last executing test programs: 4m4.353485685s ago: executing program 0 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1504, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14bc, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x138, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xaa}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x60, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPR={0x38, 0x7, 0x0, 0x1, {{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x9}]}}}, {0x90, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x80, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x60, 0x3, "8579bb93f639028adfef9d21aab852f0ba6125fb98208f1e1ee5f0338e935a666e2f6e2ba9add862c3444156ead53826bfb828554805c10d361067231bb5fe127789bcfedc5780671d279d7b5ffafc39c43fc47afa37e5338ecc6478"}, @NFTA_TARGET_NAME={0x9, 0x1, 'DSCP\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}]}, {0x1348, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xf0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x66, 0x1, "b3bb2bf59794badf60b832a00047dd83f8ac8f2be942cdebb904a937ed75f78fe7270961188b10b237d18b70ba878583a200bcbc1de263bb79a57aa8490321c81e66f1985eb52a6b19863f291ac6ae706b8e975b03e8260736dbefd2a94bad2948b3"}, @NFTA_DATA_VALUE={0x84, 0x1, "5b8c3ddc6cb4e0e62ee7a195d5a7a1c1d41350b10e250cc14c055905b07d46de15d5add004a74e4ca972b8a30384c81198b2e520aa239d4777d9c1a5631a7ceb369854eeb3d41884bc70871c9138ef68aae0652badaa55cce3b886346b5fa13c569da5bdc639a1b2884944aa68b2387c288500a85dfd85a0891b1561b1be18cb"}]}, @NFTA_SET_ELEM_DATA={0x1248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "40f43d3c9b5812086af864f57d82a13597fb0e701adb5484fe88871cfbdf7b62f8f1414e029fd7ae54774d50e1a188a7a707324a7e3cc8e35d9c9629df3d2d3bc2f0a295997e58eaecc93de8073e5b3404db3b5994d533c36bf6438d9190cdb2dccbd61b270317fb97d897e4a82fdf50bbd3e4759341edef853be29287b604fe537da789d72f5a8e2a185c42a153bb25d6efd268009b2f25d949d626ed91d3d4b5c14f39a4aca87c7304a91592e5fc68a218ef752df5e985f9603bc31e3da37da1ac9d590304e71375a81233ce7dc331c216fd6eb8e759bea88133c34f5c204dd45fe2a7463b950b3ea21030e5044a4c3f05bee42623fe23a329f21cf4388ed51d167feab1fb16ecb1ba65de0d1238807522703ab110824a4574f0444116ae2091520bff828d93cc31c3ffb7cfc5bfae4fad3e78f1f9ed30f1fb890df5d220c19cbc4e0b97ef09690592522132c049155a24b47a2118d0de7159a1a76e8866d5483a626992669af2897115a6404cbcc2497185b57cdf36b8fbdeb51bdc55be0a39fda0d02e97ea24ddfb32727aafbf6517de8e59c1a9bbcb48b29ee0e5a1107843b9528ee1a515d86fdc6b9e4553836b326bebbb522aebd29739b21980217c586c8b3ef7ac09e5bb2e450e640cd2d6fb0e92741db48f41c47f2a88f962b51e59066ab7be42cc370accce8ef50f55b526fd51a6c0bd1ce96510e6f05dda57bced4fc3cecf7dd8081ecec7c73993cefa333937936a21494f049f85d3ea9a7e9a5511ae12d9e59275aef8efcabd28f99ce38bf1f44855203350926a64b1401809691701e6baa077fa958dee80299710e882735bd41afc84153a28041054c76ab2890997614fd334203bd7d64f1e2a10befdd156ab7d45e6eb997a118d1186bbaeb5b38bc08854548e8a2f492e96bd65fc66126c471f0cf67b48c1732512afa8eb8156b97427d71994a894869aa51e40d514537f12e663146980cfb369fc2f13065f36088613be6a2682aa2f1e5b496072372c5100d2389af96bf611d8961a11d02a79b61b4c4d0e1d6cdcdc6c2a4c1ddaf548d8d2b75972f11053a3f47b87e2296be84d8b4a6c66985c6ab9fb8342d7c05f063f39fbc5675d027f098be576364b9ce0d691966f085dc5adb2b8a1675daf5d6b0e1ccbc03e501d2f2cb31a19484670426e983b84ea2b72f2a39b49b68b65486fd5e60cdd9f9a9ebf7f0b756225e60599f24685151371c6f58de21e6700ea27ac7ad21360567f66b0c71b9035d9304f50dd562e0ad8b31c5c79c85cd64569fe62f103b18242848085b9572469dd2799226078df0f156080da139457d2f8bd45a60a349540a8f80501362e092e85161e4fb6e9a54dfd06f3f1e459a948ebd550d0bcbe03f2f42222615f4afbb1086bab35cd212e6923bed66629835245d977e708080fdcf509d9661e7abc52cb5c951eae9b66b45d6f4a61edbe413acf0b4e5bd6d408dd74583830951dd37ca5bf2f2dea4436e505ab228c478d6d97b74d325a2f54f44526b1ccddef36ab1a5785b7b6c823cd5e97f8491debbe22c26fce6e44c2e82f55576d503b58e30075a17278b50c3da463e4e5be686586b99e435c581f3d2c5d67cf6418114cc8787c9c0156fcd5be53b8a5d50477557b844389d2bcbc404425ab4e3e294687c12b0975e0af81ff48aba4297dd8126f06e2ee3551609af4f67a756425508885ea685cc18581c7dd085a08ca61e4cfdc50555819ed82e774fb332e8c389781047ff5e064f7a089db91441357817f526b90f60760ae6e7d187cec2e25e46b7f4a8b3c32fa305bcda17c30e7f689b16eedb920db93a171e89dc182c9c9c6ef1a1456ba714dd56a84645de7c6489adbe35fb4781cdc17f75b7eea176f7ffe16199d202488a98777ab104aa04154431da9b95c60f838327bff8e9ada27d089099cc0e03aa9a5993a56914e329cbcefcabaf55466434d61d17ff445396aca42e73d72f06b2fd58ff939f6cec2cc6f2c2ac6c40469dfda4c5fc20af28913f6f6f334a409959d8bd042fe2ad97fa9967ab01cea230ae194db291e56e5548943c31b97927a7b45141b56f98d3a7c8f89d5ec45166809cf5dacac2e41b01bba5e49c79497f8e08a314a3dd3c4cb2a3d073f55f3facddccc25cef5037bde43c655dc01040cc3b45fe5884790dd915cfc4485654693dfe30e2bb87601d8d5117090ee8fb2a41bc34f60a9bfc19e8666cfc7d0b9e1ff6e00035d23253b402260dabb6bbc3c43a9af2a2447c32c28a01981923ed57d4321736962206f7fb32027954a2eaa3c2476ae2c55cd50299bf54f38961beaf65b021b09b4f3f4112a992ba7f5f51f5fd7c8d00b027c8ebbc42a2b3e15edcf2fcbdf88237d07ea288dea14e97e3b091afd6f1fc165910227e5d850210b3f13dff2c6cb056cfa1405e65a2fd617e7b509ffea98ab540d90365bfb49396e022c811e4b18bfa26d3a9425eba24cf4a1e6380d8ee4a5d1b3a882ec9568c19063c11d0f1c3b6a5cee067e17ea76787c3086dcb426d652add54ff44c27826c432eee700aeeb2eab145223c865707c021940eeb31fc3ba594ac80540a33dddcd174be6c02f974dc3ce29134bdd1b5f2075e51bd61f54e65fafeac01cc8535b85b3abd28cd39b00fd892c4dca915ce3e66febe1f087f536e9abdee10fce4081d1efb9c97f5455142cec7b6edea1dbf18fe8636fe4d167469df1f78596e12607342d0d87e1350e5ac22f9d80da6db99aa3d2b076d50ef6832abf4b3fa732d2c682c9be5c3765e6858f3e09191c2c0ff21aa15dcd3c02d70719ea651a65319f6ebc6e1a1ab5d662ee50d268c847b9565147c56409e718a7bee4e9ba63162e8b811781e68ab3d776ebff23076b37576a85fb884986526a5bac73b9fec315797940df32c4d70ffbf086b2dd7f3a6daa1b0c62f5fc681ea8633c705083eaf7703e790960dda24533acb995140dbc20425ee3c2598095564e384a62779b656ffe70fbc325c524c8a3dc27333f00228df0f4c8b945c3fc9ec829995971f23a26d051113c4cc4452feeb8e7f2710bfc7e60e54980baeae41b3b894b1eb8d89557451ed86e9b868356c4d19d18c055bb97bcfec1cdeff0d1b28c37a0af4e52601adbf5c2ce913a94a8ec359ca521a74671b9ac37796d7d70939258abe25430a2c8711f8963d940b37d6db36256493b77b407fc1ebe0e64179742d7230629ce250afa6d37a024c860b7efaadf9f538c3331b76d1364d8238651b5d38d451f4585b8cc597b49fcb648b2bf2ab26c250a4d38c876dabf4a9354c5a986b5d78bd0d4fa124da1fc95ce0e4cd0345d534409c649b194fdb327d46e7b338e09d4cfac3c7576de67ea0e6b619729f4ee0942ef7cd4176608cedb8390773618f6f4883e54e4f627c8fb983cc4ab89e6c4adaba5caafa75c633a7d2b7764e3a91222ca765c9fac3ea250dc91ab03a2795d1947dc246262944f4e53a75c92abab214d03906283eb08747579c27da55d8d2539db9c1cf177cfec22aa732b1cae232f388412b704b23b7e272336fcd4e8a675885dc31f54a462af71d7393584d4a451544ddec268da0f303bcb96555c959da942a3ba9882c495111a609b9d7fbe62c59eea933366148dffed13246afc383b52bb5e3861a1c8be742c97b9f24b89c6349cd13f6f8ed8272348c955493b3887e7883054289e40638577609fa526f49f19471da71ff4c532bc8fa9a28835f22f7d2cec3ae383e00cc9e03384cdcbe2c678a7f805f4f64d58353b93a2839c67bccbc473c29bfefff29acef8004b6d0ec657252196ad3ade1055c4182f70bb11ad3e263076969eee9000fbe171f7e94bfcdbd4a4ad4c22d36e6765138870007ec2ee604d261e6388a3c1ca39666145dee6e6a73c05b2fd5298fc28e6ffa319d596159044708117e9fbcc39021742286e33c53e60e31a54637cd13af85a9ffa5671bd11aa09668f57abdd202c9d58d184464cf7a503d574888753a244f54489b55b17f7462104fd125bf76d5a93c7fd54e41db6fbf0f0d2c152225d6d5b37500eec1c8dd848f3677ae6e531ace0fc8c025b9e1146555f12fb8813ba3fc15794d1d42e6cd340e8d761e89784b33ff43e098f649c7261e3afed6b46c6a67c378ce695229da2454ebd6d28078fcee8783d231d8447a558bcae4ca1ef208cf65d2b916c29ab2ee7d05edfdbd38d98869ab4391b820dd27cec1d7d567a0f67430911ee39f61eb421815388ec2d32e8b3ffa61965c7769e920b048b41af59f6fe01fb3c9394924cf6a56a49b5d379545e5486c2e7b8d01691103d568c5ca8dabd2af4a1cb4d1d1a95558cf8a2cb34e254fd4ba587bec0b21c8d5187dc1146f2aa42a66eb9701883c1f55d3474a9fe257011f2bcd4939c09fd35b73890731a945778a0a3da7c7b7a0b45a53560c3f99692d01c0450405a5caab1dd76bb12a0c7f23d9229bbae31dbeee823b81ca28445dd3115f79763090016b70d5551c5bab91e2c3c696c4ac2c4d413bc6e6187ee80a8c7c1432b3203cd11d416e49060d0d50823a0c50aa5c49bdde70d11c2195fb0322d41baaaa337523eeca5818c5b7d2010bc9cd3b6486e38b600dc1a4746bd84251eebd866d1fe24a927deabce17b0e57c405762d53a4b493a910b072600a75a426b10b193c8b628fa31837aaf79eb98d5096633f11df946ad300ecd67884e1ad29666f18d9ff1ca56b838eb5017eebd62656c1e93e80be6c070060559a64abd53e0119d4550ac1e46cf57e630ad90edc899f788c274e81c8b152fb304c98531e67fe6e47918ed6e946fb91216abcc54269d368dc171fa53c32a097953db3f4e20c3b1d866a34345a15370ab0bbee7899a56e6611f9ea93a0503d9694cbf205e811b8110871336b3c5a6d50e80cef539b808d6ad5fa91a4cc0895efdd9d20db1d194260c532bfc29faf0e295357c591117c6ff15d91776884b164e8e19110ead244ec61c4842bad02c55fe37510dfd29cba205810af48443636684f6b34de6a95da96374f72cef9405e8ddacf6568d9db76e0c7ceb3ee7ae0949015f5e2d026233894281b60ef07632baad654766ef9123e484a0e79c44134baa411518830092ad087ed1e61a86adf1d4fb47b4a39d48bf5f1cb531d7ada2c3a1190db9b9f1ef425f5cef41a28b792cc87bbc1fada4325ceb21a221962372b411586bed4b9e21417242be4c822406e114b1e58a9acdd990c7326b587f37154b0e97e554f9e467ab8d03cb04bb98a67fcc3c69dc675387c731cf6b8d029d42096aec45d27a559819d40d36fdba05b50e9e000a008a9a0fff63bde1aa94f7db121ea8ff37b9c226522dce9688d2178d4f486b9053d3da2cd950b832670b179ee3d8b46fcf4f8e95f18cf520c30ec196277a5b25679422fedd0e6e7e1abbc8bd8b030aafc64616bfcaf928a7101281268aaeca9dbacb5d232ed05cf8ca2437a6770ec4e4bbf4fb14a01fcceb72e5c0fd3b1a561f3cd9787ce3047b541c2153c14efcdc21485c0defa3d010a07de80097d4572bb877a552d6f8a8835e0d4af938b93b85d3445dc876d8b3dcaf4213507a3aed0cb883cbf8f086bd80e6a65868f476e72a0b8bc55821c9a26477cc049d7dd492e4d882e5e7bcf1a305d63fecc823bb9f8f313361993a07ae1638747a6121a1c28cf2f1aece8c354051cea8f81dd8ef080753d54fd8bad3a14c1484fdeaa93e82c9a4be2f436c8d488ede35221c2c9118a1b84f84225b385a614f45adbedd45c8e7452eb479469ec83a44d9dd5b822f767824f77555f483030ac19a06d5c3ae7d9"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "3eeec6b5d54c44b96369c248c02254b845e9609058f76f12cf65ad9722edebf291e0770d667965f69a7512eed90ae9284d52a0c5e825778bb65f4ec375b9eeed7a3e625295037cea7fd25430a2e6a3e9fc01ffe77feae40dcfefefd90fd91fea3296982061c9483cc0325a7d6781eaea286eee981138389cdc88be8cd728e2f930bf98cf7c5fe41e2efc848221ec9cf744c831a9bff380eef925a202f7088bf91754"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "578ad80025fd494c4941e59b9506ca4dc50088e95b4be76576d1e608c20a8ab83614532ad3676bd34046d84a4383ab85b4cc235389f0c2838d7ba0c8371b67a9b3f0eb40131aa84699b9844ee3547a593773acd08b1e79176e58e60018ba84aa61843f55bddd29fac9f9271e41f20720a9ffcb74e7ca9f1c8925b1f1228024fb2a226379046cd8f5e94f6b9d175d617ac796746d4e31bf68dd8a92149d7b89cbefaf4865f8881ff57437051f1841b780ea5ffc8dd03a793303a78a314918ac52500689df071d37c6aa8201cb87162278355c8885c48f6a45579a3413b107aabfc2aff3d5ac301db1395b9e002b502c"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1588}}, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/87, 0x57}], 0x6, &(0x7f0000000580)=""/4096, 0x1000}, 0x3fc9}], 0x1, 0x40002000, &(0x7f00000015c0)={0x77359400}) 4m4.275230398s ago: executing program 0 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x7, 0x2, 0x87, 0xffffffff, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8000000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 4m4.214934094s ago: executing program 0 (id=166): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000440), &(0x7f0000000480)=@v1={0x1000000, [{0x101, 0x9}]}, 0xc, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}, [{0x8, 0xb, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x4041080) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="02", 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 4m4.114194772s ago: executing program 0 (id=168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000040)={0xffffffffffffff85, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) bind$bt_hci(r1, &(0x7f0000000500)={0x1f, 0x1}, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x70bd2d, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6b90}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0xa4, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x61cd}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc, 0x640}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0xffffffff, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRES64=r5, @ANYRESDEC=r3, @ANYRESOCT], 0x42) 4m3.85544304s ago: executing program 0 (id=172): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="ad5696c5820fae9d6dcd3292ea54c7beef915d564c90c200a3fb110efb9216257548eb1517231197ad2c593c884600ac0de87c92c763eb49dfbffad9b02d0d6ebad4aba2b1b4cae9fa61193e39029b212756fa413ebc9ae14d93c1e00f62f0a7a332febfa7e0888c95f2a50639e075ffe845f3efa9178e3b2e7fe14b4235bbe545885ee3da39804455aaf71c074c945d4d79609ea6d2636c3cfb9a8ba7a48f623606c889f73814a4502d1b2f7bb99846d5d34f40b899fd6063db511be7bcb0a50cc0a944", 0xc4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) fstat(r1, &(0x7f0000000300)) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAMEAT(r3, &(0x7f0000000180)={0x7, 0x4b, 0x1}, 0x7) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) setreuid(0x0, 0xee01) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 4m3.85490883s ago: executing program 0 (id=173): setresuid(0xee01, 0xee01, 0x0) (async) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000508000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe}, 0x9, 0x5, 0x2, 0x1, 0x0, 0x0, 0x3ff}) (async) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$inet_icmp(0x2, 0x2, 0x1) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000240)="b75a52717953a2f56946b470b6a9a1437bab503b6a351206c9fb5c4014b2d2349b5c062fd20e5b0e8d58d801aa2bbc563e4b6a3e3122b2", &(0x7f0000000340)="e999c0f84cff8d6137b614cba443d043a4705849c633c032de2dc521026cf489a2b1ef86b5c497af58015773cd50989c6eb30f8da49940b44167dac629cb29c9cfac6a2052938926a5cd0feed01adbae463e53d2a1e66846b788e7a49a8a79d7002849e5c06c4606f3c6f5699487090afe92000467dc5c1ca4a3bf06e9615af9c378799c2bffd1baf33c43ec136b56579d211a"}}, &(0x7f0000000400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x71, &(0x7f0000000680)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@llc={0x4, {@snap={0xab, 0x0, 'z', "882c4d", 0x22f0, "b6ff9948c66687c7cb095508b0e6e6c5a92b7ea61917b57e245ad5504b1b16774e0781aa6c1178a694a782f1d5ef7b72c2595960f8a776a52118c1aad18fc6ff10b887cf2b951764c5e225e310efaac2037aa8"}}}}}, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) read$char_usb(r5, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0xb5) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x1, 0x23e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2b6) 3m37.32300825s ago: executing program 32 (id=173): setresuid(0xee01, 0xee01, 0x0) (async) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000508000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe}, 0x9, 0x5, 0x2, 0x1, 0x0, 0x0, 0x3ff}) (async) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$inet_icmp(0x2, 0x2, 0x1) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000240)="b75a52717953a2f56946b470b6a9a1437bab503b6a351206c9fb5c4014b2d2349b5c062fd20e5b0e8d58d801aa2bbc563e4b6a3e3122b2", &(0x7f0000000340)="e999c0f84cff8d6137b614cba443d043a4705849c633c032de2dc521026cf489a2b1ef86b5c497af58015773cd50989c6eb30f8da49940b44167dac629cb29c9cfac6a2052938926a5cd0feed01adbae463e53d2a1e66846b788e7a49a8a79d7002849e5c06c4606f3c6f5699487090afe92000467dc5c1ca4a3bf06e9615af9c378799c2bffd1baf33c43ec136b56579d211a"}}, &(0x7f0000000400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x71, &(0x7f0000000680)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@llc={0x4, {@snap={0xab, 0x0, 'z', "882c4d", 0x22f0, "b6ff9948c66687c7cb095508b0e6e6c5a92b7ea61917b57e245ad5504b1b16774e0781aa6c1178a694a782f1d5ef7b72c2595960f8a776a52118c1aad18fc6ff10b887cf2b951764c5e225e310efaac2037aa8"}}}}}, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) read$char_usb(r5, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0xb5) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x1, 0x23e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2b6) 2m49.329897428s ago: executing program 1 (id=745): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) (async) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @broadcast}, r3}, 0x14) (async) r5 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000040)=0x3) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 2m49.318595804s ago: executing program 1 (id=747): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)=0x0) getgroups(0x3, &(0x7f00000001c0)=[0xee01, 0xffffffffffffffff, 0xee00]) lchown(&(0x7f0000000080)='.\x00', r2, r3) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x124) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x1, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@dont_measure}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'overlay\x00'}}, {@obj_user={'obj_user', 0x3d, 'net/ip_vs_stats\x00'}}, {@smackfsdef}]}) 2m49.265572002s ago: executing program 1 (id=749): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_dev$radio(0x0, 0x1, 0x2) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) socket(0x2, 0x3, 0xfffffffd) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m49.075004305s ago: executing program 1 (id=755): r0 = syz_io_uring_setup(0x6d03, &(0x7f0000000000)={0x0, 0x968, 0x8000, 0x5, 0x22}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) io_uring_enter(r0, 0x4eb3, 0xfee, 0x28, &(0x7f0000000100)={[0x400]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000140)=0x1, 0x0, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x218101, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000240)) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000280)=0x7) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f00000002c0)={0x2ccd, 0x3, 0x800}) ioctl$KVM_CAP_X86_GUEST_MODE(r3, 0x4068aea3, &(0x7f0000000300)) r4 = fcntl$dupfd(r2, 0x0, r3) write$P9_RLINK(r4, &(0x7f0000000380)={0x7, 0x47, 0x1}, 0x7) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={@multicast1, 0x0, 0x0, 0xa0, 0x0, [{@empty}, {@empty}, {@local}, {@empty}, {}, {@local}, {@private}, {@loopback}, {@dev}, {@multicast2}]}}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$KVM_CAP_STEAL_TIME(r2, 0x4068aea3, &(0x7f00000004c0)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) write$dsp(r5, &(0x7f0000000580)="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", 0x1000) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001580)=0x1c000000) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001840)={0x0, &(0x7f00000015c0)=[@wr_drn={0x68, 0x20, {0x4, 0xb}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_load_code={0x12e, 0x59, {0x3, "28df0f01cac46121fe79fb440f20c0350d000000440f22c0c403156decfb45caf60066baf80cb870c22a8fef66bafc0cb8b12b0000efc4811e53ea0f09f2f20f08"}}, @uexit={0x0, 0x18, 0x8}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x200d, 0x4, 0x8, 0x9b}}, @uexit={0x0, 0x18, 0x5}, @out_dx={0x6a, 0x28, {0x1fa9, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro_nat=0x6408, 0x3, 0x400, 0x288b}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x673, 0x9, 0x5, 0x80}}, @cpuid={0x64, 0x18, {0x6, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x5f, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x10000, 0x8}}, @cpuid={0x64, 0x18, {0x7ff, 0xa}}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x259}) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000018c0)=[@textreal={0x8, &(0x7f0000001880)="0f00180fc73cf20f0096040026262e0f78bcbd000f20d86635200000000f22d83e0f07260fc79dfbffbaf80c66b80c8da08866efbafc0cec3ef30f090faeff", 0x3f}], 0x1, 0x24, &(0x7f0000001900)=[@cr4={0x1, 0x1210a8}, @dstype3={0x7, 0xf}], 0x2) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001940), 0x101002, 0x0) io_uring_enter(r4, 0x4a4e, 0x15d8, 0x2, &(0x7f0000001980)={[0x6]}, 0x8) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000019c0), &(0x7f0000001a00), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000001e40)={&(0x7f0000001d40)=[0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x3, 0xa}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001e80)={&(0x7f0000001a40)=[0x0, 0x0, 0x0], &(0x7f0000001a80)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x3, 0x0, r8}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000002100)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f40)={0x14c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xe25c}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffffffff}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x8}}]}, 0x14c}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000002140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) dup2(r9, r0) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) 2m49.005861173s ago: executing program 1 (id=756): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000f4c000/0x1000)=nil, 0x1000}, 0x2}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x40, 0xffffffff, 0x3}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m48.923861038s ago: executing program 1 (id=757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)={0x2f}, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000200)={0x89}, 0x8) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) connect(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m41.908892096s ago: executing program 3 (id=848): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff81000808030000000400000000000000000000e70a00000000000000010100000000000006"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2m41.855083327s ago: executing program 3 (id=849): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x0, 0x201, 0x5, 0x1, 0x80, 0x4, 0x3}}], 0x30, 0x4004001}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_hwaddr=@broadcast}) 2m41.854581692s ago: executing program 3 (id=850): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r0, 0x3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000050) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x5c}}}}, [@NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x3, 0x2, 0xb93]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2da}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa1e}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x60000}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r9) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r11, &(0x7f0000000bc0)=""/4096, 0x1000) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000d040800"/20, @ANYRES32=0x0, @ANYBLOB="0000000008000000240012800c0001006d6163766c616e001400028006000200010000000800070004000000140035006d6163766c616e300000000000000000"], 0x58}}, 0x8000) (async) io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0x1, 0x18d}) (async) syz_open_dev$video4linux(0x0, 0x100000000007, 0x42) syz_clone(0x11042000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)="bc11416f3a3a7e7d2d29c1bbfb1ac682a01d06056a0486e915ce00aa90b1") (async) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) preadv(r14, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c030000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fedbdf253600000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc8a0}, 0x240c0894) 2m41.791800121s ago: executing program 3 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921f2c49ec, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/160, 0xa0}], 0x1, 0x809, 0x401) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x244002, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) r1 = syz_clone(0x102011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921f2c49ec, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') (async) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/160, 0xa0}], 0x1, 0x809, 0x401) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x244002, 0x120) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) (async) syz_clone(0x102011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid(r1, r1) (async) setpgid(0x0, r1) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) (async) 2m41.652006335s ago: executing program 3 (id=852): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510c490f913672b5ae413000500", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000080)={[{@uid={'uid', 0x3d, r6}}]}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYRES16=r4, @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006180)={0x2020}, 0x2020) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xc, 0xfff1}, {0x4, 0xb}, {0xc, 0x10}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 2m41.588858522s ago: executing program 3 (id=853): r0 = socket$inet6(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000002c0)="18f20841d39b13bc13d4faf3afdaf84846abd878d67617ce84e31119697835cdd661cd3019f5fdd9004c549d8cd0b0482a3eb14b3e972a1736fdcdfcc9c1f3a91b1d00e26b43dadc8e05086cffe2d1dc93fb89f00f63a30e35bfb49cbce13baef7b77301a2aa3748eeac9ffb6cdd9e1d342fee15ae8e85372b8b74f888fd371882f9364ab6d4a5e15c79745bc2c5cfa6118f2f29912364785d1d97bb87bde6523fed1e62a1d9012178da16f451192b45e26e0d92c5cd7d92fe85f3a93f5473342027fc8383b16b25dc8c99319f2d8dbc25cd0b4cbfb0c700cd", 0xd9, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @mcast1, 0x1}, 0x1c) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "048f9e5384f6eb5e03c3caa57100f78a"}, 0x20) syz_emit_ethernet(0x72, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021000033a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122800000000009500000800000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=@srh={0x3a, 0x12, 0x4, 0x9, 0x1, 0x40, 0x5b2, [@loopback, @local, @dev={0xfe, 0x80, '\x00', 0x24}, @local, @private1, @private2, @remote, @mcast1, @mcast2]}, 0x98) 2m41.558219993s ago: executing program 33 (id=853): r0 = socket$inet6(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000002c0)="18f20841d39b13bc13d4faf3afdaf84846abd878d67617ce84e31119697835cdd661cd3019f5fdd9004c549d8cd0b0482a3eb14b3e972a1736fdcdfcc9c1f3a91b1d00e26b43dadc8e05086cffe2d1dc93fb89f00f63a30e35bfb49cbce13baef7b77301a2aa3748eeac9ffb6cdd9e1d342fee15ae8e85372b8b74f888fd371882f9364ab6d4a5e15c79745bc2c5cfa6118f2f29912364785d1d97bb87bde6523fed1e62a1d9012178da16f451192b45e26e0d92c5cd7d92fe85f3a93f5473342027fc8383b16b25dc8c99319f2d8dbc25cd0b4cbfb0c700cd", 0xd9, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @mcast1, 0x1}, 0x1c) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "048f9e5384f6eb5e03c3caa57100f78a"}, 0x20) syz_emit_ethernet(0x72, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021000033a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122800000000009500000800000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=@srh={0x3a, 0x12, 0x4, 0x9, 0x1, 0x40, 0x5b2, [@loopback, @local, @dev={0xfe, 0x80, '\x00', 0x24}, @local, @private1, @private2, @remote, @mcast1, @mcast2]}, 0x98) 2m32.257802741s ago: executing program 34 (id=757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)={0x2f}, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000200)={0x89}, 0x8) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) connect(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m50.135902938s ago: executing program 2 (id=1520): r0 = socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa01}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r5, @ANYBLOB="15000200000000f4ffff0600000000011400"/29], 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000227bd7000fedbdf255200000008000300", @ANYRES32=r7, @ANYBLOB="06004801310000000800cb0004000000050089000500000005008800b80000000500880001000000060048005a000000"], 0x4c}}, 0x40) 1m50.065551501s ago: executing program 2 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0x8f0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004809c}, 0x20000000) 1m50.063258097s ago: executing program 2 (id=1522): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@uname={'uname', 0x3d, 'mountinfo\x00'}}]}}) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0xc0068000, 0x0, 0xfd6c, 0x0, 0x0, 0x0) (async) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000080)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSBRK(r5, 0x5427) r6 = syz_open_procfs(r0, &(0x7f0000000180)='net/l2cap\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000002740)='./file0\x00', 0x0) (async) lsetxattr$security_ima(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280), &(0x7f00000030c0)=@v2={0x5, 0x1, 0x8, 0x1000}, 0x9, 0x1) (async) ptrace(0x10, r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) ptrace$poke(0x5, r7, &(0x7f0000000080), 0xffffffffffffffd) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB="64ccdeafe7ed6729ac3c878c54864d5426545bf854111947670f3862c55347c8f21e3278553d1ba9f3f736a70de93cb0816b4f5961f673385cfed1a7a9d78337f89d5dfda6237f26b860708df0813e4d916b8b11941877807a95ad95e945e36a2cc69952a4"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r9, &(0x7f0000003480)={0x2020}, 0x2020) 1m49.547664453s ago: executing program 2 (id=1532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @null, 0x7, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 1m49.473415293s ago: executing program 2 (id=1533): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6(0xa, 0x2, 0x3a) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) accept4$alg(r0, 0x0, 0x0, 0x80000) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2008002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140), &(0x7f0000000240), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000010800000000000000000000000099eaaff49e28735899e304e8a6fa63de046ba61fde5f16036a62", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400ff04000008001b0000000000"], 0x30}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xa}, {0xc}, {0xe, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f00000003c0)) sendmmsg(r5, &(0x7f00000002c0), 0x1c3, 0x0) 1m49.473162134s ago: executing program 2 (id=1534): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) read(r1, 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x80c80, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xc, 0x7, 0x3, @SEQ_NOTEON=@note=0x16, 0x0, 0xa}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x590}, 0x1, 0x0, 0x0, 0x20000050}, 0x408b5) close(0x3) socket$inet6(0xa, 0x800, 0x6) 1m33.336592765s ago: executing program 35 (id=1534): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) read(r1, 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x80c80, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xc, 0x7, 0x3, @SEQ_NOTEON=@note=0x16, 0x0, 0xa}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000400)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x590}, 0x1, 0x0, 0x0, 0x20000050}, 0x408b5) close(0x3) socket$inet6(0xa, 0x800, 0x6) 1m27.606507479s ago: executing program 6 (id=1761): syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f00000020c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0xffffffff, 0x11a504, 0x5f, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) getdents64(r0, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r0, 0x0, 0x0) (async) getdents64(r0, 0x0, 0x0) 1m27.530799338s ago: executing program 6 (id=1762): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) migrate_pages(r0, 0x7, &(0x7f00000001c0)=0x1000, &(0x7f0000000200)=0x82) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "ebe250a8486be34705f4f827ae60ecb65e00", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r1, r2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="96e8d4898dbd51b7c58915dc660000000c8801000c4c256ba3e31fe4f2de3ff831c0321dd4f80435f50cea1a26bef60fc9ae7674cd735ab02f45e1ff34982f987cd03d588f2d48d3b118d2451c473401b1f953e43628d312466f8d2cd83482630c8cf2039e1cb2f84b3a4f1cf26c1181e5d96fb2831077b5170f6c5ee54b609fa8ade445956be45dfa477a685a51ae1ef7574fbe4ec20d33", @ANYRES32=0x1, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000100"/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x542, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000680)="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", &(0x7f0000000380)=@udp6=r4, 0x1}, 0x20) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x3, 0xd, 0x1, 0xff}, 0x2, 0x0, 0xffffffff, 0x2, 0x3, 0xa, 0x10, 0x6, 0x1, 0x8, {0x1e, 0x7fffffff, 0xa, 0x9, 0xace, 0x5}}}}]}, 0x78}}, 0xc000) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x3c}}, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000002c0)={0x81, "c5c2a91e002b1b800000ffe73d5eff0010ffffffe70000ffe700", 0x1, 0xa, 0x1, 0xb700, 0x4040204, 0x2}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x4) 1m27.349074957s ago: executing program 6 (id=1763): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000005e40)) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000040)) 1m27.348830413s ago: executing program 6 (id=1764): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}, 0x1, 0x0, 0x0, 0x8094}, 0x8084) 1m27.242507962s ago: executing program 6 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x200}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r3], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000000)=[r3], &(0x7f0000000080), 0x1}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="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"/590], 0x254}, 0x1, 0x0, 0x0, 0x4c804}, 0x20044014) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) setreuid(0xee00, 0xee00) mlockall(0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000000)={r8, r9, 0x1, 0x0, 0x1000000000000}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000500)=r9) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f0000000080)={r10, r10, 0x0, 0x5, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000180)={&(0x7f0000000140)=[r3, r3, r3, r3, r10, r3, r3], 0x40b, 0x7, 0xe}) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3bd05c6e17aa31076b876c2578f21e1de1c487472e9b9ae0ad4b65a8f641360000007ea608641608f36514001ac0041c734dec0c5e23000202080006000500010300000300eab556a705251e618294ff1051f60a001000000e4509", 0x64}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008080) 1m27.157985784s ago: executing program 6 (id=1766): ustat(0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000000)={0x188, 0x0, 0x0, 0x0, 0x2000, "", [@nested={0x176, 0x0, 0x0, 0x1, [@nested={0xb5, 0x6e, 0x0, 0x1, [@generic="5d279fedee8608309c61bfbaf539a450a4276a6fddf891160432cacd7dca6c4f676225dd4429a916b06f4f5cf1e7a6e48c7894a794618fecaf8932caacafb2b95fbafbbfa88e21c3fefc2d430e4a39bf4fe28180ee4ba3eff5543d7fde16b6bf31014dbf51744c309153232046efd3613bd6f662a397243bedf2fdc5729c9f0428b610d1321e8e46089083793f0b0c7f6304a730", @generic="7f0f5b2ddd0b6a54fd81246da402b6adb09056b17d", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x5}]}, @generic="f4971f256753ddc6ef8d1c2c4319d521bb39b78ebeebb2646efbc75d37f7677fa4c75e73378b9a3f7fdd23d7f48837e6e8e88f8404a102bb05cc0049ee67f21a906dc4f3de9778c442419564f45eaf37f7cfb78a8b96945ba65b27dd04fa9ed0d31f90717452da2664771516a3396185e9b0ef2fcb05a0e22793c8eeacbd642c6784b2eeb4bf6d4185eb36508acc2d33b475f698a7baa2370c9658ebb348ca8b270f0b443849b3f921212107fe16", @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x188}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002e00030500"/20, @ANYRES32, @ANYBLOB="d2602e76b3da48762f62bd15897fa8925d7ed449a11a6478e71a4a105c31f89659fb816ecf2bfa51ee02eb7a06cdf8d8675a34057581bc5e02b5d1d7c1cf22d6cccb6a0db491d3fb3aadcf1e55143a82ae2363d09ec5370e234dd6ad1b7bf7eb36887e6b0a6babaacd1f438866f739e9f18fd132ec6ac8bbf9ed5edd1479c12d8c5813cbd99cbbe3fc4d836aa32fe2e2"], 0x30}], 0x1}, 0x0) 1m17.223735688s ago: executing program 7 (id=1901): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m17.159960966s ago: executing program 7 (id=1903): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000003a80), &(0x7f0000003880)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r1, 0xff02) (async, rerun: 64) ioctl$FIONCLEX(r1, 0x5450) (rerun: 64) 1m16.956605596s ago: executing program 7 (id=1905): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000006111c000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) 1m16.848976655s ago: executing program 7 (id=1907): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) waitid(0x0, 0x0, 0x0, 0x60000009, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f1360806000108000604e70143b1849c32a1ac1414bbaaaaaaaaaaaa00000000"], 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) 1m16.775444675s ago: executing program 7 (id=1908): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) 1m16.065499958s ago: executing program 7 (id=1916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@getchain={0x23, 0x66, 0xfcd66a900070b359, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x1328, 0x0, 0xc8, 0x8, 0x1188, 0x5803, 0x1258, 0x2e8, 0x2e8, 0x1258, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xffffff00, 0xffffff00, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1120, 0x1188, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@dst={{0x48}, {0x401, 0x0, 0x1, [0x4, 0xc, 0x5, 0x9, 0x7, 0x1, 0x1000, 0x4, 0x804, 0x5, 0x6, 0xfffa, 0x0, 0x8, 0xb6, 0x8], 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe5}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffffff, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff], 'wg0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13b7) 1m15.970767448s ago: executing program 36 (id=1916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@getchain={0x23, 0x66, 0xfcd66a900070b359, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x1328, 0x0, 0xc8, 0x8, 0x1188, 0x5803, 0x1258, 0x2e8, 0x2e8, 0x1258, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xffffff00, 0xffffff00, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1120, 0x1188, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@dst={{0x48}, {0x401, 0x0, 0x1, [0x4, 0xc, 0x5, 0x9, 0x7, 0x1, 0x1000, 0x4, 0x804, 0x5, 0x6, 0xfffa, 0x0, 0x8, 0xb6, 0x8], 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe5}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffffff, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff], 'wg0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13b7) 1m10.653291776s ago: executing program 37 (id=1766): ustat(0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000000)={0x188, 0x0, 0x0, 0x0, 0x2000, "", [@nested={0x176, 0x0, 0x0, 0x1, [@nested={0xb5, 0x6e, 0x0, 0x1, [@generic="5d279fedee8608309c61bfbaf539a450a4276a6fddf891160432cacd7dca6c4f676225dd4429a916b06f4f5cf1e7a6e48c7894a794618fecaf8932caacafb2b95fbafbbfa88e21c3fefc2d430e4a39bf4fe28180ee4ba3eff5543d7fde16b6bf31014dbf51744c309153232046efd3613bd6f662a397243bedf2fdc5729c9f0428b610d1321e8e46089083793f0b0c7f6304a730", @generic="7f0f5b2ddd0b6a54fd81246da402b6adb09056b17d", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x5}]}, @generic="f4971f256753ddc6ef8d1c2c4319d521bb39b78ebeebb2646efbc75d37f7677fa4c75e73378b9a3f7fdd23d7f48837e6e8e88f8404a102bb05cc0049ee67f21a906dc4f3de9778c442419564f45eaf37f7cfb78a8b96945ba65b27dd04fa9ed0d31f90717452da2664771516a3396185e9b0ef2fcb05a0e22793c8eeacbd642c6784b2eeb4bf6d4185eb36508acc2d33b475f698a7baa2370c9658ebb348ca8b270f0b443849b3f921212107fe16", @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x188}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002e00030500"/20, @ANYRES32, @ANYBLOB="d2602e76b3da48762f62bd15897fa8925d7ed449a11a6478e71a4a105c31f89659fb816ecf2bfa51ee02eb7a06cdf8d8675a34057581bc5e02b5d1d7c1cf22d6cccb6a0db491d3fb3aadcf1e55143a82ae2363d09ec5370e234dd6ad1b7bf7eb36887e6b0a6babaacd1f438866f739e9f18fd132ec6ac8bbf9ed5edd1479c12d8c5813cbd99cbbe3fc4d836aa32fe2e2"], 0x30}], 0x1}, 0x0) 53.283717294s ago: executing program 9 (id=2267): msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000076070000"], 0x8, 0x800) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x32314241, 0x3, 0x7, [{0x6, 0xd381}, {0xdc5, 0x5}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcf}, {0x5, 0x6}, {0x1, 0x80000005}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getflags(r1, 0x40a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7e}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x6044084) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x3c, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 53.283154521s ago: executing program 9 (id=2268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x4, @val=@iter={0x0}}, 0x20) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000780)="6900cda20a420700000075e388a7f679edbb", 0x12}], 0x1) 53.18704664s ago: executing program 9 (id=2270): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x363}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x8884) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r9, 0xc01464a6, &(0x7f0000000240)={r10}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r6) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x18c, r11, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa0ac}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffc, @private1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8e}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x765b527b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000041) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f00000003c0)={0x7, 'wg1\x00', {0xfff}, 0x6}) 53.005937879s ago: executing program 9 (id=2272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="728b0010220020002bbd7000fbd750374b5ef1005f86c7118249a7b2c5d795a4ed155305759ed239fe2338244cc7ea7e7ca7614f8038518a14ed796cb87b9530b94a787ffa4be6cb42b0926c01"], 0x14}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="728b0010220020002bbd7000fbd750374b5ef1005f86c7118249a7b2c5d795a4ed155305759ed239fe2338244cc7ea7e7ca7614f8038518a14ed796cb87b9530b94a787ffa4be6cb42b0926c01"], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x2b4e, &(0x7f0000000700)={0x0, 0x0, 0x4, 0x2, 0x2a4, 0x0, r1}, &(0x7f0000000680)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000180)}, {&(0x7f00000003c0)=""/191, 0xbf}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x0) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1100) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, [@exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x530dbdb7c0738e9c, 0x2c, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f0000000400)={0x5, 0x2, 0x660, 0x5a9}, 0x10}, 0x94) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async) ptrace(0x10, r9) ptrace$setregs(0x1a, r9, 0xc, &(0x7f0000000000)) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r10, 0x5035, 0x0) io_uring_enter(r4, 0x5da1, 0x6efa, 0x8, 0x0, 0x0) 52.107308484s ago: executing program 9 (id=2286): lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x10000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x8000) ioctl$I2C_SLAVE(r3, 0x703, 0x12a) listen(r1, 0x1) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="13", 0x1}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r1, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r6 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}, 0x4000) sendto$inet(r6, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r6, 0x0, 0x0, 0x12041, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 51.780840436s ago: executing program 9 (id=2292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000a00ffffffffffffaaaaaaaaaa430800450000204000e000032f90"], 0x32) 51.702827459s ago: executing program 38 (id=2292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000a00ffffffffffffaaaaaaaaaa430800450000204000e000032f90"], 0x32) 2.386960237s ago: executing program 4 (id=2769): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24044011}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a310000400014000480100001"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vsock(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.382982133s ago: executing program 4 (id=2770): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002640), 0x900, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000002680)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000026c0)={r1}) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004009c00000000000100000095000000000000008519fe25b0fb7b"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x236c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1008, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x204, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf4, 0x4, "d45617183871415f05bcbffb8f899cbbea3725a60325911b37f50b0cdc7d6539279ffde76875c928ef9c69a4967bace10427117155ded22d48e540ab212b8542996922c3827ef8e7dd7909380ff148c58ee8aecb498fb1101c283d5c21a463f3016a49efd6946818e2c5a3eb8ed70265c8c4ffab9fc52610103e407c6865616e241d623c984f39b8ce3364e0eacf11ebb81bd4e57549b7aff8fe36542c35d75a06521c543e98437b228186ea1183b8cc1fe7f551023af8a1df172104ffb7befe2a3ceb3b6753c831279b91c7c1ff0d513a3811c395092ca5a17a3876fe42b063e3df1a5171c416a4b9076c3dd66444ab"}, @ETHTOOL_A_BITSET_MASK={0xb2, 0x5, "0750d1e99a3a68267218dd22a598960024ee7805c28ae38727cf7ad68ff729c9349f57cad941864acfbd4a10ea848e20906f6e937a9c141b9956cf3e4da5cf5d187a384667515a3111768ad05958bc8962e5efea94e4ae248a8a48655972135b11a9c5b671c31303490323fdd1dcd81ce7a0a8b63832692791dd0ceeda80662b9e1eaf02c01b101dc5e35726052aeb9ff7874a5c3eaac6b35c36a680d5a8481506a5962f9575ad9206633c226353"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1024, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xad}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8020}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x74, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc, 0x5, "1d526eb1cc9b3ca1"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x159e94b2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',{]*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}]}]}]}, 0x236c}, 0x1, 0x0, 0x0, 0x8a066de89a7a9ede}, 0x845) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 2.194272266s ago: executing program 4 (id=2774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xd, 0x0, @void}, 0x10) ptrace$ARCH_SHSTK_STATUS(0x1e, 0xffffffffffffffff, &(0x7f0000000000), 0x5005) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="64f30f0966bad104edc74424000a000000c744240209000000c7442406000000000f011c240f0fd31c2e0f01cb660f3881ac280028000026f30f1ef966bad10466ed0f07c4c18758a000800000", 0x4d}], 0x1, 0x1, &(0x7f0000000300), 0x0) 2.193562319s ago: executing program 4 (id=2775): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x55) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x810280}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x2d}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "7dbd8d2c77e70a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2dab409ef8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x84}, 0x1, 0x0, 0x0, 0x4002}, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xccfb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x805041}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000804) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000005c0)={'dvmrp1\x00', {0x2, 0x4e21, @private=0xa010102}}) (async) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600), 0x28003, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x67711ac4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20040806) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000780)={@null, @null}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x29, 0xd, 0xc1, 0x2, 0x47, @mcast1, @dev={0xfe, 0x80, '\x00', 0xd}, 0x80, 0x700, 0x10, 0x2}}) sendmsg$nl_route(r5, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@ipv6_getaddr={0x50, 0x16, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x20, 0x0, 0xfe, r7}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}, @IFA_FLAGS={0x8, 0x8, 0x90}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x80}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040100}, 0x20004084) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, &(0x7f0000000b00)={0x0, [0x60, 0x10, 0x4], [{0x6, 0x6, 0x1, 0x1}, {0xfffffff9, 0x3, 0x0, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x1, 0x1}, {0x3e, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}, {0x1, 0x325, 0x0, 0x0, 0x1}, {0x7, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xf, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x10, 0x8c}, {0x7fffffff, 0x5, 0x0, 0x1, 0x1}, {0x5, 0xdf4, 0x1}], 0xc4d61f35}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x120, r8, 0x924, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d03be46c6e1756cbb35332b408bb0ab7f8b4169e6b16be6b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="249a7c1b9823b4d29cfebdc0e4b9011b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="60499fb37e330ed64bc91850f5649ee6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7f856ebc517c8001"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c2628b3db321e2f6b6cf25734feb01093bd7bc07e578702033759c9572a33427"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8ae3b8712120d81857d5d49f06966ae6dc9240e368418426363f417bda9c2967"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6feb204ea51b8142"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9b5eb67d5754b5adc22e35eac3cce623"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fe5ba87b67b2e3b4f7d050119f31db82168393aa6a7c20f5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8387c90b4ec9a3705c5e0c333d913d826c10fe5cd4a5721c5eea2e4d2ee8da75"}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c0) (async) write$binfmt_aout(r5, &(0x7f0000000e00)={{0x10b, 0x2, 0xfd, 0x227, 0x30, 0x8, 0x63, 0x9}, "cf18b4933cdeb76092206a0768698d366ba8ac01a01ba2a7562c8e68581347ff2959efb5949b39ff9a8f008a1622e01317ebff08497450d24ab9889d1475f6b39afbdfeecd8e29877068cd6dbf820f76151087e9be1323cd426ba550e85e0f888b80d6c31b05a3e2b7d9addc7bbe2c94497989712f47acc414165de43c622e2686a3dccb069d848471dc3f3d5b2c8c65ec43c471d25e9e4b0a52fbf7d344dad7500dade5bb4644e35f822962d0cd2d4dc4a66dab65d8d11f244a059c7ec1c52a68b81ef9cbbc4f2b84882c9676c39ccc2bd6054cc24e6a017c36e2f22c72a53704f063254f725709c5ac95efe965ff15ba725fedb77e", ['\x00', '\x00', '\x00']}, 0x416) (async) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001280)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000001380)=0xe8) sendmsg$nl_generic(r9, &(0x7f0000001780)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001740)={&(0x7f00000013c0)={0x354, 0x38, 0x20, 0x70bd2a, 0x25dfdbfe, {0x4}, [@generic="536f3a03588b7b1a910071bd3fd335d8e80fb1f00a5995ac44c5513657ec6a6a20523eb98f33c24725d45337f32faa8aad1c5c61474bbf6e344e0912fe86136e3848e43bdebb398cae4ce312281270dbb96dda71ccd3fa5457d8bfd88b95862c700ff79087f36f922ae459dc6eece8bf1d7a307ade3aaac0d0524c89f29d0586f771b1a26a2d30a6a828b6cd142ca96d22d55e498dc9f0745ba5cd5a44dcaefb628875ecb201c0d78c84b57e381f54f4e2531665bfc75f886920836af41148034d38cbc18eb5f4f4f9c3d8c4dbd05b44ddeff84f24", @nested={0x10, 0x5a, 0x0, 0x1, [@nested={0x4, 0x7b}, @nested={0x4, 0xce}, @nested={0x4, 0x121}]}, @nested={0x244, 0x106, 0x0, 0x1, [@generic="941da77dfa5cfa7249cd750552f731370a7c4d39955fb32f3b237e5c2d26051ffd5c30f61a22532c4e8d3ee06e5ed7568b4d38fe099e784ed78d62511127df0324cde31d3b784b3917c46ec3253ffd6fe303e12a43178c82f16c4eb58c2691651b3d9e2117f75b3d00e967685383fd6fa8dc8e544821a54f10b8b05b127d1ddc49137655842207dd8324e6e2615da532de511c0a0ea2df4d599707fc81ca7f8bc76926f97024deff15e8b042e425621866b5", @typed={0x8, 0xb8, 0x0, 0x0, @uid=r10}, @generic="e1bf86cb4f6e0e7c74f3c0dcbcd33edfc24b578a04032b12996c614cf38775c6b1db43404f5443699f4b9cf55e5e7628d465b8b372b14edf775fac08ddd1d8c19c6700f52808af1ff0729c66a1809d785cb540472222fc8ed9d9b86df1a65943c2af747b078efd32725fd03ca9b793dc398881ad965a18e57f95f4ec84d8c4d14843a2a5a2f791b1b75af72e54da3f811254", @generic="fd0eaa8c043dd6a0088fd99e1acaaee125ec56242e4f5410bdafb52a66370ff5d2395f9fb9c3e8de08f637261870939107f7ef9abef9adeddfb708e46ec41e2ecce48093973091ef5b8aeaacccc656fb47cb16669aaae93dd594e0450d97a532bb0d999e4e8d55935fbd1b877bcd33eda86a141c9fa0776290c51316963dbeeaa463f0d08a597fa31c5ca80046b64c9c4c07784b642def02", @typed={0x5c, 0x0, 0x0, 0x0, @binary="989bc16a3b6f69552034beade7e237e889041506431d2085cbea432da030df91612df36e9f50bc5d40823f82d096197ccec37a3722684b2103e80d4c1241915019dccb98a329dcaaae8ed3a5c8922262cccf894c3708fff4"}]}, @typed={0xc, 0x39, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x132, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x354}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$int_out(r9, 0x0, &(0x7f00000017c0)) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r9) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040884}, 0x24000011) (async) io_setup(0xb06, &(0x7f0000001940)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000001980), 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f00000019c0)={0x1, 'veth0_virt_wifi\x00', {}, 0x4}) 2.033112847s ago: executing program 4 (id=2779): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.032288457s ago: executing program 4 (id=2781): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r1}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000012c0)=ANY=[@ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x48084}, 0xb5af3f87cbb65c83) syz_usb_control_io$hid(r2, 0x0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x1f, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000100)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r10, 0x0) readv(r7, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x2) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_disconnect(r2) 1.348701296s ago: executing program 8 (id=2786): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x5}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) r1 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'pim6reg\x00', {0x2, 0x4e23, @local}}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mkdirat(r2, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) accept4$unix(r2, 0x0, &(0x7f0000000040), 0x800) 1.348232459s ago: executing program 5 (id=2787): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x4002}]}}]}, 0x40}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200, &(0x7f0000000000)={[{@gid}], [{@permit_directio}]}) 1.348009089s ago: executing program 5 (id=2788): sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000010140)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fff8, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r3}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001b00)='veno', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x801) (async) io_uring_enter(r2, 0x4255, 0x7721, 0x16, 0x0, 0x0) (async) close_range(r1, r1, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) 1.340783169s ago: executing program 8 (id=2789): munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r4, 0x5, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000000)={0x4, [0xffff, 0x3, 0x0, 0x3]}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 1.285716012s ago: executing program 5 (id=2790): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) (async) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = dup3(r5, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$vbi(0x0, 0x0, 0x2) (async) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, 0x0) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) (async) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000140)={{0x0, 0xf, 0x800, 0x5, 0x7fffffff, 0x0, 0xd6f, 0x2, 0xf, 0x0, 0x6, 0x5, 0x8, 0x8, 0x4}, 0x8, [0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000140)={{0x0, 0xf, 0x800, 0x5, 0x7fffffff, 0x0, 0xd6f, 0x2, 0xf, 0x0, 0x6, 0x5, 0x8, 0x8, 0x4}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{r7, 0x100000000, 0x10001, 0xebfe, 0x0, 0xef, 0x49, 0x0, 0x0, 0xfffffff7, 0x8, 0x641, 0x2, 0x10001, 0x8000000000000001}}) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 1.285202549s ago: executing program 8 (id=2791): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x29, 0xb, 0x70bd27, 0x4000, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="78a449a0"]}]}, 0x1c}}, 0x4040080) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000006c0)) r2 = syz_open_dev$video4linux(&(0x7f0000000780), 0x8dd, 0x200000) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000007c0)={0x3, "96a49913ce8ffde4155f880d45fa7a97180b2000b9c31e65428d3db5e063061b", 0x1, 0x40, 0xb8f4, 0x2000, 0x2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000840)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000880)={@local, @local, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a3705", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x0, 0x7}], {{0x0, 0x0, r6, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x62, 0x62, 0xb, [@datasec={0xb, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x3, 0x1287c6b}], "d88b"}, @typedef={0x40, 0x0, 0x0, 0x8, 0x5}, @struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x8, [{0xb, 0x5, 0xe}, {0x5, 0x5, 0xb}]}, @restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @float={0x1, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x0, 0x0, 0x61, 0x5f, 0x0, 0x2e, 0x5f, 0x61, 0x51]}}, &(0x7f0000000500)=""/204, 0x87, 0xcc, 0x0, 0x7}, 0x28) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r8, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @multicast1}, {0x0, @random="9705000000e8"}, 0x48, {0x2, 0x0, @local}}) r9 = socket(0x10, 0x2, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write(r9, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x5, 0x7, 0x8001, 0x4040c, 0x1, 0x7, '\x00', r4, r7, 0x0, 0x4, 0x3}, 0x50) r10 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=@ipv6_newnexthop={0x2c, 0x68, 0x500, 0x70bd28, 0xfff, {0xa, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000004800)={0x2020}, 0x2020) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a61c6d10be1b27adc3e216c249e4fa2ef9b69c4783477886c4ec7282a6595c978b0d4646ee07880b284397ffb4ae4545d6f40956b43db5c44695cc23f8f2653c72d13"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.178599147s ago: executing program 8 (id=2792): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x34000000000, 0x0, 0x0, 0x0, 0x1ff}, {0xfffffffffffffffc}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x7}}, 0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x7d, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}, {0x7, 0xc, "0346176177c606d57eec"}]}]}}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = socket(0x10, 0x3, 0x5) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000080), 0x4) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x5, 0x4}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r8, 0x1}, 0x8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x5, 0x5, 0x101, 0x200}}) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 1.11429521s ago: executing program 8 (id=2793): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000002140)="9cfa55b61d1ace1bb742c8058b60e914e16ecf12de496471172ee32464baf041e8a832a29e000000000000000000000000002000", 0x0, 0x1f) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') close_range(r0, r1, 0x2) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x10000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x1003, &(0x7f00000000c0)=""/4099}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r1) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 964.806466ms ago: executing program 5 (id=2794): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x1, 0xc82}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x3, @raw_data="c708189fdcbe38f109fd41eca1fab6cd0322a56c377827c1fce9457335c4cf47591deda9c33bc6cc5b7d3385a843760dd72871795d9eec0df1cf3d0589e7946a9bac962801127e85aca8abe490516e85fa1cca18da61bee3bfa7d0f5ed52f194b6024df56e43d16d7ffeeac46eb01cb5757d29bb22d8abce603d90a7001e3f9be35d285b71faf95797b771ab7048423887417857c97c7c08fc78c4a73b824df30347e9b3a7edbacbafa8e996d0705d042048e6bee4c2de8567b14ab3f6fef57955f02e224730470a"}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0xc090, 0x0) 964.379983ms ago: executing program 5 (id=2795): statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000680)=""/4096) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r1 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$addseals(r1, 0x409, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x84, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x24}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x44084}, 0x48000) r6 = socket$kcm(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r6, 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001700)={'syztnl1\x00', &(0x7f0000001680)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x4, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1, 0x8000, 0x80000000}}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000017c0)={0xffffffffffffffff, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xc11d, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0xc47b9e138db67b45, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000001740)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x4, 0x10, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001800)=[r0, r0, r8, r2, r0, r2, r2], 0x0, 0x10, 0xf}, 0x94) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="cc4455b8", 0x4}], 0x1, 0x4, 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)="2c1cbf6d78c76cca14f0b1dfd5af514fcc6f5bd69ce4df3145e02c97dd3c0a", 0x1f}], 0x1) 194.829404ms ago: executing program 8 (id=2796): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120189008000", 0x0, 0x0, 0x4, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x3, 0x9, &(0x7f0000000040)=""/9, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdffffffa}, 0x94) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r2, 0x21, 0x800001b, r4, 0x0) fanotify_mark(r4, 0x2, 0x40000038, r4, 0x0) r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x1, 0x8, 0x8, {}, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120189008000", 0x0, 0x0, 0x4, 0x0, 0x0}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x3, 0x9, &(0x7f0000000040)=""/9, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdffffffa}, 0x94) (async) fanotify_init(0x0, 0x0) (async) epoll_create1(0x0) (async) fcntl$dupfd(r2, 0x0, r3) (async) fanotify_mark(r2, 0x21, 0x800001b, r4, 0x0) (async) fanotify_mark(r4, 0x2, 0x40000038, r4, 0x0) (async) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) (async) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x1, 0x8, 0x8, {}, 0x0, 0x2}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) (async) 0s ago: executing program 5 (id=2797): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x100}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "420000ffff00000000000f00"}) r4 = syz_open_pts(r3, 0x103100) dup3(r4, r3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'pimreg0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000010000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x448000, 0x2) kernel console output (not intermixed with test programs): 6][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.573825][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.577088][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.581059][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.635966][T12587] misc userio: Invalid payload size [ 246.636342][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.640051][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.691365][T12587] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 246.693896][T12587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 246.856103][ T6009] psmouse serio3: Failed to reset mouse on : -5 [ 247.473580][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.476204][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.522399][ T40] audit: type=1400 audit(2000000164.829:828): avc: denied { listen } for pid=12599 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.539937][ T40] audit: type=1400 audit(2000000164.829:829): avc: denied { accept } for pid=12599 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.715279][T12622] bond5: invalid ARP target 0.0.0.0 specified for addition [ 247.717582][T12622] bond5: option arp_ip_target: invalid value (0) [ 247.720798][T12622] bond5 (unregistering): Released all slaves [ 247.900230][T12631] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1953'. [ 247.907283][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1953'. [ 247.909072][T12633] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 248.151111][ T60] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 248.214148][ T950] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 248.311618][ T60] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 248.314944][ T60] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 248.318376][ T60] usb 9-1: config 0 interface 0 has no altsetting 0 [ 248.322923][ T60] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.325944][ T60] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 248.328579][ T60] usb 9-1: Product: syz [ 248.329974][ T60] usb 9-1: Manufacturer: syz [ 248.331668][ T60] usb 9-1: SerialNumber: syz [ 248.334896][ T60] usb 9-1: config 0 descriptor?? [ 248.338820][ T60] hub 9-1:0.0: bad descriptor, ignoring hub [ 248.340789][ T60] hub 9-1:0.0: probe with driver hub failed with error -5 [ 248.344701][ T60] usb 9-1: selecting invalid altsetting 0 [ 248.387744][ T950] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 248.391960][ T950] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 248.396457][ T950] usb 10-1: config 0 interface 0 has no altsetting 0 [ 248.400830][ T950] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.404442][ T950] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 248.407752][ T950] usb 10-1: Product: syz [ 248.409457][ T950] usb 10-1: Manufacturer: syz [ 248.411318][ T950] usb 10-1: SerialNumber: syz [ 248.414957][ T950] usb 10-1: config 0 descriptor?? [ 248.419607][ T950] usb 10-1: selecting invalid altsetting 0 [ 248.449328][ T5948] Bluetooth: hci0: command tx timeout [ 248.673964][ T5974] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 248.702008][ T6106] usb 10-1: USB disconnect, device number 18 [ 248.829330][ T40] audit: type=1326 audit(2000000166.045:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1952" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x0 [ 248.837449][ T5974] usb 13-1: too many configurations: 102, using maximum allowed: 8 [ 248.840766][ T5974] usb 13-1: config index 0 descriptor too short (expected 65387, got 45) [ 248.844281][ T5974] usb 13-1: config index 1 descriptor too short (expected 65387, got 45) [ 248.848067][ T5974] usb 13-1: config index 2 descriptor too short (expected 65387, got 45) [ 248.851484][ T5974] usb 13-1: config index 3 descriptor too short (expected 65387, got 45) [ 248.854855][ T5974] usb 13-1: config index 4 descriptor too short (expected 65387, got 45) [ 248.858666][ T5974] usb 13-1: config index 5 descriptor too short (expected 65387, got 45) [ 248.862000][ T5974] usb 13-1: config index 6 descriptor too short (expected 65387, got 45) [ 248.865352][ T5974] usb 13-1: config index 7 descriptor too short (expected 65387, got 45) [ 248.870390][ T5974] usb 13-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 248.873244][ T5974] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.875761][ T5974] usb 13-1: Product: syz [ 248.877289][ T5974] usb 13-1: Manufacturer: syz [ 248.878794][ T5974] usb 13-1: SerialNumber: syz [ 249.099956][T12647] SELinux: truncated policydb string identifier [ 249.102730][T12647] SELinux: failed to load policy [ 249.110477][ T5974] lan78xx 13-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 249.114943][ T5974] lan78xx 13-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 249.118710][ T5974] lan78xx 13-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 249.125416][ T5974] lan78xx 13-1:1.0: probe with driver lan78xx failed with error -71 [ 249.130973][ T5974] usb 13-1: USB disconnect, device number 2 [ 249.369605][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.373923][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.376752][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.379911][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.383680][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.512843][ T6021] usb 9-1: USB disconnect, device number 32 [ 249.603727][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.704774][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.707538][T12660] fuse: Unknown parameter 'poo' [ 249.721777][T12652] chnl_net:caif_netlink_parms(): no params data found [ 249.798638][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.834845][T12652] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.838019][T12652] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.841383][T12652] bridge_slave_0: entered allmulticast mode [ 249.846094][T12652] bridge_slave_0: entered promiscuous mode [ 249.850745][T12652] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.854645][T12652] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.857617][T12652] bridge_slave_1: entered allmulticast mode [ 249.861639][T12652] bridge_slave_1: entered promiscuous mode [ 249.877321][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.905683][T12652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.911899][T12652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.936860][T12652] team0: Port device team_slave_0 added [ 249.941169][T12652] team0: Port device team_slave_1 added [ 249.967073][T12652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.970264][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.980441][T12652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.996523][T12652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.998732][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.007192][T12652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.035884][T12652] hsr_slave_0: entered promiscuous mode [ 250.039332][T12652] hsr_slave_1: entered promiscuous mode [ 250.041558][T12652] debugfs: 'hsr0' already exists in 'hsr' [ 250.043515][T12652] Cannot create hsr debugfs directory [ 250.108051][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1968'. [ 250.146622][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 250.149834][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1969'. [ 250.157807][T12686] netlink: 'syz.5.1969': attribute type 11 has an invalid length. [ 250.160599][T12686] netlink: 'syz.5.1969': attribute type 13 has an invalid length. [ 250.211640][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1971'. [ 250.230447][ T12] bond2 (unregistering): (slave erspan1): Releasing active interface [ 250.256586][ T12] gretap0 (unregistering): left promiscuous mode [ 250.637396][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.642017][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.645999][ T12] .` (unregistering): Released all slaves [ 250.651280][ T12]  (unregistering): left promiscuous mode [ 250.654830][ T12]  (unregistering): Released all slaves [ 250.665844][ T12] bond1 (unregistering): Released all slaves [ 250.673396][ T5948] Bluetooth: hci0: command tx timeout [ 250.674021][ T6009] misc userio: Buffer overflowed, userio client isn't keeping up [ 250.773830][ T12] bond2 (unregistering): Released all slaves [ 250.802556][T12699] tipc: Started in network mode [ 250.804124][T12699] tipc: Node identity , cluster identity 4711 [ 250.888721][ T12] : left promiscuous mode [ 250.904734][T12712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.925874][T12711] bond1: entered promiscuous mode [ 250.928305][T12711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.015794][T12652] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 251.021155][T12652] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 251.028338][T12652] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 251.032347][T12652] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 251.084326][T12652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.116888][T12652] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.130089][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.133209][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.133647][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1984'. [ 251.149959][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.153044][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.170290][T12745] syzkaller1: entered promiscuous mode [ 251.171906][T12745] syzkaller1: entered allmulticast mode [ 251.288562][T12755] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1988'. [ 251.292285][T12755] netem: unknown loss type 13 [ 251.294942][T12755] netem: change failed [ 251.308913][ T40] audit: type=1804 audit(2000000168.364:831): pid=12758 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1989" name="/newroot/325/file0" dev="tmpfs" ino=1824 res=1 errno=0 [ 251.309938][T12758] ref_ctr increment failed for inode: 0x720 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888033873d40 [ 251.327084][T12756] uprobe: syz.5.1989:12756 failed to unregister, leaking uprobe [ 251.378364][T12652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.530248][ T5948] Bluetooth: hci1: command tx timeout [ 251.546389][ T12] veth0: left promiscuous mode [ 251.571441][ T12] hsr_slave_0: left promiscuous mode [ 251.574150][ T12] hsr_slave_1: left promiscuous mode [ 251.576811][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.579651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.585024][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.587939][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.602931][ T12] veth1_macvtap: left promiscuous mode [ 251.606127][ T12] veth0_macvtap: left promiscuous mode [ 251.608536][ T12] veth1_vlan: left promiscuous mode [ 251.610550][ T12] veth0_vlan: left promiscuous mode [ 251.863977][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1996'. [ 251.913715][T12789] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1997'. [ 252.065806][ T6009] input: PS/2 Generic Mouse as /devices/serio3/input/input89 [ 252.106076][ T60] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 252.270864][ T60] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 252.274118][ T60] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.280587][ T60] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 252.284359][ T60] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 252.287318][ T60] usb 13-1: Manufacturer: syz [ 252.296747][ T60] usb 13-1: config 0 descriptor?? [ 252.300541][ T6009] psmouse serio3: Failed to enable mouse on [ 252.331125][T12652] veth0_vlan: entered promiscuous mode [ 252.337158][T12652] veth1_vlan: entered promiscuous mode [ 252.357441][T12652] veth0_macvtap: entered promiscuous mode [ 252.361342][T12652] veth1_macvtap: entered promiscuous mode [ 252.372582][T12652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.373463][ T60] rc_core: IR keymap rc-hauppauge not found [ 252.379084][T12652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.382878][ T60] Registered IR keymap rc-empty [ 252.385964][ T60] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 252.387230][ T6046] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.390652][ T60] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input90 [ 252.392069][ T6046] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.400608][ T6046] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.403377][ T6046] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.474566][ T6046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.477041][ T6046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.506524][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.509061][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.536072][ T142] usb 13-1: USB disconnect, device number 3 [ 252.897350][ T5948] Bluetooth: hci0: command tx timeout [ 252.947747][T12839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=12839 comm=syz.9.2011 [ 252.983009][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.027072][T12843] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 253.045328][T12845] openvswitch: netlink: Flow key attr not present in new flow. [ 253.123343][T12853] Bluetooth: (null): Invalid header checksum [ 253.221736][T12859] EXT4-fs (sr0): unable to read superblock [ 253.226458][ T40] audit: type=1400 audit(2000000170.160:832): avc: denied { shutdown } for pid=12861 comm="syz.9.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.296762][T12876] cgroup: noprefix used incorrectly [ 253.298617][T12877] cgroup: noprefix used incorrectly [ 253.439191][ T40] audit: type=1400 audit(2000000170.356:833): avc: denied { ioctl } for pid=12895 comm="syz.9.2029" path="socket:[63492]" dev="sockfs" ino=63492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 253.537295][T12906] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2032'. [ 253.696748][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2038'. [ 253.752883][ T5948] Bluetooth: hci1: command tx timeout [ 253.907501][T12945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.910493][T12945] block device autoloading is deprecated and will be removed. [ 253.957516][T12940] QAT: Invalid ioctl -2142727111 [ 253.981661][T12952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2049'. [ 254.025356][T12960] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 254.027484][T12960] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.034675][T12964] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2053'. [ 254.035082][T12960] vhci_hcd vhci_hcd.0: Device attached [ 254.037476][T12964] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 254.042103][T12966] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 254.052767][ T10] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 254.058027][T12961] vhci_hcd: connection closed [ 254.060960][ T222] vhci_hcd vhci_hcd.9: stop threads [ 254.064826][ T222] vhci_hcd vhci_hcd.9: release socket [ 254.067680][ T222] vhci_hcd vhci_hcd.9: disconnect device [ 254.214500][T12978] No source specified [ 254.223340][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 254.226777][ T10] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 254.229687][ T10] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 254.232488][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 254.236922][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.240025][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.243256][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 254.249135][ T10] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 254.252248][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.256702][ T10] usb 10-1: config 0 descriptor?? [ 254.478252][ T10] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 254.484378][ T10] usb 10-1: USB disconnect, device number 19 [ 254.488436][ T10] usblp0: removed [ 254.497296][T13000] netlink: 'syz.8.2061': attribute type 1 has an invalid length. [ 254.517651][T13000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.529002][T13000] bond3: (slave geneve2): making interface the new active one [ 254.532289][T13000] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 254.569799][T13003] Bluetooth: MGMT ver 1.23 [ 254.573745][T13003] netlink: 'syz.8.2062': attribute type 2 has an invalid length. [ 254.576470][T13003] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2062'. [ 254.699527][T13016] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2065'. [ 254.733925][T13022] IPVS: length: 4096 != 8 [ 254.971663][ T950] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 254.989104][ T40] audit: type=1400 audit(2000000171.806:834): avc: denied { mounton } for pid=13033 comm="syz.4.2071" path="/319/file0/file0" dev="9p" ino=71827769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.989142][T13034] fuse: Bad value for 'user_id' [ 255.003114][T13034] fuse: Bad value for 'user_id' [ 255.092393][T13041] loop5: detected capacity change from 0 to 7 [ 255.095265][T13041] Dev loop5: unable to read RDB block 7 [ 255.097100][T13041] loop5: AHDI p1 p2 [ 255.098568][T13041] loop5: partition table partially beyond EOD, truncated [ 255.101515][T13041] loop5: p1 start 1818582900 is beyond EOD, truncated [ 255.132065][ T950] usb 10-1: Using ep0 maxpacket: 32 [ 255.136631][ T950] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 255.140208][ T950] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 255.144306][ T950] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 255.148124][ T950] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.152153][ T950] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.153766][ T40] audit: type=1400 audit(2000000171.956:835): avc: denied { setattr } for pid=13043 comm="syz.8.2074" name="PNPIPE" dev="sockfs" ino=62917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.163640][ T950] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 255.172887][ T950] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 255.177182][ T950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.182803][ T950] usb 10-1: config 0 descriptor?? [ 255.403182][ T950] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 255.514887][T13055] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 255.620295][T13065] i2c i2c-1: Invalid block write size 34 [ 255.629104][ T40] audit: type=1400 audit(2000000172.404:836): avc: denied { append } for pid=13064 comm="syz.8.2080" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 255.639768][T13065] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 255.976785][ T5948] Bluetooth: hci1: command tx timeout [ 256.307437][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 256.358996][T13083] overlayfs: missing 'lowerdir' [ 256.410463][T13087] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2087'. [ 256.419283][T13087] TCP: TCP_TX_DELAY enabled [ 256.459475][T13089] bond0: Error: Cannot enslave bond to itself. [ 256.462949][ T40] audit: type=1400 audit(2000000173.190:837): avc: denied { write } for pid=13088 comm="syz.4.2088" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 256.470835][ T40] audit: type=1400 audit(2000000173.190:838): avc: denied { ioctl } for pid=13088 comm="syz.4.2088" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 257.020672][ T142] usb 10-1: USB disconnect, device number 20 [ 257.026693][ T142] usblp0: removed [ 257.029983][T13084] syz.8.2084 (13084): drop_caches: 1 [ 257.056703][T13084] syz.8.2084 (13084): drop_caches: 1 [ 257.378977][ T142] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 257.539320][ T142] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 257.542501][ T142] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 257.547316][ T142] usb 10-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 257.550982][ T142] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.553543][ T142] usb 10-1: Product: syz [ 257.554422][T13113] binder: 13112:13113 ioctl c0306201 0 returned -14 [ 257.554959][ T142] usb 10-1: Manufacturer: syz [ 257.558769][ T142] usb 10-1: SerialNumber: syz [ 257.564713][ T142] usb 10-1: config 0 descriptor?? [ 257.566909][T13092] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 257.569229][T13092] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 257.573051][ T142] option 10-1:0.0: GSM modem (1-port) converter detected [ 257.577341][ T142] usb 10-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 257.640388][T13121] overlayfs: missing 'lowerdir' [ 257.689290][T13128] pimreg: entered allmulticast mode [ 257.738745][ T40] audit: type=1400 audit(2000000174.378:839): avc: denied { create } for pid=13131 comm="syz.8.2102" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.827866][ T40] audit: type=1400 audit(2000000174.453:840): avc: denied { write } for pid=13131 comm="syz.8.2102" name="file0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.836770][ T40] audit: type=1400 audit(2000000174.453:841): avc: denied { open } for pid=13131 comm="syz.8.2102" path="/70/file0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.886983][T13145] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2105'. [ 257.947672][T13151] overlayfs: missing 'lowerdir' [ 257.960748][ T60] usb 10-1: USB disconnect, device number 21 [ 257.969834][ T60] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 257.973094][ T60] option 10-1:0.0: device disconnected [ 257.987509][T13154] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 258.146408][T13154] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2109'. [ 258.170225][T13163] lo speed is unknown, defaulting to 1000 [ 258.173519][T13163] lo speed is unknown, defaulting to 1000 [ 258.177619][T13163] lo speed is unknown, defaulting to 1000 [ 258.201795][ T5948] Bluetooth: hci1: command tx timeout [ 258.233385][T13164] : renamed from lo (while UP) [ 258.302694][T13163] infiniband sz1: set active [ 258.304242][ T10] speed is unknown, defaulting to 1000 [ 258.306454][T13163] infiniband sz1: added [ 258.331595][T13163] RDS/IB: sz1: added [ 258.333403][T13163] smc: adding ib device sz1 with port count 1 [ 258.335963][T13163] smc: ib device sz1 port 1 has no pnetid [ 258.342241][ T10] speed is unknown, defaulting to 1000 [ 258.346281][T13163] speed is unknown, defaulting to 1000 [ 258.486754][T13163] speed is unknown, defaulting to 1000 [ 258.583379][T13163] speed is unknown, defaulting to 1000 [ 258.603704][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 258.603720][ T40] audit: type=1400 audit(2000000175.182:847): avc: denied { accept } for pid=13199 comm="syz.5.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 258.675242][T13163] speed is unknown, defaulting to 1000 [ 258.758172][T13163] speed is unknown, defaulting to 1000 [ 258.843861][T13163] speed is unknown, defaulting to 1000 [ 258.864570][T13210] ip6erspan0: entered promiscuous mode [ 258.906205][T13219] binder: 13218:13219 ioctl c0306201 0 returned -14 [ 258.964850][T13222] __nla_validate_parse: 3 callbacks suppressed [ 258.964861][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2129'. [ 258.970041][T13222] netlink: 'syz.9.2129': attribute type 20 has an invalid length. [ 258.977756][ T6055] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.980809][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2129'. [ 258.983929][ T6055] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.986736][ T6055] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.989404][ T6055] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.993349][T13222] netlink: 'syz.9.2129': attribute type 20 has an invalid length. [ 258.999545][T13222] loop7: detected capacity change from 0 to 16384 [ 259.099545][T13227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13227 comm=syz.9.2129 [ 259.125259][T13229] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2131'. [ 259.147930][ T40] audit: type=1400 audit(2000000175.696:848): avc: denied { lock } for pid=13218 comm="syz.8.2128" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 259.249319][T13222] loop7: detected capacity change from 16384 to 0 [ 259.298619][T13231] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2132'. [ 259.301597][T13231] tipc: Invalid UDP bearer configuration [ 259.301620][T13231] tipc: Enabling of bearer rejected, failed to enable media [ 259.435919][T13239] netlink: 'syz.9.2133': attribute type 10 has an invalid length. [ 259.443998][T13239] team0: Cannot enslave team device to itself [ 259.447345][ T40] audit: type=1326 audit(2000000175.977:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13197 comm="syz.4.2123" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x7fc00000 [ 259.520379][T13246] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 259.523970][T13246] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 259.597125][T13248] trusted_key: encrypted_key: key trusted:syz not found [ 259.917675][T13263] netlink: 'syz.8.2142': attribute type 2 has an invalid length. [ 259.964081][T13265] bridge_slave_0: left allmulticast mode [ 259.966657][T13265] bridge_slave_0: left promiscuous mode [ 259.969255][T13265] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.975519][T13265] bridge_slave_1: left allmulticast mode [ 259.978957][T13265] bridge_slave_1: left promiscuous mode [ 259.981464][T13265] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.993036][T13265] bond0: (slave bond_slave_0): Releasing backup interface [ 260.002276][T13265] bond0: (slave bond_slave_1): Releasing backup interface [ 260.008463][T13265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.011407][T13265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.015746][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2144'. [ 260.016645][T13265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.021218][T13265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.024624][T13265] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.034478][T13269] team0: Mode changed to "activebackup" [ 260.042747][T13265] tipc: Started in network mode [ 260.044637][T13265] tipc: Node identity 46bc2ec1624d, cluster identity 4711 [ 260.047326][T13265] tipc: Enabled bearer , priority 0 [ 260.082707][ T60] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 260.236880][T13271] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 260.239736][T13271] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 260.276405][ T60] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 260.279296][ T60] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 260.282464][ T60] usb 9-1: config 0 interface 0 has no altsetting 0 [ 260.286774][ T60] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 260.289680][ T60] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 260.292391][ T60] usb 9-1: Product: syz [ 260.293806][ T60] usb 9-1: Manufacturer: syz [ 260.295515][ T60] usb 9-1: SerialNumber: syz [ 260.300768][ T60] usb 9-1: config 0 descriptor?? [ 260.304929][ T60] hub 9-1:0.0: bad descriptor, ignoring hub [ 260.307202][ T6009] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 260.307942][ T60] hub 9-1:0.0: probe with driver hub failed with error -5 [ 260.315226][ T60] usb 9-1: selecting invalid altsetting 0 [ 260.347271][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2148'. [ 260.435612][ T5948] Bluetooth: hci1: command tx timeout [ 260.491238][ T6009] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 260.494204][ T6009] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 72, changing to 10 [ 260.498770][ T6009] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 49273, setting to 1024 [ 260.505253][ T6009] usb 13-1: config 0 interface 0 has no altsetting 0 [ 260.510008][ T6009] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 260.515292][ T6009] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 260.518335][ T6009] usb 13-1: Product: syz [ 260.519716][ T6009] usb 13-1: Manufacturer: syz [ 260.521575][ T6009] usb 13-1: SerialNumber: syz [ 260.524417][ T6009] usb 13-1: config 0 descriptor?? [ 260.527165][ T6009] hub 13-1:0.0: bad descriptor, ignoring hub [ 260.529163][ T6009] hub 13-1:0.0: probe with driver hub failed with error -5 [ 260.533876][ T6009] usb 13-1: selecting invalid altsetting 0 [ 260.636722][ T40] audit: type=1400 audit(2000000177.090:850): avc: denied { setopt } for pid=13297 comm="syz.5.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.743539][T13308] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.2156'. [ 260.749830][T13308] overlayfs: missing 'lowerdir' [ 260.812958][T13312] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.900526][T13315] fuse: Unknown parameter 'roup_id' [ 260.906733][ T6021] usb 13-1: USB disconnect, device number 4 [ 260.913359][ T40] audit: type=1400 audit(2000000177.342:851): avc: denied { shutdown } for pid=13314 comm="syz.5.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.121352][ T6009] tipc: Node number set to 619785921 [ 261.259317][T13257] usb 9-1: reset high-speed USB device number 33 using dummy_hcd [ 261.269792][ T6021] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 261.431230][ T6021] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 261.433887][ T6021] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 72, changing to 10 [ 261.437604][ T6021] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 49273, setting to 1024 [ 261.441501][ T6021] usb 13-1: config 0 interface 0 has no altsetting 0 [ 261.446134][ T6021] usb 13-1: string descriptor 0 read error: -22 [ 261.448148][ T6021] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.451011][ T6021] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.455611][ T6021] usb 13-1: config 0 descriptor?? [ 261.460363][ T6021] hub 13-1:0.0: bad descriptor, ignoring hub [ 261.462436][ T6021] hub 13-1:0.0: probe with driver hub failed with error -5 [ 261.468288][ T6021] usb 13-1: selecting invalid altsetting 0 [ 261.851998][ T6009] hid_parser_main: 22 callbacks suppressed [ 261.852012][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.856542][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.859386][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.861961][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.864463][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.867554][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.871598][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.871911][T13333] overlayfs: missing 'lowerdir' [ 261.874070][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.874138][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.883101][ T6009] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 261.888834][ T6009] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 262.031076][T13335] /dev/sr0: Can't open blockdev [ 262.036722][ T40] audit: type=1400 audit(2000000178.399:852): avc: denied { accept } for pid=13334 comm="syz.9.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 262.224603][T13369] netlink: 'syz.9.2174': attribute type 1 has an invalid length. [ 262.227842][T13369] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2174'. [ 262.230837][T13369] netlink: 'syz.9.2174': attribute type 1 has an invalid length. [ 262.233613][T13369] netlink: 638 bytes leftover after parsing attributes in process `syz.9.2174'. [ 262.236907][T13369] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2174'. [ 262.280178][T13373] openvswitch: netlink: IP tunnel dst address not specified [ 262.313696][T13375] fuse: Bad value for 'rootmode' [ 262.343460][T13375] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 262.354565][ T40] audit: type=1400 audit(2000000178.699:853): avc: denied { write } for pid=13374 comm="syz.5.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 262.452067][T13379] batman_adv: batadv0: Adding interface: gretap2 [ 262.454725][T13379] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.463627][T13379] batman_adv: batadv0: Interface activated: gretap2 [ 262.467651][T13379] : renamed from bond0 (while UP) [ 262.496402][T13384] unsupported nlmsg_type 40 [ 262.705844][T13389] speed is unknown, defaulting to 1000 [ 262.712988][T13394] overlayfs: missing 'lowerdir' [ 263.046124][T13409] netlink: 'syz.5.2187': attribute type 18 has an invalid length. [ 263.048909][T13409] netlink: 'syz.5.2187': attribute type 18 has an invalid length. [ 263.104184][T13411] (syz.4.2188,13411,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 263.106888][T13411] (syz.4.2188,13411,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 263.109687][T13411] (syz.4.2188,13411,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 263.112639][T13411] (syz.4.2188,13411,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 263.163917][T13371] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.251848][T13426] binder_alloc: 13425: pid 13425 spamming oneway? 1 buffers allocated for a total size of 4096 [ 263.256329][T13426] binder_alloc: 13425: pid 13425 spamming oneway? 2 buffers allocated for a total size of 5120 [ 263.281901][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 263.284013][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 263.403309][ T5948] block nbd9: Receive control failed (result -32) [ 263.425111][ T40] audit: type=1400 audit(2000000179.699:854): avc: denied { read } for pid=13439 comm="syz.4.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 263.431744][ T6021] libceph: connect (1)[b::]:6789 error -101 [ 263.434065][ T6021] libceph: mon0 (1)[b::]:6789 connect error [ 263.456145][ T40] audit: type=1400 audit(2000000179.727:855): avc: denied { create } for pid=13443 comm="syz.4.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.457922][T13445] x_tables: duplicate underflow at hook 2 [ 263.464905][ T40] audit: type=1400 audit(2000000179.727:856): avc: denied { setopt } for pid=13443 comm="syz.4.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.579057][ T6055] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 263.582760][ T6055] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 263.586353][ T6055] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 263.593063][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 263.595592][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 263.601645][ T6055] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 263.706892][T13456] 9pnet_fd: p9_fd_create_tcp (13456): problem binding to privport [ 263.709864][ T6021] libceph: connect (1)[b::]:6789 error -101 [ 263.711695][ T6021] libceph: mon0 (1)[b::]:6789 connect error [ 263.713133][T13456] usb usb8: usbfs: process 13456 (syz.5.2202) did not claim interface 0 before use [ 264.139556][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 264.140313][T13427] block nbd9: shutting down sockets [ 264.141526][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 264.147871][T13431] ceph: No mds server is up or the cluster is laggy [ 264.147900][T13428] ceph: No mds server is up or the cluster is laggy [ 264.210333][T13491] : renamed from bond0 (while UP) [ 264.367668][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 264.367680][ T40] audit: type=1400 audit(2000000180.578:859): avc: denied { read } for pid=13504 comm="syz.5.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.400839][T13508] __nla_validate_parse: 5 callbacks suppressed [ 264.400850][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 264.408582][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2222'. [ 264.446723][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 264.505421][T13508] veth1_macvtap (unregistering): left allmulticast mode [ 264.676525][T13523] fuse: Bad value for 'fd' [ 264.680531][ T6106] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 264.712645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 264.715220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 264.717816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 264.734101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 264.795118][ T40] audit: type=1400 audit(2000000180.981:860): avc: denied { create } for pid=13527 comm="syz.5.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 264.853436][ T6106] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.857548][ T6106] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.872690][ T6106] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.876736][ T6106] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.881096][ T6106] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.889477][ T6106] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.893238][ T6106] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.896790][ T6106] usb 14-1: Product: syz [ 264.898624][ T6106] usb 14-1: Manufacturer: syz [ 264.904807][ T6106] cdc_wdm 14-1:1.0: skipping garbage [ 264.907511][ T6106] cdc_wdm 14-1:1.0: skipping garbage [ 264.913188][ T6106] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 264.914777][T13528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13528 comm=syz.5.2226 [ 264.916111][ T6106] cdc_wdm 14-1:1.0: Unknown control protocol [ 264.935106][T13526] speed is unknown, defaulting to 1000 [ 265.123648][ T60] usb 14-1: USB disconnect, device number 2 [ 265.177632][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2232'. [ 265.180429][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2232'. [ 265.188350][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2232'. [ 265.191935][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2232'. [ 265.373335][T13563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2236'. [ 265.412024][ T10] usb 9-1: USB disconnect, device number 33 [ 265.579009][ T6106] usb 13-1: USB disconnect, device number 5 [ 265.745056][T13576] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.751060][T13575] syz.8.2240 (13575): drop_caches: 2 [ 265.841811][T13581] netlink: 'syz.4.2243': attribute type 1 has an invalid length. [ 265.843113][ T40] audit: type=1400 audit(2000000181.953:861): avc: denied { watch watch_reads } for pid=13580 comm="syz.4.2243" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 265.857730][T13573] geneve3: entered promiscuous mode [ 265.921621][T13589] binder: 13587:13589 ioctl c018620c 200000000000 returned -1 [ 265.961160][T13593] pvfs2: Unknown parameter 'acl0000000 00000000 00000000 00000000 00000000 00000000 00000000 00000003 00000000 00000000 [ 265.961160][T13593] ' [ 265.972230][ T40] audit: type=1400 audit(2000000182.075:862): avc: denied { append } for pid=13596 comm="syz.4.2248" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 266.025696][T13604] netlink: 'syz.8.2250': attribute type 1 has an invalid length. [ 266.072158][T13610] Bluetooth: MGMT ver 1.23 [ 266.100028][ T40] audit: type=1400 audit(2000000182.196:863): avc: denied { getopt } for pid=13611 comm="syz.8.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.106211][ T40] audit: type=1400 audit(2000000182.196:864): avc: denied { write } for pid=13611 comm="syz.8.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.178869][T13616] PKCS8: Unsupported PKCS#8 version [ 266.219045][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'. [ 266.224517][T13618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2254'. [ 266.227625][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2254'. [ 266.403897][T13635] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 266.406940][T13635] netlink: 'syz.4.2259': attribute type 3 has an invalid length. [ 266.410206][T13635] netlink: 'syz.4.2259': attribute type 3 has an invalid length. [ 266.507795][T13643] bridge: RTM_NEWNEIGH with invalid ether address [ 266.586745][ T40] audit: type=1400 audit(2000000182.655:865): avc: denied { ioctl } for pid=13653 comm="syz.9.2265" path="socket:[66373]" dev="sockfs" ino=66373 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 266.734537][T13665] vcan0: tx address claim with different name [ 266.770489][ T40] audit: type=1326 audit(2000000182.823:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.9.2270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8ad8f7c9 code=0x7ffc0000 [ 266.771399][T13667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=13667 comm=syz.9.2270 [ 266.779374][ T40] audit: type=1326 audit(2000000182.823:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.9.2270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8ad8f7c9 code=0x7ffc0000 [ 266.779419][ T40] audit: type=1326 audit(2000000182.823:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.9.2270" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc8ad8f7c9 code=0x7ffc0000 [ 266.873422][ T60] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 267.047584][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.051300][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.054739][ T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.059093][ T60] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.062168][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.066825][ T60] usb 9-1: config 0 descriptor?? [ 267.604559][T13703] nvme_fabrics: unknown parameter or missing value '|' in ctrl creation request [ 267.787148][T13719] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=11272 sclass=netlink_xfrm_socket pid=13719 comm=syz.5.2283 [ 268.061912][ T60] usbhid 9-1:0.0: can't add hid device: -71 [ 268.063913][ T60] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 268.067650][ T60] usb 9-1: USB disconnect, device number 34 [ 268.083450][T13738] netlink: 'syz.4.2291': attribute type 1 has an invalid length. [ 268.106682][T13738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.127389][T13738] bond4: (slave geneve4): making interface the new active one [ 268.131987][T13738] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 268.192519][ T6050] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.196453][ T6050] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.298130][ T6050] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.301533][ T6050] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.308809][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.313679][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.320384][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.323337][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.326345][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.381914][ T6050] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.385408][ T6050] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.391425][T13747] /dev/sr0: Can't open blockdev [ 268.446723][T13749] speed is unknown, defaulting to 1000 [ 268.481579][T13764] 9pnet_virtio: no channels available for device 127.0.0.1 [ 268.485119][T13765] 9pnet_virtio: no channels available for device 127.0.0.1 [ 268.507670][ T6050] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.513294][ T6050] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.576560][T13776] tmpfs: Bad value for 'mpol' [ 268.678418][T13749] chnl_net:caif_netlink_parms(): no params data found [ 268.730525][ T6050] bridge_slave_1: left allmulticast mode [ 268.732340][ T6050] bridge_slave_1: left promiscuous mode [ 268.734487][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.738713][ T6050] bridge_slave_0: left allmulticast mode [ 268.740603][ T6050] bridge_slave_0: left promiscuous mode [ 268.742455][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.847938][T13806] netlink: 'syz.8.2309': attribute type 1 has an invalid length. [ 269.076176][ T6050]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.082285][ T6050]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.087121][ T6050]  (unregistering): Released all slaves [ 269.148549][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.160718][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.163939][T13749] bridge_slave_0: entered allmulticast mode [ 269.172960][T13749] bridge_slave_0: entered promiscuous mode [ 269.186290][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.189291][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.192376][T13749] bridge_slave_1: entered allmulticast mode [ 269.204595][T13749] bridge_slave_1: entered promiscuous mode [ 269.223174][T13811] trusted_key: encrypted_key: insufficient parameters specified [ 269.237191][T13749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.241700][T13749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.259033][T13749] team0: Port device team_slave_0 added [ 269.262108][T13749] team0: Port device team_slave_1 added [ 269.278388][T13749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.280787][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.288343][T13749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.313845][T13749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.316164][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.324526][T13749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.360184][T13749] hsr_slave_0: entered promiscuous mode [ 269.362813][T13749] hsr_slave_1: entered promiscuous mode [ 269.365364][T13749] debugfs: 'hsr0' already exists in 'hsr' [ 269.367513][T13749] Cannot create hsr debugfs directory [ 269.481971][T13749] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.591025][T13826] netlink: 'syz.8.2316': attribute type 9 has an invalid length. [ 269.607573][T13749] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.719851][T13845] omfs: Invalid superblock (0) [ 269.758114][T13849] netlink: 'syz.5.2324': attribute type 23 has an invalid length. [ 269.763537][T13749] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.773897][T13851] __nla_validate_parse: 8 callbacks suppressed [ 269.773911][T13851] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.2325'. [ 269.827629][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2327'. [ 269.835121][T13855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13855 comm=syz.4.2326 [ 269.840422][T13855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13855 comm=syz.4.2326 [ 269.848613][T13854] ceph: Path missing in source [ 269.908232][T13749] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.937891][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2330'. [ 269.960931][T13864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1268 sclass=netlink_route_socket pid=13864 comm=syz.5.2330 [ 269.980924][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2329'. [ 269.995531][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2329'. [ 269.998251][T13871] qrtr: Invalid version 0 [ 269.998713][T13868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.998729][T13868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.011480][T13868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.013993][T13868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.081921][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 270.081931][ T40] audit: type=1400 audit(2000000185.928:924): avc: denied { ioctl } for pid=13872 comm="syz.5.2332" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0xae8a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 270.092552][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.095983][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.115041][T13749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.120638][T13749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.126428][T13749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.134924][T13749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 270.163379][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.165866][T13749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.168302][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.170870][T13749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.238553][T13749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.251662][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.254982][T13884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52718 sclass=netlink_route_socket pid=13884 comm=syz.8.2334 [ 270.261448][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.281012][T13749] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.287342][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.290300][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.300236][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.302595][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.333888][T13749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.338861][T13749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.452796][T13749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.475427][T13749] veth0_vlan: entered promiscuous mode [ 270.481351][T13749] veth1_vlan: entered promiscuous mode [ 270.498071][T13749] veth0_macvtap: entered promiscuous mode [ 270.502157][T13749] veth1_macvtap: entered promiscuous mode [ 270.511424][T13749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.519790][ T5948] Bluetooth: hci1: command tx timeout [ 270.522577][T13749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.531247][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.541198][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.544864][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.550194][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.598590][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.601244][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.614441][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.617382][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.931401][T13928] netlink: 'syz.4.2345': attribute type 3 has an invalid length. [ 271.488975][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2349'. [ 271.560630][T13998] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 271.599064][T14002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14002 comm=syz.8.2351 [ 271.603275][T14002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14002 comm=syz.8.2351 [ 271.935367][ T40] audit: type=1400 audit(2000000187.658:925): avc: denied { remount } for pid=14003 comm="syz.5.2352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 272.119618][T14019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2356'. [ 272.432540][ T60] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 272.594538][ T60] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 272.597910][ T60] usb 9-1: config 1 has no interface number 0 [ 272.600551][ T60] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 272.617062][ T60] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 272.621021][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.624295][ T60] usb 9-1: Product: syz [ 272.627140][ T60] usb 9-1: Manufacturer: syz [ 272.629839][ T60] usb 9-1: SerialNumber: syz [ 272.635244][T14021] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.640671][ T60] usb 9-1: Error in usbnet_get_endpoints (-22) [ 272.647343][T14025] kvm_intel: kvm [14024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa25a [ 272.655253][T14025] kvm: kvm [14024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa25a [ 272.659998][T14025] kvm: kvm [14024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x933e [ 272.676480][T14025] kvm_intel: kvm [14024]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x90af [ 272.742861][ T5948] Bluetooth: hci1: command tx timeout [ 272.859064][ T6100] usb 9-1: USB disconnect, device number 35 [ 273.521858][ T40] audit: type=1400 audit(2000000189.136:926): avc: denied { listen } for pid=14031 comm="syz.8.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 273.668121][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 273.677389][T14041] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2363'. [ 273.799495][T14051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14051 comm=syz.5.2366 [ 273.803605][T14051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14051 comm=syz.5.2366 [ 273.819016][T14052] 9pnet_virtio: no channels available for device syz [ 273.909753][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 273.913147][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 273.915944][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 273.918519][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 273.921900][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 273.924944][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 273.927558][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 273.930367][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 273.933723][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 273.936271][T14058] netlink: 'syz.4.2367': attribute type 9 has an invalid length. [ 274.350604][T14076] xt_ipcomp: unknown flags 1D [ 274.638307][ T40] audit: type=1400 audit(2000000190.183:927): avc: denied { create } for pid=14096 comm="syz.4.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 274.683440][ T40] audit: type=1400 audit(2000000190.230:928): avc: denied { listen } for pid=14099 comm="syz.4.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 274.718505][T14102] loop3: detected capacity change from 0 to 7 [ 274.730451][T14102] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 274.732487][T14102] loop3: partition table partially beyond EOD, truncated [ 274.735674][T14102] loop3: p1 size 2989602745 extends beyond EOD, truncated [ 274.747257][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2380'. [ 274.970308][ T5948] Bluetooth: hci1: command tx timeout [ 275.019515][T14120] vivid-000: ================= START STATUS ================= [ 275.022254][T14120] vivid-000: Test Pattern: 75% Colorbar [ 275.024563][T14120] vivid-000: Fill Percentage of Frame: 100 [ 275.026527][T14120] vivid-000: Horizontal Movement: No Movement [ 275.028532][T14120] vivid-000: Vertical Movement: No Movement [ 275.030486][T14120] vivid-000: OSD Text Mode: All [ 275.033052][T14120] vivid-000: Show Border: false [ 275.035031][T14120] vivid-000: Show Square: false [ 275.036828][T14120] vivid-000: Sensor Flipped Horizontally: false [ 275.039005][T14120] vivid-000: Sensor Flipped Vertically: false [ 275.040983][T14120] vivid-000: Insert SAV Code in Image: false [ 275.043227][T14120] vivid-000: Insert EAV Code in Image: true [ 275.045192][T14120] vivid-000: Insert Video Guard Band: false [ 275.047096][T14120] vivid-000: Reduced Framerate: false [ 275.048811][T14120] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 275.051389][T14120] vivid-000: S-Video 000-0 Is Connected To: None [ 275.054038][T14120] vivid-000: Enable Capture Cropping: true [ 275.056008][T14120] vivid-000: Enable Capture Composing: false [ 275.057899][T14120] vivid-000: Enable Capture Scaler: true [ 275.059688][T14120] vivid-000: Timestamp Source: End of Frame [ 275.061563][T14120] vivid-000: Colorspace: Rec. 709 [ 275.064454][T14120] vivid-000: Transfer Function: Default [ 275.066280][T14120] vivid-000: Y'CbCr Encoding: Default [ 275.067972][T14120] vivid-000: HSV Encoding: Hue 0-179 [ 275.069653][T14120] vivid-000: Quantization: Default [ 275.071279][T14120] vivid-000: Apply Alpha To Red Only: true [ 275.073158][T14120] vivid-000: Standard Aspect Ratio: 4x3 [ 275.075278][T14120] vivid-000: DV Timings Signal Mode: Current DV Timings [ 275.077473][T14120] vivid-000: DV Timings: 640x480p59 inactive [ 275.079465][T14120] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 275.082536][T14120] vivid-000: Maximum EDID Blocks: 1 [ 275.084491][T14120] vivid-000: Limited RGB Range (16-235): true [ 275.086599][T14120] vivid-000: Rx RGB Quantization Range: Automatic [ 275.088624][T14120] vivid-000: Power Present: 0x00000001 [ 275.090370][T14120] tpg source WxH: 1280x720 (R'G'B) [ 275.091990][T14120] tpg field: 1 [ 275.093159][T14120] tpg crop: (0,0)/64x64 [ 275.094543][T14120] tpg compose: (0,0)/16x16 [ 275.096286][T14120] tpg colorspace: 3 [ 275.097502][T14120] tpg transfer function: 0/1 [ 275.098980][T14120] tpg quantization: 0/1 [ 275.100279][T14120] tpg RGB range: 0/1 [ 275.101521][T14120] vivid-000: ================== END STATUS ================== [ 275.138347][T14123] gre2: entered promiscuous mode [ 275.140962][T14123] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 275.145182][T14123] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 275.152942][T14123] bond5: (slave gre2): making interface the new active one [ 275.156658][T14123] bond5: (slave gre2): Enslaving as an active interface with an up link [ 275.163392][T14123] __nla_validate_parse: 1 callbacks suppressed [ 275.163407][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2387'. [ 275.172693][T14123] bond5 (unregistering): (slave gre2): Releasing backup interface [ 275.178904][T14123] bond5 (unregistering): Released all slaves [ 275.672467][ T60] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 275.822201][ T60] usb 9-1: device descriptor read/64, error -71 [ 275.943639][T14139] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 276.091653][ T60] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 276.239084][ T60] usb 9-1: device descriptor read/64, error -71 [ 276.358408][ T60] usb usb9-port1: attempt power cycle [ 276.721095][ T60] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 276.753126][ T60] usb 9-1: device descriptor read/8, error -71 [ 277.030331][ T60] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 277.052997][ T60] usb 9-1: device descriptor read/8, error -71 [ 277.180450][ T60] usb usb9-port1: unable to enumerate USB device [ 277.190770][ T5948] Bluetooth: hci1: command tx timeout [ 277.590896][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2401'. [ 278.166951][T14182] hub 2-0:1.0: USB hub found [ 278.169174][T14182] hub 2-0:1.0: 2 ports detected [ 278.285576][T14185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=14185 comm=syz.5.2406 [ 278.648686][ T40] audit: type=1400 audit(2000000193.934:929): avc: denied { module_load } for pid=14187 comm="syz.4.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 278.800431][T14201] program syz.8.2411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.806809][T14201] program syz.8.2411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.084789][T14208] overlay: Unknown parameter '///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////' [ 279.125056][T14204] speed is unknown, defaulting to 1000 [ 279.271904][T14223] kvm: user requested TSC rate below hardware speed [ 279.278442][T14223] kvm: user requested TSC rate below hardware speed [ 279.339639][T14221] kvm: pic: non byte write [ 279.599420][T14235] cgroup: fork rejected by pids controller in /syz8 [ 279.970812][ T29] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 280.141855][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 280.145285][ T29] usb 9-1: config 14 has an invalid interface number: 101 but max is 3 [ 280.148569][ T29] usb 9-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 280.152034][ T29] usb 9-1: config 14 has an invalid interface number: 152 but max is 3 [ 280.154951][ T29] usb 9-1: config 14 has an invalid interface number: 61 but max is 3 [ 280.157622][ T29] usb 9-1: config 14 has an invalid interface number: 133 but max is 3 [ 280.160193][ T29] usb 9-1: config 14 has no interface number 0 [ 280.162201][ T29] usb 9-1: config 14 has no interface number 1 [ 280.164541][ T29] usb 9-1: config 14 has no interface number 2 [ 280.166536][ T29] usb 9-1: config 14 has no interface number 3 [ 280.168509][ T29] usb 9-1: config 14 interface 101 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 280.171951][ T29] usb 9-1: config 14 interface 101 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 280.175668][ T29] usb 9-1: config 14 interface 101 altsetting 7 endpoint 0x8 has invalid wMaxPacketSize 0 [ 280.178727][ T29] usb 9-1: config 14 interface 101 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 280.182171][ T29] usb 9-1: config 14 interface 101 altsetting 7 bulk endpoint 0x7 has invalid maxpacket 64 [ 280.185675][ T29] usb 9-1: config 14 interface 152 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 280.189144][ T29] usb 9-1: config 14 interface 152 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 280.192582][ T29] usb 9-1: config 14 interface 152 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.195816][ T29] usb 9-1: config 14 interface 152 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 280.199219][ T29] usb 9-1: config 14 interface 152 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 280.199754][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.202769][ T29] usb 9-1: config 14 interface 61 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 280.208841][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.209169][ T29] usb 9-1: config 14 interface 133 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 280.213614][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.215346][ T29] usb 9-1: config 14 interface 101 has no altsetting 0 [ 280.219438][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.220501][ T29] usb 9-1: config 14 interface 152 has no altsetting 0 [ 280.223986][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.225390][ T29] usb 9-1: config 14 interface 61 has no altsetting 0 [ 280.230416][ T29] usb 9-1: config 14 interface 133 has no altsetting 0 [ 280.234206][ T29] usb 9-1: New USB device found, idVendor=2cb7, idProduct=010b, bcdDevice=4a.b4 [ 280.236973][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.239781][ T29] usb 9-1: Product: syz [ 280.241115][ T29] usb 9-1: Manufacturer: syz [ 280.242691][ T29] usb 9-1: SerialNumber: syz [ 280.246330][T14239] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 280.320952][T14242] speed is unknown, defaulting to 1000 [ 280.475742][ T29] option 9-1:14.101: GSM modem (1-port) converter detected [ 280.528648][T14242] chnl_net:caif_netlink_parms(): no params data found [ 280.538705][ T29] usb 9-1: USB disconnect, device number 40 [ 280.546567][ T29] option 9-1:14.101: device disconnected [ 280.596319][T14242] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.598659][T14242] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.601119][T14242] bridge_slave_0: entered allmulticast mode [ 280.604012][T14242] bridge_slave_0: entered promiscuous mode [ 280.607289][T14242] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.609568][T14242] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.611873][T14242] bridge_slave_1: entered allmulticast mode [ 280.615371][T14242] bridge_slave_1: entered promiscuous mode [ 280.630497][T14242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.636069][T14242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.651601][T14242] team0: Port device team_slave_0 added [ 280.655109][T14242] team0: Port device team_slave_1 added [ 280.670628][T14242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.672838][T14242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.681197][T14242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.685466][T14242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.687777][T14242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.695644][T14242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.721005][T14242] hsr_slave_0: entered promiscuous mode [ 280.723374][T14242] hsr_slave_1: entered promiscuous mode [ 280.725500][T14242] debugfs: 'hsr0' already exists in 'hsr' [ 280.727341][T14242] Cannot create hsr debugfs directory [ 280.811730][T14242] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.937790][T14242] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.015931][T14242] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.044658][T14252] binder: BINDER_SET_CONTEXT_MGR already set [ 281.046957][T14252] binder: 14250:14252 ioctl 4018620d 200000000100 returned -16 [ 281.086735][T14242] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.136982][ T10] hid (null): global environment stack underflow [ 281.141560][ T10] hid_parser_main: 8 callbacks suppressed [ 281.141578][ T10] hid-generic 0005:0080:00F6.0008: unknown main item tag 0x2 [ 281.148846][ T10] hid-generic 0005:0080:00F6.0008: unknown main item tag 0x7 [ 281.151526][ T10] hid-generic 0005:0080:00F6.0008: unknown main item tag 0x6 [ 281.154057][ T10] hid-generic 0005:0080:00F6.0008: unknown main item tag 0x3 [ 281.156484][ T10] hid-generic 0005:0080:00F6.0008: unknown main item tag 0x7 [ 281.159319][ T10] hid-generic 0005:0080:00F6.0008: unexpected long global item [ 281.162128][ T10] hid-generic 0005:0080:00F6.0008: probe with driver hid-generic failed with error -22 [ 281.244081][T14242] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 281.248677][T14242] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 281.252693][T14242] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 281.266275][T14242] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 281.312270][T14242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.325716][T14242] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.333016][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.335379][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.342399][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.344669][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.481847][T14242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.634933][T14242] veth0_vlan: entered promiscuous mode [ 281.641288][T14242] veth1_vlan: entered promiscuous mode [ 281.662644][T14242] veth0_macvtap: entered promiscuous mode [ 281.667229][T14242] veth1_macvtap: entered promiscuous mode [ 281.680821][T14242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.691297][T14242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.701443][ T6055] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.709059][ T6055] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.712078][ T6055] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.717275][ T6055] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.730499][T14289] speed is unknown, defaulting to 1000 [ 281.738401][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.770507][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.773646][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.780647][ T40] audit: type=1400 audit(2000000196.870:930): avc: denied { setopt } for pid=14288 comm="syz.4.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.781689][T14291] overlay: Unknown parameter '/' [ 281.788129][ T6057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.791927][ T6057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.796617][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2431'. [ 282.347194][T14298] validate_nla: 58 callbacks suppressed [ 282.347206][T14298] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 282.363158][T14298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.383972][T14298] bond5: (slave veth9): Enslaving as an active interface with a down link [ 282.387743][T14298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2432'. [ 282.411528][ T5945] Bluetooth: hci0: command tx timeout [ 282.471719][T14306] input: syz0 as /devices/virtual/input/input92 [ 282.507943][T14306] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.526655][ T8482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.635609][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2435'. [ 282.681293][T14309] hsr_slave_1 (unregistering): left promiscuous mode [ 282.782797][T14315] fuse: Unknown parameter 'fdՐYZ' [ 282.848411][T14327] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2439'. [ 282.853214][ T40] audit: type=1400 audit(2000000197.862:931): avc: denied { connect } for pid=14325 comm="syz.5.2440" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 282.885014][T14333] tmpfs: Bad value for 'mpol' [ 282.918902][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2443'. [ 282.928589][T14337] netlink: 'syz.8.2443': attribute type 5 has an invalid length. [ 283.064632][ T40] audit: type=1326 audit(2000000198.067:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.2446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x7fc00000 [ 283.093348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.228841][T14373] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2456'. [ 283.234961][T14367] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 283.256093][T14367] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 283.265081][T14367] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 283.269655][T14367] kvm: requested 101409 ns i8254 timer period limited to 200000 ns [ 283.531429][ T60] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 283.674318][T14395] Bluetooth: MGMT ver 1.23 [ 283.702812][ T4403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.714636][ T60] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 146, changing to 11 [ 283.718391][ T60] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.721673][ T60] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.726066][ T60] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.729722][ T60] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.735621][ T60] usb 13-1: config 0 descriptor?? [ 283.778801][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.171448][ T60] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 284.177850][ T60] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 284.632783][ T5945] Bluetooth: hci0: command tx timeout [ 284.718344][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.720956][ T6100] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 284.724054][ T6100] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 284.921600][ T4403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.000157][ T1027] usb 13-1: USB disconnect, device number 6 [ 285.137253][T14406] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 285.141686][T14406] VFS: Can't find a romfs filesystem on dev nullb0. [ 285.141686][T14406] [ 285.832462][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.119151][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.867654][ T5945] Bluetooth: hci0: command tx timeout [ 287.027983][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.029888][ T6100] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 287.031704][ T6100] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 287.316799][ T3860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.885701][ T3860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.503545][ T6046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.091502][ T5945] Bluetooth: hci0: command tx timeout [ 289.252226][ T6100] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 289.254885][ T6100] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 289.711803][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.467654][T14439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.532526][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.540561][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.544375][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.548851][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.552297][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.566701][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.569203][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.571553][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.574323][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.576796][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.731281][T14442] speed is unknown, defaulting to 1000 [ 290.732806][T14459] Bluetooth: MGMT ver 1.23 [ 290.743232][T14461] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2481'. [ 290.810451][T14470] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 290.897550][T14442] chnl_net:caif_netlink_parms(): no params data found [ 290.909670][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.967925][T14473] speed is unknown, defaulting to 1000 [ 290.998666][T14442] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.005478][T14442] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.007797][T14442] bridge_slave_0: entered allmulticast mode [ 291.010607][T14442] bridge_slave_0: entered promiscuous mode [ 291.013795][T14442] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.016440][T14442] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.018706][T14442] bridge_slave_1: entered allmulticast mode [ 291.021400][T14442] bridge_slave_1: entered promiscuous mode [ 291.024003][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2486'. [ 291.026946][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 291.029956][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2486'. [ 291.032721][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2486'. [ 291.039299][T14442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.043890][T14442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.063671][T14442] team0: Port device team_slave_0 added [ 291.068491][T14442] team0: Port device team_slave_1 added [ 291.084235][T14442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.086440][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.095144][T14442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.115106][T14442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.117293][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.126815][T14442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.167845][T14442] hsr_slave_0: entered promiscuous mode [ 291.170631][T14442] hsr_slave_1: entered promiscuous mode [ 291.172796][T14442] debugfs: 'hsr0' already exists in 'hsr' [ 291.174624][T14442] Cannot create hsr debugfs directory [ 291.189276][T14492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.362221][T14442] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.430535][T14500] binder: 14499:14500 ioctl c0306201 200000000680 returned -14 [ 291.436790][T14500] netlink: 'syz.4.2492': attribute type 10 has an invalid length. [ 291.440375][T14500] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2492'. [ 291.458768][T14442] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.557770][T14442] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.601752][T14509] syzkaller1: entered promiscuous mode [ 291.608484][T14509] syzkaller1: entered allmulticast mode [ 291.662297][T14442] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.846043][T14442] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 291.853299][T14442] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 291.860456][T14442] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 291.874920][T14442] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 291.918347][T14442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.926353][ T40] audit: type=1400 audit(2000000206.353:933): avc: denied { watch watch_reads } for pid=14521 comm="syz.4.2497" path="/481/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 291.929332][T14522] mac80211_hwsim hwsim16 : renamed from wlan1 [ 291.948173][T14442] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.953754][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.956161][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.963068][ T6051] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.966106][ T6051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.993495][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.995952][T14442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.085789][ T1192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.099169][ T40] audit: type=1400 audit(2000000206.512:934): avc: denied { name_bind } for pid=14530 comm="syz.5.2499" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 292.110045][T14442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.134999][T14535] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2500'. [ 292.254892][T14442] veth0_vlan: entered promiscuous mode [ 292.263700][T14442] veth1_vlan: entered promiscuous mode [ 292.297072][T14442] veth0_macvtap: entered promiscuous mode [ 292.304965][T14442] veth1_macvtap: entered promiscuous mode [ 292.312871][T14552] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 292.316950][ T40] audit: type=1400 audit(2000000206.718:935): avc: denied { relabelto } for pid=14551 comm="syz.4.2503" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 292.318813][T14442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.326698][ T40] audit: type=1400 audit(2000000206.718:936): avc: denied { associate } for pid=14551 comm="syz.4.2503" name="cgroup.procs" dev="cgroup" ino=294 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 292.351166][T14442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.358067][ T6055] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.361035][ T6055] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.365104][T14556] misc userio: Can't change port type on an already running userio instance [ 292.381025][T14554] bond6: entered promiscuous mode [ 292.383073][T14554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.386570][ T6055] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.400223][T14554] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 292.410218][T14554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.417626][T14554] lo: entered promiscuous mode [ 292.419706][T14554] bond6: (slave lo): Enslaving as a backup interface with an up link [ 292.424861][T14554] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 292.436942][ T6055] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.448675][T14556] tipc: Enabled bearer , priority 0 [ 292.461866][T14556] tipc: Resetting bearer [ 292.465539][T14555] tipc: Disabling bearer [ 292.523090][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.529549][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.551312][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.554644][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.695055][ T62] net_ratelimit: 6 callbacks suppressed [ 292.695072][ T62] bond6: (slave lo): failed to get link speed/duplex [ 292.695699][T14567] fuse: Bad value for 'fd' [ 292.769793][ T5945] Bluetooth: hci0: command tx timeout [ 292.812693][ T12] bond6: (slave lo): failed to get link speed/duplex [ 292.874023][ T40] audit: type=1800 audit(2000000207.233:937): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2508" name="file1" dev="tmpfs" ino=28 res=0 errno=0 [ 292.931229][ T6051] bond6: (slave lo): failed to get link speed/duplex [ 292.974994][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2511'. [ 292.984219][T14578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=14578 comm=syz.8.2512 [ 292.988874][T14578] SELinux: truncated policydb string identifier [ 292.991378][T14578] SELinux: failed to load policy [ 293.021694][T14581] ip6t_REJECT: ECHOREPLY is not supported [ 293.030324][T14581] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 293.033373][T14581] overlayfs: failed to set xattr on upper [ 293.035911][T14581] overlayfs: ...falling back to redirect_dir=nofollow. [ 293.039306][T14581] overlayfs: ...falling back to index=off. [ 293.041874][T14581] overlayfs: ...falling back to uuid=null. [ 293.048135][ T3860] bond6: (slave lo): failed to get link speed/duplex [ 293.049474][T14581] overlayfs: cleanup of 'bus/work' failed (-13) [ 293.053705][T14581] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 293.057599][T14581] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.063093][T14581] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 293.177244][ T6046] bond6: (slave lo): failed to get link speed/duplex [ 293.256853][T14600] kvm: pic: non byte read [ 293.259154][T14600] kvm: pic: non byte read [ 293.261713][T14600] kvm: pic: non byte read [ 293.272624][T14600] kvm: pic: non byte read [ 293.273522][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.275384][T14600] kvm: pic: non byte read [ 293.280306][T14600] kvm: pic: non byte read [ 293.282633][T14600] kvm: pic: non byte read [ 293.285088][T14600] kvm: pic: non byte read [ 293.287417][T14600] kvm: pic: non byte read [ 293.289720][T14600] kvm: pic: non byte read [ 293.294101][ T8482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.296732][ T13] bond6: (slave lo): failed to get link speed/duplex [ 293.316190][ T40] audit: type=1326 audit(2000000207.653:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.5.2517" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b65d8f7c9 code=0x0 [ 293.359383][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.411627][ T6051] bond6: (slave lo): failed to get link speed/duplex [ 293.524138][T14614] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2525'. [ 293.578633][T14618] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 293.651492][T14625] cgroup: No subsys list or none specified [ 293.659115][T14625] netlink: 432 bytes leftover after parsing attributes in process `syz.4.2528'. [ 293.756686][T14631] can0: slcan on ttynull. [ 293.817677][T14630] can0 (unregistered): slcan off ttynull. [ 293.965911][T14638] team0 (unregistering): Port device team_slave_0 removed [ 293.973223][T14638] team0 (unregistering): Port device team_slave_1 removed [ 293.990880][T14635] speed is unknown, defaulting to 1000 [ 293.993025][T14639] xt_l2tp: missing protocol rule (udp|l2tpip) [ 294.209741][T14648] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 294.218329][T14648] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 294.398909][ T40] audit: type=1400 audit(2000000208.663:939): avc: denied { execute } for pid=14662 comm="syz.4.2538" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=76408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 294.525136][T14672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.529412][T14672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.779946][ T6009] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 294.952362][ T6009] usb 9-1: config 0 has no interfaces? [ 294.954418][ T6009] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 294.958043][ T6009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.963436][ T6009] usb 9-1: config 0 descriptor?? [ 294.985912][ T5945] Bluetooth: hci0: command tx timeout [ 295.252751][ T53] usb 9-1: USB disconnect, device number 41 [ 295.394386][T14708] fuse: Unknown parameter '' [ 295.426131][T14712] overlay: Unknown parameter 'net/kcm' [ 295.475772][T14717] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 295.479147][T14717] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 295.482686][T14717] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 295.486630][T14717] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 295.588551][T14721] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.880337][ T40] audit: type=1400 audit(2000000210.048:940): avc: denied { ioctl } for pid=14723 comm="syz.4.2554" path="socket:[77284]" dev="sockfs" ino=77284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 295.891957][ T40] audit: type=1400 audit(2000000210.048:941): avc: denied { read } for pid=14723 comm="syz.4.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 295.898020][ T40] audit: type=1400 audit(2000000210.057:942): avc: denied { map } for pid=14723 comm="syz.4.2554" path="socket:[77285]" dev="sockfs" ino=77285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 296.005213][T14721] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.078923][T14721] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.162920][T14721] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.203806][T14735] netlink: 'syz.4.2556': attribute type 1 has an invalid length. [ 296.206988][T14735] __nla_validate_parse: 2 callbacks suppressed [ 296.206998][T14735] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2556'. [ 296.276088][ T6055] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.284578][ T62] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.299456][ T62] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.310425][ T62] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.384850][T14753] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2561'. [ 296.517654][T14755] speed is unknown, defaulting to 1000 [ 296.660150][T14776] usb usb8: usbfs: process 14776 (syz.4.2568) did not claim interface 0 before use [ 296.914337][T14784] loop2: detected capacity change from 0 to 7 [ 296.917555][T14784] Dev loop2: unable to read RDB block 7 [ 296.920318][T14784] loop2: unable to read partition table [ 296.922957][T14784] loop2: partition table beyond EOD, truncated [ 296.925565][T14784] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 297.207262][ T5945] Bluetooth: hci0: command tx timeout [ 297.218598][T14797] netlink: 'syz.4.2575': attribute type 39 has an invalid length. [ 297.267055][T14799] syz.5.2576: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 297.451473][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2578'. [ 297.454442][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 297.457185][T14805] netlink: 'syz.4.2578': attribute type 11 has an invalid length. [ 297.459703][T14805] netlink: 'syz.4.2578': attribute type 7 has an invalid length. [ 297.480219][T14805] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 297.490706][T14805] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 297.557043][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 297.588993][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 297.589010][ T40] audit: type=1400 audit(2000000211.647:944): avc: denied { execute } for pid=14806 comm="syz.4.2579" path="/510/file0/cgroup.events" dev="9p" ino=71827933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 298.073230][ T6031] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 298.137918][ T73] net_ratelimit: 45 callbacks suppressed [ 298.137931][ T73] bond6: (slave lo): failed to get link speed/duplex [ 298.138446][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.222921][ T5974] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 298.255346][ T6051] bond6: (slave lo): failed to get link speed/duplex [ 298.256671][ T6031] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.261323][ T6031] usb 10-1: config 0 has no interface number 0 [ 298.263613][ T6031] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 298.268182][ T6031] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 298.271371][ T6031] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.274344][ T6031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.278764][ T6031] usb 10-1: config 0 descriptor?? [ 298.283240][ T6031] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 298.372882][ T1192] bond6: (slave lo): failed to get link speed/duplex [ 298.383317][ T5974] usb 9-1: Using ep0 maxpacket: 8 [ 298.387473][ T5974] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 298.390917][ T5974] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.395064][ T5974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.399146][ T5974] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 298.403776][ T5974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 298.408740][ T5974] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.414229][ T5974] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.418268][ T5974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.491276][ T1192] bond6: (slave lo): failed to get link speed/duplex [ 298.607936][ T1192] bond6: (slave lo): failed to get link speed/duplex [ 298.611177][ T6009] usb 10-1: USB disconnect, device number 22 [ 298.639769][ T5974] usb 9-1: usb_control_msg returned -32 [ 298.641660][ T5974] usbtmc 9-1:16.0: can't read capabilities [ 298.725969][ T6051] bond6: (slave lo): failed to get link speed/duplex [ 298.832746][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.843629][ T6055] bond6: (slave lo): failed to get link speed/duplex [ 298.844011][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.442188][ T5945] Bluetooth: hci0: command tx timeout [ 299.569458][T14833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1112 sclass=netlink_route_socket pid=14833 comm=syz.5.2587 [ 299.604052][T14835] loop6: detected capacity change from 0 to 524287999 [ 299.705053][T14838] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2589'. [ 299.708712][T14838] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2589'. [ 299.760285][ T1192] Bluetooth: hci4: Frame reassembly failed (-84) [ 299.763053][ T1192] Bluetooth: hci4: Frame reassembly failed (-84) [ 300.603620][T14845] ubi31: attaching mtd0 [ 300.607532][T14845] ubi31: scanning is finished [ 300.609232][T14845] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 300.673516][T14845] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 300.710913][ T40] audit: type=1400 audit(2000000214.565:945): avc: denied { getopt } for pid=14846 comm="syz.8.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 301.136256][ T6031] usb 9-1: USB disconnect, device number 42 [ 301.570175][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.679304][T14856] can0: slcan on ttyS3. [ 301.683884][T14856] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2596'. [ 301.922790][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 302.013910][T14861] tipc: Started in network mode [ 302.016002][T14861] tipc: Node identity c247c6988f07, cluster identity 4711 [ 302.018396][T14861] tipc: Enabled bearer , priority 0 [ 302.022242][T14861] syzkaller0: entered promiscuous mode [ 302.024173][T14861] syzkaller0: entered allmulticast mode [ 302.041757][T14861] tipc: Resetting bearer [ 302.044673][ T40] audit: type=1400 audit(2000000215.818:946): avc: denied { accept } for pid=14858 comm="syz.5.2597" path="socket:[77465]" dev="sockfs" ino=77465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 302.052931][T14860] tipc: Resetting bearer [ 302.064669][T14860] tipc: Disabling bearer [ 302.161887][T14864] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2599'. [ 302.618052][T14855] can0 (unregistered): slcan off ttyS3. [ 302.653496][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2605'. [ 302.657825][T14879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.688438][T14879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.905895][T14892] sg_write: data in/out 419713629/59 bytes for SCSI command 0xf7-- guessing data in; [ 302.905895][T14892] program syz.8.2607 not setting count and/or reply_len properly [ 303.152198][ T5974] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 303.316436][ T5974] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 303.319816][ T5974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.323442][ T5974] usb 10-1: Product: syz [ 303.325096][ T5974] usb 10-1: Manufacturer: syz [ 303.326906][ T5974] usb 10-1: SerialNumber: syz [ 303.331439][ T5974] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 303.351883][ T5974] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 303.569424][ T6055] net_ratelimit: 48 callbacks suppressed [ 303.569443][ T6055] bond6: (slave lo): failed to get link speed/duplex [ 303.594197][ T29] usb 10-1: USB disconnect, device number 23 [ 303.686826][ T99] bond6: (slave lo): failed to get link speed/duplex [ 303.806619][ T99] bond6: (slave lo): failed to get link speed/duplex [ 303.922387][ T99] bond6: (slave lo): failed to get link speed/duplex [ 303.942461][T14897] Bluetooth: (null): Invalid header checksum [ 304.039669][ T99] bond6: (slave lo): failed to get link speed/duplex [ 304.168019][ T13] bond6: (slave lo): failed to get link speed/duplex [ 304.179565][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.247416][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2616'. [ 304.285599][ T6055] bond6: (slave lo): failed to get link speed/duplex [ 304.307422][ T99] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.318614][T14923] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 304.330203][T14921] bond0: entered allmulticast mode [ 304.332110][T14921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2616'. [ 304.334930][T14921] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 304.386534][T14930] ./bus: Can't lookup blockdev [ 304.388913][T14930] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.444720][T14932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=14932 comm=syz.5.2619 [ 304.478645][ T5974] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 304.483763][ T5974] ath9k_htc: Failed to initialize the device [ 304.492796][ T29] usb 10-1: ath9k_htc: USB layer deinitialized [ 304.618283][T14945] fuse: Unknown parameter '' [ 305.063288][T14956] input: syz1 as /devices/virtual/input/input95 [ 305.073205][T14956] loop6: detected capacity change from 0 to 524287999 [ 305.172272][T14958] siw: device registration error -23 [ 305.600511][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2633'. [ 305.605063][T14969] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 305.990033][T14995] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2639'. [ 306.168660][T15005] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2643'. [ 306.204191][T15008] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15008 comm=syz.8.2644 [ 306.434952][ T1027] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 306.566118][ T40] audit: type=1400 audit(2000000220.045:947): avc: denied { mount } for pid=15029 comm="syz.8.2651" name="/" dev="rpc_pipefs" ino=79429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 306.603230][ T40] audit: type=1400 audit(2000000220.073:948): avc: denied { unmount } for pid=14442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 306.609720][ T1027] usb 10-1: Using ep0 maxpacket: 8 [ 306.610982][ T1027] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 306.615041][ T1027] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.624586][ T1027] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 306.629138][ T1027] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 306.632407][ T1027] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.636468][ T1027] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 306.640054][ T1027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.815425][ T40] audit: type=1400 audit(2000000220.279:949): avc: denied { bind } for pid=15045 comm="syz.4.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 306.861552][ T1027] usb 10-1: GET_CAPABILITIES returned 0 [ 306.864632][ T1027] usbtmc 10-1:16.0: can't read capabilities [ 306.889510][T15051] xt_ipcomp: unknown flags 1D [ 307.035299][T15059] kvm: kvm [15058]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000008) = 0xfffffffffffffffa [ 307.076053][ T1027] usb 10-1: USB disconnect, device number 24 [ 307.171143][T15073] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2669'. [ 307.295909][T15001] hub 2-0:1.0: USB hub found [ 307.298124][T15001] hub 2-0:1.0: 2 ports detected [ 307.566463][T15094] input: syz0 as /devices/virtual/input/input96 [ 307.575995][T15094] netlink: 'syz.8.2674': attribute type 2 has an invalid length. [ 307.585612][T15094] loop2: detected capacity change from 0 to 7 [ 307.589043][T15094] Dev loop2: unable to read RDB block 7 [ 307.593371][T15094] loop2: AHDI p1 p2 p3 p4 [ 307.596261][T15094] loop2: partition table partially beyond EOD, truncated [ 307.599451][T15094] loop2: p1 start 1601398130 is beyond EOD, truncated [ 307.602531][T15094] loop2: p2 start 1702059890 is beyond EOD, truncated [ 307.918168][T15105] SELinux: ebitmap: truncated map [ 307.923941][T15105] SELinux: failed to load policy [ 308.087681][T15125] binder: 15123:15125 ioctl 89eb 2000000003c0 returned -22 [ 308.096359][ T40] audit: type=1400 audit(2000000221.476:950): avc: denied { transfer } for pid=15123 comm="syz.5.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 308.096771][T15125] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2683'. [ 308.493535][T15154] 9pnet_virtio: no channels available for device syz [ 309.025324][ T6051] net_ratelimit: 46 callbacks suppressed [ 309.025338][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.030823][ T13] bond6: (slave lo): failed to get link speed/duplex [ 309.152314][ T6058] bond6: (slave lo): failed to get link speed/duplex [ 309.268746][ T13] bond6: (slave lo): failed to get link speed/duplex [ 309.386023][ T99] bond6: (slave lo): failed to get link speed/duplex [ 309.393800][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2699'. [ 309.504988][ T73] bond6: (slave lo): failed to get link speed/duplex [ 309.533479][T15187] 8021q: VLANs not supported on gre0 [ 309.621594][ T73] bond6: (slave lo): failed to get link speed/duplex [ 309.691637][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2703'. [ 309.749910][ T6058] bond6: (slave lo): failed to get link speed/duplex [ 309.786208][ T4403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.877838][ T4403] bond6: (slave lo): failed to get link speed/duplex [ 310.159821][ T40] audit: type=1326 audit(2000000223.403:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15198 comm="syz.4.2705" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x0 [ 310.416213][T15209] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2707'. [ 311.224128][T15213] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2709'. [ 311.228605][T15213] netlink: 'syz.8.2709': attribute type 1 has an invalid length. [ 311.398593][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2709'. [ 311.428236][T15217] 9pnet_fd: p9_fd_create_tcp (15217): problem binding to privport [ 311.516959][T15228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=15228 comm=syz.8.2713 [ 311.523008][T15228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=15228 comm=syz.8.2713 [ 311.681658][T15240] netlink: 'syz.8.2716': attribute type 1 has an invalid length. [ 311.893870][ T40] audit: type=1400 audit(2000000225.030:952): avc: denied { setopt } for pid=15247 comm="syz.8.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 311.969014][ T40] audit: type=1400 audit(2000000225.095:953): avc: denied { read } for pid=15247 comm="syz.8.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 312.615521][ T40] audit: type=1326 audit(2000000225.703:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.2720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x7ffc0000 [ 312.624299][ T40] audit: type=1326 audit(2000000225.703:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.2720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x7ffc0000 [ 312.633340][ T40] audit: type=1326 audit(2000000225.703:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.2720" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d9ad8f7c9 code=0x7ffc0000 [ 312.642661][ T40] audit: type=1326 audit(2000000225.703:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.2720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x7ffc0000 [ 312.652860][ T40] audit: type=1326 audit(2000000225.703:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.2720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x7ffc0000 [ 312.662213][ T40] audit: type=1326 audit(2000000225.703:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.2720" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d9ad8f7c9 code=0x7ffc0000 [ 312.671100][ T40] audit: type=1326 audit(2000000225.703:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.2720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x7ffc0000 [ 312.680075][ T40] audit: type=1326 audit(2000000225.703:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.2720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ad8f7c9 code=0x7ffc0000 [ 312.688703][ T40] audit: type=1326 audit(2000000225.703:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.2720" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d9ad8f7c9 code=0x7ffc0000 [ 312.767653][T15260] binder: BINDER_SET_CONTEXT_MGR already set [ 312.769838][T15260] binder: 15259:15260 ioctl 4018620d 200000000040 returned -16 [ 312.772213][T15260] binder: BINDER_SET_CONTEXT_MGR already set [ 312.774152][T15260] binder: 15259:15260 ioctl 4018620d 200000000040 returned -16 [ 312.778229][T15260] binder: BINDER_SET_CONTEXT_MGR already set [ 312.780165][T15260] binder: 15259:15260 ioctl 4018620d 200000000040 returned -16 [ 312.838417][T15264] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=15264 comm=syz.8.2724 [ 312.896260][T15266] netlink: 'syz.8.2725': attribute type 1 has an invalid length. [ 312.910842][T15266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.913848][T15266] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 312.919662][T15266] bond1: entered allmulticast mode [ 313.235396][ T5974] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 313.311604][T15278] netlink: 'syz.4.2729': attribute type 12 has an invalid length. [ 313.396991][ T5974] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.400225][ T5974] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.403034][ T5974] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.411717][ T5974] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.418443][T15273] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 313.423190][ T5974] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.778760][ T6100] usb 13-1: USB disconnect, device number 7 [ 313.913263][T15300] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 314.455842][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2742'. [ 314.459487][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2742'. [ 314.467544][ T6051] net_ratelimit: 42 callbacks suppressed [ 314.467561][ T6051] bond6: (slave lo): failed to get link speed/duplex [ 314.580693][T15333] vxfs: unable to read disk superblock at 1 [ 314.582702][ T4403] bond6: (slave lo): failed to get link speed/duplex [ 314.585315][T15333] vxfs: unable to read disk superblock at 8 [ 314.587146][T15333] vxfs: can't find superblock. [ 314.594635][T15334] vxfs: unable to read disk superblock at 1 [ 314.596747][T15334] vxfs: unable to read disk superblock at 8 [ 314.598607][T15334] vxfs: can't find superblock. [ 314.698599][T15340] misc userio: Can't change port type on an already running userio instance [ 314.700236][ T4403] bond6: (slave lo): failed to get link speed/duplex [ 314.818138][ T4403] bond6: (slave lo): failed to get link speed/duplex [ 314.935371][ T4403] bond6: (slave lo): failed to get link speed/duplex [ 315.053108][ T4403] bond6: (slave lo): failed to get link speed/duplex [ 315.106793][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.170872][ T4403] bond6: (slave lo): failed to get link speed/duplex [ 315.207678][T15342] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 315.288230][ T4403] bond6: (slave lo): failed to get link speed/duplex [ 315.416713][ T6051] bond6: (slave lo): failed to get link speed/duplex [ 315.520088][T15354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=15354 comm=syz.8.2753 [ 315.536467][T15352] kernel read not supported for file /policy (pid: 15352 comm: syz.8.2753) [ 315.546181][T15352] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 315.579766][T15357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15357 comm=syz.8.2754 [ 315.585634][T15357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15357 comm=syz.8.2754 [ 315.594647][T15357] netem: incorrect ge model size [ 315.597309][T15357] netem: change failed [ 315.602934][T15357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=15357 comm=syz.8.2754 [ 315.774636][T15366] exFAT-fs (nullb0): invalid boot record signature [ 315.776697][T15366] exFAT-fs (nullb0): failed to read boot sector [ 315.778650][T15366] exFAT-fs (nullb0): failed to recognize exfat type [ 315.913091][T15375] bond9 (unregistering): Released all slaves [ 316.175396][T15383] netlink: 'syz.4.2762': attribute type 83 has an invalid length. [ 316.284046][T15393] netlink: 'syz.4.2765': attribute type 29 has an invalid length. [ 316.288779][T15394] netlink: 'syz.4.2765': attribute type 29 has an invalid length. [ 317.569216][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2770'. [ 317.656037][T15417] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 317.661745][T15417] Error validating options; rc = [-22] [ 317.766324][T15428] x_tables: duplicate underflow at hook 1 [ 317.843296][T15432] block device autoloading is deprecated and will be removed. [ 318.096181][T15442] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2782'. [ 318.154697][ T6100] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 318.164833][ T13] wlan1: Trigger new scan to find an IBSS to join [ 318.306564][ T5945] Bluetooth: hci0: SCO packet for unknown connection handle 211 [ 318.337947][ T6100] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.343838][ T6100] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.347775][ T6100] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.352378][ T6100] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.355748][ T6100] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.360968][ T6100] usb 9-1: config 0 descriptor?? [ 318.488336][T15460] netlink: 'syz.8.2786': attribute type 5 has an invalid length. [ 318.546045][T15463] (syz.8.2786,15463,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 318.546050][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 318.546063][ T40] audit: type=1400 audit(2000000231.249:984): avc: denied { create } for pid=15458 comm="syz.8.2786" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 318.658639][T15474] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 318.669398][T15474] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 318.674020][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.677964][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.833672][T15481] binder: 15470:15481 ioctl 4018620d 0 returned -22 [ 319.021863][ T6100] usbhid 9-1:0.0: can't add hid device: -71 [ 319.023909][ T6100] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 319.027704][ T6100] usb 9-1: USB disconnect, device number 43 [ 319.897023][ T99] net_ratelimit: 44 callbacks suppressed [ 319.897036][ T99] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.907540][ T12] bond6: (slave lo): failed to get link speed/duplex [ 319.926402][T15493] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 319.930915][T15493] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 319.954815][T14698] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 319.955109][T15493] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 319.959321][T14698] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 319.965107][T14698] CPU: 0 UID: 0 PID: 14698 Comm: kbnepd ξ Tainted: G L syzkaller #0 PREEMPT(full) [ 319.969623][T14698] Tainted: [L]=SOFTLOCKUP [ 319.971241][T14698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.975737][T14698] RIP: 0010:klist_put+0x4d/0x1b0 [ 319.977835][T14698] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 26 0d [ 319.985707][T14698] RSP: 0018:ffffc90003857930 EFLAGS: 00010202 [ 319.988203][T14698] RAX: dffffc0000000000 RBX: ffff8880570e3460 RCX: ffffffff826a7a9d [ 319.991358][T14698] RDX: 000000000000000b RSI: ffffffff8b6deb05 RDI: 0000000000000058 [ 319.994523][T14698] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 319.997619][T14698] R10: 0000000000000000 R11: ffff88804fc98b30 R12: 0000000000000000 [ 320.000787][T14698] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 320.003950][T14698] FS: 0000000000000000(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 320.007542][T14698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.010170][T14698] CR2: 00007f8b66d0ef98 CR3: 000000000e184000 CR4: 0000000000352ef0 [ 320.013375][T14698] Call Trace: [ 320.014742][T14698] [ 320.015944][T14698] device_del+0x1d8/0x9f0 [ 320.017726][T14698] ? __pfx_device_del+0x10/0x10 [ 320.019662][T14698] ? netdev_unregister_kobject+0x2da/0x540 [ 320.022030][T14698] unregister_netdevice_many_notify+0x151e/0x2590 [ 320.024544][T14698] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 320.027185][T14698] ? __pfx___mutex_lock+0x10/0x10 [ 320.029197][T14698] unregister_netdevice_queue+0x305/0x3c0 [ 320.031468][T14698] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 320.033936][T14698] ? rtnl_net_dev_lock+0x28/0x360 [ 320.035935][T14698] ? rtnl_net_dev_lock+0x146/0x360 [ 320.038007][T14698] ? rtnl_lock+0x9/0x20 [ 320.039721][T14698] ? rtnl_net_dev_lock+0x146/0x360 [ 320.041837][T14698] unregister_netdev+0x1f/0x60 [ 320.043836][T14698] bnep_session+0x22db/0x2e10 [ 320.045865][T14698] ? __pfx_bnep_session+0x10/0x10 [ 320.048011][T14698] ? do_raw_spin_lock+0x12c/0x2b0 [ 320.050165][T14698] ? __pfx_woken_wake_function+0x10/0x10 [ 320.052533][T14698] ? rcu_is_watching+0x12/0xc0 [ 320.054572][T14698] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 320.056874][T14698] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.058922][T14698] ? __kthread_parkme+0x19e/0x250 [ 320.060767][T14698] ? __pfx_bnep_session+0x10/0x10 [ 320.062836][T14698] kthread+0x3c5/0x780 [ 320.064428][T14698] ? __pfx_kthread+0x10/0x10 [ 320.065999][T14698] ? rcu_is_watching+0x12/0xc0 [ 320.067862][T14698] ? __pfx_kthread+0x10/0x10 [ 320.069554][T14698] ret_from_fork+0x983/0xb10 [ 320.071337][T14698] ? __pfx_ret_from_fork+0x10/0x10 [ 320.073104][T14698] ? __switch_to+0x7af/0x10d0 [ 320.074626][T14698] ? __pfx_kthread+0x10/0x10 [ 320.076183][T14698] ret_from_fork_asm+0x1a/0x30 [ 320.077725][T14698] [ 320.078717][T14698] Modules linked in: [ 320.080612][T14698] ---[ end trace 0000000000000000 ]--- [ 320.082651][T14698] RIP: 0010:klist_put+0x4d/0x1b0 [ 320.084260][T14698] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 26 0d [ 320.090729][T14698] RSP: 0018:ffffc90003857930 EFLAGS: 00010202 [ 320.092763][T14698] RAX: dffffc0000000000 RBX: ffff8880570e3460 RCX: ffffffff826a7a9d [ 320.095262][T14698] RDX: 000000000000000b RSI: ffffffff8b6deb05 RDI: 0000000000000058 [ 320.098120][T14698] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 320.100801][T14698] R10: 0000000000000000 R11: ffff88804fc98b30 R12: 0000000000000000 [ 320.103306][T14698] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 320.105635][T14698] FS: 0000000000000000(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 320.108427][T14698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.110688][T14698] CR2: 00007f8b66d0ef98 CR3: 000000000e184000 CR4: 0000000000352ef0 [ 320.113130][T14698] Kernel panic - not syncing: Fatal exception [ 320.115712][T14698] Kernel Offset: disabled [ 320.117092][T14698] Rebooting in 86400 seconds..