"}, {0x6, 0x2}, {0x7, 0x4, "fa6f"}, {0x6, 0xe, "3c72a61c6e9c192edb4bdb76"}, {0x2, 0x2}, {0x0, 0x8, "f131c31ba533"}, {0x0, 0xc, "43aee53bc56193337bee"}]}, @generic={0x7, 0x3, "fe"}, @end, @timestamp={0x44, 0xc, 0x20, 0x0, 0x0, [0x1, 0x0]}]}}}}}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x1fd, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x80, 0x8, 0x1, 0xf, 0x8, 0x2}, {0x7fffffff, 0x7ff, 0x4, 0xc, 0xc, 0x0, 0x9, 0x7, 0x8, 0x13, 0x1, 0x3, 0xb}, {0x2, 0x1, 0xa, 0xf, 0x1, 0x14, 0x80, 0xfb, 0xf2, 0x7b, 0x1, 0xff, 0x2}], 0x8}) (async) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000005c0)="b91b0000000f3225ff0f00000d000010000f30b878563412bb000310008903", 0x1f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', r8, 0x1, 0x7, 0x5, 0x6, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x65, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@end]}}}}}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="05002dbd7000000000002e00000008000300", @ANYRES32=r13, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x4000010) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000100)={0x8, 'ip6_vti0\x00', {'veth1\x00'}, 0x15}) 1m56.013633891s ago: executing program 3 (id=493): ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0xc9e) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0xa611, 0x50, 0x309, 0x4}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x3, 0x1, [0x574]}, &(0x7f0000000200)=0xa) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000300)={0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@deltaction={0x28, 0x31, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800c840}, 0x4004040) fsopen(&(0x7f0000000440)='pvfs2\x00', 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet(0x2, 0x800, 0x6) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000480)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e20, 0x10000, @loopback, 0x1}, @in6={0xa, 0x4e20, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e20, 0x4, @private1, 0x2}], 0x80) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000540)=0x1, 0x2) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580), 0x111000, 0x0) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000d80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000600)={0x710, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x800}, 0x0, 0x3, 0x0, 0x9, 0xd, 'syz1\x00', "665ce878e97d78587366980aec07c44fee6975c0884621acfc4e62c34145528e", "2e1c85e89385c78fe2caa36987d45ff206eca559be832591d18b9004e8d29dfc", [{0xefd4, 0x4, {0x0, 0x6}}, {0x9, 0x0, {0x2, 0x80000001}}, {0x800, 0x4, {0x3, 0x2}}, {0x4, 0x6}, {0x3640, 0x7fc6, {0x0, 0x2}}, {0x4, 0x2, {0x0, 0x9}}, {0x7f, 0x8, {0x1, 0x68b}}, {0x7, 0xb, {0x1, 0x9}}, {0x1, 0xff7f, {0x0, 0x5}}, {0x8, 0x6, {0x0, 0xae}}, {0x9, 0x2, {0x2, 0x1}}, {0x5, 0xfff7, {0x2, 0x1}}, {0xfffa, 0x582, {0x3, 0x8}}, {0x101, 0x7fff, {0x3, 0x8}}, {0x2, 0x8, {0x2}}, {0x10, 0x7f, {0x1, 0x7}}, {0xc5, 0x6, {0x2, 0x1}}, {0x8, 0x4, {0x0, 0x3f11}}, {0xb, 0xdac, {0x3, 0xfff}}, {0xfd01, 0x4, {0x1, 0x6}}, {0x1, 0x235b, {0x1, 0x8000}}, {0x0, 0x8, {0x2, 0xffff}}, {0xe750, 0x1, {0x3, 0x7}}, {0x4, 0x8, {0x2, 0x4}}, {0x101, 0x7, {0x3, 0x9}}, {0x6, 0x1000, {0x1, 0x9}}, {0x1, 0xfff7, {0x2, 0xff}}, {0x6, 0x5, {0x1, 0x7f}}, {0x0, 0xb, {0x2, 0x2}}, {0x8, 0x6, {0x3, 0xa}}, {0x400, 0x7, {0x0, 0x8}}, {0x8f1e, 0x2, {0x3, 0xe}}, {0x105, 0x7, {0x2, 0x2}}, {0x4533, 0x7f, {0x0, 0xd}}, {0x6, 0x5, {0x3, 0x3}}, {0x0, 0x7, {0x3, 0x80000001}}, {0x6810, 0x2, {0x2, 0xa9fa}}, {0x5, 0x7, {0x3, 0xa0}}, {0x8, 0xb, {0x1, 0x7ff}}, {0x4, 0x9, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x4a, 0x0, 0x0, 0xcf12, 0xf, 'syz1\x00', "ac1e1dec68f76e33adf89bf338a9a41025416ac0430e5ea4c342a1b4cd273b49", "0be9a1d1614153053a7a91034f89788abce22644117b7f57769d1d16ce292b10", [{0x3, 0x7, {0x2}}, {0x7, 0x2, {0x0, 0x4}}, {0xca2, 0x7, {0x1, 0x1}}, {0x3ff, 0x3, {0x0, 0x5}}, {0xbe4, 0x8001, {0x1, 0x1}}, {0x9, 0xd, {0x3, 0x1000}}, {0x1, 0x0, {0x2, 0x5}}, {0x3, 0x8, {0x0, 0x6}}, {0x8000, 0x1, {0x2, 0x6}}, {0x3ff, 0x7fc3, {0x2, 0x100}}, {0x8, 0x101, {0x3, 0x3}}, {0x3, 0x5, {0x3, 0x76b0c3c8}}, {0x0, 0x0, {0x1, 0x614b}}, {0x3, 0x0, {0x2, 0x5}}, {0x9, 0xfffb, {0x3, 0x80}}, {0x5, 0x101, {0x2, 0x7}}, {0x1, 0x647, {0x3, 0x2caf}}, {0x7, 0x5}, {0x7, 0x8, {0x2, 0xa1}}, {0x4, 0x4, {0x2, 0x9}}, {0x4, 0x3, {0x0, 0xcbc}}, {0x9, 0x7, {0x0, 0x4}}, {0x7, 0x5, {0x0, 0x2}}, {0x8, 0x0, {0x3, 0x3}}, {0x8, 0x0, {0x1, 0x40}}, {0x8000, 0x2, {0x0, 0xb92}}, {0x9, 0xb, {0x0, 0x9}}, {0x7, 0x2}, {0x96a2, 0x2, {0x2, 0x5}}, {0x0, 0x4c1, {0x1, 0xf}}, {0xb5f, 0x4, {0x2, 0xb}}, {0x3, 0x9ce, {0x1, 0x60000000}}, {0x4, 0x4, {0x0, 0x8}}, {0x2a00, 0xe, {0x1, 0x6e2}}, {0x2, 0x40, {0x0, 0x80}}, {0x0, 0x8, {0x3, 0x430020ea}}, {0x9, 0x6, {0x1}}, {0x0, 0x4, {0x1, 0x5}}, {0x34, 0x4, {0x1, 0x7}}, {0x673f, 0x0, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x1, 0x8, 0x200, 0x8001, 0xb, 'syz1\x00', "fc3a986776ef433e5770ff876990c377d065fae4cc8b98b3927c826b390fa38f", "62cd2580e87078acdaeac6776159d94511ea2bad5649f222dba0c7993e25719a", [{0x7440, 0xfffd, {0x3, 0xfffffffa}}, {0x4, 0x8000, {0x1, 0x8001}}, {0x7, 0x2, {0x0, 0x401}}, {0x80, 0x1ff, {0x1, 0x3}}, {0x52, 0x198, {0x1, 0x6}}, {0xa4e5, 0x2, {0x2, 0x7ff}}, {0x2, 0x200, {0x0, 0x1}}, {0xb20, 0x7}, {0x6, 0x6, {0x0, 0xfff}}, {0x45a, 0x6, {0x2}}, {0xb8b, 0x8, {0x3, 0x8}}, {0x0, 0x2, {0x0, 0x1}}, {0x200, 0x3, {0x0, 0x2}}, {0x7, 0x5, {0x2, 0x34}}, {0xffff, 0x1, {0x0, 0x4d7}}, {0x6, 0xfe00, {0x3, 0x80}}, {0xe, 0x7, {0x2, 0x5}}, {0x200, 0xc, {0x1, 0x1c}}, {0xf, 0x5, {0x2, 0x8}}, {0x0, 0x0, {0x1, 0x4}}, {0x8, 0xf6f4, {0x0, 0x2}}, {0x7, 0x9, {0x2, 0xc}}, {0x7, 0x8, {0x1, 0x1000}}, {0x1, 0x4, {0x0, 0x2}}, {0xfbb7, 0x4, {0x3, 0xb1}}, {0x0, 0x81, {0x1}}, {0xfff9, 0x0, {0x0, 0x9}}, {0x4, 0xcd0, {0x0, 0x10001}}, {0xc, 0x3, {0x2, 0x7}}, {0x5, 0x3, {0x1, 0x5}}, {0x7f, 0x2, {0x2, 0x6}}, {0xd2, 0x9, {0x2}}, {0x6, 0x8, {0x2, 0xb}}, {0xfff3, 0x7, {0x3, 0x4}}, {0x7, 0x7, {0x1, 0x200}}, {0x1, 0xf080, {0x2, 0x8}}, {0x81, 0x2, {0x3, 0xc}}, {0x7fff, 0xab, {0x3, 0x10000}}, {0x0, 0x0, {0x1, 0x2}}, {0x7, 0x0, {0x2, 0x8}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0xf8f7428eb74c8a79}, 0x40) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800002, 0x13, r1, 0xd000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2c8440, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000ec0)={0x2, 0x9, 0x9e, &(0x7f0000000e00)=""/158}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000f00), 0x10200, 0x0) ioctl$OCFS2_IOC_RESVSP64(r6, 0x4030582a, &(0x7f0000000f40)={0x1, 0x2, 0x2, 0xb, 0x4, 0xff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f80), 0x400000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000fc0)={0x6, 0x3, "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"}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000001100)={0x60, 0x0, 0x780, 0x78, 0x6, 0xfff, 0x0, 0x1, {0x26, 0x3}, {0x1, 0xffffb8c6}, {0x6, 0x6, 0x1}, {0x5, 0x5}, 0x0, 0x1, 0x9, 0x8, 0x1, 0xfffeffff, 0x1, 0x3f, 0x1000, 0x7, 0x8, 0x6, 0x4, 0x0, 0x1, 0x4}) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000011c0)={0x20000000000000, 0x0, 0x8}) 1m41.92292489s ago: executing program 0 (id=635): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x2f, @loopback, 0x0, 0x0, 'dh\x00', 0x1, 0xef, 0x2e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x2f, @loopback, 0x0, 0x0, 'dh\x00', 0x1, 0xef, 0x2e}, 0x2c) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000002900), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x7, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x7, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) accept(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) (async) r2 = accept(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) listen(r2, 0xad40a19) 1m41.833698749s ago: executing program 0 (id=636): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="05003901"], 0x44}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0x10003, 0x1, &(0x7f0000000080)='|', 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="05003901"], 0x44}}, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0x10003, 0x1, &(0x7f0000000080)='|', 0x1}) (async) 1m41.783993757s ago: executing program 0 (id=637): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0024000213020202020000080026006c0900000800a000b70400000800270003000000"], 0x40}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xb, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x4c, 0x64, 0xf31, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xae}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x4c}}, 0x4804) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGRDESC(r11, 0x4008c002, 0x0) 1m40.946843784s ago: executing program 32 (id=493): ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0xc9e) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0xa611, 0x50, 0x309, 0x4}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x3, 0x1, [0x574]}, &(0x7f0000000200)=0xa) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000300)={0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@deltaction={0x28, 0x31, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800c840}, 0x4004040) fsopen(&(0x7f0000000440)='pvfs2\x00', 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet(0x2, 0x800, 0x6) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000480)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e20, 0x10000, @loopback, 0x1}, @in6={0xa, 0x4e20, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e20, 0x4, @private1, 0x2}], 0x80) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000540)=0x1, 0x2) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580), 0x111000, 0x0) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000d80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000600)={0x710, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x800}, 0x0, 0x3, 0x0, 0x9, 0xd, 'syz1\x00', "665ce878e97d78587366980aec07c44fee6975c0884621acfc4e62c34145528e", "2e1c85e89385c78fe2caa36987d45ff206eca559be832591d18b9004e8d29dfc", [{0xefd4, 0x4, {0x0, 0x6}}, {0x9, 0x0, {0x2, 0x80000001}}, {0x800, 0x4, {0x3, 0x2}}, {0x4, 0x6}, {0x3640, 0x7fc6, {0x0, 0x2}}, {0x4, 0x2, {0x0, 0x9}}, {0x7f, 0x8, {0x1, 0x68b}}, {0x7, 0xb, {0x1, 0x9}}, {0x1, 0xff7f, {0x0, 0x5}}, {0x8, 0x6, {0x0, 0xae}}, {0x9, 0x2, {0x2, 0x1}}, {0x5, 0xfff7, {0x2, 0x1}}, {0xfffa, 0x582, {0x3, 0x8}}, {0x101, 0x7fff, {0x3, 0x8}}, {0x2, 0x8, {0x2}}, {0x10, 0x7f, {0x1, 0x7}}, {0xc5, 0x6, {0x2, 0x1}}, {0x8, 0x4, {0x0, 0x3f11}}, {0xb, 0xdac, {0x3, 0xfff}}, {0xfd01, 0x4, {0x1, 0x6}}, {0x1, 0x235b, {0x1, 0x8000}}, {0x0, 0x8, {0x2, 0xffff}}, {0xe750, 0x1, {0x3, 0x7}}, {0x4, 0x8, {0x2, 0x4}}, {0x101, 0x7, {0x3, 0x9}}, {0x6, 0x1000, {0x1, 0x9}}, {0x1, 0xfff7, {0x2, 0xff}}, {0x6, 0x5, {0x1, 0x7f}}, {0x0, 0xb, {0x2, 0x2}}, {0x8, 0x6, {0x3, 0xa}}, {0x400, 0x7, {0x0, 0x8}}, {0x8f1e, 0x2, {0x3, 0xe}}, {0x105, 0x7, {0x2, 0x2}}, {0x4533, 0x7f, {0x0, 0xd}}, {0x6, 0x5, {0x3, 0x3}}, {0x0, 0x7, {0x3, 0x80000001}}, {0x6810, 0x2, {0x2, 0xa9fa}}, {0x5, 0x7, {0x3, 0xa0}}, {0x8, 0xb, {0x1, 0x7ff}}, {0x4, 0x9, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x4a, 0x0, 0x0, 0xcf12, 0xf, 'syz1\x00', "ac1e1dec68f76e33adf89bf338a9a41025416ac0430e5ea4c342a1b4cd273b49", "0be9a1d1614153053a7a91034f89788abce22644117b7f57769d1d16ce292b10", [{0x3, 0x7, {0x2}}, {0x7, 0x2, {0x0, 0x4}}, {0xca2, 0x7, {0x1, 0x1}}, {0x3ff, 0x3, {0x0, 0x5}}, {0xbe4, 0x8001, {0x1, 0x1}}, {0x9, 0xd, {0x3, 0x1000}}, {0x1, 0x0, {0x2, 0x5}}, {0x3, 0x8, {0x0, 0x6}}, {0x8000, 0x1, {0x2, 0x6}}, {0x3ff, 0x7fc3, {0x2, 0x100}}, {0x8, 0x101, {0x3, 0x3}}, {0x3, 0x5, {0x3, 0x76b0c3c8}}, {0x0, 0x0, {0x1, 0x614b}}, {0x3, 0x0, {0x2, 0x5}}, {0x9, 0xfffb, {0x3, 0x80}}, {0x5, 0x101, {0x2, 0x7}}, {0x1, 0x647, {0x3, 0x2caf}}, {0x7, 0x5}, {0x7, 0x8, {0x2, 0xa1}}, {0x4, 0x4, {0x2, 0x9}}, {0x4, 0x3, {0x0, 0xcbc}}, {0x9, 0x7, {0x0, 0x4}}, {0x7, 0x5, {0x0, 0x2}}, {0x8, 0x0, {0x3, 0x3}}, {0x8, 0x0, {0x1, 0x40}}, {0x8000, 0x2, {0x0, 0xb92}}, {0x9, 0xb, {0x0, 0x9}}, {0x7, 0x2}, {0x96a2, 0x2, {0x2, 0x5}}, {0x0, 0x4c1, {0x1, 0xf}}, {0xb5f, 0x4, {0x2, 0xb}}, {0x3, 0x9ce, {0x1, 0x60000000}}, {0x4, 0x4, {0x0, 0x8}}, {0x2a00, 0xe, {0x1, 0x6e2}}, {0x2, 0x40, {0x0, 0x80}}, {0x0, 0x8, {0x3, 0x430020ea}}, {0x9, 0x6, {0x1}}, {0x0, 0x4, {0x1, 0x5}}, {0x34, 0x4, {0x1, 0x7}}, {0x673f, 0x0, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x1, 0x8, 0x200, 0x8001, 0xb, 'syz1\x00', "fc3a986776ef433e5770ff876990c377d065fae4cc8b98b3927c826b390fa38f", "62cd2580e87078acdaeac6776159d94511ea2bad5649f222dba0c7993e25719a", [{0x7440, 0xfffd, {0x3, 0xfffffffa}}, {0x4, 0x8000, {0x1, 0x8001}}, {0x7, 0x2, {0x0, 0x401}}, {0x80, 0x1ff, {0x1, 0x3}}, {0x52, 0x198, {0x1, 0x6}}, {0xa4e5, 0x2, {0x2, 0x7ff}}, {0x2, 0x200, {0x0, 0x1}}, {0xb20, 0x7}, {0x6, 0x6, {0x0, 0xfff}}, {0x45a, 0x6, {0x2}}, {0xb8b, 0x8, {0x3, 0x8}}, {0x0, 0x2, {0x0, 0x1}}, {0x200, 0x3, {0x0, 0x2}}, {0x7, 0x5, {0x2, 0x34}}, {0xffff, 0x1, {0x0, 0x4d7}}, {0x6, 0xfe00, {0x3, 0x80}}, {0xe, 0x7, {0x2, 0x5}}, {0x200, 0xc, {0x1, 0x1c}}, {0xf, 0x5, {0x2, 0x8}}, {0x0, 0x0, {0x1, 0x4}}, {0x8, 0xf6f4, {0x0, 0x2}}, {0x7, 0x9, {0x2, 0xc}}, {0x7, 0x8, {0x1, 0x1000}}, {0x1, 0x4, {0x0, 0x2}}, {0xfbb7, 0x4, {0x3, 0xb1}}, {0x0, 0x81, {0x1}}, {0xfff9, 0x0, {0x0, 0x9}}, {0x4, 0xcd0, {0x0, 0x10001}}, {0xc, 0x3, {0x2, 0x7}}, {0x5, 0x3, {0x1, 0x5}}, {0x7f, 0x2, {0x2, 0x6}}, {0xd2, 0x9, {0x2}}, {0x6, 0x8, {0x2, 0xb}}, {0xfff3, 0x7, {0x3, 0x4}}, {0x7, 0x7, {0x1, 0x200}}, {0x1, 0xf080, {0x2, 0x8}}, {0x81, 0x2, {0x3, 0xc}}, {0x7fff, 0xab, {0x3, 0x10000}}, {0x0, 0x0, {0x1, 0x2}}, {0x7, 0x0, {0x2, 0x8}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0xf8f7428eb74c8a79}, 0x40) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800002, 0x13, r1, 0xd000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2c8440, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000ec0)={0x2, 0x9, 0x9e, &(0x7f0000000e00)=""/158}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000f00), 0x10200, 0x0) ioctl$OCFS2_IOC_RESVSP64(r6, 0x4030582a, &(0x7f0000000f40)={0x1, 0x2, 0x2, 0xb, 0x4, 0xff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f80), 0x400000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000fc0)={0x6, 0x3, "ccbb483346b214b96ae2a4b1a758bbc36f693bb93ec2e28b74bd7222a1cfcbe520e18d34a002da41c56fe4597a0a1fe203777c027b1d0024fa8e00db7a626a37058312080592ba64c20f85aaebb842cf12aa94a645b4b9137d023651bfe51cd2da2fc493d0d735fbdf962b47b3f33abf571fca7753a9f3670a1256606660511ec0dcad1b0e4b9aed2fe921f48cf6155c453188041548175e0620a04c463a4eb693b6b53dc8824cd514508af757ca436569f02c62ec224e996e5448faaccf1fa581382c5c5695bd7d1a6b37a55ee2b5d2fc59fe7a5fae8d0eb1bb79a0e421030a294cdb7769403c3b1a9c4eb888deb8d4053a9c44a27d90aef86cc1ecf0fbf9e8"}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000001100)={0x60, 0x0, 0x780, 0x78, 0x6, 0xfff, 0x0, 0x1, {0x26, 0x3}, {0x1, 0xffffb8c6}, {0x6, 0x6, 0x1}, {0x5, 0x5}, 0x0, 0x1, 0x9, 0x8, 0x1, 0xfffeffff, 0x1, 0x3f, 0x1000, 0x7, 0x8, 0x6, 0x4, 0x0, 0x1, 0x4}) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000011c0)={0x20000000000000, 0x0, 0x8}) 1m38.733587363s ago: executing program 0 (id=650): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x800452d3, &(0x7f0000000000)) r1 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) lseek(r1, 0x10000000ffff, 0x0) 1m38.73307446s ago: executing program 0 (id=651): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0, 0x1400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) write$tcp_mem(r3, &(0x7f0000001000)={0xffffffffffffffff, 0x20, 0xd, 0x20, 0x9}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="81740a3500098000163a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(r1) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0x0, 0xd}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0, 0x1400}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) (async) write$tcp_mem(r3, &(0x7f0000001000)={0xffffffffffffffff, 0x20, 0xd, 0x20, 0x9}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="81740a3500098000163a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x90) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (async) close(r1) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0x0, 0xd}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) (async) 1m38.342612819s ago: executing program 0 (id=652): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c20007465737400004c00020008000300010000601000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) 1m36.813247839s ago: executing program 2 (id=665): unshare(0xc000100) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r1) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) (async) r3 = openat(r2, &(0x7f0000000140)='./file0/file0\x00', 0x48300, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x80049370, 0x1000000000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) (async) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0x0, 0x9, 0x1000}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x4}, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x4000001) openat$iommufd(0xffffffffffffff9c, 0x0, 0xc8642, 0x0) setns(0xc9, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, r7, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040d0}, 0x40000) unshare(0x2c000000) 1m36.812558912s ago: executing program 2 (id=666): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000240)={0x80008000, 0xc2cf, 0xffe00001, 0x1, 0x2, "00e4fdab790000fb00"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd28, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x901f, @loopback}, 0x10) listen(r5, 0x5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r7, 0x20, &(0x7f0000000100)={0x1, 0x2000000, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) connect$inet(r6, &(0x7f0000000400)={0x2, 0x901f, @loopback}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$ARCH_GET_GS(0x1e, r8, &(0x7f0000000140), 0x1004) accept4(r5, 0x0, 0x0, 0x0) 1m35.631088157s ago: executing program 2 (id=682): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/1:0:0:0\x00', 0x17d802, 0x0) sysfs$1(0x1, &(0x7f0000000180)='/:(-@#\\-](@\xc5}-!\'\xa8$]{)&!]]+@@\x00') ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "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"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001200)={0x6, &(0x7f00000011c0)=[{0x7, 0x4, 0x5, 0x5}, {0x6, 0x2, 0x6, 0x1}, {0xfbf, 0x81, 0x69, 0x80000001}, {0x4, 0x8, 0x4d, 0x1}, {0x53, 0xd, 0xf7}, {0x6, 0x3, 0x5, 0x5}]}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000001240)='veth1_vlan\x00') r4 = syz_open_dev$sndpcmc(&(0x7f0000001280), 0x14, 0x648000) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) fsync(r2) sysfs$1(0x1, &(0x7f00000012c0)='.\x00') r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001340), 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000001300), r5) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001380)={'\x00', 0x15, 0x0, 0x200, 0x7, 0x9, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000001400)='net/vlan/vlan0\x00') r8 = creat(&(0x7f0000001440)='./file0\x00', 0x4) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f0000001480)="d0989d1dac769f15e89bfca898291d8b7c20c3cd063cdd6f49fe1d1c2f841d176c33") ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f00000014c0)={0x3, 0x5, 0x6, 0x4, 'syz1\x00', 0x10}) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x70, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x404c0a5}, 0x0) mount(&(0x7f0000001640)=@md0, &(0x7f0000001680)='./file0/file0\x00', &(0x7f00000016c0)='bfs\x00', 0x20, &(0x7f0000001700)='syz2\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001780), r7) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f0000001940)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f00000017c0)={0x120, r10, 0x600, 0x70bd2c, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r11, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, 0x140e, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x4000055) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001a80)={'vxcan1\x00'}) 1m35.504184305s ago: executing program 2 (id=684): mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000048c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x1, 0x10000000, 0xf49, 0x6, 0x40000f, 0xd7, 0x0, 0x0, 0x9a, 0x2}}, 0x50) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100000003"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m34.56206268s ago: executing program 2 (id=686): socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) listen(r2, 0x7fcfcacc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000440), 0x4, &(0x7f0000000500)) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r4, &(0x7f00000002c0)=""/254, 0xfe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r6, 0x29, 0xcf, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1m34.430927586s ago: executing program 2 (id=689): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) (async) socket(0x2, 0x80805, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="300000001414d9"], 0x30}, 0x1, 0x0, 0x0, 0x200084c0}, 0x4004080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x5, 0x300, 0xc, 0xe, 0x1, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0xfd, 0xfffffff8, 0x9, 0x3, 0x7fffffff, 0x89, 0x7ff, 0x0, 0x20001e58, 0x7ff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) (async) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) r3 = open(0x0, 0x60142, 0x10) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x400000, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0) fallocate(r4, 0x20, 0x2000, 0x10000) (async) sendmsg$nl_generic(r1, 0x0, 0x0) close(0x3) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) 1m33.933637845s ago: executing program 4 (id=693): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x4, 0x1, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000300)={@empty, @multicast1=0xe0010101, 0x0, "000100"}, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010076786c616e00000024000280080001000100000008000200e001010108000300010000000500220001000000"], 0x68}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(r2, &(0x7f0000000140)="00ffffffffff00aabbccddee0800450000e0010101110010000014000061626364000000000000000000000000000000000000008afa8fee2d2339f26271180e1769267fe838c0c764865369e149d5df80d096bdf5f3b1d72e5f5b2cbc19246bfc3141fcfc94bba2406053cec5b4b06bcdbccd4b089ad944e396", 0x4f) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x0, 0x2600) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000050000000900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000e500120800014000000000140003"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x470f}]}) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m33.482965896s ago: executing program 4 (id=694): ioctl$MEMLOCK(0xffffffffffffffff, 0x40084d05, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 1m33.422396697s ago: executing program 4 (id=695): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c801}, 0x40000) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r5, 0x4, 0x6, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x40084) (async, rerun: 32) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x10) (async, rerun: 32) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x84) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:udev_tbl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c190}, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r4) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x2c}}, 0x400004c) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r6) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4008405) (async) r11 = syz_open_dev$mouse(&(0x7f0000000a40), 0xb, 0x628800) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000a80)={[0x1, 0x0, 0x8, 0x7, 0x7, 0x9, 0x7, 0x6, 0x7ff, 0x400, 0x4, 0x0, 0x1, 0x4000000000000, 0x9, 0x4], 0xffc, 0x43}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r11, &(0x7f0000001740)={&(0x7f0000000b40), 0xc, &(0x7f0000001700)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0xbc, 0x3, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x88, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWFLOWTABLE={0x68, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b1a}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x518, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x504, 0x3, 0x0, 0x1, [{0x3d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x68, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x94fc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1a}]}}}, @NFTA_SET_ELEM_KEY_END={0x2b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "8470ff53f0461661dc45174f458a6bf5e06ed930fddd9a9b26bbb6f8e4142e472cbb7a22de3b6af66ee602d2692a3fdc637ed93058bcfc4f36dbbe021f707eb83731aa2a4eebf8005eb2342ccc7392398e7c20ab685eb494d46a98b33c04f6f534884614b8bdd9dd7c4f556b279b2c06203d3e6020e8590f1ab058cc82c2e6da12f3bbce2dd7120c052a789a467a79fbb4865b51588b0e9e4ffc08d1601448e4205eb6f8ec92c59a01bcd71cdfbf6974b37caf05eafe0d7972f289793d38ffa3e02da289cd4e177bf734456bb1020b332abe4b762f9ad9c94070334152e821f00f"}, @NFTA_DATA_VALUE={0xc3, 0x1, "eae5cf8c5f6dc8e81baa9164d564b207fe1c7417a92258419095e6a7d41c39bb1a112b148bb30a1d6c4c63e97255eb9c0b652c36fba57a7235a564b4dc18ad3fb2747c546f8a0577d982fa926c1566c97d7b8f6194e8ec8d3e799c994868784fa3862b7518ae61f0217f9874e553e5af29b4e4f92c8be9046536dee2a4a0e374015d9e120a1a10a2c2d0bb408696bb2c9e9ec2deb283eca86d8e9aa5861e47025b28f15d86e3a469731c8216a04ad6abdb5f9060661af134727f9b95de92ed"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "76d6af88c941ecfd1a1b13be039fd72b3c78550077b418efcbf6dfda1a29b8ae66a43046bfc66f71daa495b11deab99854c79f9cc092b3e4b06eb0cb14c8576aada29524061f4fdd1e815ca6539b74014fbcf524ce26b1a471cc820cc05d785dbebd07fe8c7e98f3b049196405728836fcc7203d95b485305ee30b09dfe734c1ff73d27ad10d3cd31ec3303bef957d40d97d25e54274917eeb652c6a478b6fcc343eb7f7dfe4d3100fdf813a7f9abd1496f71f4858ce7e4bde1fc100b29a84a19548dcc3c90cec67cbfe431a973837e7f47cf6615da0a5c6ad648b43d6"}]}, @NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "46fd3c4681d6ae449034bfc2544757624aaf143925139255b1cd6dae36a77e449784df54ac8b3e04a9f8989563dc34a8cc47f226cb08c94fc582f2cefb2c3b73412381ed796925c180c7b8782be0242569c6375a4c1fa791b434870810740f63e99b6cbe4487bbe1e4ebdb94c7e64df266ebd074224ad0b96c01bf0058f9e4fc1ba0675cd600cdab9f11a628ee9bc6a7affd94d94feb4215956a9009583f46"}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf08}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x110, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "50c875acb8a6c7d9b82a2d854988ed278cc0edf316118421fc9722dac811b7f3858b7e2d2ae5357d35690143a985b0347692be1d64ac00a2dee683dc391aac0149"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x81, 0x1, "9c8a8c9d02097f5f4b48171d9e012a992ab6e07326417ac7d052d311833025461d7d4c26cb4747161b7dc90fce9e4c664c6336630d4916aa7359e437dd4cf06432b89373a5d6b4e4670d7aaad313f9760c31c20137b470e8b0f3fa7b81858faf3450cf5765ef5d0da04c44afb2c3088396dd3506519b0c23f757b78eaa"}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSET={0x3d8, 0x9, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x374, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5f1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb47f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ae2615e}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xcc, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa2a}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x77c8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d94}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc36}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x691}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x635}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3714}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc403}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7f1}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffffe01}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb50}, 0x1, 0x0, 0x0, 0x4011}, 0x41) (rerun: 32) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000001780)={0x7, 0x7, 0x4}, &(0x7f00000017c0)=0x28) (async, rerun: 32) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NFC_CMD_DEP_LINK_UP(r12, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040040}, 0x1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000001a80)={&(0x7f0000001900), 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xdc, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, r0, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r11, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r13, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}}, 0x10) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0xdaddbbb2026519b}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 1m33.33442781s ago: executing program 4 (id=696): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 1m32.782680747s ago: executing program 4 (id=697): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2b, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x2c41, 0x1e2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 1m32.654143408s ago: executing program 4 (id=698): pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) 1m22.906035454s ago: executing program 33 (id=652): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c20007465737400004c00020008000300010000601000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) 1m19.382730749s ago: executing program 34 (id=689): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) (async) socket(0x2, 0x80805, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="300000001414d9"], 0x30}, 0x1, 0x0, 0x0, 0x200084c0}, 0x4004080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x5, 0x300, 0xc, 0xe, 0x1, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0xfd, 0xfffffff8, 0x9, 0x3, 0x7fffffff, 0x89, 0x7ff, 0x0, 0x20001e58, 0x7ff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) (async) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) r3 = open(0x0, 0x60142, 0x10) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x400000, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0) fallocate(r4, 0x20, 0x2000, 0x10000) (async) sendmsg$nl_generic(r1, 0x0, 0x0) close(0x3) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) 1m17.142362876s ago: executing program 35 (id=698): pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) 15.643293762s ago: executing program 7 (id=1525): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000100110001000000000000000000070000004b37c40f7e6028940bcf", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r3 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8b9a00300000f3266baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x48}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000440)={"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"}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.031657888s ago: executing program 7 (id=1534): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) close(0x3) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000080)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) symlink(&(0x7f0000000b00)='./config/usb_gadget/g1\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00') mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="87caf4828620593259d0d997aae45c77e130507e96515d714bd484de3e705aaacd0299f1f88bcc8b2c69bfbf761e92d4e763aff840ef2669ba271b9e95f4cc1f74e51ef25964301b7e7ab974a0663bfa3f049fc94ecd835dc25ff799f7794372280275827fa04636b3da4c9a9b1a9289cbe10dea582933182bfee59baab58afe0fac0eb3a7bc03f0f8a2d84e5340759385e7c6b269275f35ca2620bd2dfb9ae7d53c4d4afc0720833991db79d1991f5991b65cfe33d733fea45cf24103889a81c5403a0c20854146ce65705001f8222c567b17e637", 0xd5}, {&(0x7f0000000240)="d8f22b1fb382e0782b6f938285234255b63336a13df7647edaee8881a5d2c28540ff1aeac9a4e102f717ea6fb09a12a1e4d8fa4394f6b2302a2c9e03bf4dfb03246b61746407d72b0b184eba55fd9aefc48e84b272b45f1abcc48b24e0f6a295cb2c9ced7be766c020c72cbf8eaf0702d93e5739649f059a97e35a6c2e336c9eabca91382db9a73a29fde86d01f81e9f3c101d9871a963d6db7180130d12c4048427612a8652bfbf7c2dd15b63", 0xad}, {&(0x7f0000000300)="8f2ff49e6d60ac324ce66e3d2796d492930631fce765e72389b5f4360f3addc5990c3624cfd38d99d5a1a43227a2467919f8e6df957e7f15b10623d615271a2e93c602edc17949fdcffcd9", 0x4b}], 0x3, &(0x7f00000003c0)=[{0x108, 0x113, 0x4, "8b664c3ff4b8a52528f8b900e89441899f8e3612e22ca79fe57144fdcec7597a09e1dae6245a914cb79da4ed07aca20b130e4ee89e16fca424e564812e7c32139079c37af223b72cc661b3250a6d4244627928ea1680baf236cb7b1431b7f20850091f6c7a8b62fa181350bb17ac85fdfb64d4e51dc8d76ee83c913741de748c648b65e08d8765c56e84613b1c8a30886a797b7ebf5e6a6a73c1ee5c08cc5431d87562799fda9ef16d44e7d8481926a6232b26124a89e86d72aacd8a923a8021176ad8c7a158b2530d4c7ad162235f2628287e420393979f2591a62d9e1245b59c4a2423d36ed8fa53669381fa28074af6bef0"}, {0xb8, 0x104, 0x4, "4c7859a9ddb081a1820967bc0c0b9ae436ee6edb5119b66654ed704c49b6e7fc837c17c6ecd9331a02afe131c0eb1597ed20ea3065e00dbe585936a8a9dfa876a12e674b4e1a6f6ee05dcb0a9436667950a9888fa860fa9d86d18f1ff18066a8ebe66db4f5fcae0d58d571266d6db80b9635ccf7d88bc43e3c10a3fa32fd195ff9af7d14e6d4847f3069bc46e27f252df40f9eb8038f252d888a8a31d0f9c642f4b53c"}, {0x108, 0x1, 0x7, "73601068e711f56399436f426f6a1e0a3162bfaed9476d4feab4c1518cc1abcae4322997d4180472d707fb0ef65d1d9f85a88b0a5d89231196803b2232d4b0422918d701e820261d5d323597725d22b5911ad4b9e88378c81954fbb294ce752116d00d507fc43f181ad71776159d6ded08f200cb5a7723cf8828f14319877c826d85bb891d51b86a1f00d5617cc9d917a081931602d2f1533bf535d986ecfdab97a021c09ffd6425329988dcf990875138f6c1624434eedbe754b343acf988d9f269fbea7485fceb08dedab5f8bae36a6a3c7f65103faed1bfaf1ecf89c7419f2004c60204c38b63cf739a7bd48da1ab63aea25f079f18"}], 0x2c8}, 0x4000010) 14.821405363s ago: executing program 7 (id=1538): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31832cbd7000fcffffff19000000"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12022, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x40000) r8 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000240)=""/242, 0xf2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) keyctl$join(0x1, 0xfffffffffffffffd) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000e00}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 13.981258836s ago: executing program 7 (id=1544): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='prev_state.function ==x', 0x17) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x200, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x51, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x2c, 0x29, 0x304, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x5}, {0xffff, 0x3}, {0xa, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x2a, 0x1, 0x70bd29, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {0xa}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000240)=ANY=[], 0x15) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r9, r9, 0x0, 0x100000110) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000004060101000000010000d49ec9fc00010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8a004444}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008f0}, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r10, 0x2000000e) 13.893050456s ago: executing program 7 (id=1546): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x4, "2679a9ecf23e11a469efea56b0369ac5109b3a6a7760c1aeebc38fb78c358a3c"}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000001740)=[@acquire_done={0x40106309, 0x0, 0x1000000}], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) 13.552794502s ago: executing program 7 (id=1551): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000480}, 0x8050) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3fe}) r6 = syz_open_dev$usbfs(&(0x7f0000000700), 0x74, 0x109301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, &(0x7f0000000980)='$', 0x1, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x3, 0x4, {{0x2d, 0x4, 0x3, 0x2c, 0xb4, 0x64, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x59, [@broadcast]}, @timestamp_addr={0x44, 0x34, 0x15, 0x1, 0x5, [{@rand_addr=0x64010100, 0x2}, {@multicast1, 0xfff}, {@private=0xa010102, 0xdc}, {@remote, 0x918}, {@multicast1, 0xd}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xc}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xa3, 0x3, 0x3, [{@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@broadcast}, {@empty}]}, @rr={0x7, 0xb, 0xe1, [@remote, @broadcast]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0x2, [0x1000, 0x8, 0x8, 0x8001, 0x7]}, @timestamp={0x44, 0x1c, 0xa2, 0x0, 0x8, [0xb, 0x401, 0x33fc, 0x6, 0xd, 0xc946]}]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000600)={&(0x7f0000000240), 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xec, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcc4a9e7467527e25}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xb}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) 13.455628406s ago: executing program 36 (id=1551): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000480}, 0x8050) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3fe}) r6 = syz_open_dev$usbfs(&(0x7f0000000700), 0x74, 0x109301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, &(0x7f0000000980)='$', 0x1, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x3, 0x4, {{0x2d, 0x4, 0x3, 0x2c, 0xb4, 0x64, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x59, [@broadcast]}, @timestamp_addr={0x44, 0x34, 0x15, 0x1, 0x5, [{@rand_addr=0x64010100, 0x2}, {@multicast1, 0xfff}, {@private=0xa010102, 0xdc}, {@remote, 0x918}, {@multicast1, 0xd}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xc}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xa3, 0x3, 0x3, [{@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@broadcast}, {@empty}]}, @rr={0x7, 0xb, 0xe1, [@remote, @broadcast]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0x2, [0x1000, 0x8, 0x8, 0x8001, 0x7]}, @timestamp={0x44, 0x1c, 0xa2, 0x0, 0x8, [0xb, 0x401, 0x33fc, 0x6, 0xd, 0xc946]}]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000600)={&(0x7f0000000240), 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xec, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcc4a9e7467527e25}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xb}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) 8.239261599s ago: executing program 5 (id=1571): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000140)=0x8, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f000000b140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000b100)={&(0x7f0000001d00)={0x93d4, 0xd, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x53bc, 0x3, 0x0, 0x1, [{0x264c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x88, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "02defb1b9e591f7ec1040eacf85e0fc524e173ef1928b670e010bcadcdafe5b481882b9bef40f5b04ee2dc79096f70690c04061699e0f04cb14c1196f9794a3c52bdee6f597d768fff48cd4c0eaa631378d6f2adc956e021628b4f4443"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_KEY_END={0x12d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "6cf03416ca7bbcf3be8a0183f0b37fe7ca853dd1da2d3cf85b469de8518807631c410174401cd29b4672128e6739216e4deae78fe6adf341166344cb8461df74ca8dd7bb30cf067bdd598317bc0f79d5f45ce433c9811d165f4c59ff64d70e7863d537def4f8ee340df57b55ce9b9dac0dd60346d9714361ced82ea458cf056806c6b026768edf41920b69eeabbef84cb2e56b935474da236a1ff74cf039107d6c15d8f9914f8f1fd928121a08c0b5e98acc2774d3318a6486ecb1891ff91b589062b1a6d486591dfd40b9370282f5ee287e1c795f32ba23a42296cc"}, @NFTA_DATA_VALUE={0x15, 0x1, "630733e8a772294a0bdf65219f235f0153"}, @NFTA_DATA_VALUE={0x9d, 0x1, "23a8cefd62fa5f4ec012e28bde98be159bf094a4c117433ceb8b18adc4399c7d04b00ac35a9b2da0c1eadbdfb486e3cbe096a268f63fcd8e676c7938fde547a2baf9ce95205541997d71e1bd9bdf491d1656da682ac85fee398a0c7c2ad121e4619fa933090d9775b855fde821d92aff37cbee70a72a0f19e125ece69b232b96297228fce20e68950f89d70f9f02590f9e2fb41bbe278ea8dd"}, @NFTA_DATA_VALUE={0x1004, 0x1, "b414ff2831dfe8ce95998792fcf9cb24657f8893c556919fe1b3d3c5ca6884643a8ea1196bb12d6e7a3d292a52cf4c28bda66a728e2da513b79f28d58848757345b3b09947be30c39e0d329e018acea9649ad2e4ae77c4d27d417b700b39ff41521996bd2b77b7999da93ea6f6bead356610b2a816cbae0909b1d48bb87d8c6115f5bd521ff4055b865a8c8b113b2e8c74f47e05d6c7f57d2814ea147db645d703358052571fc0df832481f09d819a923b38db3c32ad01464091f2073b06d4297cb7f90f4fec06354f23505487391d90abe6e58f5db3f1d81cb38a302a241934709c201d77780b47501a556509b936699da9b7da621d515c537d9e6f8403e019bd536ab416fa33f21b7f98f25687d7488d372cbb37abb5dc2b79cc50141a102b71be7eec6ad3cff5741891c8beb89c9159b6e36fb4085d3b447d83039b96301a01ec4ac3429496acd967c69f64678a077eafa25c58400be3a809a18612dcae39c85ce6c31ebff431e8563b0cc09a59d86965349f7ee1604265c41e12d880223321189ad2a132233f6cba57a811119b8aa2cf2cbfd515e22ed9a2d3ebbecc5fd3ae0ac018519ed5c58f8c1b1efd25286e210e15e673f74220e0d75c512f796a34b6e306d89f2d0d4f0752737de6d3c5e9c56d4b9ed066304221da3bfd18c1d59a945cf1a9eaf8e19199068e6ae5b007e515073e8914b64699aebc948d62ee00d92496774dfbb75febdac45e5c0b634cfe2f142ed3dedf59212ca58c151c28a9bca92ce15fc544422b958176b471ed440f633dacef9495e3e8d69a057864e1e433bbccdedf52c371f34acd5492a39df03fb931a1658269233f899bef47fbcf9b3e1c7dd8d43b410fa07c309c9d80de0013b850efac19b05ed6e4bb1b057544fe93660b7e9f50ab4fda7f8fef71e125a9e0d98c8a29004745dadf9490e0f18784e13d5268737d05d9813c0c40d5768c75c46d81ef6e8f157153060afd2657fc667b88b7cb405d2b90dfca1f7d530fdcaed145698b1da44d361601dbde2bfb7235dade82bf6b92d6c2b69cad664c39474d498f1262c870df7509a5841b0b202a880b1a955996a9d595c9be30ad320ffd813b11ffd2a9fbfdfe9f7ccccc9962df8dc9b529237dbfe414a8447cfa144e39b855a28fbc3e13b61c5ede1fb2a1d98b22b5ac835a23689fdc33032c000f319a4b81dc73a640fda31fc470e93dd99683b7ad9323e5b75fb55c3ebe218d46cfd217297648380f7ff01e3a194981b0b7900972d1373d5a80e8a5d3ee7684dabe12d658494a7a32a8aee6945803928a08113faacd2450ccbe97f31f42a533f4477c8f0291e0afc1b488e9818add9253b124c63e2054440e2d844659a94117bdc1b1d5d0e0bd564922be6ef5a4e83156d33110d0e9df3b2d4fc78da3d15984f03d96fcd7a90a41958174059b5870992419991afc544f2bb36746a50595c0a218304899a9192f7ccd8eecf575a01b81dcab7932371f18d871d6084d05f2ef4ab26c27c8523700c7f4e4f02735837f7913d523d44cb19439a736f448b6656d899752e17037bceb0d6fdaae398aef97b963fd32746f1854c1a1f85d8efa89ce45483de281e6c1c1f6c496b8d788e44b36a96e788fc15557a8fe54c11bb3bc90fdf39efba06caf7e27d2ef63d17c6df4efe8bba24592242829ccf619a13061ad963528f851f9db6e89d236e1d67dbb32ec2fc4e3bbab8069b4ea03c32865b1267b1331b2377e8f10005ebe8c5a2b14c5478c02c0443cdb5e5ca6f57199ed84935a127b7d12ea5d73093b7495a26c3861397677c2773a2a127ebe9b5af541a799460fb08e5d877e44bebbc9d89aac1092e7fa1597c42261e570d9f91ecbc0951e6e90b85a4b77a0ab367cbf0d1f4ee1d11b4524a202a6d4f76b59cba6a6c4e3e9ccb25a236d645f135ca986acfded3a8079aac2daec8bcd1682b6446f78f7ba9ccac9607e6e856febfdbc9ff6fc0bc65567a827caac3710e53fb6a9ab611b04df5f84e327cd32511295bbb47020fad36e31d77ec1b04cf009a29071cb96d5a86e03218206242206cb68277015de12199e862cb9dfa5e41cc126e9889220959f4878bb02db0c31f3b97833db21fe42ae33d733a33b2409b6cd6a8047636049a2999f059ed9188e8655910455db05f2f1171e6224bb27e00ead40c7d267b5e5116c5681f206c5091ad9d4324784db801f3aecf83376cd7edcc352ec3f103143ee2850a9abea67a4dfb82e9298671370a8c67441c1c92b3457dbd886444db1f1a765c158dc207aabb1158cedcdd041ff347c0de54b741fc1b38ac7c4f02cb193aedc99aaf35b8405ba49e310a23ae518123b79764393b58d9e485dd4c5ecfbeffb1107d4cff01ce337d7d923a6d0e1e49b7ef234a8b8747ec68ab9cbb0fd2785675d0683b8eff86d37fd797c3fab56866d62d10153f6763c76c76d6084ff1068e05fe7c40f3bc667a61385bda25f1b05e0d6f2e734919c62899bb7ccf5f6d5bad2ac26752f44a7d388de9f5ae318e0ce3e91815ba7e46c3db6b022881ef60c679f874d465a75b4034e988076a8a8e57017fe9b1a64aeb14572cec4d7f670e98da79b4d1eaa6bf55c8fdc2110799a3b460935b5536af02742033b5f23043155980403d8efbfd4b389a861174c1be7b9e953e0db381b545aa4bd2fd42747c312e9987b8bbe74a9fc9e057245909c8ad8c22696d6af41b77de5ea2b23dc2e6efa7a3680cb32d08e0a5638d4c41de2e53adcc116562c77d296f0daa330a5c94d94c4cd68314c58151cd39223344078adeb6106e107c85ea47ac683b9b4beecb7a21123372b317fc17ce52774840c56810bd6be48070e8ebc72d64de5c92f68037b20e43f5ad60f01c3ee741f576b3d15f1a9290384a436df9098dd2b6f10267aee893c41b20462cb0672081fd7939efd08260626b407250059d0c575810809c93e84b990b99df671e0a5feeb029ff8f4b398c07ecef159cf75ac29fa5d6874d9e3dedfa83a532c827fad989540b4ff092346b02265fcaae7b4c237e828e9b4d0ccca55a961ce3fe05d757e92621cab234431238573bf344228d861575f85a0cecec6ea773f8299a95c5d9d19bebb4442dfa340aac28dfbfcc36231105a096a93d7e242826f324df17d48066790fe750a4cc941da4e7dc178d6d05e5ae8246c2a41993e9f8bfa24e2a9341067c957f8d1d0b54d9cad6ec5354f1b2e85484af8527106e7c61dd7feab9faaad27086fff49e7169ed774038e83808a782dea0769649b58072f873c932f4dc89656a8aebb7c005beb0d4206fad8087c3a757f5c93ae66e985edeac342ec68ffe34b32236824ce1e5aab78ee2f92d46941b5b7f896ceae8545e6f3fd3501a3fe8bc854418154a722706004e23899c0355dbb1d5fab0b71c3cefe68c0725eea035ab75ed1929941e3c9f1c4c67cf025cf444269588c95b0ebcd71a31e2b2a9fb7b58268d81fdc15d7fb9fcaa972c0ec5f99fd3dc2ed99dae3a7199a8162af856bc3495c76f0237d2ac21ebb8a87a7953b78da8ed8c188f4e444cd99c326bd16dc42a3ea84ae45ec6830154ecdb2a2c794603344f8c5f34b063619ce7efdd08b88f0f2a22b30332f321d3ef294a9959b7a4eddccd1bd940eb57fd024cc18ab5613aeac6e63b554c6a1390ef8e5e00df6d0814a1594665e8e2392173fc2c877be30f0be81d6dd9e8524328dfc797fb5c2b5e5ad7a9a26e345b25eb58287eff38148889821f50d8877d889ca8b2addc6998029fad97abb6fdde463236466ad3e0bc855344fbb5db33277e982058ec1cc2fb078dbc0689ad01dfa74838fba385d9623ba47e2624c3f2e71699b62fceda0d7c8b112ebdcb203baf47f36f3f72cf16e85f5d9b13dcb11e08b060c1644681772bd54ec321147bceed3d424ecfa6be41d13cddaf63afb06ba176ab78cce054f967734a1298b537c0bd7df7097e8760eff65ae1eef883aa4978cb1f8a7ca7bc032bd984afc0cbf071571b58d713f8527dea2e1dfdb42dc095d4f90cd4de545ef7bb56d96d0da8df7ee0441c5091cc78a4206384ba10e653613dbbf3f8604f71792ecb539097a294ea56ceb4f64fb241f5f6fdced1d7ae40efae489d2b8110a707df97673a08a5aa9e07e0710061e5a2a8e2fd7d1a895f7bbcbc9f1a6295f3eb6bb453ed490e269c39db765d446487a2acb13fbabff298c68ef77a6ec71bf4d0cc6d7d9723f7930fbc574585d9898fd919e629106546d3159252b5583182c90ed27cb4012395c483dd4ae896fcd88a2531bcc75b3bdc5aa88a0b7c598eb69eb90b46156363383d0acf187880dd5b7f8a4074bfa9c7a496868530777a91a09a9636e9863ece0dd2214883ea54b7a0979012bf606f5c1ec303d31d8907017f8e71b62567d70b79dcad0eea11d299173a35bcbbe59581b7f1f795f1e199092bcbe8f1fa23a7c436701b03d4af48ebe83d4839f83df576439ad5881c2abdee40e91c099ae4da9bfda0ef3c479b4ad9fd0bc61842ca5e4d655de204a1a8dfff6e72c50fb107aec660ef485df5de03169f2d7fde6ab04c0ab6e81eee8d044624dc6fd3de0b1c07646250cd21b4d2d287361b2ce554f6ffa684d01a8d34e3ee388765e9711c85c6b800fdc0f3e894ebaeac66a9bb57c008fce96107ab5be318ffd8f54d20394a8361b5795c782153a545323c681b46fa8399980c3fe1d5b22eb09c358d06db95ee5792c4c225dd33e6aa147fb17e863721429acef02a08e4bbc8fe321ecbe7fe2390608a91f1005fc7c6b82dc052f303173abb2a384e85859a9f796c33ad2006082e46ffc2b513e8fb17909cabdf5cdc02a057e0c993dee429b583943074038cddb642440c3ca364f1c1e69356f627b8d29eb9ce36b4355470193e4bf3816f1c276bf644dcc258ce0971cbe726f56335c1cfacb4508619f9d673561096aea9ce50d3ad4bd265bd420a95d71e55dadbc9fdef02a3407b6a51fe5397dd130c7cbc21085c2f6e226db5f4402e2a1edc7e999050178cba7d82f30771a297c25e1f4519172385aae321b9377d778b920e5ff3fa75fa8c0853f2801ac13a02f8d598de1e8b2c97c887376b9bb840754f632ffbfb352ab86724db3575696313422e32876ab7172e9c4b129fe194532373cb83332a0feb1904ad7d59ee7e657139066856665f77b5e950b71652f61f03bca86cd9ddacb4cd75033c8e8a9ba236c395658baa007279295d7e23abda5d23a6ffd472e8fc89561719b5aa76715068497c5dfec44c6b56dd20d607ed875373f8bf66f4adef6dfddaceb3f1c7253da4e911191b0a084fc7c8252552d5beb0ae4a9edc9f44946e82c3ee907b204b8ee317f0bfb665eb8fe1ef9806a53bfb6f5de555c6db0996663e341fdb4db562c2f339cfe41d60014f5feaa05b9619a69f12663d1e5b4fcfff327427e777de03dd5b699d2a67585cd6b7adcd26c51740dc66f84dcc9884935b47150d6b15a4231e29e66be8f6a40c22fbac4fc9c6e411c01cdea9ee3b8454281ec9e82e2b8fca899053ad161694ef89479135f122af10badd9c7000fbe00e5ba7a7cf12e5c6ff2bac0a884e4b21707186e3524713289f0b53b549cc96de34df7293324239fc9a1c7bef8efe080359771b4727797d713eaf10bb4c8f75397f66a3a552a660a766f3871128c57f12e4df20b2feb7af0967b1e98435fd2bbb51e9095b97095f186952f1125e2bba5586e86abf7743824d06eed5d94fb992451fa9c6a614ec86be6a4762df5471fe36ffdb33008cedd4bf7149e9e8ad05a5ed1cc59fd5f4aa22196fb735c11ffb6"}, @NFTA_DATA_VALUE={0x87, 0x1, "169e21db5223336356718466b002723081f1528af2def636509fd90d0c2c96982b36f65d24d2d0654f58956bb98ed792f42d13886b9927aedeef752b7e9c301fba155a907461baeb3a1009c8f6b819b83c60be3e913a3a3255e1f771c96242edf2abe9e07747b0f3a7439805c28d8bbce97cc8c9ba24d81e7d1374df5536bbdb5c223c"}, @NFTA_DATA_VALUE={0x30, 0x1, "22807fe628bc8b48157fbe6afe8272392f5c4a12550045c690956c67aa03f7df2a32bd7a25433ff7d323abb9"}, @NFTA_DATA_VALUE={0x77, 0x1, "c3ddb1266d9caa529758cf9e0f6c104a6dedcff846511ba039d6f3852373e7ddeb07676e77c1cda1e01de302246492fdda4fdb5f1b48eb4f9fd26230b01b80fae2cd48db50b577fe0ca1df1d49dbf30039d7fdfb038ac9a2d9c984a23e5ebccf3c64cefbf39ad4b10880d13452a400393f71ef"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x12d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "fcdd2b2d253bb2199f4ded1bc316ad6f8312845b357c52"}, @NFTA_DATA_VALUE={0xcf, 0x1, "880f76023658b76042d53ebd151ee47e0212d5d9967078135f3b1b9d72078a6b44c58281f82f41058cd1f27323008726285387dc924139d5e95b67b12a5c1461f43cf3b80afcc0ba06e44a913c74f35f17c88ef0ed45e2dfa24270de292e8a2be2a74d1ac67ed45642bd99ddcc4310198ef68e7b56c04bcc5a0a4a963881cbbd6ba68f82d736197363024ce5a6fd943bb205ff05804b6ec083f46f3caf9a11c627189dd7830ecad9ce3049bc06ba557eaec67c72887036f2a1f73b7098ffa1c12be2402805f725025e1683"}, @NFTA_DATA_VALUE={0xda, 0x1, "a3fbaf8782bc313929f64db81249bb988f52fd161646d8a7a115dd7818c8aafa3710b7d5ea3759bcd4de5095aa12ee937cfdc8187d3de90d0f46b56cdf297df237ee667761d65391618f5418a5934639ed4de5e25e67312c18787c5bb199c5a6771b64796af8a3477ac49d5d0377ced71cfacb749803c760a644e379f417393912ba072de951f776e2416ccd2071cb638ff5b1706c2c0a9b2d8a865ee79988ae54e07c76119029568883297338abbb1c86d6b8ad133b710f9a011dbae43ab3145a43a9f69b13ca99d19ff6383e5663dac272104fee39"}, @NFTA_DATA_VALUE={0xe0, 0x1, "e870044c4b8c85b56e16324746f2165de6d83980d22b0e7062c01252bd4026c037d104f1dcfdc123e8c56edeaecbfb7f798da20e1f7eeeb0c15ab92c3db4bff091dccd5ed7ee0fcd537b15d49b3bea8f809899de4ddc10f0155b27c74f21e5dcb8376a5d62232321c1dff423ea5c9b7dea59bb7aebcb8152eb807c333ff8c74ab00abe42c57ffd7cb893d7c6183d055227b59985bd73f890a79034566119118b78c78e7c469f0d4fcfce8019e8ff9ba15ebfa048af14f05fe44a94cdb49f568ab29f73de38688b21e97f8b46b7cbfd8de852dd4e31d6d9abb8161dfa"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x1174, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x10d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffff1909}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x6a, 0x6, 0x1, 0x0, "3771e1b63a9c6d88bb600522ea09eb9d1c441af6c8cfa25cd13e7aa2f64f490bd2c15e97c965452f279c1a5c2da9d3d642a174570dd075e96b7e0005661e29c93b3149f0bcc77627197700cc00f06a4ee5f87146815c8e0210062a73e3ee1cd9032db3b16589"}, @NFTA_SET_ELEM_USERDATA={0x14, 0x6, 0x1, 0x0, "32fabadaa8a08e71f14b120864f622f6"}, @NFTA_SET_ELEM_KEY={0x1090, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x20, 0x1, "658aaf45e6a7c464880133c39f30b2b015ac23802b5c81aab269138a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY_END={0x110, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "4f6eb56bc1870d6a4541c4ed187022411c311e0c97af4b830efa348ffaa90572382a328f44"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "08f1b2a9979bb196b37482c9eb1dcb9eef85b844d15792b4b5be1d8eabdb1b2e0095fff08c8b9ce133b2d30a533d78e31e634934d9fb864d4c5e187e4d5f5e2027f3ee0475d8d7a5027d869ffb120b427c410fa190e0c4c47d0b45ecb290705ae9ed8d1eb5b341acca55"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x32, 0x1, "b45554b7d4fc927e96fdfaf4fc09931f9ba38f90fdc9240d982792ba9519e82f700d5b202efe41fdef55fe971ffc"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xebb}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_USERDATA={0x44, 0x6, 0x1, 0x0, "e434e425318c2d8581a6107f2f48e4cd006149effd71765bfb897b6f2b82a72b81ef483104713ce9ef06265afdc9750a83b88f6226d6c23c8808bc26d3c8664a"}]}, {0x3a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x334, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2a}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7b}]}}}, {0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x13c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x12c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x52, 0x3, "45232aacc85d87808926ea08b5f2d6612eba5d62e2ccdaaa7f60e652b897afc08f3cf551c91c8e5c08cd3b7b44e608656bc0d1146c055edf3f6e43912e7a696b3215307887695d2a5be0ee27696a"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0xb1, 0x3, "5fc35a754125a9a2e8ecb9369ab641fc1bd5a170c32c51ea3ec3a72d2a97ac42b69bfe4ec9373df65182201d3d2820e815c485acf00069bbf3961a40bb428fe25be7010362a2772c625ac1ecb4f3fc2f2485b46a506661b0641f16b5b03b4f780801ea173d472be47b94013ce87829b487afb0bc9e71d512a0d2a6e3a80fbe67ddf7441604b65b7e771f21d6a51dec2b9215f9300f6d5361a735b48f8f7022423ce8c1a2c4bb896367ee3d14fe"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x104, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xf4, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'ttl\x00'}, @NFTA_MATCH_INFO={0xda, 0x3, "a25d838f96bcad1997803ca3771ddca057dc95f51941429ec9b8a8710053f1156a1d1afe6a1c1467f05cc0250173f18ee5e4d50f0a925e302311d99d77c2628563cc8866649e63a5ed920276d0da0d5e8f28ece5c911816f0bdd964d1ae34b932bd59c612a378495d51dafda1f552320883b8ccc9ae9a896b354381107df65e2cfb64716a41ac170aa8e8fef7d67763d1c8a58e4372aae08f723934219593cc6333c856824bd4ce0d65828c0fb37b8082d96d8edcc3bde2c268a76a5e3bbdaecd21a3a01bbfae24797ffcfa462bd2907d680d6d653f3"}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0xcc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2e, 0x1, "7d12478b8ec1601662a8c2370712f3448824f8c45432f49978251b44fec60874f4c366502aa5b289f5a9"}, @NFTA_DATA_VALUE={0x97, 0x1, "5d74403cc70426458cddb9b5a56c8f9faa7622604a961ebca83f331ac2f8b9c956c623664d2e3bbd5a2c229eafe46a8757c5a2bf370d51ab3fe0f5491c8b50f131f0b2f6495b5099eae6e1aae90d826a8212becc1c77b1885278d1cad28b0b2fcf2d46610e0f9fef785017efb533dd0b41f37605b945486156e53991c46cdf954637817e2722d49743858b30b26ace9c429f3c"}]}]}, {0x340, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x204, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1b, 0x1, "f49ba9810a0160e9567e3a7e34df938b6b42b9e91471ca"}, @NFTA_DATA_VALUE={0x2b, 0x1, "0c3a79cb35c1c9c2826e8d0f9b2345b20b9703b3d0a2fb1ba7e361ec523c638362e2272e5f128e"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "be16580b8a1d4f2cc2baf36db73062b07765f3fc0987d77277f564f980abfda5fc34c5e3f855d6f5efdc0b6d3b1442808d18386273cc45aa74e37cbeae39c29b03e4f0de8b817c677d34be1654f942a7b21d755ce15849c02f1fbbe5efc5ddde9856812d2085cdf39fb53896b3162efc78ff59a5a0e3f393204891"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "c7f878621febf2860fb7f6d37409302859f229b5d916eadd78a8db05a67c3381d3a0fa9f5663575b0e683a3d7719d16fd458be1329e72251c40d49585e56b0a8e2668f8c14be5f6fa7f6e173d875363159954227f39d36c411aabe68da9667773e86fced6b3e3f8a64fc75578025ced8b892057a6a6875605ed73e9b13e0c341fbfd14bfe09d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x33bc, 0x3, 0x0, 0x1, [{0x128c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_SET_ELEM_DATA={0x11a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf0, 0x1, "f77998bf4aaea4ab4b8623b533bf656417a33ae2ee53d3b33297f3dd195d43eb40fc010c6089aa433f7eed1bb8291aec0bb3de7c9989b9855561ae938aa14ce23a5d9b786ff1957d0ed2c2cada4dcf36cee85769f39309024cdfd84b1b793557305f876b81f4b4f07c1b4a5005a7ffd00ed5b3291a1de4aa3e4717d378eefbf726981be811795603d72bc61b41dcd45001fe268173d79ee636eca91db32391cc39acd69be7b5427ba12995542dbcee6e9cb2465ddfb848a4ffbc2d27f2486ab8d93042da0ea246d0cbf9ec6e75391fcf8092c9b2075eb75c5b9eb2301149d3faf96ee3d68f610e98715d0559"}, @NFTA_DATA_VALUE={0x2d, 0x1, "5952f1cb7e2aada579e8f614eb5530aaff3939e915faea180be600b8a03261dbf6566e837040af3076"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x20, 0x1, "64deef85dd539da9488dda1961e74d57bc48232adeb52e79f76a1469"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xd1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff976}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}]}, {0xa78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x314, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x47, 0x1, "bf4fcb080ea0630b7ce4da61d08944e0f1c543685e2126b18097953f0d6a4e5d32223d4885cac67000d964f43ae2fd53aab304e45f7400ec35502a0947485e34ca442f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "15f8bb6e0a7274037e3e27ae5d51b4717594457a4cd668414a652bf928bd9934d147c4fc27590458113143e3e9611066f44e29f592af51044481001e6c9a961c84959c0ffbb27cb2ab478cb3261be906e0882f59f3dc5255b9a7eb8553e598be1a64e02bd3883cfdb258eeed40bf7e287116e7d28e737a82aa38e1f5f7452fdbda118a057460bfdbe87d0b97920e8915cbd96f2348a6203d4a01c6d19228e22b3b157d4a5c1ca1af29bc88ed124491e2b0e64050e5aa622ffdc672851779da10ae5e9c7461258aa4612d44b7e0a58e20590e9a1ed75e13f651608b2ff8ae22507b1673980d0d4152eb6fc43986653f808e2d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "42b42eaad4c621dff19e9fc24461abd7a0a9f97cc6b79a2cfa86ded98ff1a92642e5ef94120ad9fbec58582743b882e2e6a00cdbcf9d55b1804acf9e890caa8c5277dcfa9051feb240f9c07ed5ffe04249ceb3baeaf47fc335bf1e91cc0925cc294d482d285a516eccb3458934d634c0ff9ee9b9e68749e180598c2e05fe8b46752c11d45f001caa99df01326bc76bfa937fb31adaf4bf6c8819fb9387f6d65a6d188d0616faebc21e26f55a12a06f943a663ea01caea55e68539f9a57ef836080f247dec92125ed1dfb6ba9b4847b"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x59, 0x1, "1a927acb821d2f643a3dcce2e6cb0bace5c0903777a4930eb36cf0c936d854a8e3308d01673e6cbd32c6fd54543e26e58016c1788ac9a6e2c865e028ae87f4643331aef000f8b6480a8c4b95957fb35e665a15f284"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x690, 0xb, 0x0, 0x1, [{0x5f8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x5e8, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x1a8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "6c937105db1261125ce761d3c24fa4c96dcafb34bfee1c9e3846b5394559036f9cb9c007b39bb1917106f2091f6ea5d021b1dc0994526a468c3b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x13, 0x1, "4c95bbeca00b235857bac2190a424a"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "08597911fd95b177134169ebfd12be898e78c111a0cf7aedf472fedc22fb3fa8e28cae58bb73836be2b87f1596b3a537f35ea3b8ca61d57eabeebfc75921127b73a8e7b3153d6ccad007c8cb178848bc2b57fd3a3aeb9bf6c1f861233fab6d4e39577e658e0b2ec8f55e73e204a4c62af4e83dc1c5d874afb83bc09fdd92a48c03135625d2d15c0d0ba3fbd45f445e36d4d2d8b6bc93185977574c9f6b09ac727eaa2f9c3d35846787394a38aa1a795d12e39c69fffaa72b9d43abefa7e822bfc1393880330313b1e133645d33d144c55a53a91e43315f5076926266e9c5b1"}]}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x48, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_TO_DATA={0x334, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xad, 0x1, "0106b01b11b964bbf4ef5a0195c814b3dc96082313d39c64d9bdf774ec152d977e118c072e0e98fe15ab8d7b69a1f6160574ca70f0e5cef79fb4a1266030b86b9e945f927ce59b30ae3a5f79e84ca6200bed3cacb6ad0a34fb2e671ab9e2e4355d216718c5a8d43af30ac64d93c5d66425db63340024cad0203af3a3e0d9eea28f30919de8d62d88bb861c2c8a22b530010e91eb7168b39ed1f19448d39cfd55fe03e9fb55f2eb9b6b"}, @NFTA_DATA_VALUE={0xd9, 0x1, "3f19a4ba5b46436df7bc58fa51442882508691669782a2c3cddcf2dd40b4bc454b0ed67c8121d81b1fd1781888521573b7a09c0f41ad89037b554eef794e39b57db32c3e45a960e2f485385acbd17db5a51b024be7d183e655a5e0fe4b337a9f6fe8aae93dc96974d73f5fd11281ab5fc758138966c6cc9efe3a5868e534b36e4fa9f98435eee223d56be07c954434b87e5fc2a0226e2b1fb99395769987836f64d9edcdb611e273a75e7730beedcb514be736e224ea7873e2a8abe7a2da58bf76d9e9257a6fea7aa6960116694967251bc25cb035"}, @NFTA_DATA_VALUE={0x7d, 0x1, "b14aef8045f84f01af3bcc8514620d220d5677c3cdcfa95f207587db68ae46fd8fd7f4c244e577bdc52233d626eeaf1d429749c523a784dfff0e0564869e560dce8cb3ab1247019b38e92f2288959617b64cae3075485ef5403a55abf73bf28b8c71d7c320984d2e7c7b0df6d3b82278ecbb30b57eca1a3da9"}, @NFTA_DATA_VALUE={0xc7, 0x1, "b18357ba36ebf3dc590aee59ece68e4f41c0e357d28133dd1d37066c482fc99670f8236c2e09b0004c2c271af51340a6711db6507813bc85962ad31a4db5e41df4480d4dd691303aced11167f45613c36cca1415fb2c716a8908de6f759d6796b979c587027e2ee1ef5af6f886dd4ca09f20d3b808ef3d8766f1538908e99051237d7f0b3f7e2b8f8dcda01bdbae7f13899f117ba8ebe38cae942b2068b5c39d6c9cf6a31ee3d8bde50bd723910f63dcad1748bad8f8a207ded68aca081019f9766bd5"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_FROM_DATA={0xbc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1c, 0x1, "855c55ac05f5986ed599ef2ad36a171dbd02c87f3c867184"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}}}, {0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "f404d5c35a8cce20d00e597933d9c9"}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x15b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x210, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x50, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x73}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x33}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xca}]}}}, {0x64, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff7fffffff}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xe0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xd0, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0xb4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "f2a4d1ae39ba8378ef934509c31a1024e3dab149448e884066c2732db0ddc262cda10b3513b46f25af7309d3660913f1277e6162d7667a1d421a66dd2eed8ed778cb15ab80b86888c20d9aae0498561664b60f8a599a0144861ddd831e2f522aeee2d55db4902cb247ce845944afb2999cfb2baea07491a7a8cdcbe532fb54e06080afde61837c70d12a508de1a242b22591fbd89e1e6e547d568dcfa691f0ec"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_DATA={0x11f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xba, 0x1, "5476c361418d7ca4214a35e5eccece8f7eadca3ed7878772cbcd0ca5dde03a5df538c7177a1fdd9b1b9442efcf5b9168253d39c6b30e7ede04bdb315181d9343feac644c1ac9641b22e2148d4e1eaed368604d4c7ca278731250428322dd006cf765f270f253421559f7c076ad3fd5d80acd2548c6f7664cd58098d4d87e2f2039d34a80a130722dcc48ddb350b9132f5a4fc18c8b9f2227fc01a98af189a4ab455b3d43dec2c2ea56886d0308f557cb2f3ab884f90d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4c, 0x1, "f03d4d62f6e880e3d9354ddaaeca16a050699366b859abdad92a40306a50511fb289fd156928a5547d3edbe2d2aec95e2f28157f36e40ae49c3d367079abaa31ec8d2466c06df4e5"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x63, 0x1, "46edb16dc57dcd9aa93455d03a3942b294074f76fd0b26b6479f2a2d665af5c6d3f112cd82576c8c25b34ea02e55dbb836902239496aba2489828aa30c81740691bc3c1b81402a3bc46eea35d5119af7a8a0c41a6f6debd709ed3ae9f54a05"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf557}, @NFTA_SET_ELEM_KEY_END={0x18c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x43, 0x1, "418fab6145770e3dc2af704d58ff7fdd31cef8ba578ca5477885c866abc46d4524adf8f2543cefa4eb2eea087ae141b39f9b8397d72cdd34e9c4e736de1333"}, @NFTA_DATA_VALUE={0xf6, 0x1, "71865d6e56f3f77ff8aef9193ce504725392f3b05443499223050f299f180a830dfd48d62e47cdc9ec6dbec43811930ac120c79551f84ebd34880103169384d1548e6fa8687d866fefe28b7bfea93d5e2b1d4c468ff80066e9b68e7defb5cd8a3454bca5d08887430b18cec4179c8a048df3babfb7a780732e9dbfe682b5df71235c10c7c4720f66d196c758bfee12ba7cae9a8f58ece4bb3661a965fbf46f08d28e5213bb705d8230ecbcc6a62c0ba06929149cceacef66b75f5e8764cc542b31d2e242ffc1e0fa6d28a5ea0756495343ee919bd6aa215cd7917c42e79c18d86acb37a257dd9de8e330785594c8762281b4"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_USERDATA={0xea, 0x6, 0x1, 0x0, "867bfccccf3df463d436274267a4e28cc05a4a5d92a2c18b02e00342741e0e622c586ae0383a637eacd4d0fb97ad7e2fd7b0610bd7c402918a4eb994af1bbfaea51b475f41429b416d8d4a2e52ca2e2dbfacf9d5459e5180b32e430e30493f420bd005a7c2c0d3803c13720e46563807c31eda70bfbfbce90eccebac181bf55a87ad9a798fe41944d8e3ca7389e0ed60c563972c92e63ddd17bcb70755874ead7b652f4bf7a1b857501b4f5e81035f17cbba60fb9596669c2caf4a77b17d257eaa0fea36dda070754a8784c52929c759c77c260b0911e960dd0d5627216f2073d16c6925ab66"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc04, 0x3, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "94ffb0a18d2f06cbeb4f002b0f984ae32bc183d582f032ed59a8f44fa18c893e516b4e710d88f6b5b00b31a2b885445d9bfa54bb84104d1d9e877db7ac765e5adc008f20a0a87ad2a51417c27c69226c892c68880deafb4ec6fbb31316ccddaff760ed0eac16d80d981b348edb0e7d6cb5eb6253d02d65e87bdc1ff5f23f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "8aa01663ec59dbb56a894963c4a7d5964f9ea8cc59bc7cd5cb62a36f69bc391128c5d0758fefe617d3878c5c12afd2c8ec5a49fcf6c91a1b5302d91407b3f32cf3994e3cb6a6c462ce94973889e812749218ea1cab"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}, {0x2e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x70, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x511}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x13c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x100, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xf0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_XOR={0xe4, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x58, 0x1, "a280cabcd91e7d28f5a1ae2be508c5b8389dbb91622fd3b02d0824ac1e843fe14c1573f371d2ab35a91d09c4f41a39e3bf9f88b17218d2dd8e7015456d4cb2430a943419937759075dc95f7a203c504fbcc2ff2e"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xc1, 0x6, 0x1, 0x0, "2c2acef90aeb7b24626f4e44796c798a55f739bee41ae230a6b185517b96e63354f0767edc52be20370aa8285bf86da4286a0ba655d5cd72aa0e412bcfbb4032a9f1dae14538ec55805432ca5913cc691e7f771321e2cf35dfcdafd5290202a5d79509d73653493a18af1b55dce431cad988d7d7294486f439c9b1ff25d674bbcc3b03abfc7d115522245c3f3f5b02ee419ee1b5778c4061ec33bdeedb16618577757360ee811928fc1168d9f23fe0b546bcf7d8dfb90989ff29d30325"}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x630, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x148, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x60, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7ff}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x2b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xed, 0x1, "ca2d9737bff3fb3735bbdee19bf5fc623673eba15fbefccb52e9a3c84da27b2989eb32f0e43f3295d93c8d9e0d6365c207b0ac68db9635b1d7b64531a7670bc8b0a6af5e9ccb876cddb430466907c2d11e4136c338cbd5f4fa8f9d7aacad75e7e563746bf952bc81e9e22236ba1381f4e79108294dc311080d038760a1ef5baa7c745ff1e1c503e7969664602455f6c10c3eec6353fd047228c369b4427839693eed3bdebb98859614b5a7da073fbe57e24bbe347a1740a9d1cdf7f8be4fae165ab2625d4b530cfc1fbe8189d4cb5ee2dee28a254da5085b79cddb9d1460a44cf480a11bbccbfc63fe"}, @NFTA_DATA_VALUE={0x4a, 0x1, "f6e1c73a6d3407e25b27f7633817b37be69bc5547d22febd9960fee3063ff76bb79b8cd8f84b26c9dbd1744c038ed8fd3513769d15fdfbce4b4887b217842945ddddcdfbcf3b"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x27, 0x1, "83706cf8063c23f17ff05549570dbf998019e091e7d6db3b6b527b6ef7f737ed460b12"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "181bf02d3f3de88f3088b20a4c6e1ad3ac2cc52ef179d61da17d35e8540e536ac5f281653acd377de131a900cdc598efeb4c1110b276e849dd88fdf5c7ba5f8eb44567882eb3e501160d6c8531e5b89731fc8aba7c7013c4b3c4a48e2d78d26bd0469deb608d3fd37029eeab62ed533fbf55039537bdc32fa7f7621ed5a4f77529e01237254eae0b2ac73e83107b74aaa682c58df2b6e63c6ae575bd09da8af6c7d9866cc44f5489ba75f7a97cb2b65794f2183873583f4e4d94fc388627f2dbf6a9160a8aeb6abda9df8a5205c456846b5236"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x9d, 0x6, 0x1, 0x0, "49fa5126ae1f76a6375afd3f126eacae281f0bc5eb9b34fe33ff23fcfaf0d737ff7d5d7e436d9093d183b25ca7b7854dd1649cdd0586a0c1d90485523f4a1582db3a51fd1f01375e06a79a6c70dded1e42698ddb1d4d2bdd133176ccab13ca634e3d0bbd711453a4872b34c81c9aa9e8804cc05d45f44d8e40cfdd650cfa0cf0b08a9ecdbc58076bca249991e5ac0f9a24d237869419847af1"}, @NFTA_SET_ELEM_USERDATA={0x9d, 0x6, 0x1, 0x0, "19ad49748198f1a4a49fdf73ead74306244d3890f96c6260173e8e4fdf19e11344cc8b52db6cfa6d9a9d90f1f4a4e555d2731cd42d08cf2fe2925154a78fcc0678d7f5f3b70b54ccdb10fad221fab7636c2ad6111f6cb3a9fa741e4a5a05e9df7a6613d3c8a73110c77144a94eb0fc574b2a8c39fd8a5ae1f8b3c8f437495bf3ba3b703f333ee76d9497f29ef88a3d5b0bd2afc294b4d3d508"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_KEY={0xc8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "1c547c998037863cc3fede532ee7dac0b65d9d1d2a07d199168e279999f7e6dda391da0544396cdf89f25a6861f8f2f0274a81d5771ffd2df20645c212272fbb2a771cad83d8fa6827cbb120c1cb59d9dff86ddac28025e845f21a4a6a328874aba3950719fddd600e1910c569760f702610d638d145f8be627ea5ce4fb356fde35374509fd7747483b4fa429e650fc771042bc93403de9de413b1184ba48d38d41a348182edb541da6974152f57d2d8d4588ebe07b8f6e44c08c8e865"}]}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "cb619524d7898eb5efeac02daf7b728b4fcf07b6a402143ee19f542e98ae7f2cade37a88acebe27484"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9, 0x1, "931df75e9b"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x93d4}, 0x1, 0x0, 0x0, 0x4000042}, 0x40000) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) 7.103118812s ago: executing program 5 (id=1574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)={0xac, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x8b, 0x5b, "9675a79a3c0fd74b490ddbfd7c1d5f2049d6f822cbb2a8edf270b2211f68d8e64bf5c42f5bbe6cb7a2c580159b27c95313d63d1012c6fde6cce3e06abe3ff3ab84ea7a438bdb7cf34451f11ec55bb3c497c78f48e5c53e569134871be0c482d4b2d81cc58f0263379701b8f5157d61e1204f1d0d2627884c766bbaecc7bd7e974c9024229166de"}]}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x48, r5, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x240448d0) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r9) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1b4, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r11 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r11, &(0x7f0000009b40)='auxv\x00') ptrace$ARCH_MAP_VDSO_32(0x1e, r11, 0x0, 0x2002) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r12 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCSSOFTCAR(r12, 0x5412, &(0x7f0000000540)=0x13) 7.102685034s ago: executing program 1 (id=1575): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xc4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='1\n', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x1, 0x0, 0x4, {0x9, @vbi={0x3, 0x6, 0x81, 0x384c4150, [0x2, 0xe], [0x6], 0x1}}, 0x4006}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000006800010400000000000000000200000000000000080001000100000008000500", @ANYRES32=0x1, @ANYBLOB="eb81ad49b19f00000000088f000000000000000000007fe0e1be36cfc9a0d73d2f9448f527210eb58612062c8c03ed8a241e28289df1c3cc100a3ab480dafed2ea80450745b1b0263a4b6790e2c4f590c036f30ab6ad5aa18d9da263d304b0ede08fb6fb8e15fa4ec78792c9cb71897869f3fda188dc21a9e1bce2ae5a766ea3a6ef2a63da1da0bc2b7a0a4d1371082259ae9f91a1742a626fe256ac3d7d1109ee314ffc8357a00955bf496adfa4ff8ac34539c1000a9c1240ff1fec26528515087434aa0fcf7049fc1b46cf47f326957322fc"], 0x28}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xe) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$TCFLSH(r5, 0x400455c8, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x2a) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xd) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0xfffffffc, 0x1000}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x9}]}}}]}, 0x70}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x3) socket(0x1e, 0x1, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f00000000c0)={0x1, 0x3, 0x9}) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x141402, 0x0) 7.100360305s ago: executing program 6 (id=1576): syz_open_dev$dri(0x0, 0x0, 0x8000) r0 = syz_open_dev$mouse(&(0x7f0000000100), 0xf2, 0x10000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x500, 0x320, 0x690, 0x1000, 0x32, 0x1, 0x8, 0x4004, {0xc}, {0x5, 0x1033, 0x80}, {0x8, 0x0, 0x5}, {0xfffffffe, 0xfffffffc}, 0x0, 0x100, 0x200401, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x20, 0x0, 0x0, 0x0, 0x25, 0x2, 0x1, 0xb}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x70bd2c, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @in=@initdev={0xac, 0x1e, 0xfa, 0x0}, @in=@broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3, 0x2f}]}, 0xc0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002000000000000000001080004000000000014000000110001"], 0xa0}}, 0x0) 5.893313701s ago: executing program 5 (id=1577): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x7) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000080)) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x246b}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0xc, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000340)={0x0, 0x5a7a, 0x1, 0x2, 0x2ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72be, 0x40, 0x2, 0x310}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x8, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0x39f, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7a, 0x400, 0x0, 0x31e, 0x0, r3}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x2, 0x0, r10, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r8, '\x00', {0x4, 0xc94, 0x0, 0x0}}, 0x0) r11 = socket$inet6(0xa, 0x0, 0x2) setsockopt$inet6_opts(r11, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, 0x0, 0x0) r12 = creat(&(0x7f0000000580)='./bus\x00', 0x9e) r13 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xb, &(0x7f0000000080)) r14 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r14, &(0x7f0000000a00)="c7", 0x1) sendfile(r12, r13, 0x0, 0x3ffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x321b00) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r16 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r16, 0xc0184800, &(0x7f0000000100)={0x20004, r15}) r18 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r18, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r17}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r18, 0xc00c642d, &(0x7f0000000200)={r19}) 5.8927311s ago: executing program 1 (id=1578): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) 5.89203543s ago: executing program 6 (id=1579): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="c7ac1075dd4c", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffff, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0xfffffffffffffdd0}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x40}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) fcntl$addseals(r4, 0x409, 0xe) fallocate(r4, 0x0, 0x0, 0x400001) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0xa, 0x1d, 0xc, "fe113df6ef9904681956eb9b072000002aa89de2b7fb3cbac89952b8ffff960001000000000200f97a640d35a738670000000000000000000000000100000004", "28094cf00000000000004ad54afac11d875397bd3c52405f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00", [0x7f, 0x1009]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="b2", 0x1}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x4000000) setsockopt$sock_int(r6, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) read(r6, &(0x7f00000003c0)=""/68, 0x44) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000300)) 4.573017649s ago: executing program 5 (id=1580): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) rmdir(&(0x7f0000000100)='./cgroup/../file0\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4607100701040000000000000003003e00f7ffffffd80100000000000040000000000200000002000000000000080000000600380001"], 0x78) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001e0001012dbd7000fcdbdf250000000000000000000000000000b1b9406ab3e956db3300fc02bf0000000000000000000000000004000000003500000c001c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r4 = userfaultfd(0x801) timer_create(0x2, &(0x7f0000000340)={0x0, 0x2c, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = io_uring_setup(0x7ee, &(0x7f0000000080)={0x0, 0xa36, 0x1000, 0x0, 0xa, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) timer_getoverrun(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f035580000000000000001cc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e4000044febf7ddc73fd4a5a0b6c281e05c741471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r7 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000001040)=0x1f7f) r8 = fcntl$dupfd(r7, 0x0, r7) readv(r8, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x3f}], 0x1) close(r2) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_BALANCE_CTL(r9, 0x40049421, 0x2) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0xe) 4.572401194s ago: executing program 1 (id=1581): r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8a) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f00000001c0)=[0x0], 0x1}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400080, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000100)={r8, r10, r12, 0x8005, 0x800, 0x1, 0x1000, 0x5, 0x6, 0xfffffffb, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000200)={0x5, r10, 0x3, 0xffff, 0x6, 0xe, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000008000000b2040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\b\x00'/28], 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c0003e000000600000000ac14140000000000ac14140000000000ac1414bb00000000e000000100000000acff0f00"/130], 0x0) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r13, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x4, 0x0, 0x2080, {0x0, 0xd000, {}, 0x0, 0x2}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001db8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"}}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="66b9410101c066b8a000000066ba000000000f300f30dec467f08393d29b2c6977b800008ed00f01c9baf80c66b8306c188066efbafc0c66ed0f786b0b2e2e0f0866b9800000c00f326635000100000f30", 0x51}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.571963654s ago: executing program 6 (id=1582): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000180)=r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') syz_clone3(&(0x7f0000000380)={0x84000800, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="30c70700000021002dbd7000000000000700000005000000000000001400020000000000000000000000ffffe000a66b"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x77359400}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100dc3c0010006c6b"], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg(r8, 0x0, 0x0, 0x0, &(0x7f0000004c40)={0x0, 0x989680}) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000580)="841ad6c907cee04d642d529370cdb42e410885e92454386200c61eddef78343cf170e6aaccd08a053e29e075356783e68fbdf4409b8012619ba2e33eaccdb4975161e63ba8f4862fc8c15e483ddc05b434beb066eaff04785f703c3cf191f7a01bbc88846b561291336a834544e144bec900938729731412909e9f331e494745379518dfd9c9e9688a", 0x89}, {&(0x7f0000000640)="726d482f9e36431fd64a10ba2427d3dfe0773a9e61f390bff12ed504c3511016b6b56d60e736f41bb14bd5751a67296d31443d93c6613d2e2144e168e8d96d98c2c9df4f4895a116c8e13c71", 0x4c}], 0x2, 0x101, 0xfe) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x2) ioctl$TIOCSSOFTCAR(r3, 0x5412, &(0x7f0000000540)=0x13) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) 3.153255287s ago: executing program 5 (id=1583): r0 = socket(0xa, 0x3, 0xff) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') read(r2, &(0x7f0000000640)=""/4096, 0x4f) read$msr(r2, &(0x7f00000005c0)=""/167, 0xa7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg(r5, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000034c0)=[{0x10, 0x84, 0x3}], 0x10}, 0x4001) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x64, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x480c8}, 0x4040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="76002dbd7000fedbdf25440000000859f300", @ANYRES32=r10, @ANYBLOB="0c00238006000d0006000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000884) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10003}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022cbd700004000000160000140a00060008021100000100000ab21a0008021100000000000a001a00ffffffffffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040008) r11 = syz_ublk_setup_io_uring(0x31cd, &(0x7f0000000340)={0x0, 0x4a70, 0x1000, 0x0, 0x258}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) process_mrelease(r12, 0x0) syz_io_uring_setup(0x189b, &(0x7f0000000b80)={0x0, 0xe9d3, 0x1, 0xffffffff, 0x2ff, 0x0, r11}, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) io_setup(0x4, &(0x7f0000000280)=0x0) creat(&(0x7f00000002c0)='./cgroup\x00', 0x0) io_cancel(r13, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x0, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x4000002}, 0x1c) 3.152820329s ago: executing program 1 (id=1584): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) (async) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='select \n', 0x10) write(r5, &(0x7f0000000100)='file read @etc/passwd /as/\\{id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) (async, rerun: 64) r6 = socket(0x1, 0x803, 0x0) (rerun: 64) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x78, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x873a84884f5b3ade, 0x7, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}]}}}}}}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000004001c00128009000100766c616e000000000c000280060001000100000008000500774c40e2004ce109a7e4b8dadcc9c0af23605816071d179fdce97200dd65fffc4b98e5694e97b4dd0d94abc5ebfc8cfb5e28d761535d64c2ffe959a5f2cbae2e766927ebddc959d9b45b5b8b210a90891e81da564841f43f2365db5c54f9b97bea7c9af27383553e773d71a7a88cf4bcb6ec4a05458d51", @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x50}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 3.142194424s ago: executing program 6 (id=1585): pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x1, 0x840004, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x20000}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffffff, 0x0, 0x100) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000000)={0x8000000000000000, r0}) mprotect(&(0x7f00001ea000/0x2000)=nil, 0x2000, 0x6) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4c090) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) read$usbmon(r5, &(0x7f00000003c0)=""/220, 0xdc) timer_create(0x3, &(0x7f00000005c0)={0x0, 0x13, 0x1, @thr={&(0x7f00000004c0)="b667742a39dbb95f99349d33d38437e031ef443c70499f89f6955c7c2454d174e483bb82a3036ba1958f9b34a317c19fa1b7555a318d8db00136a1ec70e828f20b804744bccf5ecd9446", &(0x7f0000000540)="e387ddaa51289c0fb1c830e15639464992c3c42df7c73255f7a813571181f3075714bf8fdc5bbb9bbd502fd972770aab94030f4640aa102cf7ef70c24e2cce957086a9f153f057f6662b8698b65eb7643eae4b037bce453bd188f06bf140f8"}}, &(0x7f0000000600)) pipe2(&(0x7f0000000180), 0x0) (async) fcntl$setpipe(r0, 0x407, 0x0) (async) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x1, 0x840004, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x20000}}, 0x50) (async) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffffff, 0x0, 0x100) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000000)={0x8000000000000000, r0}) (async) mprotect(&(0x7f00001ea000/0x2000)=nil, 0x2000, 0x6) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4c090) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) open(0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) (async) read$usbmon(r5, &(0x7f00000003c0)=""/220, 0xdc) (async) timer_create(0x3, &(0x7f00000005c0)={0x0, 0x13, 0x1, @thr={&(0x7f00000004c0)="b667742a39dbb95f99349d33d38437e031ef443c70499f89f6955c7c2454d174e483bb82a3036ba1958f9b34a317c19fa1b7555a318d8db00136a1ec70e828f20b804744bccf5ecd9446", &(0x7f0000000540)="e387ddaa51289c0fb1c830e15639464992c3c42df7c73255f7a813571181f3075714bf8fdc5bbb9bbd502fd972770aab94030f4640aa102cf7ef70c24e2cce957086a9f153f057f6662b8698b65eb7643eae4b037bce453bd188f06bf140f8"}}, &(0x7f0000000600)) (async) 1.623571544s ago: executing program 5 (id=1586): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xc4c) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f5c9ba68820"], 0x7) write(0xffffffffffffffff, &(0x7f0000000100)='1\n', 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x14000, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)={[{0x2b, 'cpu'}]}, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x28}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$TCFLSH(r6, 0x400455c8, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x2a) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xd) fdatasync(r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x81}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e20, 0x3ae, @mcast2, 0x1ff}}, 0xbe, 0xe3}, &(0x7f0000000480)=0x90) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x3) socket(0x1e, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x49) 1.6233327s ago: executing program 1 (id=1587): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000611080000000000095006e00000000007a6f005f596135d31c6833bb52305b95f2b64a33618975eadcecdbf444d77755de2b6373e106e80523bb553717ca08a8dcbbb2c09e5810105e13387341b12b316e016e9199c0b00dcde7b012dd58a25fa8946c249c77cf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, &(0x7f0000000180)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYBLOB="5010100190780000"], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYBLOB="5010100190780000"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x65, &(0x7f0000000080)={@local, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "4070c6", 0x27, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[@fragment={0x5c, 0x0, 0x5, 0x0, 0x0, 0x7, 0x68}], {{0x4e22, 0x4e22, r1, r3, 0x1, 0x0, 0x7, 0x10, 0x6, 0x0, 0x4, {[@window={0x3, 0x3, 0x94}, @generic={0x0, 0x4, "6e95"}]}}, {"c13124"}}}}}}}, &(0x7f00000001c0)={0x1, 0x3, [0x6df, 0x535, 0x3a0, 0xa69]}) 1.620832984s ago: executing program 6 (id=1588): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r3, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000004c0)) 1.649628ms ago: executing program 1 (id=1589): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) 0s ago: executing program 6 (id=1590): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440200005f26e3d15c1d292822e1a9822c457ea4f43dd792c1a2130700b002324ee52a727edd771ee229deaf9e5b24d318faea8cb4d186e8", @ANYRES16=r2, @ANYBLOB="cf0401000000fcffffff1300000008000300", @ANYRES32=r4, @ANYBLOB="040013000a000600ffffffffffff00000600120004080000060012019e0000000600b5003e040000"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x4010) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440200005f26e3d15c1d292822e1a9822c457ea4f43dd792c1a2130700b002324ee52a727edd771ee229deaf9e5b24d318faea8cb4d186e8", @ANYRES16=r2, @ANYBLOB="cf0401000000fcffffff1300000008000300", @ANYRES32=r4, @ANYBLOB="040013000a000600ffffffffffff00000600120004080000060012019e0000000600b5003e040000"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x4010) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x9f946000) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000001040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=::', 0x20) (async) write(r0, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=::', 0x20) kernel console output (not intermixed with test programs): 151.054150][ T43] audit: type=1400 audit(1791058355.913:834): avc: denied { create } for pid=10162 comm="syz.6.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 151.162615][T10172] kernel read not supported for file /file0 (pid: 10172 comm: syz.6.976) [ 151.239391][T10180] veth1_macvtap: left promiscuous mode [ 151.239932][T10178] FAULT_INJECTION: forcing a failure. [ 151.239932][T10178] name failslab, interval 1, probability 0, space 0, times 0 [ 151.239966][T10178] CPU: 3 UID: 0 PID: 10178 Comm: syz.7.982 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.239995][T10178] Tainted: [L]=SOFTLOCKUP [ 151.240003][T10178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.240015][T10178] Call Trace: [ 151.240023][T10178] [ 151.240033][T10178] dump_stack_lvl+0x100/0x190 [ 151.240083][T10178] should_fail_ex.cold+0x5/0xa [ 151.240117][T10178] should_failslab+0xc2/0x120 [ 151.240174][T10178] kmem_cache_alloc_noprof+0x92/0x6a0 [ 151.240201][T10178] ? d_instantiate+0x8a/0xb0 [ 151.240222][T10178] ? alloc_empty_file+0x5b/0x1c0 [ 151.240261][T10178] alloc_empty_file+0x5b/0x1c0 [ 151.240294][T10178] alloc_file_pseudo+0x183/0x290 [ 151.240328][T10178] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 151.240360][T10178] ? alloc_fd+0x471/0x7a0 [ 151.240402][T10178] sock_alloc_file+0x50/0x210 [ 151.240443][T10178] __sys_socket+0x1c0/0x260 [ 151.240469][T10178] ? __pfx___sys_socket+0x10/0x10 [ 151.240514][T10178] __x64_sys_socket+0x72/0xb0 [ 151.240535][T10178] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.240558][T10178] do_syscall_64+0x123/0x790 [ 151.240577][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.240595][T10178] RIP: 0033:0x7f7beb59e159 [ 151.240609][T10178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.240626][T10178] RSP: 002b:00007f7be97f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 151.240644][T10178] RAX: ffffffffffffffda RBX: 00007f7beb825fa0 RCX: 00007f7beb59e159 [ 151.240657][T10178] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 151.240669][T10178] RBP: 00007f7beb63506b R08: 0000000000000000 R09: 0000000000000000 [ 151.240680][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.240691][T10178] R13: 00007f7beb826038 R14: 00007f7beb825fa0 R15: 00007fff2ad01508 [ 151.240716][T10178] [ 151.252399][T10182] fuse: fd is not a fuse device [ 151.272309][T10181] netlink: 'syz.5.981': attribute type 1 has an invalid length. [ 151.334776][T10186] xt_policy: neither incoming nor outgoing policy selected [ 151.334885][T10187] xt_policy: neither incoming nor outgoing policy selected [ 151.335148][T10165] ftl_cs: FTL header not found. [ 151.343206][T10186] fuse: fd is not a fuse device [ 151.459695][T10197] netlink: 56 bytes leftover after parsing attributes in process `syz.5.986'. [ 151.459719][T10197] netlink: 56 bytes leftover after parsing attributes in process `syz.5.986'. [ 151.480210][T10165] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 151.501370][ T5743] Bluetooth: hci4: command 0x0419 tx timeout [ 151.501425][ T5743] Bluetooth: hci1: command 0x0406 tx timeout [ 151.501446][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.501472][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.423408][T10225] loop4: detected capacity change from 0 to 7 [ 152.434564][T10225] Dev loop4: unable to read RDB block 7 [ 152.434585][T10225] loop4: AHDI p1 p2 p3 [ 152.434596][T10225] loop4: partition table partially beyond EOD, truncated [ 152.438859][T10225] loop4: p1 start 1601398130 is beyond EOD, truncated [ 152.438879][T10225] loop4: p2 start 1702059890 is beyond EOD, truncated [ 152.483883][T10228] Bluetooth: MGMT ver 1.23 [ 152.599592][T10241] openvswitch: netlink: Duplicate or invalid key (type 0). [ 152.733435][T10251] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 152.756218][T10251] cramfs: wrong magic [ 152.764796][T10251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.993763][T10261] ubi0: attaching mtd0 [ 152.997620][T10261] ubi0: scanning is finished [ 152.997664][T10261] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 153.032831][T10266] FAULT_INJECTION: forcing a failure. [ 153.032831][T10266] name failslab, interval 1, probability 0, space 0, times 0 [ 153.032854][T10266] CPU: 2 UID: 0 PID: 10266 Comm: syz.7.1008 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.032869][T10266] Tainted: [L]=SOFTLOCKUP [ 153.032873][T10266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.032879][T10266] Call Trace: [ 153.032884][T10266] [ 153.032888][T10266] dump_stack_lvl+0x100/0x190 [ 153.032909][T10266] should_fail_ex.cold+0x5/0xa [ 153.032927][T10266] should_failslab+0xc2/0x120 [ 153.032945][T10266] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 153.032960][T10266] ? sock_alloc_inode+0x26/0x2c0 [ 153.032972][T10266] ? __pfx_sock_alloc_inode+0x10/0x10 [ 153.032983][T10266] sock_alloc_inode+0x26/0x2c0 [ 153.032993][T10266] ? __pfx_sock_alloc_inode+0x10/0x10 [ 153.033004][T10266] alloc_inode+0x68/0x250 [ 153.033016][T10266] sock_alloc+0x44/0x280 [ 153.033032][T10266] ? security_socket_create+0x7f/0x250 [ 153.033047][T10266] __sock_create+0xc2/0x860 [ 153.033062][T10266] __sys_socket+0x14d/0x260 [ 153.033076][T10266] ? __pfx___sys_socket+0x10/0x10 [ 153.033092][T10266] __x64_sys_socket+0x72/0xb0 [ 153.033104][T10266] ? lockdep_hardirqs_on+0x7d/0x110 [ 153.033116][T10266] do_syscall_64+0x123/0x790 [ 153.033129][T10266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.033141][T10266] RIP: 0033:0x7f7beb59e159 [ 153.033152][T10266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.033162][T10266] RSP: 002b:00007f7be97f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 153.033173][T10266] RAX: ffffffffffffffda RBX: 00007f7beb825fa0 RCX: 00007f7beb59e159 [ 153.033180][T10266] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 153.033187][T10266] RBP: 00007f7beb63506b R08: 0000000000000000 R09: 0000000000000000 [ 153.033193][T10266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.033199][T10266] R13: 00007f7beb826038 R14: 00007f7beb825fa0 R15: 00007fff2ad01508 [ 153.033214][T10266] [ 153.033220][T10266] socket: no more sockets [ 153.043914][T10268] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 153.193788][T10261] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 153.237067][T10283] Bluetooth: MGMT ver 1.23 [ 153.578940][ T5738] Bluetooth: hci1: unexpected event for opcode 0x200f [ 153.579704][T10300] FAULT_INJECTION: forcing a failure. [ 153.579704][T10300] name failslab, interval 1, probability 0, space 0, times 0 [ 153.579733][T10300] CPU: 0 UID: 0 PID: 10300 Comm: syz.6.1018 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.579757][T10300] Tainted: [L]=SOFTLOCKUP [ 153.579763][T10300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.579772][T10300] Call Trace: [ 153.579779][T10300] [ 153.579786][T10300] dump_stack_lvl+0x100/0x190 [ 153.579838][T10300] should_fail_ex.cold+0x5/0xa [ 153.579861][T10300] should_failslab+0xc2/0x120 [ 153.579884][T10300] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 153.579906][T10300] ? sock_alloc_inode+0x26/0x2c0 [ 153.579930][T10300] ? __pfx_sock_alloc_inode+0x10/0x10 [ 153.579949][T10300] sock_alloc_inode+0x26/0x2c0 [ 153.579965][T10300] ? __pfx_sock_alloc_inode+0x10/0x10 [ 153.579979][T10300] alloc_inode+0x68/0x250 [ 153.580015][T10300] sock_alloc+0x44/0x280 [ 153.580040][T10300] ? security_socket_create+0x7f/0x250 [ 153.580061][T10300] __sock_create+0xc2/0x860 [ 153.580084][T10300] __sys_socket+0x14d/0x260 [ 153.580104][T10300] ? __pfx___sys_socket+0x10/0x10 [ 153.580127][T10300] __x64_sys_socket+0x72/0xb0 [ 153.580145][T10300] ? lockdep_hardirqs_on+0x7d/0x110 [ 153.580162][T10300] do_syscall_64+0x123/0x790 [ 153.580183][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.580201][T10300] RIP: 0033:0x7f7bc9f9e159 [ 153.580216][T10300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.580231][T10300] RSP: 002b:00007f7bcae04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 153.580250][T10300] RAX: ffffffffffffffda RBX: 00007f7bca225fa0 RCX: 00007f7bc9f9e159 [ 153.580263][T10300] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 153.580273][T10300] RBP: 00007f7bca03506b R08: 0000000000000000 R09: 0000000000000000 [ 153.580285][T10300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.580294][T10300] R13: 00007f7bca226038 R14: 00007f7bca225fa0 R15: 00007ffe6df720d8 [ 153.580318][T10300] [ 153.580372][T10300] socket: no more sockets [ 153.591271][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.596844][ T5737] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.596873][ T5737] Bluetooth: hci4: command 0x0419 tx timeout [ 153.602576][ T66] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 153.904280][T10302] __nla_validate_parse: 6 callbacks suppressed [ 153.904298][T10302] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1019'. [ 153.919470][T10302] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1019'. [ 154.057176][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 154.233265][T10318] Could not find key with description: [syz] [ 154.233277][T10318] process_request_key_err: No key [ 154.233282][T10318] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 154.233288][T10318] One or more global auth toks could not properly register; rc = [-2] [ 154.233304][T10318] Error validating options; rc = [-2] [ 154.233491][T10318] Could not find key with description: [syz] [ 154.233496][T10318] process_request_key_err: No key [ 154.233500][T10318] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 154.233505][T10318] One or more global auth toks could not properly register; rc = [-2] [ 154.233519][T10318] Error validating options; rc = [-2] [ 154.233694][T10318] Could not find key with description: [syz] [ 154.233699][T10318] process_request_key_err: No key [ 154.233704][T10318] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 154.233709][T10318] One or more global auth toks could not properly register; rc = [-2] [ 154.233722][T10318] Error validating options; rc = [-2] [ 154.233979][T10318] Could not find key with description: [syz] [ 154.233985][T10318] process_request_key_err: No key [ 154.233989][T10318] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 154.233994][T10318] One or more global auth toks could not properly register; rc = [-2] [ 154.234008][T10318] Error validating options; rc = [-2] [ 154.234301][T10318] Could not find key with description: [syz] [ 154.234307][T10318] process_request_key_err: No key [ 154.234311][T10318] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 154.234316][T10318] One or more global auth toks could not properly register; rc = [-2] [ 154.234330][T10318] Error validating options; rc = [-2] [ 154.234535][T10318] Could not find key with description: [syz] [ 154.234541][T10318] process_request_key_err: No key [ 154.234545][T10318] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 154.234550][T10318] One or more global auth toks could not properly register; rc = [-2] [ 154.234563][T10318] Error validating options; rc = [-2] [ 154.386539][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 154.388856][T10328] tipc: Started in network mode [ 154.388874][T10328] tipc: Node identity 3a4c2d89e06f, cluster identity 4711 [ 154.389028][T10328] tipc: Enabled bearer , priority 0 [ 154.390018][T10332] syzkaller0: entered promiscuous mode [ 154.390038][T10332] syzkaller0: entered allmulticast mode [ 154.410793][T10327] syzkaller0: mtu less than device minimum [ 154.505257][T10352] ovs-dp0: left promiscuous mode [ 154.555146][T10357] comedi: No check for data length of config insn id 1024 is implemented [ 154.555158][T10357] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 154.555165][T10357] comedi: Assuming n=15 is correct [ 154.579850][T10358] ovs-dp0: entered promiscuous mode [ 154.636940][T10364] x_tables: duplicate underflow at hook 3 [ 154.653553][T10353] fuse: fd is not a fuse device [ 154.738246][T10367] kvm: faulting far call emulation tainted memory [ 154.738750][T10367] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.835114][T10388] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 154.859150][T10388] bond3: entered promiscuous mode [ 154.859507][T10388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.892060][T10388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.892378][T10388] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 154.892396][T10388] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 154.896245][T10388] bond3: (slave ip6gre1): making interface the new active one [ 154.896263][T10388] ip6gre1: entered promiscuous mode [ 154.897453][T10388] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 154.939480][T10393] netlink: 'syz.7.1048': attribute type 20 has an invalid length. [ 155.065540][T10403] overlayfs: failed to resolve './file1/file0': -2 [ 155.190504][T10412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.209621][T10412] FAULT_INJECTION: forcing a failure. [ 155.209621][T10412] name failslab, interval 1, probability 0, space 0, times 0 [ 155.209654][T10412] CPU: 3 UID: 0 PID: 10412 Comm: syz.7.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.209679][T10412] Tainted: [L]=SOFTLOCKUP [ 155.209685][T10412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.209696][T10412] Call Trace: [ 155.209703][T10412] [ 155.209710][T10412] dump_stack_lvl+0x100/0x190 [ 155.209740][T10412] should_fail_ex.cold+0x5/0xa [ 155.209766][T10412] should_failslab+0xc2/0x120 [ 155.209791][T10412] __kmalloc_noprof+0xfc/0x840 [ 155.209813][T10412] ? lsm_blob_alloc+0x68/0x90 [ 155.209836][T10412] lsm_blob_alloc+0x68/0x90 [ 155.209852][T10412] security_key_alloc+0x34/0x310 [ 155.209876][T10412] key_alloc+0x876/0x1310 [ 155.209908][T10412] ? __pfx_key_alloc+0x10/0x10 [ 155.209932][T10412] ? lsm_blob_alloc+0x68/0x90 [ 155.209961][T10412] keyring_alloc+0x44/0xc0 [ 155.209991][T10412] install_process_keyring_to_cred+0xc1/0x140 [ 155.210015][T10412] keyctl_set_reqkey_keyring+0x14e/0x1c0 [ 155.210037][T10412] __do_sys_keyctl+0x316/0x5a0 [ 155.210058][T10412] do_syscall_64+0x123/0x790 [ 155.210080][T10412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.210098][T10412] RIP: 0033:0x7f7beb59e159 [ 155.210113][T10412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.210130][T10412] RSP: 002b:00007f7be97f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 155.210147][T10412] RAX: ffffffffffffffda RBX: 00007f7beb825fa0 RCX: 00007f7beb59e159 [ 155.210159][T10412] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 155.210169][T10412] RBP: 00007f7beb63506b R08: 0000000000000000 R09: 0000000000000000 [ 155.210180][T10412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.210190][T10412] R13: 00007f7beb826038 R14: 00007f7beb825fa0 R15: 00007fff2ad01508 [ 155.210214][T10412] [ 155.384711][T10418] netlink: 'syz.7.1057': attribute type 3 has an invalid length. [ 155.404317][ T57] tipc: Node number set to 3659738505 [ 155.661246][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.667675][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 155.671028][ T66] Bluetooth: hci4: command 0x0419 tx timeout [ 155.715644][T10438] loop5: detected capacity change from 0 to 7 [ 155.721742][T10435] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 155.722938][T10438] Dev loop5: unable to read RDB block 7 [ 155.722959][T10438] loop5: unable to read partition table [ 155.723090][T10438] loop5: partition table beyond EOD, truncated [ 155.723105][T10438] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.907207][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 155.907226][ T43] audit: type=1400 audit(1791058360.763:858): avc: denied { remount } for pid=10447 comm="syz.5.1067" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 156.043026][T10460] syzkaller0: left promiscuous mode [ 156.043041][T10460] syzkaller0: left allmulticast mode [ 156.056298][T10461] fuse: fd is not a fuse device [ 156.056473][T10460] fuse: fd is not a fuse device [ 156.207837][ T43] audit: type=1400 audit(1791058361.063:859): avc: denied { connect } for pid=10472 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.213899][ T43] audit: type=1400 audit(1791058361.073:860): avc: denied { ioctl } for pid=10472 comm="syz.1.1073" path="socket:[39590]" dev="sockfs" ino=39590 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 156.715179][ T43] audit: type=1400 audit(1791058361.573:861): avc: denied { shutdown } for pid=10477 comm="syz.5.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.859451][T10492] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1078'. [ 157.105474][T10506] FAULT_INJECTION: forcing a failure. [ 157.105474][T10506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.105509][T10506] CPU: 1 UID: 0 PID: 10506 Comm: syz.1.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.105535][T10506] Tainted: [L]=SOFTLOCKUP [ 157.105541][T10506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.105552][T10506] Call Trace: [ 157.105564][T10506] [ 157.105571][T10506] dump_stack_lvl+0x100/0x190 [ 157.105614][T10506] should_fail_ex.cold+0x5/0xa [ 157.105640][T10506] _copy_from_user+0x2e/0xd0 [ 157.105670][T10506] load_msg+0x253/0x4a0 [ 157.105700][T10506] do_msgrcv+0x209/0x16f0 [ 157.105745][T10506] ? __pfx_do_msg_fill+0x10/0x10 [ 157.105768][T10506] ? fput+0x7c/0x100 [ 157.105790][T10506] ? __pfx_do_msgrcv+0x10/0x10 [ 157.105815][T10506] ? xfd_validate_state+0x129/0x190 [ 157.105842][T10506] ? do_syscall_64+0x123/0x790 [ 157.105864][T10506] do_syscall_64+0x123/0x790 [ 157.105883][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.105898][T10506] RIP: 0033:0x7fab9ef9e159 [ 157.105912][T10506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.105926][T10506] RSP: 002b:00007fab9d1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 157.105953][T10506] RAX: ffffffffffffffda RBX: 00007fab9f225fa0 RCX: 00007fab9ef9e159 [ 157.105964][T10506] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000 [ 157.105974][T10506] RBP: 00007fab9f03506b R08: 0000000000004800 R09: 0000000000000000 [ 157.105985][T10506] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 157.105995][T10506] R13: 00007fab9f226038 R14: 00007fab9f225fa0 R15: 00007ffd8fdabcc8 [ 157.106017][T10506] [ 157.108505][T10506] FAULT_INJECTION: forcing a failure. [ 157.108505][T10506] name failslab, interval 1, probability 0, space 0, times 0 [ 157.108534][T10506] CPU: 2 UID: 0 PID: 10506 Comm: syz.1.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.108558][T10506] Tainted: [L]=SOFTLOCKUP [ 157.108564][T10506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.108574][T10506] Call Trace: [ 157.108581][T10506] [ 157.108588][T10506] dump_stack_lvl+0x100/0x190 [ 157.108618][T10506] should_fail_ex.cold+0x5/0xa [ 157.108644][T10506] should_failslab+0xc2/0x120 [ 157.108670][T10506] kmem_cache_alloc_noprof+0x92/0x6a0 [ 157.108694][T10506] ? security_file_alloc+0x34/0x2c0 [ 157.108723][T10506] security_file_alloc+0x34/0x2c0 [ 157.108747][T10506] init_file+0x95/0x480 [ 157.108773][T10506] alloc_empty_file+0x79/0x1c0 [ 157.108800][T10506] alloc_file_pseudo+0x183/0x290 [ 157.108829][T10506] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 157.108856][T10506] ? alloc_fd+0x471/0x7a0 [ 157.108886][T10506] sock_alloc_file+0x50/0x210 [ 157.108921][T10506] __sys_socket+0x1c0/0x260 [ 157.108947][T10506] ? __pfx___sys_socket+0x10/0x10 [ 157.108972][T10506] __x64_sys_socket+0x72/0xb0 [ 157.108991][T10506] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.109011][T10506] do_syscall_64+0x123/0x790 [ 157.109032][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.109051][T10506] RIP: 0033:0x7fab9ef9e159 [ 157.109066][T10506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.109083][T10506] RSP: 002b:00007fab9d1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 157.109102][T10506] RAX: ffffffffffffffda RBX: 00007fab9f225fa0 RCX: 00007fab9ef9e159 [ 157.109116][T10506] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 157.109127][T10506] RBP: 00007fab9f03506b R08: 0000000000000000 R09: 0000000000000000 [ 157.109138][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.109150][T10506] R13: 00007fab9f226038 R14: 00007fab9f225fa0 R15: 00007ffd8fdabcc8 [ 157.109175][T10506] [ 157.142199][ T43] audit: type=1400 audit(1791058362.003:862): avc: denied { ioctl } for pid=10522 comm="syz.5.1085" path="socket:[40880]" dev="sockfs" ino=40880 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.236493][T10534] unsupported nlmsg_type 40 [ 157.377585][ T43] audit: type=1400 audit(1791058362.233:863): avc: denied { write } for pid=10543 comm="syz.7.1092" name="file0" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.378064][ T43] audit: type=1400 audit(1791058362.233:864): avc: denied { open } for pid=10543 comm="syz.7.1092" path="/48/file0" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.378582][ T43] audit: type=1400 audit(1791058362.233:865): avc: denied { ioctl } for pid=10543 comm="syz.7.1092" path="/48/file0" dev="tmpfs" ino=280 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.451031][ T1875] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 157.571204][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1093'. [ 157.621970][ T1875] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.626867][ T1875] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.626894][ T1875] usb 11-1: config 1 has no interface number 0 [ 157.626926][ T1875] usb 11-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 157.626949][ T1875] usb 11-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 157.626976][ T1875] usb 11-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 157.629204][ T1875] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.629229][ T1875] usb 11-1: Product: syz [ 157.629242][ T1875] usb 11-1: Manufacturer: syz [ 157.629254][ T1875] usb 11-1: SerialNumber: syz [ 157.741571][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.741690][ T66] Bluetooth: hci4: command 0x0419 tx timeout [ 157.840403][ T43] audit: type=1400 audit(1791058362.693:866): avc: denied { write } for pid=10527 comm="syz.6.1087" name="usb_gadget" dev="configfs" ino=5480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.850849][T10558] binder: 10555:10558 unknown command 0 [ 157.850873][T10558] binder: 10555:10558 ioctl c0306201 200000000480 returned -22 [ 157.986636][ T43] audit: type=1400 audit(1791058362.843:867): avc: denied { write } for pid=10553 comm="syz.7.1094" name="functions" dev="configfs" ino=42270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.320692][ T1875] cdc_ncm 11-1:1.1: bind() failure [ 158.324550][ T1875] usb 11-1: USB disconnect, device number 3 [ 158.431127][ T57] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 158.591141][ T57] usb 10-1: Using ep0 maxpacket: 32 [ 158.593323][ T57] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 158.594527][ T57] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 158.596757][ T57] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 158.596779][ T57] usb 10-1: Product: syz [ 158.596793][ T57] usb 10-1: Manufacturer: syz [ 158.596806][ T57] usb 10-1: SerialNumber: syz [ 158.601130][ T57] usb 10-1: config 0 descriptor?? [ 158.601861][T10567] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 158.608038][ T57] hub 10-1:0.0: bad descriptor, ignoring hub [ 158.608061][ T57] hub 10-1:0.0: probe with driver hub failed with error -5 [ 158.871630][ T9584] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 158.876204][T10575] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 159.000728][T10578] netlink: 'syz.6.1101': attribute type 4 has an invalid length. [ 159.005841][T10578] netlink: 'syz.6.1101': attribute type 4 has an invalid length. [ 159.021922][ T9584] usb 12-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 159.034395][ T9584] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.034437][ T9584] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 159.034467][ T9584] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 159.034486][ T9584] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 159.034615][ T9584] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.043651][T10573] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 159.043817][T10573] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 159.048413][ T9584] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 159.062781][ T9584] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 159.062852][ T9584] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 159.066204][ T9584] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 159.068459][T10580] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 159.070025][ T9584] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 159.070105][ T9584] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 159.078058][ T9584] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 159.101199][ T7209] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 159.180897][T10584] loop5: detected capacity change from 0 to 7 [ 159.183099][T10584] Dev loop5: unable to read RDB block 7 [ 159.183131][T10584] loop5: unable to read partition table [ 159.183293][T10584] loop5: partition table beyond EOD, truncated [ 159.183320][T10584] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.273784][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.274126][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.329489][T10593] netlink: 'syz.1.1107': attribute type 10 has an invalid length. [ 159.388422][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.389134][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.425273][ T9584] usb 12-1: USB disconnect, device number 2 [ 159.467396][T10604] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1109'. [ 159.469137][ T9584] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 159.473155][ T9584] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 159.473872][ T9584] keyspan 12-1:1.0: device disconnected [ 159.685813][T10608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42260 sclass=netlink_route_socket pid=10608 comm=syz.1.1110 [ 159.752052][T10613] loop5: detected capacity change from 0 to 7 [ 159.766999][T10613] Dev loop5: unable to read RDB block 7 [ 159.767023][T10613] loop5: unable to read partition table [ 159.767171][T10613] loop5: partition table beyond EOD, truncated [ 159.767183][T10613] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.797441][T10576] raw-gadget.1 gadget.5: failed to queue suspend event [ 159.797629][T10576] raw-gadget.1 gadget.5: failed to queue disconnect event [ 159.854496][T10615] tmpfs: Too few inodes for current use [ 159.893316][ T66] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 159.894598][ T66] Bluetooth: hci2: unexpected event for opcode 0x204b [ 159.901429][ T7207] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 159.909025][ T66] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 159.909045][ T66] Bluetooth: hci2: unexpected event for opcode 0x204b [ 159.997190][T10625] netlink: del zone limit has 4 unknown bytes [ 160.573160][T10650] FAULT_INJECTION: forcing a failure. [ 160.573160][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 160.573195][T10650] CPU: 0 UID: 0 PID: 10650 Comm: syz.1.1120 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.573219][T10650] Tainted: [L]=SOFTLOCKUP [ 160.573226][T10650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.573237][T10650] Call Trace: [ 160.573244][T10650] [ 160.573253][T10650] dump_stack_lvl+0x100/0x190 [ 160.573292][T10650] should_fail_ex.cold+0x5/0xa [ 160.573328][T10650] should_failslab+0xc2/0x120 [ 160.573357][T10650] kmem_cache_alloc_noprof+0x92/0x6a0 [ 160.573379][T10650] ? __pfx_map_id_range_down+0x10/0x10 [ 160.573395][T10650] ? security_inode_alloc+0x3b/0x2c0 [ 160.573411][T10650] security_inode_alloc+0x3b/0x2c0 [ 160.573425][T10650] inode_init_always_gfp+0xc6f/0xfb0 [ 160.573445][T10650] alloc_inode+0x8e/0x250 [ 160.573457][T10650] path_from_stashed+0x25b/0x760 [ 160.573468][T10650] ? do_raw_spin_unlock+0x145/0x1e0 [ 160.573487][T10650] ns_get_path+0x60/0x80 [ 160.573505][T10650] proc_ns_get_link+0x260/0x2e0 [ 160.573523][T10650] ? __pfx_proc_ns_get_link+0x10/0x10 [ 160.573544][T10650] pick_link+0xd17/0x13c0 [ 160.573556][T10650] ? rcu_is_watching+0x13/0xc0 [ 160.573573][T10650] ? __pfx_proc_ns_get_link+0x10/0x10 [ 160.573592][T10650] step_into_slowpath+0x9ba/0xf90 [ 160.573605][T10650] ? proc_ns_dir_lookup+0x1da/0x390 [ 160.573635][T10650] ? __pfx_step_into_slowpath+0x10/0x10 [ 160.573654][T10650] path_openat+0xfab/0x2440 [ 160.573674][T10650] ? __pfx_path_openat+0x10/0x10 [ 160.573696][T10650] do_file_open+0x20e/0x430 [ 160.573714][T10650] ? __pfx_do_file_open+0x10/0x10 [ 160.573742][T10650] ? _raw_spin_unlock+0x28/0x50 [ 160.573760][T10650] ? alloc_fd+0x471/0x7a0 [ 160.573779][T10650] do_sys_openat2+0x10f/0x1e0 [ 160.573798][T10650] ? __pfx_do_sys_openat2+0x10/0x10 [ 160.573815][T10650] ? __do_sys_add_key+0x37d/0x460 [ 160.573829][T10650] ? kfree+0x22b/0x6d0 [ 160.573842][T10650] __x64_sys_openat+0x12d/0x210 [ 160.573860][T10650] ? __pfx___x64_sys_openat+0x10/0x10 [ 160.573883][T10650] do_syscall_64+0x123/0x790 [ 160.573897][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.573910][T10650] RIP: 0033:0x7fab9ef5e98e [ 160.573921][T10650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.573934][T10650] RSP: 002b:00007fab9d1d4f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 160.573946][T10650] RAX: ffffffffffffffda RBX: 00007fab9d1d56c0 RCX: 00007fab9ef5e98e [ 160.573953][T10650] RDX: 0000000000000000 RSI: 00007fab9f0347a6 RDI: ffffffffffffff9c [ 160.573961][T10650] RBP: 00007fab9f03506b R08: 0000000000000000 R09: 0000000000000000 [ 160.573967][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.573974][T10650] R13: 00007fab9f226128 R14: 00007fab9f226090 R15: 00007ffd8fdabcc8 [ 160.573989][T10650] [ 160.668117][ T5826] usb 10-1: USB disconnect, device number 2 [ 160.771407][ T9584] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 160.923716][ T9584] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 160.924698][ T9584] usb 11-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x94, changing to 0x84 [ 160.924725][ T9584] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x84 has invalid maxpacket 10058, setting to 1024 [ 160.924748][ T9584] usb 11-1: config 0 interface 0 has no altsetting 0 [ 160.927143][ T9584] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 160.927164][ T9584] usb 11-1: Product: syz [ 160.927177][ T9584] usb 11-1: Manufacturer: syz [ 160.927189][ T9584] usb 11-1: SerialNumber: syz [ 160.929472][ T9584] usb 11-1: config 0 descriptor?? [ 160.935485][ T9584] usb 11-1: selecting invalid altsetting 0 [ 161.139396][T10649] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1122'. [ 161.139409][T10649] tipc: Invalid UDP bearer configuration [ 161.139429][T10649] tipc: Enabling of bearer rejected, failed to enable media [ 161.162341][ T57] usb 11-1: USB disconnect, device number 4 [ 161.190302][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 161.190317][ T43] audit: type=1400 audit(1791058366.043:874): avc: denied { execute } for pid=10670 comm="syz.5.1125" path="/file0" dev="ramfs" ino=39784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 161.431809][ T43] audit: type=1400 audit(1791058366.293:875): avc: denied { map } for pid=10680 comm="syz.7.1124" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 161.432071][ T43] audit: type=1400 audit(1791058366.293:876): avc: denied { execute } for pid=10680 comm="syz.7.1124" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 161.597220][T10689] loop5: detected capacity change from 0 to 7 [ 161.598599][T10689] Dev loop5: unable to read RDB block 7 [ 161.598630][T10689] loop5: unable to read partition table [ 161.598778][T10689] loop5: partition table beyond EOD, truncated [ 161.598793][T10689] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 161.657126][T10691] Device name cannot be null; rc = [-22] [ 161.773682][T10694] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1133'. [ 161.883047][T10715] netlink: 'syz.1.1142': attribute type 4 has an invalid length. [ 161.917272][T10722] netlink: 'syz.1.1145': attribute type 63 has an invalid length. [ 161.917291][T10722] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1145'. [ 161.917335][T10723] netlink: 'syz.1.1145': attribute type 1 has an invalid length. [ 161.926836][T10723] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.945545][T10722] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.945964][T10722] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 161.946717][T10722] bond4: (slave vti0): Error -95 calling set_mac_address [ 161.964166][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'. [ 161.964188][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'. [ 162.070651][ T43] audit: type=1400 audit(1791058366.923:877): avc: denied { ioctl } for pid=10730 comm="syz.1.1148" path="socket:[39851]" dev="sockfs" ino=39851 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 162.209997][ T43] audit: type=1400 audit(1791058367.063:878): avc: denied { connect } for pid=10728 comm="syz.6.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.342551][T10743] syzkaller0: entered promiscuous mode [ 162.342566][T10743] syzkaller0: entered allmulticast mode [ 162.520026][T10753] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 162.520043][T10753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.524469][T10753] vhci_hcd vhci_hcd.0: Device attached [ 162.526240][T10754] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 162.533734][ T13] vhci_hcd vhci_hcd.6: stop threads [ 162.533756][ T13] vhci_hcd vhci_hcd.6: release socket [ 162.533776][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 162.538549][T10756] binder: 10752:10756 ioctl c0306201 200000000080 returned -14 [ 162.539166][T10756] binder: 10752:10756 unknown command 0 [ 162.539181][T10756] binder: 10752:10756 ioctl c0306201 200000000000 returned -22 [ 162.650391][ T43] audit: type=1400 audit(1791058367.503:879): avc: denied { bind } for pid=10764 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.660913][T10768] misc userio: Can't change port type on an already running userio instance [ 162.772073][ T5826] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 162.797859][T10777] fuse: fd is not a fuse device [ 162.798033][T10777] fuse: fd is not a fuse device [ 162.798178][T10777] fuse: fd is not a fuse device [ 162.798291][T10777] fuse: fd is not a fuse device [ 162.798404][T10777] fuse: fd is not a fuse device [ 162.798555][T10777] fuse: fd is not a fuse device [ 162.798675][T10777] fuse: fd is not a fuse device [ 162.798790][T10777] fuse: fd is not a fuse device [ 162.798904][T10777] fuse: fd is not a fuse device [ 162.799017][T10777] fuse: fd is not a fuse device [ 162.799157][T10777] fuse: fd is not a fuse device [ 162.799272][T10777] fuse: fd is not a fuse device [ 162.799383][T10777] fuse: fd is not a fuse device [ 162.799493][T10777] fuse: fd is not a fuse device [ 162.799602][T10777] fuse: fd is not a fuse device [ 162.799714][T10777] fuse: fd is not a fuse device [ 162.799849][T10777] fuse: fd is not a fuse device [ 162.800044][T10777] fuse: fd is not a fuse device [ 162.800203][T10777] fuse: fd is not a fuse device [ 162.800329][T10777] fuse: fd is not a fuse device [ 162.800444][T10777] fuse: fd is not a fuse device [ 162.800561][T10777] fuse: fd is not a fuse device [ 162.800680][T10777] fuse: fd is not a fuse device [ 162.800797][T10777] fuse: fd is not a fuse device [ 162.800917][T10777] fuse: fd is not a fuse device [ 162.801214][T10777] fuse: fd is not a fuse device [ 162.801333][T10777] fuse: fd is not a fuse device [ 162.801457][T10777] fuse: fd is not a fuse device [ 162.801572][T10777] fuse: fd is not a fuse device [ 162.801689][T10777] fuse: fd is not a fuse device [ 162.801805][T10777] fuse: fd is not a fuse device [ 162.801927][T10777] fuse: fd is not a fuse device [ 162.802041][T10777] fuse: fd is not a fuse device [ 162.886106][T10777] xt_hashlimit: overflow, rate too high: 1 [ 162.912445][ T5826] usb 11-1: device descriptor read/64, error -71 [ 162.931296][ T25] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 163.084644][T10778] cgroup: fork rejected by pids controller in /syz5 [ 163.091859][ T25] usb 6-1: Invalid ep0 maxpacket: 64 [ 163.171167][ T5826] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 163.221111][ T25] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 163.297928][T10828] sctp: [Deprecated]: syz.7.1165 (pid 10828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.297928][T10828] Use struct sctp_sack_info instead [ 163.301269][ T5826] usb 11-1: device descriptor read/64, error -71 [ 163.312127][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1165'. [ 163.371082][ T25] usb 6-1: Invalid ep0 maxpacket: 64 [ 163.371310][ T25] usb usb6-port1: attempt power cycle [ 163.411316][ T5826] usb usb11-port1: attempt power cycle [ 163.429086][ T43] audit: type=1400 audit(1791058368.283:880): avc: denied { read } for pid=10837 comm="syz.7.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.674455][ T43] audit: type=1400 audit(1791058368.533:881): avc: denied { ioctl } for pid=10857 comm="syz.7.1167" path="socket:[41635]" dev="sockfs" ino=41635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.721194][ T25] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 163.743814][ T25] usb 6-1: Invalid ep0 maxpacket: 64 [ 163.751033][ T5826] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 163.771970][ T5826] usb 11-1: device descriptor read/8, error -71 [ 163.881133][ T25] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 163.901117][ T66] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 163.901155][ T66] Bluetooth: hci2: Injecting HCI hardware error event [ 163.902234][ T66] Bluetooth: hci2: hardware error 0x00 [ 163.902744][ T25] usb 6-1: Invalid ep0 maxpacket: 64 [ 163.902937][ T25] usb usb6-port1: unable to enumerate USB device [ 164.013717][ T5826] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 164.041762][ T5826] usb 11-1: device descriptor read/8, error -71 [ 164.141588][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 164.152970][ T5826] usb usb11-port1: unable to enumerate USB device [ 164.207838][T10876] fuse: fd is not a fuse device [ 164.217929][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.217958][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.217971][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.218081][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.218095][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.218107][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.218120][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.218132][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.218144][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.218156][ T852] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.230741][ T852] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.03 Device [syz1] on syz1 [ 164.272750][T10877] fido_id[10877]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.511209][ T1875] libceph: connect (1)[c::]:6789 error -101 [ 164.511612][ T1875] libceph: mon0 (1)[c::]:6789 connect error [ 164.773187][ T1875] libceph: connect (1)[c::]:6789 error -101 [ 164.773298][ T1875] libceph: mon0 (1)[c::]:6789 connect error [ 165.291348][ T1875] libceph: connect (1)[c::]:6789 error -101 [ 165.291454][ T1875] libceph: mon0 (1)[c::]:6789 connect error [ 165.331433][ T42] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 165.368919][T10890] ceph: No mds server is up or the cluster is laggy [ 165.513272][ T42] usb 10-1: unable to get BOS descriptor or descriptor too short [ 165.513312][ T42] usb 10-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 165.514323][ T42] usb 10-1: config 142 has an invalid interface number: 251 but max is 0 [ 165.514337][ T42] usb 10-1: config 142 has no interface number 0 [ 165.514356][ T42] usb 10-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 165.514370][ T42] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 165.514383][ T42] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 165.514402][ T42] usb 10-1: config 142 interface 251 has no altsetting 0 [ 165.517118][ T42] usb 10-1: string descriptor 0 read error: -22 [ 165.517177][ T42] usb 10-1: New USB device strings: Mfr=1, Product=224, SerialNumber=3 [ 165.521150][T10900] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 165.521201][T10900] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 165.555708][ T42] cypress_m8 10-1:142.251: HID->COM RS232 Adapter converter detected [ 165.563267][ T42] usb 10-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 165.621030][ T1040] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 165.626266][T10907] tipc: Started in network mode [ 165.626285][T10907] tipc: Node identity 7, cluster identity 4369 [ 165.626295][T10907] tipc: Node number set to 7 [ 165.695050][T10910] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1181'. [ 165.695074][T10910] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1181'. [ 165.729606][ T42] usb 10-1: USB disconnect, device number 3 [ 165.733762][ T42] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 165.742556][ T42] cypress_m8 10-1:142.251: device disconnected [ 165.770568][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.772888][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.891538][T10910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.899272][T10910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.981114][ T66] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 166.052170][T10910] tipc: Resetting bearer [ 166.077244][T10917] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1181'. [ 166.077275][T10917] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1181'. [ 166.081459][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.081510][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.081539][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.081567][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.157098][T10930] random: crng reseeded on system resumption [ 166.179178][ T5737] Bluetooth: hci3: sending frame failed (-49) [ 166.180683][ T66] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 166.284276][T10936] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1185'. [ 166.285410][T10936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.376183][T10943] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1188'. [ 166.379578][T10945] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.379659][T10945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.379670][T10945] IPv6: NLM_F_CREATE should be set when creating new route [ 166.379703][T10945] IPv6: NLM_F_CREATE should be set when creating new route [ 166.379725][T10945] IPv6: NLM_F_CREATE should be set when creating new route [ 166.380420][T10945] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1187'. [ 166.415806][T10943] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 166.496127][T10956] SELinux: failed to load policy [ 166.531720][T10960] netlink: 'syz.1.1193': attribute type 4 has an invalid length. [ 166.535430][T10961] netlink: 'syz.1.1193': attribute type 3 has an invalid length. [ 166.535449][T10961] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 166.582382][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 166.705325][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1200'. [ 166.707228][T10975] sg_write: data in/out 808464396/213 bytes for SCSI command 0x30-- guessing data in; [ 166.707228][T10975] program syz.1.1197 not setting count and/or reply_len properly [ 166.891356][ T66] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 166.891380][ T66] Bluetooth: hci1: Malformed LE Event: 0x0d [ 166.919691][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1205'. [ 166.920432][ T43] audit: type=1400 audit(1791058371.773:882): avc: denied { ioctl } for pid=10991 comm="syz.6.1205" path="socket:[43513]" dev="sockfs" ino=43513 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.926879][T10992] netlink: zone id is out of range [ 166.926903][T10992] netlink: zone id is out of range [ 166.926913][T10992] netlink: zone id is out of range [ 166.935001][ T43] audit: type=1400 audit(1791058371.783:883): avc: denied { write } for pid=10991 comm="syz.6.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.947393][ T1040] libceph: connect (1)0.0.0.0:6789 error -22 [ 166.947729][ T1040] libceph: mon0 (1)0.0.0.0:6789 connect error [ 166.971446][ T9] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 167.121044][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 167.211471][ T1040] libceph: connect (1)0.0.0.0:6789 error -22 [ 167.211572][ T1040] libceph: mon0 (1)0.0.0.0:6789 connect error [ 167.261224][ T9] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 167.273361][ T852] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 167.411087][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 167.411520][ T9] usb usb10-port1: attempt power cycle [ 167.423475][ T852] usb 6-1: New USB device found, idVendor=2040, idProduct=d8ff, bcdDevice=a7.aa [ 167.424451][ T852] usb 6-1: config 10 has an invalid interface number: 245 but max is 0 [ 167.424474][ T852] usb 6-1: config 10 has no interface number 0 [ 167.424510][ T852] usb 6-1: config 10 interface 245 altsetting 251 endpoint 0x6 has an invalid bInterval 27, changing to 8 [ 167.424536][ T852] usb 6-1: config 10 interface 245 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 167.424557][ T852] usb 6-1: config 10 interface 245 altsetting 251 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 167.424581][ T852] usb 6-1: config 10 interface 245 altsetting 251 endpoint 0x87 has an invalid bInterval 98, changing to 7 [ 167.424603][ T852] usb 6-1: config 10 interface 245 altsetting 251 endpoint 0x87 has invalid maxpacket 50598, setting to 1024 [ 167.424628][ T852] usb 6-1: config 10 interface 245 altsetting 251 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 167.424651][ T852] usb 6-1: config 10 interface 245 altsetting 251 bulk endpoint 0xC has invalid maxpacket 32 [ 167.424673][ T852] usb 6-1: config 10 interface 245 altsetting 251 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 167.424695][ T852] usb 6-1: config 10 interface 245 has no altsetting 0 [ 167.426825][ T852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.426854][ T852] usb 6-1: Product: à° [ 167.426868][ T852] usb 6-1: Manufacturer: 銌ꥴ笈뤎佖ꎿㄬꛂ⤦íŸá»™ì´©î‡žêŸ½é›‚䑾䂆钓찃㛇ఔ驽䩱誈î«ã„¬é©†åŒä«”瓃Ｓ媂꒔ç¸ãƒ“魿겿ê¤è¥·î¿£ã “ä•ç‰•å¯›ä¦‰æ°€â›µê‚™â²‚퇉㮎洚㣦箚袸볖晴養ꉔ諬谦ꦚ岚蠕㈯｛ᳱ芸쮷ᭀé¿â¡¹ï†ˆã¹¨çž¶è’—ìºãƒ–ì¡â¸“虆æ¢ã¿Žì¶™ãŠ¹ä†¡ï’’䊅㒽ﲬ硚኿䒮 [ 167.426902][ T852] usb 6-1: SerialNumber: í„°îŸê†¾ã¸¾å¤™ï‡¨æµ«æ­„ã…㉺éãî¡ä»¬ë¢ ï†©ã­ªïœ¹ë·†â°¼å¸‡î¾·ç“³é†¶è…¢â”µãŒêž²ä¤­ì«¹æ»£ç¨°æ‰—氠箷塩奂撵종ƌ깶桳舾屚ࣴᙙ詽駉瓳ᑭḠ඿ᆦ悇䇨겛ï•ã¹¤â‰¢ëŒ²ä”Ÿä¹±á¯â•…᪴톞ᗚ㳣‌༬ᵞמּﻱ롩俸긗廄Ѻ㬀覽éŸç…„駟ਧ钌炬ᕣ路⫕Ԝ늅霘é æ¾–쳛깘ꬲ䷄⸑뺜壾᥵胷芜단襞開謬餵掇棦䷂ꉑ蘟鼿閆㥠[ 167.434471][T11002] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 167.605220][T11006] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.605853][T11007] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.614166][T11009] loop5: detected capacity change from 0 to 7 [ 167.618395][T11009] Dev loop5: unable to read RDB block 7 [ 167.618429][T11009] loop5: unable to read partition table [ 167.618621][T11009] loop5: partition table beyond EOD, truncated [ 167.618657][T11009] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 167.735473][ T1040] libceph: connect (1)0.0.0.0:6789 error -22 [ 167.735647][ T1040] libceph: mon0 (1)0.0.0.0:6789 connect error [ 167.771280][ T9] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 167.791805][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 167.879851][T11015] xt_CT: No such helper "pptp" [ 167.927105][T11015] xt_CT: No such helper "pptp" [ 167.941119][ T9] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 167.955792][T11015] xt_CT: No such helper "pptp" [ 167.963799][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 167.964035][ T9] usb usb10-port1: unable to enumerate USB device [ 167.986228][T11015] xt_CT: No such helper "pptp" [ 168.024219][T11015] xt_CT: No such helper "pptp" [ 168.063979][T11015] xt_CT: No such helper "pptp" [ 168.101078][T11015] xt_CT: No such helper "pptp" [ 168.139179][T11015] xt_CT: No such helper "pptp" [ 168.177390][T11015] xt_CT: No such helper "pptp" [ 168.216878][T11015] xt_CT: No such helper "pptp" [ 168.624008][ T7328] rpcbind: server 127.0.0.1 not responding, timed out [ 168.781282][ T1040] libceph: connect (1)0.0.0.0:6789 error -22 [ 168.781422][ T1040] libceph: mon0 (1)0.0.0.0:6789 connect error [ 169.151124][ T25] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 169.304139][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.304860][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.368795][ T25] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 169.369777][ T25] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 169.369868][ T25] usb 11-1: can't read configurations, error -71 [ 169.532211][T11058] IPVS: set_ctl: invalid protocol: 103 172.30.0.8:21 [ 169.753905][ T43] audit: type=1400 audit(1791058374.613:884): avc: denied { ioctl } for pid=11067 comm="syz.5.1220" path="/dev/uhid" dev="devtmpfs" ino=1293 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 169.811441][ T43] audit: type=1400 audit(1791058374.673:885): avc: denied { append } for pid=11075 comm="syz.5.1221" name="uprobe_events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 169.832458][ T1040] libceph: connect (1)0.0.0.0:6789 error -22 [ 169.832599][ T1040] libceph: mon0 (1)0.0.0.0:6789 connect error [ 169.849539][T11076] event trace: Could not enable event p [ 169.876773][ T43] audit: type=1400 audit(1791058374.733:886): avc: denied { write } for pid=11077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.892663][T10995] ceph: No mds server is up or the cluster is laggy [ 169.944650][ T43] audit: type=1400 audit(1791058374.803:887): avc: denied { write } for pid=11083 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.025689][ T852] usb 6-1: USB disconnect, device number 13 [ 170.050037][T11074] bridge1: entered promiscuous mode [ 170.084969][ T43] audit: type=1400 audit(1791058374.943:888): avc: denied { ioctl } for pid=11090 comm="syz.6.1225" path="socket:[44406]" dev="sockfs" ino=44406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.161289][T11097] netlink: 'syz.6.1228': attribute type 1 has an invalid length. [ 170.174043][T11099] raw_sendmsg: syz.5.1227 forgot to set AF_INET. Fix it! [ 170.221047][ T43] audit: type=1400 audit(1791058375.073:889): avc: denied { map } for pid=11103 comm="syz.5.1230" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.259230][ T43] audit: type=1400 audit(1791058375.113:890): avc: denied { write } for pid=11100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.328306][ T43] audit: type=1400 audit(1791058375.183:891): avc: denied { write } for pid=11110 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.699021][T11140] ±ÿ)”ëfl: renamed from lo (while UP) [ 170.711532][T11147] __nla_validate_parse: 7 callbacks suppressed [ 170.711551][T11147] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1238'. [ 170.711572][T11147] netlink: 'syz.5.1238': attribute type 1 has an invalid length. [ 170.714303][T11149] random: crng reseeded on system resumption [ 170.762721][T11154] ip_tables: iptables: counters copy to user failed while replacing table [ 170.785808][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1241'. [ 170.820687][T11162] netlink: 'syz.6.1242': attribute type 2 has an invalid length. [ 170.820704][T11162] netlink: 'syz.6.1242': attribute type 2 has an invalid length. [ 171.046500][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1249'. [ 171.300824][T11243] fuse: fd is not a fuse device [ 171.376000][T11248] x_tables: duplicate underflow at hook 3 [ 171.447534][T11258] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 171.458084][T11258] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 171.506367][T11264] ip_tables: iptables: counters copy to user failed while replacing table [ 171.692059][T11273] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 171.703426][T11273] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1265'. [ 171.791787][ T30] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 171.931150][ T30] usb 10-1: device descriptor read/64, error -71 [ 171.958547][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 171.958561][ T43] audit: type=1400 audit(1791058376.813:897): avc: denied { execute } for pid=11278 comm="syz.6.1269" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.006967][ T43] audit: type=1400 audit(1791058376.863:898): avc: denied { ioctl } for pid=11282 comm="syz.7.1267" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 172.024840][T11281] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1270'. [ 172.076275][T11286] i2c i2c-0: delete_device: Extra parameters [ 172.101514][ T43] audit: type=1400 audit(1791058376.963:899): avc: denied { create } for pid=11288 comm="syz.6.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 172.105015][ T43] audit: type=1400 audit(1791058376.963:900): avc: denied { write } for pid=11288 comm="syz.6.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 172.181559][ T30] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 172.223613][T11303] xt_hashlimit: size too large, truncated to 1048576 [ 172.313294][ T30] usb 10-1: device descriptor read/64, error -71 [ 172.409646][T11317] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1274'. [ 172.421441][ T30] usb usb10-port1: attempt power cycle [ 172.442118][T11324] FAULT_INJECTION: forcing a failure. [ 172.442118][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 172.442153][T11324] CPU: 2 UID: 0 PID: 11324 Comm: syz.7.1275 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.442181][T11324] Tainted: [L]=SOFTLOCKUP [ 172.442188][T11324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.442199][T11324] Call Trace: [ 172.442207][T11324] [ 172.442214][T11324] dump_stack_lvl+0x100/0x190 [ 172.442247][T11324] should_fail_ex.cold+0x5/0xa [ 172.442276][T11324] should_failslab+0xc2/0x120 [ 172.442300][T11324] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 172.442325][T11324] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 172.442353][T11324] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 172.442377][T11324] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 172.442403][T11324] alloc_inode+0x68/0x250 [ 172.442430][T11324] new_inode+0x22/0x1c0 [ 172.442455][T11324] hugetlbfs_get_inode+0x39a/0x700 [ 172.442483][T11324] ? do_raw_spin_lock+0x128/0x260 [ 172.442515][T11324] hugetlb_file_setup+0x15b/0x5b0 [ 172.442545][T11324] memfd_alloc_file+0xc2/0x610 [ 172.442575][T11324] ? _raw_spin_unlock+0x28/0x50 [ 172.442606][T11324] ? __pfx_memfd_alloc_file+0x10/0x10 [ 172.442643][T11324] __do_sys_memfd_create+0x236/0x3d0 [ 172.442675][T11324] do_syscall_64+0x123/0x790 [ 172.442701][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.442721][T11324] RIP: 0033:0x7f7beb59e159 [ 172.442739][T11324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.442756][T11324] RSP: 002b:00007f7be97f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 172.442778][T11324] RAX: ffffffffffffffda RBX: 00007f7beb825fa0 RCX: 00007f7beb59e159 [ 172.442799][T11324] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000280 [ 172.442833][T11324] RBP: 00007f7beb63506b R08: 0000000000000000 R09: 0000000000000000 [ 172.442847][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.442860][T11324] R13: 00007f7beb826038 R14: 00007f7beb825fa0 R15: 00007fff2ad01508 [ 172.442892][T11324] [ 172.478237][T11326] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1276'. [ 172.478260][T11326] nbd: must specify at least one socket [ 172.480003][ T43] audit: type=1400 audit(1791058377.333:901): avc: denied { listen } for pid=11325 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.559765][T11335] netlink: 'syz.1.1278': attribute type 15 has an invalid length. [ 172.667192][ T25] libceph: connect (2)0.0.0.0:6789 error -22 [ 172.667372][ T25] libceph: ceph_tcp_connect failed: -22 [ 172.667387][ T25] libceph: mon0 (2)0.0.0.0:6789 connect error [ 172.672189][ T25] libceph: connect (2)0.0.0.0:6789 error -22 [ 172.672345][ T25] libceph: ceph_tcp_connect failed: -22 [ 172.672359][ T25] libceph: mon0 (2)0.0.0.0:6789 connect error [ 172.703161][T11339] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 172.761074][ T30] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 172.786883][ T30] usb 10-1: device descriptor read/8, error -71 [ 172.855110][T11361] tipc: Enabling of bearer rejected, failed to enable media [ 172.859488][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1282'. [ 172.944879][ T25] libceph: connect (2)0.0.0.0:6789 error -22 [ 172.945017][ T25] libceph: ceph_tcp_connect failed: -22 [ 172.945031][ T25] libceph: mon0 (2)0.0.0.0:6789 connect error [ 172.997930][T11368] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 173.021961][ T30] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 173.037848][ T43] audit: type=1400 audit(1791058377.893:902): avc: denied { ioctl } for pid=11369 comm="syz.7.1285" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 173.043075][ T30] usb 10-1: device descriptor read/8, error -71 [ 173.091846][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1286'. [ 173.152411][ T30] usb usb10-port1: unable to enumerate USB device [ 173.163497][ T5737] Bluetooth: hci3: sending frame failed (-49) [ 173.165506][ T66] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 173.274289][ T43] audit: type=1400 audit(1791058378.133:903): avc: denied { read } for pid=11378 comm="syz.6.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.410855][ T43] audit: type=1400 audit(1791058378.263:904): avc: denied { ioctl } for pid=11383 comm="syz.6.1291" path="ipc:[4026532873]" dev="nsfs" ino=4026532873 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.453344][ T25] libceph: connect (2)0.0.0.0:6789 error -22 [ 173.453437][ T25] libceph: ceph_tcp_connect failed: -22 [ 173.453446][ T25] libceph: mon0 (2)0.0.0.0:6789 connect error [ 173.512754][T11396] overlayfs: failed to resolve './file0': -2 [ 173.518826][ T43] audit: type=1400 audit(1791058378.373:905): avc: denied { setopt } for pid=11391 comm="syz.7.1295" lport=46285 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 173.518977][ T43] audit: type=1400 audit(1791058378.373:906): avc: denied { getopt } for pid=11391 comm="syz.7.1295" lport=46285 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 173.747299][T11410] sctp: [Deprecated]: syz.6.1297 (pid 11410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.747299][T11410] Use struct sctp_sack_info instead [ 173.756733][T11335] ceph: No mds server is up or the cluster is laggy [ 174.666064][T11431] binder: 11427:11431 ioctl c0306201 200000000640 returned -22 [ 174.682288][T11433] syzkaller0: entered promiscuous mode [ 174.682311][T11433] syzkaller0: entered allmulticast mode [ 174.836213][T11445] bond1: (slave bond_slave_0): Device is not our slave [ 174.836234][T11445] bond1: option active_slave: invalid value (bond_slave_0) [ 174.840126][T11445] bond1 (unregistering): Released all slaves [ 174.947309][T11456] netlink: 'syz.1.1311': attribute type 10 has an invalid length. [ 174.947323][T11456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1311'. [ 174.947502][T11456] dummy0: entered promiscuous mode [ 174.952212][T11456] bridge0: port 3(dummy0) entered blocking state [ 174.952307][T11456] bridge0: port 3(dummy0) entered disabled state [ 174.952494][T11456] dummy0: entered allmulticast mode [ 174.955479][T11456] bridge0: port 3(dummy0) entered blocking state [ 174.955557][T11456] bridge0: port 3(dummy0) entered forwarding state [ 175.371056][ T1875] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 175.501079][ T1875] usb 12-1: device descriptor read/64, error -71 [ 175.666080][T11477] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 175.675754][T11480] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 175.751077][ T1875] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 175.770123][T11484] bond0: Error: Cannot enslave bond to itself. [ 175.901175][ T1875] usb 12-1: device descriptor read/64, error -71 [ 176.021483][ T1875] usb usb12-port1: attempt power cycle [ 176.065010][T11498] warn_alloc: 4 callbacks suppressed [ 176.065032][T11498] syz.6.1322: vmalloc error: size 3728293888, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 176.065113][T11498] CPU: 2 UID: 0 PID: 11498 Comm: syz.6.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.065145][T11498] Tainted: [L]=SOFTLOCKUP [ 176.065153][T11498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.065164][T11498] Call Trace: [ 176.065173][T11498] [ 176.065179][T11498] dump_stack_lvl+0x100/0x190 [ 176.065213][T11498] warn_alloc.cold+0x9e/0xb2 [ 176.065236][T11498] ? __pfx_warn_alloc+0x10/0x10 [ 176.065256][T11498] ? kasan_save_stack+0x3f/0x50 [ 176.065281][T11498] ? kasan_save_track+0x14/0x30 [ 176.065304][T11498] ? vb2_vmalloc_alloc+0xf9/0x410 [ 176.065324][T11498] ? __vb2_queue_alloc+0x8d5/0x1160 [ 176.065343][T11498] ? __video_do_ioctl+0xb2a/0xdf0 [ 176.065369][T11498] ? video_usercopy+0x47a/0x1730 [ 176.065386][T11498] ? v4l2_ioctl+0x1bd/0x250 [ 176.065401][T11498] ? __x64_sys_ioctl+0x18e/0x210 [ 176.065423][T11498] ? do_syscall_64+0x123/0x790 [ 176.065442][T11498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.065471][T11498] __vmalloc_node_range_noprof+0x123b/0x1420 [ 176.065508][T11498] ? vb2_vmalloc_alloc+0x135/0x410 [ 176.065539][T11498] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.065572][T11498] ? __kasan_kmalloc+0xaa/0xb0 [ 176.065599][T11498] ? vb2_vmalloc_alloc+0x135/0x410 [ 176.065623][T11498] vmalloc_user_noprof+0x9e/0xe0 [ 176.065650][T11498] ? vb2_vmalloc_alloc+0x135/0x410 [ 176.065675][T11498] vb2_vmalloc_alloc+0x135/0x410 [ 176.065699][T11498] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 176.065723][T11498] __vb2_queue_alloc+0x8d5/0x1160 [ 176.065769][T11498] vb2_core_create_bufs+0x5fa/0xa30 [ 176.065799][T11498] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 176.065830][T11498] ? __mutex_lock+0x26c/0x1bd0 [ 176.065854][T11498] vb2_create_bufs+0x40c/0x830 [ 176.065880][T11498] ? __pfx_vb2_create_bufs+0x10/0x10 [ 176.065902][T11498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.065926][T11498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.065954][T11498] v4l_create_bufs+0x17d/0x270 [ 176.065982][T11498] __video_do_ioctl+0xb2a/0xdf0 [ 176.066012][T11498] ? __might_fault+0xc5/0x140 [ 176.066030][T11498] ? __pfx___video_do_ioctl+0x10/0x10 [ 176.066068][T11498] video_usercopy+0x47a/0x1730 [ 176.066084][T11498] ? __pfx___video_do_ioctl+0x10/0x10 [ 176.066114][T11498] ? __pfx_video_usercopy+0x10/0x10 [ 176.066147][T11498] v4l2_ioctl+0x1bd/0x250 [ 176.066166][T11498] ? __pfx_v4l2_ioctl+0x10/0x10 [ 176.066185][T11498] __x64_sys_ioctl+0x18e/0x210 [ 176.066209][T11498] do_syscall_64+0x123/0x790 [ 176.066232][T11498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.066250][T11498] RIP: 0033:0x7f7bc9f9e159 [ 176.066267][T11498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.066285][T11498] RSP: 002b:00007f7bcadc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.066305][T11498] RAX: ffffffffffffffda RBX: 00007f7bca226180 RCX: 00007f7bc9f9e159 [ 176.066317][T11498] RDX: 0000200000000540 RSI: 00000000c100565c RDI: 0000000000000003 [ 176.066331][T11498] RBP: 00007f7bca03506b R08: 0000000000000000 R09: 0000000000000000 [ 176.066342][T11498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.066352][T11498] R13: 00007f7bca226218 R14: 00007f7bca226180 R15: 00007ffe6df720d8 [ 176.066375][T11498] [ 176.066383][T11498] Mem-Info: [ 176.066395][T11498] active_anon:18188 inactive_anon:2 isolated_anon:0 [ 176.066395][T11498] active_file:1287 inactive_file:36005 isolated_file:0 [ 176.066395][T11498] unevictable:1000 dirty:460 writeback:0 [ 176.066395][T11498] slab_reclaimable:8295 slab_unreclaimable:74098 [ 176.066395][T11498] mapped:25598 shmem:4961 pagetables:4122 [ 176.066395][T11498] sec_pagetables:300 bounce:0 [ 176.066395][T11498] kernel_misc_reclaimable:0 [ 176.066395][T11498] free:437083 free_pcp:14342 free_cma:0 [ 176.066443][T11498] Node 0 active_anon:72720kB inactive_anon:8kB active_file:5148kB inactive_file:137416kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:77368kB dirty:1604kB writeback:0kB shmem:17844kB shmem_thp:10240kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16832kB pagetables:7720kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 176.066493][T11498] Node 1 active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:6604kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:25024kB dirty:236kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:8768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 176.066539][T11498] Node 0 DMA free:6992kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:164kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.066588][T11498] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 176.066621][T11498] Node 0 DMA32 free:177292kB boost:0kB min:27764kB low:34704kB high:41644kB reserved_highatomic:0kB free_highatomic:0kB active_anon:72720kB inactive_anon:8kB active_file:5148kB inactive_file:137252kB unevictable:2000kB writepending:1604kB zspages:0kB present:2080628kB managed:1253116kB mlocked:0kB bounce:0kB free_pcp:44828kB local_pcp:9400kB free_cma:0kB [ 176.066671][T11498] lowmem_reserve[]: 0 0 0 0 0 [ 176.066704][T11498] Node 1 Normal free:1564048kB boost:0kB min:39476kB low:49344kB high:59212kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:6604kB unevictable:2000kB writepending:236kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:12540kB local_pcp:244kB free_cma:0kB [ 176.066763][T11498] lowmem_reserve[]: 0 0 0 0 0 [ 176.066801][T11498] Node 0 DMA: 12*4kB (UM) 16*8kB (UME) 16*16kB (UME) 11*32kB (UME) 7*64kB (UME) 5*128kB (UME) 2*256kB (UE) 3*512kB (UME) 1*1024kB (E) 1*2048kB (U) 0*4096kB = 6992kB [ 176.066985][T11498] Node 0 DMA32: 388*4kB (UME) 297*8kB (UME) 123*16kB (UM) 343*32kB (UME) 296*64kB (UME) 196*128kB (UME) 138*256kB (UME) 108*512kB (UM) 25*1024kB (UM) 0*2048kB 0*4096kB = 177128kB [ 176.067120][T11498] Node 1 Normal: 344*4kB (UME) 474*8kB (UME) 436*16kB (UME) 439*32kB (UME) 371*64kB (UME) 311*128kB (UME) 255*256kB (UME) 208*512kB (UM) 164*1024kB (UME) 18*2048kB (UM) 268*4096kB (UM) = 1564048kB [ 176.067267][T11498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.067283][T11498] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.067299][T11498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.067314][T11498] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.067328][T11498] 42249 total pagecache pages [ 176.067334][T11498] 0 pages in swap cache [ 176.067341][T11498] Free swap = 124996kB [ 176.067348][T11498] Total swap = 124996kB [ 176.067355][T11498] 1048443 pages RAM [ 176.067361][T11498] 0 pages HighMem/MovableOnly [ 176.067369][T11498] 285854 pages reserved [ 176.067375][T11498] 0 pages cma reserved [ 176.421086][ T1875] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 176.441719][ T1875] usb 12-1: device descriptor read/8, error -71 [ 176.701302][ T1875] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 176.735000][ T1875] usb 12-1: device descriptor read/8, error -71 [ 176.779666][ T7207] Process accounting resumed [ 176.846378][T11519] Process accounting resumed [ 176.851291][ T1875] usb usb12-port1: unable to enumerate USB device [ 176.974235][T11533] __nla_validate_parse: 1 callbacks suppressed [ 176.974256][T11533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'. [ 177.115650][T11542] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 177.121248][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 177.121267][ T43] audit: type=1400 audit(1791058381.983:910): avc: denied { write } for pid=11539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.168725][ T43] audit: type=1400 audit(1791058382.023:911): avc: denied { write } for pid=11544 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.250344][ T43] audit: type=1400 audit(1791058382.103:912): avc: denied { write } for pid=11554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.338700][ T43] audit: type=1400 audit(1791058382.193:913): avc: denied { write } for pid=11566 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.399298][T11572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.427246][ T43] audit: type=1400 audit(1791058382.283:914): avc: denied { write } for pid=11570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.441333][T11580] random: crng reseeded on system resumption [ 177.485083][ T43] audit: type=1400 audit(1791058382.333:915): avc: denied { write } for pid=11581 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.681058][ T8637] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 177.831103][ T8637] usb 6-1: Using ep0 maxpacket: 32 [ 177.831918][ T8637] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 177.833049][ T8637] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.833077][ T8637] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.835799][ T8637] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 177.835826][ T8637] usb 6-1: Product: syz [ 177.835841][ T8637] usb 6-1: Manufacturer: syz [ 177.835855][ T8637] usb 6-1: SerialNumber: syz [ 177.845989][ T8637] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input24 [ 178.025800][T11586] overlayfs: invalid origin (0000) [ 178.055461][T11578] dummy0: left allmulticast mode [ 178.055800][T11578] bridge0: port 3(dummy0) entered disabled state [ 178.059365][T11578] bridge_slave_0: left allmulticast mode [ 178.059387][T11578] bridge_slave_0: left promiscuous mode [ 178.059561][T11578] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.062081][T11578] bridge_slave_1: left allmulticast mode [ 178.062101][T11578] bridge_slave_1: left promiscuous mode [ 178.062250][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.079498][T11578] bond0: (slave bond_slave_0): Releasing backup interface [ 178.093682][T11578] team0: Port device team_slave_0 removed [ 178.098126][T11578] team0: Port device team_slave_1 removed [ 178.098464][T11578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.101481][T11578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.104491][T11578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.123950][T11578] team0: Port device xfrm0 added [ 178.128268][T11578] tipc: Enabled bearer , priority 0 [ 178.130101][ T1875] usb 6-1: USB disconnect, device number 14 [ 178.168104][ T1875] appletouch 6-1:1.0: input: appletouch disconnected [ 178.193830][ T43] audit: type=1400 audit(1791058383.053:916): avc: denied { mounton } for pid=11596 comm="syz.5.1352" path="/syzcgroup/unified/syz5" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 178.224179][T11598] XFS (nbd5): SB validate failed with error -5. [ 178.356070][T11604] e1000e 0000:00:02.0 eth1: removed PHC [ 178.403675][ T43] audit: type=1400 audit(1791058383.263:917): avc: denied { write } for pid=11609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.463196][ T43] audit: type=1400 audit(1791058383.323:918): avc: denied { write } for pid=11612 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.489899][T11604] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 178.619043][ T43] audit: type=1400 audit(1791058383.473:919): avc: denied { write } for pid=11614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.914662][T11642] use of bytesused == 0 is deprecated and will be removed in the future, [ 178.914678][T11642] use the actual size instead. [ 179.302639][T11688] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986226542.12390.0), cmd(11) [ 179.444892][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1368'. [ 179.502388][ T66] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 179.695902][T11718] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1371'. [ 179.908721][T11744] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.910060][T11744] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 179.910075][T11744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.910841][T11744] vhci_hcd vhci_hcd.0: Device attached [ 179.968584][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1378'. [ 179.985446][T11749] random: crng reseeded on system resumption [ 179.999572][ T66] Bluetooth: hci4: SCO packet too small [ 180.003604][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1380'. [ 180.161047][ T5819] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 180.176123][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1382'. [ 180.365693][T11764] tipc: Enabling of bearer rejected, failed to enable media [ 180.509023][T11769] FAULT_INJECTION: forcing a failure. [ 180.509023][T11769] name failslab, interval 1, probability 0, space 0, times 0 [ 180.509045][T11769] CPU: 3 UID: 0 PID: 11769 Comm: syz.1.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.509066][T11769] Tainted: [L]=SOFTLOCKUP [ 180.509070][T11769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.509077][T11769] Call Trace: [ 180.509083][T11769] [ 180.509089][T11769] dump_stack_lvl+0x100/0x190 [ 180.509134][T11769] should_fail_ex.cold+0x5/0xa [ 180.509154][T11769] should_failslab+0xc2/0x120 [ 180.509175][T11769] __kvmalloc_node_noprof+0x113/0x9b0 [ 180.509190][T11769] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 180.509202][T11769] ? io_uring_setup.cold+0x1f4/0x1cde [ 180.509216][T11769] io_uring_setup.cold+0x1f4/0x1cde [ 180.509229][T11769] ? lock_acquire+0x1d1/0x380 [ 180.509242][T11769] ? avc_has_perm_noaudit+0x56/0x470 [ 180.509260][T11769] ? __pfx_io_uring_setup+0x10/0x10 [ 180.509276][T11769] ? find_held_lock+0x2b/0x80 [ 180.509292][T11769] ? avc_has_perm_noaudit+0x11e/0x470 [ 180.509310][T11769] ? avc_has_perm_noaudit+0x11e/0x470 [ 180.509336][T11769] ? __pfx___x64_sys_futex+0x10/0x10 [ 180.509358][T11769] __x64_sys_io_uring_setup+0xc2/0x170 [ 180.509374][T11769] do_syscall_64+0x123/0x790 [ 180.509391][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.509416][T11769] RIP: 0033:0x7fab9ef9e159 [ 180.509427][T11769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.509438][T11769] RSP: 002b:00007fab9d1f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 180.509449][T11769] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fab9ef9e159 [ 180.509457][T11769] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000030 [ 180.509464][T11769] RBP: 00007fab9f03506b R08: 0000000000000000 R09: 0000000000000000 [ 180.509471][T11769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 180.509478][T11769] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd8fdabcc8 [ 180.509492][T11769] [ 180.593307][T11776] zonefs (loop1) ERROR: Not a zoned block device [ 180.739657][T11745] vhci_hcd: connection reset by peer [ 180.742198][ T12] vhci_hcd vhci_hcd.6: stop threads [ 180.742221][ T12] vhci_hcd vhci_hcd.6: release socket [ 180.745496][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 181.464685][T11808] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 181.464685][T11808] The task syz.7.1395 (11808) triggered the difference, watch for misbehavior. [ 182.141105][ T66] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 182.141118][ T5737] Bluetooth: hci3: command 0x1003 tx timeout [ 182.217943][T11828] sg_read: process 579 (syz.5.1401) changed security contexts after opening file descriptor, this is not allowed. [ 182.274534][T11833] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 182.545443][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 182.545464][ T43] audit: type=1400 audit(1791058387.403:935): avc: denied { shutdown } for pid=11850 comm="syz.1.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.617653][ T43] audit: type=1807 audit(1791058387.473:936): action=measure res=1 [ 182.618337][T11852] ima: policy update completed [ 182.618453][ T43] audit: type=1802 audit(1791058387.473:937): pid=11852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.5.1408" res=1 errno=0 [ 182.738933][T11858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=11858 comm=syz.5.1410 [ 182.749258][T11859] netlink: 'syz.5.1410': attribute type 10 has an invalid length. [ 182.764732][T11859] veth0_to_bond: entered promiscuous mode [ 182.765140][T11859] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 182.873731][ T43] audit: type=1800 audit(1791058387.733:938): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5100 res=0 errno=0 [ 182.885270][T11868] CIFS: Attempting to mount //127.0.0.1/share [ 182.927752][T11875] futex_wake_op: syz.6.1415 tries to shift op by 144; fix this program [ 182.927899][T11875] futex_wake_op: syz.6.1415 tries to shift op by 144; fix this program [ 182.942126][T11876] size and base must be multiples of 4 kiB [ 182.942140][T11876] CPU: 1 UID: 0 PID: 11876 Comm: syz.5.1413 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.942156][T11876] Tainted: [L]=SOFTLOCKUP [ 182.942160][T11876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.942167][T11876] Call Trace: [ 182.942171][T11876] [ 182.942176][T11876] dump_stack_lvl+0x100/0x190 [ 182.942208][T11876] mtrr_add.cold+0x74/0x87 [ 182.942221][T11876] mtrr_ioctl+0x25a/0xcf0 [ 182.942234][T11876] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 182.942255][T11876] ? __pfx_mtrr_ioctl+0x10/0x10 [ 182.942266][T11876] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 182.942284][T11876] ? __fget_files+0x34/0x3d0 [ 182.942306][T11876] ? __pfx_mtrr_ioctl+0x10/0x10 [ 182.942317][T11876] proc_reg_unlocked_ioctl+0x229/0x320 [ 182.942329][T11876] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 182.942343][T11876] __x64_sys_ioctl+0x18e/0x210 [ 182.942357][T11876] do_syscall_64+0x123/0x790 [ 182.942374][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.942386][T11876] RIP: 0033:0x7f256a99e159 [ 182.942395][T11876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.942409][T11876] RSP: 002b:00007f2568bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.942421][T11876] RAX: ffffffffffffffda RBX: 00007f256ac26090 RCX: 00007f256a99e159 [ 182.942429][T11876] RDX: 0000200000000240 RSI: 0000000040104d01 RDI: 0000000000000008 [ 182.942436][T11876] RBP: 00007f256aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 182.942444][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.942451][T11876] R13: 00007f256ac26128 R14: 00007f256ac26090 R15: 00007ffd1a4dc7e8 [ 182.942466][T11876] [ 183.408860][T11880] ip_tables: iptables: counters copy to user failed while replacing table [ 183.456580][T11884] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 183.456588][T11885] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 183.456601][T11884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.456605][T11885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.564195][T11891] netlink: 'syz.7.1421': attribute type 20 has an invalid length. [ 183.594943][T11894] random: crng reseeded on system resumption [ 183.618558][T11895] evm: overlay not supported [ 183.620750][T11897] overlay: filesystem on ./bus not supported as upperdir [ 183.721363][ T43] audit: type=1800 audit(1791058388.573:939): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218653 res=0 errno=0 [ 183.737890][ T43] audit: type=1800 audit(1791058388.603:940): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218664 res=0 errno=0 [ 183.772361][T11868] CIFS: VFS: cifs_mount failed w/return code = -112 [ 183.861803][T11913] netlink: 'syz.6.1426': attribute type 4 has an invalid length. [ 183.861854][T11913] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1426'. [ 183.881416][ T43] audit: type=1804 audit(1791058388.733:941): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1428" name="/newroot/sys/kernel/debug/fail_page_alloc/times" dev="debugfs" ino=6386 res=1 errno=0 [ 183.894006][ T43] audit: type=1804 audit(1791058388.753:942): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1428" name="/newroot/sys/kernel/debug/fail_page_alloc/times" dev="debugfs" ino=6386 res=1 errno=0 [ 184.040543][ T43] audit: type=1400 audit(1791058388.893:943): avc: denied { unmount } for pid=9710 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 184.139534][ T43] audit: type=1800 audit(1791058388.993:944): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1435" name=08 dev="sda1" ino=2039 res=0 errno=0 [ 184.391084][ T30] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 184.393303][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1437'. [ 184.521228][ T30] usb 10-1: device descriptor read/64, error -71 [ 184.761202][ T30] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 184.891028][ T30] usb 10-1: device descriptor read/64, error -71 [ 184.949765][T11949] netlink: 'syz.6.1438': attribute type 12 has an invalid length. [ 185.001340][ T30] usb usb10-port1: attempt power cycle [ 185.090289][T11954] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 185.117294][T11956] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 185.117311][T11956] ref_ctr increment failed for inode: 0x3d9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802cbc0000 [ 185.117802][T11956] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 185.117813][T11956] ref_ctr decrement failed for inode: 0x3d9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802cbc0000 [ 185.117839][T11956] uprobe: syz.6.1441:11956 failed to unregister, leaking uprobe [ 185.189043][T11959] syzkaller0: left promiscuous mode [ 185.189067][T11959] syzkaller0: left allmulticast mode [ 185.217129][T11959] fuse: fd is not a fuse device [ 185.251167][ T5819] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 185.341054][ T30] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 185.361723][ T30] usb 10-1: device descriptor read/8, error -71 [ 185.514988][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1446'. [ 185.553575][T11975] FAULT_INJECTION: forcing a failure. [ 185.553575][T11975] name fail_futex, interval 1, probability 0, space 0, times 0 [ 185.553623][T11975] CPU: 3 UID: 0 PID: 11975 Comm: syz.7.1447 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.553643][T11975] Tainted: [L]=SOFTLOCKUP [ 185.553649][T11975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.553657][T11975] Call Trace: [ 185.553667][T11975] [ 185.553674][T11975] dump_stack_lvl+0x100/0x190 [ 185.553708][T11975] should_fail_ex.cold+0x5/0xa [ 185.553729][T11975] get_futex_key+0x1d0/0x14f0 [ 185.553750][T11975] ? __pfx_get_futex_key+0x10/0x10 [ 185.553765][T11975] ? __mm_populate+0x33a/0x3a0 [ 185.553785][T11975] ? __mm_populate+0x33a/0x3a0 [ 185.553804][T11975] futex_wake+0xf4/0x5e0 [ 185.553819][T11975] ? __pfx_futex_wake+0x10/0x10 [ 185.553834][T11975] ? vm_mmap_pgoff+0x103/0x470 [ 185.553855][T11975] do_futex+0x2b2/0x440 [ 185.553872][T11975] ? __pfx_do_futex+0x10/0x10 [ 185.553890][T11975] ? fput+0x7c/0x100 [ 185.553909][T11975] __x64_sys_futex+0x34f/0x4d0 [ 185.553928][T11975] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 185.553946][T11975] ? __pfx___x64_sys_futex+0x10/0x10 [ 185.553968][T11975] do_syscall_64+0x123/0x790 [ 185.553988][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.554000][T11975] RIP: 0033:0x7f7beb59e159 [ 185.554010][T11975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.554021][T11975] RSP: 002b:00007f7be97f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.554041][T11975] RAX: ffffffffffffffda RBX: 00007f7beb825fa8 RCX: 00007f7beb59e159 [ 185.554050][T11975] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7beb825fac [ 185.554058][T11975] RBP: 00007f7beb825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 185.554065][T11975] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.554074][T11975] R13: 00007f7beb826038 R14: 00007fff2ad01420 R15: 00007fff2ad01508 [ 185.554092][T11975] [ 185.576194][T11977] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 185.601342][ T30] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 185.621771][ T30] usb 10-1: device descriptor read/8, error -71 [ 185.731150][ T30] usb usb10-port1: unable to enumerate USB device [ 185.741320][ T5737] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 186.018907][T12001] lo: entered promiscuous mode [ 186.026797][T12001] bond0: entered promiscuous mode [ 186.027380][T12001] dummy0: entered promiscuous mode [ 186.030589][T12001] eql: entered promiscuous mode [ 186.030790][T12001] ifb0: entered promiscuous mode [ 186.032033][T12001] ifb1: entered promiscuous mode [ 186.036203][T12001] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 186.040285][T12001] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 186.041860][T12001] hwsim0: entered promiscuous mode [ 186.042901][T12001] ieee802154 phy0 wpan0: entered promiscuous mode [ 186.043397][T12001] ieee802154 phy1 wpan1: entered promiscuous mode [ 186.043941][T12001] teql0: entered promiscuous mode [ 186.045512][T12001] tunl0: entered promiscuous mode [ 186.047264][T12001] gre0: entered promiscuous mode [ 186.070770][T12001] gretap0: entered promiscuous mode [ 186.070786][T12001] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.423728][T12029] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 186.571134][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1457'. [ 187.421208][ T5819] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 187.582005][ T5819] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.583079][ T5819] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.583108][ T5819] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.583129][ T5819] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 187.583164][ T5819] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.586976][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 187.586991][ T43] audit: type=1800 audit(1791058392.443:967): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219100 res=0 errno=0 [ 187.587254][ T5819] usb 12-1: config 0 descriptor?? [ 187.593510][ T43] audit: type=1800 audit(1791058392.453:968): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=219129 res=0 errno=0 [ 187.593554][ T43] audit: type=1800 audit(1791058392.453:969): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=219107 res=0 errno=0 [ 187.595544][ T43] audit: type=1800 audit(1791058392.453:970): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=219108 res=0 errno=0 [ 187.596708][ T43] audit: type=1800 audit(1791058392.453:971): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=219109 res=0 errno=0 [ 187.602574][ T43] audit: type=1800 audit(1791058392.463:972): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219149 res=0 errno=0 [ 187.930918][ T43] audit: type=1326 audit(1791058392.783:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.6.1466" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bc9f9e159 code=0x0 [ 187.983557][ T43] audit: type=1400 audit(1791058392.843:974): avc: denied { ioctl } for pid=12065 comm="syz.6.1466" path="socket:[51224]" dev="sockfs" ino=51224 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 187.998435][ T43] audit: type=1800 audit(1791058392.853:975): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219167 res=0 errno=0 [ 188.004893][ T5819] hid_parser_main: 62 callbacks suppressed [ 188.004915][ T5819] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 188.004938][ T5819] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 188.019341][ T43] audit: type=1800 audit(1791058392.873:976): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219189 res=0 errno=0 [ 188.077464][ T5819] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 188.314308][T12073] ./dev/sda1: Can't open blockdev [ 188.492703][T12076] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.492811][T12076] netlink: 'syz.5.1468': attribute type 1 has an invalid length. [ 188.651956][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1469'. [ 188.819680][T12083] FAULT_INJECTION: forcing a failure. [ 188.819680][T12083] name fail_futex, interval 1, probability 0, space 0, times 0 [ 188.819720][T12083] CPU: 2 UID: 0 PID: 12083 Comm: syz.6.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.819749][T12083] Tainted: [L]=SOFTLOCKUP [ 188.819757][T12083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.819769][T12083] Call Trace: [ 188.819777][T12083] [ 188.819786][T12083] dump_stack_lvl+0x100/0x190 [ 188.819833][T12083] should_fail_ex.cold+0x5/0xa [ 188.819861][T12083] get_futex_key+0x1d0/0x14f0 [ 188.819892][T12083] ? __pfx_get_futex_key+0x10/0x10 [ 188.819928][T12083] futex_wake+0xf4/0x5e0 [ 188.819968][T12083] ? __pfx_futex_wake+0x10/0x10 [ 188.819987][T12083] ? kasan_quarantine_put+0x104/0x240 [ 188.820023][T12083] ? putname+0xb1/0x110 [ 188.820051][T12083] ? kmem_cache_free+0x127/0x6c0 [ 188.820076][T12083] do_futex+0x2b2/0x440 [ 188.820101][T12083] ? __pfx_do_futex+0x10/0x10 [ 188.820126][T12083] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.820160][T12083] __x64_sys_futex+0x34f/0x4d0 [ 188.820187][T12083] ? __x64_sys_openat+0x12d/0x210 [ 188.820226][T12083] ? __pfx___x64_sys_futex+0x10/0x10 [ 188.820264][T12083] do_syscall_64+0x123/0x790 [ 188.820293][T12083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.820314][T12083] RIP: 0033:0x7f7bc9f9e159 [ 188.820330][T12083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.820354][T12083] RSP: 002b:00007f7bcae040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 188.820381][T12083] RAX: ffffffffffffffda RBX: 00007f7bca225fa8 RCX: 00007f7bc9f9e159 [ 188.820394][T12083] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7bca225fac [ 188.820407][T12083] RBP: 00007f7bca225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 188.820421][T12083] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 188.820435][T12083] R13: 00007f7bca226038 R14: 00007ffe6df71ff0 R15: 00007ffe6df720d8 [ 188.820463][T12083] [ 188.944310][T12085] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 188.944347][T12085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.263507][ T9] usb 12-1: USB disconnect, device number 7 [ 189.483281][T12117] smpboot: CPU 1 is now offline [ 189.638318][T12117] smpboot: CPU 3 is now offline [ 189.710429][T12122] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 189.771624][T12122] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 190.066664][T12140] binder: 12139:12140 ioctl c06c4124 2000000001c0 returned -22 [ 190.268655][T12156] fuse: fd is not a fuse device [ 190.454393][T12166] xt_cgroup: invalid path, errno=-2 [ 190.455801][T12166] fuse: fd is not a fuse device [ 190.654063][T12183] random: crng reseeded on system resumption [ 190.674572][T11230] rpcbind: RPC call returned error 22 [ 190.727589][T12183] input: syz1 as /devices/virtual/input/input26 [ 191.073922][ T1174] Bluetooth: Error in BCSP hdr checksum [ 191.302425][T12190] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 191.331381][ T63] Bluetooth: Error in BCSP hdr checksum [ 191.724452][T12197] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1502'. [ 191.827558][T12207] bridge0: port 3(team0) entered blocking state [ 191.827738][T12207] bridge0: port 3(team0) entered disabled state [ 191.827898][T12207] team0: entered allmulticast mode [ 191.827917][T12207] team_slave_0: entered allmulticast mode [ 191.827983][T12207] team_slave_1: entered allmulticast mode [ 191.836770][T12207] team0: entered promiscuous mode [ 191.836790][T12207] team_slave_0: entered promiscuous mode [ 191.837041][T12207] team_slave_1: entered promiscuous mode [ 191.837846][T12207] bridge0: port 3(team0) entered blocking state [ 191.837933][T12207] bridge0: port 3(team0) entered forwarding state [ 191.848638][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1504'. [ 191.870254][T12207] team_slave_0 (unregistering): left promiscuous mode [ 191.870272][T12207] team_slave_0 (unregistering): left allmulticast mode [ 191.877011][T12207] team0: Port device team_slave_0 removed [ 192.190208][T12212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.609721][ T43] kauditd_printk_skb: 81 callbacks suppressed [ 192.609748][ T43] audit: type=1400 audit(1791058397.463:1057): avc: denied { write } for pid=12234 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.862748][ T66] Bluetooth: hci3: command 0x1003 tx timeout [ 192.862908][ T5737] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 192.880892][T12249] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1512'. [ 192.922901][T12248] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 192.924943][ T43] audit: type=1800 audit(1791058397.783:1058): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35136 res=0 errno=0 [ 192.927259][ T43] audit: type=1800 audit(1791058397.783:1059): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35159 res=0 errno=0 [ 193.181087][ T30] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 193.341518][ T30] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 193.342390][ T30] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.342405][ T30] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.342418][ T30] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.344155][ T30] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 193.344168][ T30] usb 11-1: Product: syz [ 193.344176][ T30] usb 11-1: Manufacturer: syz [ 193.344184][ T30] usb 11-1: SerialNumber: syz [ 193.347216][ T43] audit: type=1800 audit(1791058398.203:1060): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219960 res=0 errno=0 [ 193.350793][ T43] audit: type=1800 audit(1791058398.203:1061): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=219992 res=0 errno=0 [ 193.351754][ T43] audit: type=1800 audit(1791058398.213:1062): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=219967 res=0 errno=0 [ 193.352433][ T43] audit: type=1800 audit(1791058398.213:1063): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=219968 res=0 errno=0 [ 193.556119][ T30] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 193.564973][ T43] audit: type=1800 audit(1791058398.423:1064): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=219989 res=0 errno=0 [ 193.565897][ T43] audit: type=1800 audit(1791058398.423:1065): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=219990 res=0 errno=0 [ 193.569599][ T43] audit: type=1800 audit(1791058398.423:1066): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=219969 res=0 errno=0 [ 193.589831][T12265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12265 comm=syz.7.1515 [ 193.755192][ T5564] usb 11-1: USB disconnect, device number 11 [ 193.758916][T12273] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1517'. [ 193.761639][ T5564] usblp0: removed [ 193.763159][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.763173][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.768448][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.768461][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.769289][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.769303][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.773893][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.773909][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.774605][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.774615][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.775153][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.775163][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.775790][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.775800][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.776313][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.776322][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.776915][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.776924][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.777391][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.777400][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.778134][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.778144][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.778691][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.778706][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.779241][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.779250][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.784078][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.784092][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.784757][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.784768][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.785336][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.785345][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.785813][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.785822][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.786395][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.786404][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.786905][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.786914][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.787445][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.787455][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.788003][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.788013][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.788552][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.788562][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.792726][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.792741][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.793483][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.793500][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 193.794504][T12272] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 193.794516][T12272] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 194.089271][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1521'. [ 194.089290][T12287] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1521'. [ 194.089308][T12287] netlink: 'syz.7.1521': attribute type 7 has an invalid length. [ 194.101178][T12287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=12287 comm=syz.7.1521 [ 194.173212][T12292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4112 sclass=netlink_xfrm_socket pid=12292 comm=syz.5.1522 [ 194.223107][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.223160][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.226835][T12295] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1522'. [ 194.621396][ C2] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 194.945725][T12289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.945942][T12289] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.362839][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1531'. [ 195.479354][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'. [ 195.689760][T12332] block nbd7: shutting down sockets [ 195.693186][T11236] IPVS: starting estimator thread 0... [ 195.792535][T12333] IPVS: using max 27 ests per chain, 64800 per kthread [ 195.881647][T12341] netlink: 'syz.7.1538': attribute type 1 has an invalid length. [ 195.906019][T12341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.221098][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 196.562738][T12358] EXT4-fs (loop1): unable to read superblock [ 196.704463][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 196.749100][T12366] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 197.021268][ T5737] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 197.066901][T12380] batman_adv: batadv0: Adding interface: veth0 [ 197.066921][T12380] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.069659][T12380] batman_adv: batadv0: Interface activated: veth0 [ 197.074790][T12380] batman_adv: batadv0: Interface deactivated: veth0 [ 197.074810][T12380] batman_adv: batadv0: Removing interface: veth0 [ 197.377178][ T5737] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 197.377300][ T5737] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 197.469434][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.558560][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.645485][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.734071][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.776722][T12411] ovs-dp0: entered promiscuous mode [ 197.864730][ T43] kauditd_printk_skb: 226 callbacks suppressed [ 197.864750][ T43] audit: type=1800 audit(1791058402.723:1293): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220861 res=0 errno=0 [ 197.872293][ T43] audit: type=1800 audit(1791058402.723:1294): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=220866 res=0 errno=0 [ 197.872571][ T5839] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.873688][ T43] audit: type=1800 audit(1791058402.733:1295): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=220870 res=0 errno=0 [ 197.874565][ T43] audit: type=1800 audit(1791058402.733:1296): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=220869 res=0 errno=0 [ 197.877244][ T43] audit: type=1800 audit(1791058402.733:1297): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=220872 res=0 errno=0 [ 197.901448][ T43] audit: type=1800 audit(1791058402.763:1298): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220947 res=0 errno=0 [ 197.904337][ T43] audit: type=1800 audit(1791058402.763:1299): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=220952 res=0 errno=0 [ 197.905262][ T43] audit: type=1800 audit(1791058402.763:1300): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=220956 res=0 errno=0 [ 197.906656][ T43] audit: type=1800 audit(1791058402.763:1301): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=220955 res=0 errno=0 [ 197.907846][ T43] audit: type=1800 audit(1791058402.763:1302): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=220958 res=0 errno=0 [ 198.015661][ T12] bridge_slave_1: left allmulticast mode [ 198.015690][ T12] bridge_slave_1: left promiscuous mode [ 198.015884][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.023088][ T12] bridge_slave_0: left allmulticast mode [ 198.023112][ T12] bridge_slave_0: left promiscuous mode [ 198.023298][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.249090][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.250575][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.254799][ T12] bond0 (unregistering): Released all slaves [ 198.257811][ T12] bond1 (unregistering): Released all slaves [ 198.269117][ T5444] 8021q: adding VLAN 0 to HW filter on device eth1 [ 198.281402][ T5839] netdevsim netdevsim7 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.281457][ T5839] netdevsim netdevsim7 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.281497][ T5839] netdevsim netdevsim7 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.328969][ T12] ovs-dp0: left promiscuous mode [ 198.664473][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18 [ 198.766316][ T12] hsr_slave_0: left promiscuous mode [ 198.766939][ T12] hsr_slave_1: left promiscuous mode [ 198.767384][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.767396][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.767891][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.767901][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.776393][ T12] veth1_macvtap: left promiscuous mode [ 198.776419][ T12] veth0_macvtap: left promiscuous mode [ 198.776466][ T12] veth1_vlan: left promiscuous mode [ 198.776580][ T12] veth0_vlan: left promiscuous mode [ 198.908184][T12450] random: crng reseeded on system resumption [ 198.940821][T12448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1562'. [ 198.975194][ T12] team0 (unregistering): Port device team_slave_1 removed [ 198.987807][ T12] team0 (unregistering): Port device team_slave_0 removed [ 199.095713][ T5444] 8021q: adding VLAN 0 to HW filter on device eth19 [ 199.328727][ T5444] 8021q: adding VLAN 0 to HW filter on device eth20 [ 199.431910][T11169] Bluetooth: Error in BCSP hdr checksum [ 199.698168][T11167] Bluetooth: Error in BCSP hdr checksum [ 201.181645][ T5737] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 201.376995][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1570'. [ 201.377017][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1570'. [ 202.392577][T12501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=12501 comm=syz.5.1571 [ 202.393076][T12501] netlink: 'syz.5.1571': attribute type 1 has an invalid length. [ 202.398348][T12505] fuse: fd is not a fuse device [ 202.399235][T12506] kAFS: Can only specify source 'none' with -o dyn [ 202.413874][T12501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.418573][T12501] bond2: (slave bond3): making interface the new active one [ 202.418962][T12501] bond2: (slave bond3): Enslaving as an active interface with an up link [ 203.108778][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 203.108799][ T43] audit: type=1400 audit(1791058407.963:1327): avc: denied { write } for pid=12512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.179052][ T43] audit: type=1400 audit(1791058408.033:1328): avc: denied { write } for pid=12515 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.520274][T12521] random: crng reseeded on system resumption [ 204.745492][T12533] tun0: tun_chr_ioctl cmd 1074025678 [ 204.745508][T12533] tun0: group set to 0 [ 204.769360][ T43] audit: type=1800 audit(1791058409.623:1329): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222449 res=0 errno=0 [ 204.851889][ T43] audit: type=1804 audit(1791058409.713:1330): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1577" name="/newroot/213/bus" dev="tmpfs" ino=1201 res=1 errno=0 [ 204.852423][ T43] audit: type=1804 audit(1791058409.713:1331): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1577" name="/newroot/213/bus" dev="tmpfs" ino=1201 res=1 errno=0 [ 206.083346][ T43] audit: type=1400 audit(1791058410.933:1332): avc: denied { write } for pid=12551 comm="syz.1.1581" name="/" dev="ocfs2_dlmfs" ino=52837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.083759][T12552] o2cb: This node has not been configured. [ 206.083775][T12552] o2cb: Cluster check failed. Fix errors before retrying. [ 206.083795][T12552] (syz.1.1581,12552,2):user_dlm_register:674 ERROR: status = -22 [ 206.083819][T12552] (syz.1.1581,12552,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 207.507978][T12562] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1583'. [ 207.508104][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 209.010433][T12578] random: crng reseeded on system resumption [ 209.037015][ T43] audit: type=1800 audit(1791058413.893:1333): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222610 res=0 errno=0 [ 209.044410][ T43] audit: type=1800 audit(1791058413.903:1334): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222621 res=0 errno=0 [ 210.483990][ T43] audit: type=1400 audit(1791058415.343:1335): avc: denied { write } for pid=12583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.542911][ T43] audit: type=1400 audit(1791058415.403:1336): avc: denied { write } for pid=12586 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.646033][ T43] audit: type=1400 audit(1791058415.503:1337): avc: denied { map } for pid=12595 comm="syz.6.1590" path="socket:[54696]" dev="sockfs" ino=54696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.646748][ T43] audit: type=1400 audit(1791058415.503:1338): avc: denied { write } for pid=12590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.650392][ T43] audit: type=1400 audit(1791058415.503:1339): avc: denied { write } for pid=12595 comm="syz.6.1590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 210.697552][ T43] audit: type=1800 audit(1791058415.553:1340): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222640 res=0 errno=0 [ 210.700862][T12596] nvme nvme0: failed to connect socket: -1 [ 210.701320][T12596] [ 210.709372][ T43] audit: type=1400 audit(1791058415.563:1341): avc: denied { write } for pid=12600 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.717377][T12596] ====================================================== [ 210.719603][T12596] WARNING: possible circular locking dependency detected [ 210.721805][T12596] syzkaller #0 Tainted: G L [ 210.723844][T12596] ------------------------------------------------------ [ 210.726018][T12596] syz.6.1590/12596 is trying to acquire lock: [ 210.727907][T12596] ffff888058c05e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 210.731257][T12596] [ 210.731257][T12596] but task is already holding lock: [ 210.733775][T12596] ffffffff8ff50be0 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 210.736950][T12596] [ 210.736950][T12596] which lock already depends on the new lock. [ 210.736950][T12596] [ 210.740161][T12596] [ 210.740161][T12596] the existing dependency chain (in reverse order) is: [ 210.742921][T12596] [ 210.742921][T12596] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 210.745296][T12596] lock_acquire+0x1d1/0x380 [ 210.746921][T12596] __mutex_lock+0x1a4/0x1bd0 [ 210.748565][T12596] nvmf_dev_show+0x26/0x210 [ 210.750215][T12596] seq_read_iter+0x32f/0x1270 [ 210.751959][T12596] seq_read+0x344/0x4d0 [ 210.753547][T12596] vfs_read+0x1e4/0xb40 [ 210.755208][T12596] ksys_read+0x12a/0x250 [ 210.756949][T12596] do_syscall_64+0x123/0x790 [ 210.758715][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.760832][T12596] [ 210.760832][T12596] -> #3 (&p->lock){+.+.}-{4:4}: [ 210.762991][T12596] lock_acquire+0x1d1/0x380 [ 210.764582][T12596] __mutex_lock+0x1a4/0x1bd0 [ 210.766191][T12596] seq_read_iter+0xe1/0x1270 [ 210.767846][T12596] kernfs_fop_read_iter+0x46c/0x610 [ 210.769635][T12596] __kernel_read+0x397/0xad0 [ 210.771244][T12596] integrity_kernel_read+0x7e/0xb0 [ 210.773014][T12596] ima_calc_file_hash_tfm+0x25e/0x350 [ 210.774884][T12596] ima_calc_file_hash+0x1e3/0x380 [ 210.776694][T12596] ima_collect_measurement+0x94f/0xb30 [ 210.778735][T12596] process_measurement+0xdfe/0x2350 [ 210.780660][T12596] ima_file_check+0xc3/0x110 [ 210.782384][T12596] security_file_post_open+0xc4/0x210 [ 210.784027][ T43] audit: type=1400 audit(1791058415.643:1342): avc: denied { write } for pid=12603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.791434][T12596] path_openat+0x5cd/0x2440 [ 210.792962][T12596] do_file_open+0x20e/0x430 [ 210.794500][T12596] do_sys_openat2+0x10f/0x1e0 [ 210.796146][T12596] __x64_sys_openat+0x12d/0x210 [ 210.797841][T12596] do_syscall_64+0x123/0x790 [ 210.799414][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.801622][T12596] [ 210.801622][T12596] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 210.804661][T12596] lock_acquire+0x1d1/0x380 [ 210.806503][T12596] __mutex_lock+0x1a4/0x1bd0 [ 210.808144][T12596] process_measurement+0x5ab/0x2350 [ 210.809880][T12596] ima_file_check+0xc3/0x110 [ 210.811460][T12596] security_file_post_open+0xc4/0x210 [ 210.813290][T12596] path_openat+0x5cd/0x2440 [ 210.814852][T12596] do_file_open+0x20e/0x430 [ 210.816410][T12596] file_open_name+0x1c3/0x3e0 [ 210.818090][T12596] filp_open+0x2e/0x50 [ 210.819639][T12596] kernel_read_file_from_path_initns+0xec/0x240 [ 210.821830][T12596] _request_firmware+0x733/0x13c0 [ 210.823764][T12596] request_firmware+0x35/0x50 [ 210.825583][T12596] reg_reload_regdb+0x85/0x460 [ 210.827376][T12596] genl_family_rcv_msg_doit+0x214/0x300 [ 210.829326][T12596] genl_rcv_msg+0x560/0x800 [ 210.830884][T12596] netlink_rcv_skb+0x159/0x420 [ 210.832552][T12596] genl_rcv+0x28/0x40 [ 210.833969][T12596] netlink_unicast+0x585/0x850 [ 210.835654][T12596] netlink_sendmsg+0x8b0/0xda0 [ 210.837310][T12596] ____sys_sendmsg+0xa4d/0xbe0 [ 210.838932][T12596] ___sys_sendmsg+0x190/0x1e0 [ 210.840536][T12596] __sys_sendmsg+0x160/0x210 [ 210.842118][T12596] do_syscall_64+0x123/0x790 [ 210.843825][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.846058][T12596] [ 210.846058][T12596] -> #1 (cb_lock){++++}-{4:4}: [ 210.848558][T12596] lock_acquire+0x1d1/0x380 [ 210.850180][T12596] down_read+0x99/0x4c0 [ 210.851717][T12596] genl_release+0x7e/0x1d0 [ 210.853288][T12596] netlink_release+0x105e/0x2000 [ 210.854971][T12596] __sock_release+0xb3/0x260 [ 210.856634][T12596] sock_close+0x1c/0x30 [ 210.858131][T12596] __fput+0x3ff/0xb50 [ 210.859606][T12596] fput_close_sync+0x118/0x250 [ 210.861278][T12596] __x64_sys_close+0x8b/0x120 [ 210.862846][T12596] do_syscall_64+0x123/0x790 [ 210.864406][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.866395][T12596] [ 210.866395][T12596] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 210.869157][T12596] check_prev_add+0xeb/0xe60 [ 210.870824][T12596] __lock_acquire+0x1528/0x1f40 [ 210.872576][T12596] lock_acquire+0x1d1/0x380 [ 210.874214][T12596] down_write+0x8b/0x1f0 [ 210.875746][T12596] __sock_release+0x86/0x260 [ 210.877363][T12596] sock_close+0x1c/0x30 [ 210.878857][T12596] __fput+0x3ff/0xb50 [ 210.880303][T12596] __fput_sync+0xd7/0x100 [ 210.881835][T12596] nvme_tcp_alloc_queue.isra.0+0xd89/0x1630 [ 210.883867][T12596] nvme_tcp_configure_admin_queue+0x26/0x530 [ 210.885984][T12596] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 210.887795][T12596] nvme_tcp_create_ctrl+0x970/0xd90 [ 210.889603][T12596] nvmf_dev_write+0x4ee/0xb60 [ 210.891236][T12596] vfs_write+0x2aa/0x1050 [ 210.892779][T12596] ksys_write+0x12a/0x250 [ 210.894332][T12596] do_syscall_64+0x123/0x790 [ 210.895965][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.897946][T12596] [ 210.897946][T12596] other info that might help us debug this: [ 210.897946][T12596] [ 210.901240][T12596] Chain exists of: [ 210.901240][T12596] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 210.901240][T12596] [ 210.905764][T12596] Possible unsafe locking scenario: [ 210.905764][T12596] [ 210.908063][T12596] CPU0 CPU1 [ 210.909727][T12596] ---- ---- [ 210.911377][T12596] lock(nvmf_dev_mutex); [ 210.912703][T12596] lock(&p->lock); [ 210.914769][T12596] lock(nvmf_dev_mutex); [ 210.917048][T12596] lock(&sb->s_type->i_mutex_key#13); [ 210.918818][T12596] [ 210.918818][T12596] *** DEADLOCK *** [ 210.918818][T12596] [ 210.921745][T12596] locks held by syz.6.1590/12596: 1, last CPU#1: [ 210.923959][T12596] #0: ffffffff8ff50be0 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 210.926969][T12596] [ 210.926969][T12596] stack backtrace: [ 210.928884][T12596] CPU: 1 UID: 0 PID: 12596 Comm: syz.6.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.932567][T12596] Tainted: [L]=SOFTLOCKUP [ 210.934168][T12596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.937810][T12596] Call Trace: [ 210.938869][T12596] [ 210.939934][T12596] dump_stack_lvl+0x100/0x190 [ 210.941705][T12596] print_circular_bug.cold+0x178/0x1be [ 210.943716][T12596] check_noncircular+0x146/0x160 [ 210.945536][T12596] check_prev_add+0xeb/0xe60 [ 210.947246][T12596] __lock_acquire+0x1528/0x1f40 [ 210.948964][T12596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.950877][T12596] lock_acquire+0x1d1/0x380 [ 210.952394][T12596] ? __sock_release+0x86/0x260 [ 210.954208][T12596] ? __pfx___might_resched+0x10/0x10 [ 210.956404][T12596] down_write+0x8b/0x1f0 [ 210.957835][T12596] ? __sock_release+0x86/0x260 [ 210.959414][T12596] ? __pfx_down_write+0x10/0x10 [ 210.960953][T12596] ? __pfx_locks_remove_file+0x10/0x10 [ 210.962653][T12596] __sock_release+0x86/0x260 [ 210.964164][T12596] ? __pfx_sock_close+0x10/0x10 [ 210.965724][T12596] sock_close+0x1c/0x30 [ 210.967101][T12596] __fput+0x3ff/0xb50 [ 210.968431][T12596] ? kfree+0x22b/0x6d0 [ 210.969755][T12596] __fput_sync+0xd7/0x100 [ 210.971193][T12596] nvme_tcp_alloc_queue.isra.0+0xd89/0x1630 [ 210.973190][T12596] ? nvme_tcp_configure_admin_queue+0x26/0x530 [ 210.975213][T12596] nvme_tcp_configure_admin_queue+0x26/0x530 [ 210.977297][T12596] ? __wake_up+0x3f/0x60 [ 210.978730][T12596] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 210.980319][T12596] ? mark_held_locks+0x40/0x70 [ 210.981839][T12596] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 210.983619][T12596] ? lockdep_hardirqs_on+0x7d/0x110 [ 210.985276][T12596] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 210.987307][T12596] ? nvme_change_ctrl_state+0xc0/0x440 [ 210.989228][T12596] nvme_tcp_create_ctrl+0x970/0xd90 [ 210.991021][T12596] nvmf_dev_write+0x4ee/0xb60 [ 210.992620][T12596] vfs_write+0x2aa/0x1050 [ 210.994021][T12596] ? __pfx_nvmf_dev_write+0x10/0x10 [ 210.995643][T12596] ? lock_acquire+0x1d1/0x380 [ 210.997074][T12596] ? __fget_files+0x34/0x3d0 [ 210.998493][T12596] ? __pfx_vfs_write+0x10/0x10 [ 210.999978][T12596] ? find_held_lock+0x2b/0x80 [ 211.001450][T12596] ? __fget_files+0x215/0x3d0 [ 211.002941][T12596] ? __fget_files+0x215/0x3d0 [ 211.004425][T12596] ? __fget_files+0x21f/0x3d0 [ 211.005981][T12596] ksys_write+0x12a/0x250 [ 211.007553][T12596] ? __pfx_ksys_write+0x10/0x10 [ 211.009413][T12596] do_syscall_64+0x123/0x790 [ 211.010985][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.012915][T12596] RIP: 0033:0x7f7bc9f9e159 [ 211.014410][T12596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.020335][T12596] RSP: 002b:00007f7bcae04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.022869][T12596] RAX: ffffffffffffffda RBX: 00007f7bca225fa0 RCX: 00007f7bc9f9e159 [ 211.025278][T12596] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000003 [ 211.027909][T12596] RBP: 00007f7bca03506b R08: 0000000000000000 R09: 0000000000000000 [ 211.030585][T12596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.033125][T12596] R13: 00007f7bca226038 R14: 00007f7bca225fa0 R15: 00007ffe6df720d8 [ 211.035591][T12596] [ 211.054707][T12597] nvme nvme0: failed to connect socket: -1 [ 211.101095][ T5737] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 211.103347][T12576] PM: hibernation: Basic memory bitmaps freed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 212.909742][ T13] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 212.909770][ T13] ip6gre1 (unregistering): left promiscuous mode [ 212.933732][ T13] team0: Port device xfrm0 removed [ 212.962352][ T13] bond2 (unregistering): (slave erspan1): Releasing active interface [ 212.962378][ T13] erspan1 (unregistering): left promiscuous mode [ 212.985585][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 212.999447][ T13] bond0 (unregistering): Released all slaves [ 213.006389][ T13] bond1 (unregistering): Released all slaves [ 213.010474][ T13] bond2 (unregistering): Released all slaves [ 213.014928][ T13] bond3 (unregistering): Released all slaves [ 213.018808][ T13] bond4 (unregistering): Released all slaves [ 213.031250][ T12] netdevsim netdevsim1 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.031290][ T12] netdevsim netdevsim1 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.031319][ T12] netdevsim netdevsim1 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.031348][ T12] netdevsim netdevsim1 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.073895][ T13] ovs-dp0: left promiscuous mode [ 213.133026][ T13] tipc: Disabling bearer [ 213.133842][ T13] tipc: Disabling bearer [ 213.134138][ T13] tipc: Left network mode [ 213.170324][ T5444] 8021q: adding VLAN 0 to HW filter on device eth21 [ 213.322630][ T5444] 8021q: adding VLAN 0 to HW filter on device eth23 [ 213.406900][ T13] hsr_slave_0: left promiscuous mode [ 213.407278][ T13] hsr_slave_1: left promiscuous mode [ 213.446790][ T13] smc: removing net device veth1_macvtap with user defined pnetid SYZ2 [ 213.563091][ T5444] 8021q: adding VLAN 0 to HW filter on device eth24 [ 213.711981][ T5444] 8021q: adding VLAN 0 to HW filter on device eth22 [ 213.805043][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.805122][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.845850][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.845885][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.896694][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.896725][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.934084][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.934108][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.000509][ T13] bridge_slave_1: left allmulticast mode [ 214.000527][ T13] bridge_slave_1: left promiscuous mode [ 214.000626][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.004680][ T13] bridge_slave_0: left allmulticast mode [ 214.004705][ T13] bridge_slave_0: left promiscuous mode [ 214.004851][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.093270][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.094948][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.095625][ T13] bond0 (unregistering): Released all slaves [ 214.096994][ T13] bond1 (unregistering): Released all slaves [ 214.111457][ T5839] netdevsim netdevsim6 eth26: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.111494][ T5839] netdevsim netdevsim6 eth25: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.111551][ T5839] netdevsim netdevsim6 eth27: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.111586][ T5839] netdevsim netdevsim6 eth28: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.169690][ T43] kauditd_printk_skb: 53 callbacks suppressed [ 214.169712][ T43] audit: type=1400 audit(1791058419.023:1396): avc: denied { write } for pid=12661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.220459][ T43] audit: type=1400 audit(1791058419.073:1397): avc: denied { write } for pid=12664 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.259317][ T5444] 8021q: adding VLAN 0 to HW filter on device eth25 [ 214.296346][ T43] audit: type=1800 audit(1791058419.153:1398): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=214564 res=0 errno=0 [ 214.354838][ T43] audit: type=1400 audit(1791058419.213:1399): avc: denied { write } for pid=12668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.394821][ T43] audit: type=1400 audit(1791058419.253:1400): avc: denied { write } for pid=12671 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.424798][ T5444] 8021q: adding VLAN 0 to HW filter on device eth26 [ 214.438348][ T13] hsr_slave_0: left promiscuous mode [ 214.438724][ T13] hsr_slave_1: left promiscuous mode [ 214.439011][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.439022][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.439376][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.439390][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.441369][ T13] veth1_macvtap: left promiscuous mode [ 214.441387][ T13] veth0_macvtap: left promiscuous mode [ 214.441419][ T13] veth1_vlan: left promiscuous mode [ 214.441443][ T13] veth0_vlan: left promiscuous mode [ 214.504793][ T13] team0 (unregistering): Port device team_slave_1 removed [ 214.506988][ T13] team0 (unregistering): Port device team_slave_0 removed [ 214.607651][ T43] audit: type=1400 audit(1791058419.463:1401): avc: denied { write } for pid=12675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.650518][ T43] audit: type=1400 audit(1791058419.513:1402): avc: denied { write } for pid=12678 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.680642][ T5444] 8021q: adding VLAN 0 to HW filter on device eth28 [ 214.744485][ T43] audit: type=1400 audit(1791058419.603:1403): avc: denied { write } for pid=12682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.797164][ T43] audit: type=1400 audit(1791058419.653:1404): avc: denied { write } for pid=12685 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.822415][ T5444] 8021q: adding VLAN 0 to HW filter on device eth27 [ 214.976295][ T13] IPVS: stop unused estimator thread 0...