last executing test programs: 5m49.707159148s ago: executing program 1 (id=448): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0xe64e}, @void, @eth={@remote, @multicast, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2b, 0x3c, 0x64, 0x0, 0x2, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x18}}, @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x0, 0x2, 0x8001, 0x0, 0x3, 0x1, 0x5, 0x2, 0x3, 0x5, 0x202, 0x4e20, 0x4e24}, 0x1, 0x4}, 0x0, 0x1}}}}}}}}, 0x52) 5m49.609401976s ago: executing program 1 (id=449): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x400000000000008, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x2, 0x1, 0x5, 0x8, 0x0, 0x0, 0x8, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x4, 0x7fffffffffffffff, 0x0, 0x400, 0xd, 0xfffffffffffffffd, 0x9ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000006640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m48.728100763s ago: executing program 1 (id=453): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @win={{0x7fffffff, 0xff, 0x3, 0x2ff}, 0x8, 0xfffffffb, 0x0, 0x9a, &(0x7f0000000680), 0x1}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @vbi={0x0, 0x0, 0x0, 0x4745504d, [], [0xfffffffe]}}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m48.649131864s ago: executing program 1 (id=455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d0001"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) 5m48.448963s ago: executing program 1 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00009e1000)='./file0\x00', 0x14b000, 0x15) 5m47.606328259s ago: executing program 1 (id=465): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m46.869619656s ago: executing program 32 (id=472): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) 5m43.476788903s ago: executing program 0 (id=526): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) 5m43.412762146s ago: executing program 0 (id=528): r0 = userfaultfd(0x801) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 5m43.167573452s ago: executing program 0 (id=532): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80010000, 0x8, 0xc2, 0x9, 0x3d, 0x0, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x8}, {0xb, 0xaff2, 0x8, 0x9, 0x9, 0xff, 0x4, 0x3, 0xa, 0x15, 0x7, 0x6, 0x1}, {0x21ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x8a, 0x1b1, 0x1, 0x3, 0xfffffffffffffffe, 0x4002004c4, 0x400000000000003, 0x6, 0x653a, 0x800000010, 0x1c, 0x0, 0x7ffffffffffdffff, 0x3, 0xfffffffffffffffe], 0x3000, 0x1011c4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m43.011355348s ago: executing program 0 (id=533): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f00000017c0)="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", 0x6a2}], 0x3, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m42.138742944s ago: executing program 0 (id=538): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 5m41.285654769s ago: executing program 0 (id=547): syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r1, 0xffff) close(0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x0, 0x8000}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) 5m32.119106394s ago: executing program 33 (id=465): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m29.678751052s ago: executing program 4 (id=627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)='^}', 0x2, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5m29.662032722s ago: executing program 4 (id=628): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x7, 0x8}, {0x3, 0xf, 0x972, 0x10}}}}, 0x15) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x102, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS={{0x1}, 0x81}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000004780)={@default, @default, 0x2, 0x44}) 5m29.620374142s ago: executing program 4 (id=629): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r3, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m28.688049152s ago: executing program 4 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 5m28.567876811s ago: executing program 4 (id=643): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file4\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5m28.13303042s ago: executing program 4 (id=645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x13) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044002}, 0x0) 5m27.999567824s ago: executing program 34 (id=645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x13) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044002}, 0x0) 5m26.10109998s ago: executing program 35 (id=547): syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r1, 0xffff) close(0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x0, 0x8000}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) 4m47.409667968s ago: executing program 5 (id=1204): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x20000085, 0x1, 0x0, 0x717e387b, 0x40, "1a794233a5bd00000000000000000000002000", 0x4, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x440c0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) setregid(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x6) 4m46.977441097s ago: executing program 5 (id=1211): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048854) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m45.998171834s ago: executing program 5 (id=1223): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) 4m45.941653254s ago: executing program 5 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 4m45.929962367s ago: executing program 5 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r1 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x20008050) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffad95ff86dd606410a60018000020010000000000000000000000000001fe8000000000000000000000000000aa00020000000000000502000007080000000077c7"], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@setlink={0x28, 0x13, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x2424, 0x1920}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) 4m45.627061309s ago: executing program 5 (id=1231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) poll(&(0x7f0000000180)=[{r1, 0x2188}], 0x1, 0x8001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m45.583091312s ago: executing program 36 (id=1231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) poll(&(0x7f0000000180)=[{r1, 0x2188}], 0x1, 0x8001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m21.325799245s ago: executing program 8 (id=4724): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettaction={0x24, 0x32, 0x1, 0x70bd25, 0x25dffbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa00000}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000200)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5984e392f24f05af4915"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000120000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000140800084000000001140000001100010000000000e57d00000084000a77b2209aae8c198ff4d2dd98399dd458b484573354f5389bbc1751d604a74ff71959c5f0b275982f9e69000b7f16feef242a0023a564b693984446abdc153772193e251ee4776c7e4acf0f38da44a7395f54e3"], 0x6c}}, 0x0) epoll_create(0x200) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x5, 0x7f, 0x9}, &(0x7f0000000480)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9f, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b59f9cafaf65de9f19f55d0e5ad", 0xffeb}], 0x1}, 0x0) 2m21.275824762s ago: executing program 8 (id=4727): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b3", 0x8f, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2m21.146852053s ago: executing program 8 (id=4732): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f0000000300)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee935d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a80", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = signalfd4(r0, &(0x7f00000002c0)={[0x5]}, 0x8, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') ioctl$NS_GET_PARENT(r4, 0x8004b706, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x2) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000100)) 2m21.14208299s ago: executing program 8 (id=4736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601020600000600000000000000030e0003006269746d61ff7f000000000005000400000000000500050000000000280010001800028014000240fc0100000000000000000000000000000c00018008000140ac1e000105000500020000000500010006000000"], 0x6c}}, 0xc080) 2m21.076948427s ago: executing program 8 (id=4737): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, 0x0, 0x20080815) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x64, 0x35, 0x1, 0x0, 0x0, "", [@generic="d09b86bee7f0737e8be9be2482c35e82ccb5906a449edb8d0ef994f740078f18cb12836e41ef55aa5508a0a169492f91211e78e95d79bf6668cfc276035716f35a273808b70f29af509cde0fb897fc87e18d"]}, 0x64}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20c01, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_GET_REGS(r10, 0x8090ae81, &(0x7f00000001c0)) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r8, @ANYRES16=r11], 0x60}}, 0x4000004) 2m20.066900387s ago: executing program 8 (id=4773): getpid() socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="f50000027f000001010000000100000000000000"], 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 2m5.071608728s ago: executing program 37 (id=4773): getpid() socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="f50000027f000001010000000100000000000000"], 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 1m27.615409113s ago: executing program 9 (id=6393): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) (rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x8000, 0xc) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0xfffffffd}}) 1m27.556296415s ago: executing program 9 (id=6395): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0xfcff) 1m27.492629938s ago: executing program 9 (id=6398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000002060102000006fff50000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) 1m27.416016457s ago: executing program 9 (id=6404): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r1], 0x80}, 0x1, 0x0, 0x0, 0x51}, 0x81) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async) vmsplice(r4, 0x0, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') socket$netlink(0x10, 0x3, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x535483, 0x0, 0x8}, 0x18) (async) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000004) (async) setpgid(r5, 0x0) setpgid(0x0, r5) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) (async) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x8, 0x18}, 0x18) file_setattr(r7, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x800, 0xfffffe01, 0x1d}, 0x18, 0x1000) 1m27.288463383s ago: executing program 9 (id=6409): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettaction={0x24, 0x32, 0x1, 0x70bd25, 0x25dffbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa00000}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000200)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5984e392f24f05af4915"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000120000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000140800084000000001140000001100010000000000e57d00000084000a77b2209aae8c198ff4d2dd98399dd458b484573354f5389bbc1751d604a74ff71959c5f0b275982f9e69000b7f16feef242a0023a564b693984446abdc153772193e251ee4776c7e4acf0f38da44a7395f"], 0x6c}}, 0x0) epoll_create(0x200) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x5, 0x7f, 0x9}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x41b4, 0x0, 0x33e, 0x15b, 0x8, 0x14e9, 0x9, r4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9f, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b59f9cafaf65de9f19f55d0e5ad", 0xffeb}], 0x1}, 0x0) 1m26.98631354s ago: executing program 9 (id=6413): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x400, 0x6, 0x2, 0x6854723b, 0x8000000000000001, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000580)={0x3, @null, r1}) capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000100)={0xf83d8699, 0x8, 0x3ff, 0xfff, 0x4, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r5, 0x851, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, &(0x7f0000000080), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000540)="23ec", 0x2}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000008400000008000000200100000000000000000000000000002b37f1d078bd78550d4582dfaa024cf7d684d4487755d5c88b2522ef99e07f0143169951aa2a93ea98ad42a6b6e776dee3c3beac9f6370092fe85d31a855f8d5af1f82edea282d9a16582849d9d314585eae5d4105fa3684e8b71fdd7489d1ba224e5e90d853d7d5e21258d6601b0a106a03609bc8a4bbcb20bb"], 0x20, 0x4855}, 0x24000052) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @local}) socket$kcm(0x10, 0x2, 0x10) 1m26.885601812s ago: executing program 38 (id=6413): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x400, 0x6, 0x2, 0x6854723b, 0x8000000000000001, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6800) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000580)={0x3, @null, r1}) capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000100)={0xf83d8699, 0x8, 0x3ff, 0xfff, 0x4, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r5, 0x851, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, &(0x7f0000000080), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000540)="23ec", 0x2}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000008400000008000000200100000000000000000000000000002b37f1d078bd78550d4582dfaa024cf7d684d4487755d5c88b2522ef99e07f0143169951aa2a93ea98ad42a6b6e776dee3c3beac9f6370092fe85d31a855f8d5af1f82edea282d9a16582849d9d314585eae5d4105fa3684e8b71fdd7489d1ba224e5e90d853d7d5e21258d6601b0a106a03609bc8a4bbcb20bb"], 0x20, 0x4855}, 0x24000052) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @local}) socket$kcm(0x10, 0x2, 0x10) 1.525605691s ago: executing program 6 (id=8208): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in=@multicast2, {0x2, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x3f, 0x543}, {0x4, 0x7fffffffffffffff, 0xffffffffffffffff, 0x7}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.474639044s ago: executing program 6 (id=8209): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000580)="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", 0xfd}, {&(0x7f0000000440)="739135680a", 0x5}], 0x2, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 1.473580551s ago: executing program 6 (id=8211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800940000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.395670824s ago: executing program 6 (id=8212): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e22, @broadcast}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000e3ffff840000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.345619249s ago: executing program 6 (id=8215): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x80, 0x7, 0x0, 0x2}, {0x16}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, 0x1, 0x33, '\x00', r0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000280)={0xf, 0x7, 0x7, 0x8, 0x4}) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = socket(0x11, 0x800000003, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0'}, 0xb) close(0x3) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2003}, 0x4) 1.071223153s ago: executing program 2 (id=8223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) (async) mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) (async, rerun: 32) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000540)=[{}], 0x1, 0x283, &(0x7f00000005c0), 0x8) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETLINK(r7, 0x400454cc, 0x13) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB='\b\x002'], 0x2c}}, 0x0) (rerun: 64) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d4393e97d83a"}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x118, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0xf0, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x95}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}]}}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x6a}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x60}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd602d528d2b4a230}, @NFTA_FIB_FLAGS={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x74}]}}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}]}], {0x14}}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 946.524649ms ago: executing program 3 (id=8227): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x368) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='pids.events\x00', 0x300, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r6 = fcntl$dupfd(r1, 0x0, r1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x20, 0x3, 0x6c92ebdc, 0x1, 0x880, r4, 0x7, '\x00', r5, r6, 0x2, 0x4, 0x2}, 0x50) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4000010, r7, 0xafbef000) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002f00)=ANY=[@ANYBLOB="6802000001050103000000000000000000000005540201"], 0x268}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c044) syz_emit_ethernet(0xac, &(0x7f00000000c0)={@multicast, @multicast, @void, {@mpls_uc={0x8847, {[{0x5}, {0x0, 0x0, 0x1}], @llc={@llc={0xf8, 0x42, "ff2e", "28dbe69da09027b044304695f96b66b6acbdd3c7bc2bf6656888dd8a67fe79cb3a8e3367363064dad67ea3974f575e5ebfaefea48c3e35b2a442650d75de0eeb4593025708fbe6fa9b881ca32ef31d660aaaa0ac926d64a8fef26d2172305557adcb2b96a582c35f9bfa2185f9ab13ad3f6033e3a21ce1cbf944c22c6e6d7d2abd21a59f923a583f6857729b5ac76e46b9e5"}}}}}}, &(0x7f0000000040)={0x0, 0x2, [0x9ca, 0xbb5, 0x714, 0x17f]}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 767.640879ms ago: executing program 2 (id=8229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 767.207173ms ago: executing program 7 (id=8230): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000000540)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x7000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) 687.866955ms ago: executing program 2 (id=8231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313000ec000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) 687.204137ms ago: executing program 3 (id=8232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x0, &(0x7f00000000c0)=""/82, &(0x7f0000000000)=0x52) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x10) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040808}, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0xfffd, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0x25, 0x81, 0x4}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x7f, @empty, 0x3a16d34d}}, 0xfffffc, 0x31, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c) 686.149598ms ago: executing program 7 (id=8233): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_clone(0x1304000, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@cache_fscache}]}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000180), 0x2, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x4) 685.577111ms ago: executing program 2 (id=8234): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x1}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="563dad9c4d57"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffffffff}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcc, &(0x7f0000000240)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000ac0)=r5, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 632.149594ms ago: executing program 3 (id=8235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x2}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8070}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000908000240000000030c00048005000100690000000c00038005000100430000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000a00000aed7ef58e05ab7af90ed7e534145b7a1d8eb122b3722d4284d8b972ff7412d456db0324aaec0004264c53daa29c54e91399247f77e41080697e115002d736c22ac4cc6f7fe3c9d9a2a0507591aac6b4cacb40ff5ea1"], 0x94}}, 0x0) 539.879677ms ago: executing program 3 (id=8236): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @remote, @private}, &(0x7f0000000680)=0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x440b0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @mcast1, 0x7fffffff}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000001c0)="88e47dd11852ef25028273c6f72497f5fe14f74b03e4ca42191ab56bf394a5a42b1832a6e1cebf72c1e400fefe41f94ad1de8824aa8d483632945830aaa7aff153855f5991a198e0c51700bde3f14956b9c9b6aa551c8894bf5313294af3a6e4612c1532a79ae6d5869d16420a611579901f2f74da668dfdfac5055bf4ef8a7ec55377bbe2fdc18de600348883e21d9e582f2150dd88ffa5d6cf60aa0432a75a124ab5b3d74be1ab271b61c09aed3902", 0xb0}, {&(0x7f0000000040)="952e9d74bfa322639ffd9f17d0d463eed91b6cc4b6b2bd2407441a", 0x1b}, {&(0x7f0000000080)="1b194485c2cb67cc05e57d1e308ce5731a", 0x11}, {&(0x7f0000000100)}, {&(0x7f0000000280)="7219cdf3e031c92b3850f6fdb2c35f9c9c28313354f768699854156bff939530572a2c966b31e37983f4798479979795497c652bf68d4e24eb5dcbd4e5c31e5069f9b643cfeb7c534e2d09f2a28ad704c832d38e021c8ecb42a5e69c7d449f9bd3183826acb9e9ce353e2c6d5c2a9bfa3fbb164c345aea76de0c7998e71935fe1c564e50f9eabdd9a9ce29b9a5a64556ef42a7f70e67bafa4af27ba3356b8a26dc4ba62ca67d0e7d6f9eb5b5dd9ea59f7d5fb3eb7c94ee6d969377b3a9f63d80ef643d416eec4f1120968a19c9947d12ffa3d3ee42e20ba712d3aeb3d73320135d6017", 0xe3}], 0x5, &(0x7f0000000400)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x33, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xfff}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x28}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x6, @empty, 0x8}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000480)="7eae5926b61d22cee2eb3148bacf3e4e9c12cef6b901218b25f9e7d7975e435706361f4f1b34c6e5f235be3f1f69807a341ca271f64ac2f1b9f801540ede45ea20e4c3311133955260847fea812e0368f7ea", 0x52}, {&(0x7f0000000500)="60aae9cdde1894c59745a6b36a5f6a71b3b31045bf4c509d7cb3820e70cb4fe98bd5587d7cb25c4e19d1c242e59e8ee9f1db740b876418063aef41a53808b18cd9d31625307da2bcbb347b50d4556f6103cff74756757e6ab67e1d96dcc6eba7364d3dcdcf328bfdd4038e883414d1b13e36c831b3b06904af16e5dd4f585b9bc74147891965301bd963bc0cf4", 0x8d}, {&(0x7f00000005c0)="2d51879be0fbc7d289be0164ecc92ef33c10fa57", 0x14}], 0x3, &(0x7f00000006c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xc}}, @tclass={{0x14, 0x29, 0x43, 0xcff}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x2c, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0xf6}, @generic={0x4, 0x3b, "299fcb1df0faa691be9e8955824a9b21461e60364e0b6ab400250b254efe9965a988e410a80907a9d5e4c727ab39cb52adee696229920424e31b86"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r0}}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x0, 0xff, 0x0, [@loopback]}}}, @rthdr={{0x88, 0x29, 0x39, {0xc, 0xe, 0x0, 0x6, 0x0, [@remote, @remote, @empty, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0xd9, 0x9, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0xe, 0x9, [0x6, 0x9, 0xff, 0xdd3, 0x8000, 0x7e0, 0xc, 0x9]}}, @ra={0x5, 0x2, 0x5}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x6, 0x6, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x1, 0xffff, [0x9, 0xb, 0x1, 0x6, 0xfff]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x230}}, {{&(0x7f0000000900)={0xa, 0x4e24, 0xf9a, @local, 0x1}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000940)="769969bfe21afbfacc9e1b6c990d74e8792ae72578630b8c300b7e356d9eebc4f7fc488be40cadd76d9c0fd0370ba72f48ca123234690eb44b1f6d471c764a1a9516fc1b0db639fe3910a23e95a9e10b32f0f9555f732573685b529580e096e4a1056986de54349e1b8d4eadfe96b1bb7ba6c588742fd758b0", 0x79}, {&(0x7f00000009c0)="c290ec71a8db3b1d40b1c89f0c2e61d743544a791565392601dbdf56f37377d2f1ff414988fc46fcf5972c79a56815fa97604641e2cf64b8f96541e9aa2a5ddab7f051c350d38744e4836d12c48193d5d9c29c600e6b809a137e62d8ee76f54491c4b6269f032f7c2b1256b02aec05f460bb4cb10a002dd3239f32cc1f71b42fa751d1e6039a79c059af8f1d0408d59ba1137cd990cc177c4172d524c460df0e", 0xa0}, {&(0x7f0000000a80)="66cb6796cf81871844442d8bde26597b1ea24338722bb0299dd1142dcd6ec1612a79e4ec5951959f5dbfb6d46d6d289b98192e7ba6a3f1c6e20740ba78235dd18d44fd42a743c9d54f066d7f36b1068af61a5ff3bc319536abb305edc1f6ea87", 0x60}, {&(0x7f0000000b00)="8b136161950490395151815cabce512177fb0c7cf91f4a4a6ffdda099b1a8ea7939a18dff2d9250a09d63ad2394fc8ccbd0dd0e9c9ece939d2e6130d353a9c0bd922dd9e057025fe9c504a75161e8da2c44e81ad371ef7ea6899068115bfb495de72888efdcbc75c4eed4aeb0b0d3393473acfd2a09994a7e1a9806d22cb416d8a30113d5115d384aa3acaec830e", 0x8e}, {&(0x7f0000000bc0)="54f71e3643e1a8569a64fe925f25170ee4a1e3981b6658889f148d698546ef370d5fef6a7b2fd45d2c5274a77056b5bbc277a547ff7005f4ab1597c397b66f0fa8ac5e9f4fab13e9cc443ca1123282ee5ec09fec938122ad538597464bb82c22bb0b4f55065b84a3ecd49ccb81f263ead8c8de6ca347c3d525cd9d19cf40aac0bf7c6f15e024fd816dc7cb7740e54e3c84b146", 0x93}, {&(0x7f0000000c80)="ec8905a6bb15ce0a88fcf20d3e525b35789f89b7d1b6da5531539c610587e47937e6d17cc4c9b1e062934d51b5f7b5", 0x2f}], 0x6, &(0x7f0000000d40)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r2}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x21, 0x2, 0x0, 0x4, 0x0, [@mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x80}}], 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000190095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000002c0)={0x800000000, 0xeeef0000, 0x0, 0xffffffffffffffff, 0x6}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 438.57194ms ago: executing program 6 (id=8237): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x3f) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e617400140004800800014000000003080002400ce055622c000000050a01020000000000000000010000000c00024000000000000500010900010073797a310000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114"], 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001240)={0xf8d0, 0x0, 0x200, 0x9, 0x100, 0xef74, 0x4, 0x7, r7}, &(0x7f0000001280)=0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001600ffffff6f70000000000017"], 0x14}, 0x1, 0x0, 0x0, 0x25238faddd3d601f}, 0x4000000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 416.578895ms ago: executing program 2 (id=8238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3, 0x0, 0x34a30b42, 0x0, 0xffe, 0x8000, 0x1002, 0xffffffeffffffffc, 0x10000fffe, 0x6, 0x2, 0x2372, 0x8bda, 0xfffffffffffffefe, 0x3, 0x20], 0x26000, 0x216346}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 321.365172ms ago: executing program 7 (id=8239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340058651400010000000000fbdbdf250a00a100", @ANYRES32, @ANYBLOB="140001"], 0x34}}, 0x0) 320.795714ms ago: executing program 2 (id=8240): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x68, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x5}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x1ff, 0x9708, 0x2, 0x0, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x6, 0x5, 0x6, 0x2, 0x5, 0x1}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000400)={0x80}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r3 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000200)=0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000) link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r2, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 235.698834ms ago: executing program 7 (id=8241): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x368) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='pids.events\x00', 0x300, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r6 = fcntl$dupfd(r1, 0x0, r1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x20, 0x3, 0x6c92ebdc, 0x1, 0x880, r4, 0x7, '\x00', r5, r6, 0x2, 0x4, 0x2}, 0x50) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4000010, r7, 0xafbef000) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002f00)=ANY=[@ANYBLOB="6802000001050103000000000000000000000005540201"], 0x268}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c044) syz_emit_ethernet(0xac, &(0x7f00000000c0)={@multicast, @multicast, @void, {@mpls_uc={0x8847, {[{0x5}, {0x0, 0x0, 0x1}], @llc={@llc={0xf8, 0x42, "ff2e", "28dbe69da09027b044304695f96b66b6acbdd3c7bc2bf6656888dd8a67fe79cb3a8e3367363064dad67ea3974f575e5ebfaefea48c3e35b2a442650d75de0eeb4593025708fbe6fa9b881ca32ef31d660aaaa0ac926d64a8fef26d2172305557adcb2b96a582c35f9bfa2185f9ab13ad3f6033e3a21ce1cbf944c22c6e6d7d2abd21a59f923a583f6857729b5ac76e46b9e5"}}}}}}, &(0x7f0000000040)={0x0, 0x2, [0x9ca, 0xbb5, 0x714, 0x17f]}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 85.419634ms ago: executing program 7 (id=8242): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000000540)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xf000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) 85.187441ms ago: executing program 3 (id=8243): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 66.869033ms ago: executing program 3 (id=8244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000600000000f00000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) 0s ago: executing program 7 (id=8245): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x1, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x0, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xff81b65, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0xfece, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0x8, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0x0, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xc3c2, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x4, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x6, 0x7, {0x0, 0xfffd, 0x9782, 0x1, 0xb4, 0x7fff, 0x0, 0x3, 0x8, 0x4000, 0xfffc, 0xa911, 0x1000, 0x1000, "40bb886fa9dca35c5ce36ce7ca8ca6d55c697c4b6abe916ae363ab4b8be78d45"}}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x1, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x0, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xff81b65, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0xfece, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0x8, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0x0, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xc3c2, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x4, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x6, 0x7, {0x0, 0xfffd, 0x9782, 0x1, 0xb4, 0x7fff, 0x0, 0x3, 0x8, 0x4000, 0xfffc, 0xa911, 0x1000, 0x1000, "40bb886fa9dca35c5ce36ce7ca8ca6d55c697c4b6abe916ae363ab4b8be78d45"}}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) kernel console output (not intermixed with test programs): attributes in process `syz.6.5510'. [ 329.209607][T21116] overlay: Unknown parameter 'uid>00000000000000000000' [ 329.323346][T21125] overlayfs: missing 'lowerdir' [ 329.732203][T21147] netlink: 'syz.9.5527': attribute type 2 has an invalid length. [ 329.741828][T21148] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 329.747024][T21147] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 329.802142][T21155] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 329.806169][T21155] netlink: 'syz.9.5531': attribute type 11 has an invalid length. [ 329.955741][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.974499][T21173] netlink: 'syz.9.5539': attribute type 11 has an invalid length. [ 329.978836][T21179] IPVS: set_ctl: invalid protocol: 1 0.0.1.30:0 [ 330.056307][T21187] batman_adv: batadv0: Adding interface: gretap1 [ 330.058910][T21187] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.067311][T21187] batman_adv: batadv0: Interface activated: gretap1 [ 330.077600][T21187] input: syz0 as /devices/virtual/input/input12 [ 330.161357][T21201] ip6gre1: entered promiscuous mode [ 330.163590][T21201] ip6gre1: entered allmulticast mode [ 330.167183][T21201] FAULT_INJECTION: forcing a failure. [ 330.167183][T21201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.171847][T21201] CPU: 0 UID: 0 PID: 21201 Comm: syz.9.5552 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.171865][T21201] Tainted: [L]=SOFTLOCKUP [ 330.171869][T21201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.171875][T21201] Call Trace: [ 330.171879][T21201] [ 330.171884][T21201] dump_stack_lvl+0x100/0x190 [ 330.171918][T21201] should_fail_ex.cold+0x5/0xa [ 330.171933][T21201] _copy_from_user+0x2e/0xd0 [ 330.171956][T21201] copy_msghdr_from_user+0x9f/0x4f0 [ 330.171985][T21201] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 330.172006][T21201] ? __pfx__kstrtoull+0x10/0x10 [ 330.172026][T21201] ___sys_sendmsg+0x106/0x1e0 [ 330.172045][T21201] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.172103][T21201] ? find_held_lock+0x2b/0x80 [ 330.172127][T21201] __sys_sendmmsg+0x205/0x430 [ 330.172144][T21201] ? __pfx___sys_sendmmsg+0x10/0x10 [ 330.172162][T21201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 330.172184][T21201] ? fput+0x79/0x100 [ 330.172201][T21201] ? ksys_write+0x1ac/0x250 [ 330.172213][T21201] ? __pfx_ksys_write+0x10/0x10 [ 330.172229][T21201] __x64_sys_sendmmsg+0x9c/0x100 [ 330.172242][T21201] ? lockdep_hardirqs_on+0x78/0x100 [ 330.172257][T21201] do_syscall_64+0x106/0xf80 [ 330.172271][T21201] ? clear_bhb_loop+0x40/0x90 [ 330.172285][T21201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.172296][T21201] RIP: 0033:0x7fcc8eb9bf79 [ 330.172307][T21201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.172317][T21201] RSP: 002b:00007fcc8f9c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 330.172328][T21201] RAX: ffffffffffffffda RBX: 00007fcc8ee15fa0 RCX: 00007fcc8eb9bf79 [ 330.172335][T21201] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003 [ 330.172341][T21201] RBP: 00007fcc8f9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 330.172348][T21201] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 330.172354][T21201] R13: 00007fcc8ee16038 R14: 00007fcc8ee15fa0 R15: 00007ffeff352a28 [ 330.172368][T21201] [ 330.300379][T21204] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 330.320555][T21218] ./file0: Can't lookup blockdev [ 330.385739][T21229] sch_fq: defrate 0 ignored. [ 330.529329][T21246] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.581745][T21246] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.641319][T21246] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.775806][T21246] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.784721][T21273] __nla_validate_parse: 9 callbacks suppressed [ 330.784774][T21273] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5579'. [ 330.985817][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.090161][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5593'. [ 331.120916][T21304] ptrace attach of "/syz-executor exec"[7958] was attempted by "/syz-executor exec"[21304] [ 331.163541][T21308] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 331.229001][T21308] overlayfs: failed to clone upperpath [ 331.305267][ T40] audit: type=1400 audit(2000000157.915:679): avc: denied { ioctl } for pid=21315 comm="syz.2.5598" path="socket:[75595]" dev="sockfs" ino=75595 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 331.344720][T21059] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.363504][T21059] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.378265][T21320] IPVS: set_ctl: invalid protocol: 1 1.0.0.0:0 [ 331.388789][T21091] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.401412][T21059] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.422172][T21323] netlink: 788 bytes leftover after parsing attributes in process `syz.2.5601'. [ 331.425037][T21323] bond0: entered allmulticast mode [ 331.427245][T21323] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 331.441158][T21325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.444415][T21325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.448409][T21325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.451098][T21325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.454703][T21325] batman_adv: batadv0: Interface deactivated: gretap1 [ 331.460264][T21325] batman_adv: batadv0: Removing interface: gretap1 [ 331.469968][T21327] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5603'. [ 332.025971][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.042124][T21375] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5622'. [ 332.088467][ T40] audit: type=1400 audit(2000000158.705:680): avc: denied { create } for pid=21376 comm="syz.7.5623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.098401][ T40] audit: type=1400 audit(2000000158.705:681): avc: denied { setopt } for pid=21376 comm="syz.7.5623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.108019][ T40] audit: type=1400 audit(2000000158.705:682): avc: denied { bind } for pid=21376 comm="syz.7.5623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.261314][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5626'. [ 332.381277][T21399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.493244][T21406] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5631'. [ 332.892390][ T40] audit: type=1400 audit(2000000159.505:683): avc: denied { accept } for pid=21414 comm="syz.6.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.011053][T21420] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5637'. [ 333.065877][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.142744][T21428] netlink: 'syz.7.5641': attribute type 1 has an invalid length. [ 333.157781][T21428] bond10: entered promiscuous mode [ 333.159812][T21428] 8021q: adding VLAN 0 to HW filter on device bond10 [ 333.337515][T21437] 8021q: adding VLAN 0 to HW filter on device bond11 [ 333.715820][ T828] page_pool_release_retry() stalled pool shutdown: id 70, 42 inflight 181 sec [ 333.781384][ T40] audit: type=1400 audit(2000000160.395:684): avc: denied { setattr } for pid=21471 comm="syz.7.5657" name="SCTPv6" dev="sockfs" ino=74738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.822579][T21481] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5660'. [ 333.824524][T21482] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5659'. [ 333.891823][T21493] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 333.921962][T21489] openvswitch: netlink: IPv4 tun info is not correct [ 333.924448][T21490] openvswitch: netlink: IPv4 tun info is not correct [ 333.927525][T21490] bridge_slave_0: left promiscuous mode [ 333.930551][ T40] audit: type=1400 audit(2000000160.545:685): avc: denied { bind } for pid=21487 comm="syz.6.5662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.099586][ T40] audit: type=1326 audit(2000000160.715:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.7.5671" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49f4d9bf79 code=0x0 [ 334.115873][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.249259][T21522] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 335.145762][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.240254][T21562] netlink: 'syz.7.5685': attribute type 1 has an invalid length. [ 335.272510][T21562] 8021q: adding VLAN 0 to HW filter on device bond12 [ 335.420995][T21576] xt_bpf: check failed: parse error [ 335.430213][T21562] vlan1: entered allmulticast mode [ 335.431906][T21562] macsec0: entered allmulticast mode [ 335.433830][T21562] veth1_macvtap: entered allmulticast mode [ 335.539729][T21581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21581 comm=syz.2.5688 [ 335.689504][ T40] audit: type=1400 audit(2000000162.305:687): avc: denied { create } for pid=21591 comm="syz.2.5693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.700108][ T40] audit: type=1400 audit(2000000162.315:688): avc: denied { write } for pid=21591 comm="syz.2.5693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.949797][T21600] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 336.185744][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.327795][ T40] audit: type=1400 audit(2000000162.945:689): avc: denied { ioctl } for pid=21618 comm="syz.9.5702" path="socket:[78900]" dev="sockfs" ino=78900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 336.336672][T21619] __nla_validate_parse: 3 callbacks suppressed [ 336.336683][T21619] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5702'. [ 336.345076][T21619] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 336.436436][T21535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5679'. [ 336.472431][T21629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7424 sclass=netlink_route_socket pid=21629 comm=syz.2.5707 [ 337.000914][T21674] netlink: 'syz.7.5723': attribute type 5 has an invalid length. [ 337.225791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.392472][T21696] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5731'. [ 337.450888][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5732'. [ 337.515587][T21703] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.598851][T21703] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.669256][T21703] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.761378][T21703] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.821994][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5740'. [ 337.825606][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5740'. [ 337.846503][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 337.846515][ T40] audit: type=1326 audit(2000000164.465:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.2.5740" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f870e79bf79 code=0x0 [ 337.885277][T21092] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.914366][T21059] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.918347][T21092] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.937660][T21092] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.005205][T21723] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5743'. [ 338.156786][T21731] FAULT_INJECTION: forcing a failure. [ 338.156786][T21731] name failslab, interval 1, probability 0, space 0, times 1 [ 338.165806][T21731] CPU: 0 UID: 0 PID: 21731 Comm: syz.9.5747 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.165836][T21731] Tainted: [L]=SOFTLOCKUP [ 338.165841][T21731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.165851][T21731] Call Trace: [ 338.165857][T21731] [ 338.165864][T21731] dump_stack_lvl+0x100/0x190 [ 338.165896][T21731] should_fail_ex.cold+0x5/0xa [ 338.165919][T21731] ? tomoyo_realpath_from_path+0xb6/0x690 [ 338.165938][T21731] should_failslab+0xc2/0x120 [ 338.165962][T21731] __kmalloc_noprof+0xe0/0x850 [ 338.165986][T21731] tomoyo_realpath_from_path+0xb6/0x690 [ 338.166012][T21731] tomoyo_path_number_perm+0x23c/0x580 [ 338.166039][T21731] ? tomoyo_path_number_perm+0x22e/0x580 [ 338.166066][T21731] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 338.166119][T21731] ? find_held_lock+0x2b/0x80 [ 338.166139][T21731] ? __fget_files+0x215/0x3d0 [ 338.166161][T21731] ? hook_file_ioctl_common+0x146/0x410 [ 338.166189][T21731] ? __fget_files+0x21f/0x3d0 [ 338.166217][T21731] security_file_ioctl+0xd3/0x230 [ 338.166236][T21731] __x64_sys_ioctl+0xb7/0x210 [ 338.166258][T21731] do_syscall_64+0x106/0xf80 [ 338.166280][T21731] ? clear_bhb_loop+0x40/0x90 [ 338.166308][T21731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.166325][T21731] RIP: 0033:0x7fcc8eb9bf79 [ 338.166340][T21731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.166357][T21731] RSP: 002b:00007fcc8f9c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.166373][T21731] RAX: ffffffffffffffda RBX: 00007fcc8ee15fa0 RCX: 00007fcc8eb9bf79 [ 338.166385][T21731] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 338.166396][T21731] RBP: 00007fcc8f9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 338.166406][T21731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.166416][T21731] R13: 00007fcc8ee16038 R14: 00007fcc8ee15fa0 R15: 00007ffeff352a28 [ 338.166441][T21731] [ 338.166448][T21731] ERROR: Out of memory at tomoyo_realpath_from_path. [ 338.265780][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.416315][T21744] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 338.418815][T21744] team0: Device ipvlan2 is already an upper device of the team interface [ 338.478449][T21748] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5754'. [ 338.721744][T21762] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5761'. [ 338.883099][T21767] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5763'. [ 339.305888][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 339.778401][ T40] audit: type=1400 audit(2000000166.395:692): avc: denied { accept } for pid=21852 comm="syz.6.5795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.080031][T21885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34602 sclass=netlink_route_socket pid=21885 comm=syz.7.5807 [ 340.101353][T21888] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 340.109961][ T40] audit: type=1400 audit(2000000166.725:693): avc: denied { relabelto } for pid=21886 comm="syz.2.5808" name="cpu.stat" dev="tmpfs" ino=8003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 340.125803][ T40] audit: type=1400 audit(2000000166.725:694): avc: denied { associate } for pid=21886 comm="syz.2.5808" name="cpu.stat" dev="tmpfs" ino=8003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 340.135424][ T40] audit: type=1400 audit(2000000166.725:695): avc: denied { append } for pid=21886 comm="syz.2.5808" path="/1512/cpu.stat" dev="tmpfs" ino=8003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 340.148167][ T40] audit: type=1400 audit(2000000166.765:696): avc: denied { unlink } for pid=5932 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=8003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 340.197459][T21899] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 340.247191][T21907] batman_adv: batadv0: Interface deactivated: gretap2 [ 340.250467][T21907] batman_adv: batadv0: Removing interface: gretap2 [ 340.308737][T21091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.311644][T21091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.330257][T21914] netlink: 'syz.6.5818': attribute type 1 has an invalid length. [ 340.345840][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.356608][T21914] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.362916][T21917] netlink: 'syz.2.5819': attribute type 5 has an invalid length. [ 340.747177][T20734] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 340.906025][T20734] usb 14-1: Using ep0 maxpacket: 8 [ 340.910394][T20734] usb 14-1: config 0 interface 0 has no altsetting 0 [ 340.915823][T20734] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 340.919472][T20734] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.924931][T20734] usb 14-1: config 0 descriptor?? [ 341.162479][T21995] tmpfs: Unknown parameter 'n' [ 341.385897][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.397892][T22024] netlink: 'syz.6.5862': attribute type 4 has an invalid length. [ 341.401461][T22024] __nla_validate_parse: 12 callbacks suppressed [ 341.401476][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5862'. [ 341.439460][T22021] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5861'. [ 341.457941][T21927] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5823'. [ 341.642242][T22047] netlink: 'syz.2.5869': attribute type 1 has an invalid length. [ 341.645639][T22047] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5869'. [ 341.652093][T22047] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5869'. [ 341.656462][T22047] netlink: 'syz.2.5869': attribute type 1 has an invalid length. [ 341.659668][T22047] netlink: 634 bytes leftover after parsing attributes in process `syz.2.5869'. [ 341.780535][T22054] netlink: 'syz.6.5873': attribute type 1 has an invalid length. [ 341.855520][T22054] bond9: entered promiscuous mode [ 341.862322][T22054] 8021q: adding VLAN 0 to HW filter on device bond9 [ 341.926469][T22064] openvswitch: netlink: IPv6 tunnel dst address is zero [ 342.085066][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5823'. [ 342.322505][T22097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5888'. [ 342.377917][T20734] usbhid 14-1:0.0: can't add hid device: -71 [ 342.380468][T20734] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 342.387614][T20734] usb 14-1: USB disconnect, device number 2 [ 342.423858][T22106] xt_hashlimit: max too large, truncated to 1048576 [ 342.436283][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.470386][T22108] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5892'. [ 342.538076][T22116] NILFS (nbd9): device size too small [ 342.592097][T22121] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5898'. [ 342.638909][ T40] audit: type=1400 audit(2000000169.255:697): avc: denied { write } for pid=22133 comm="syz.2.5903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.672702][ T40] audit: type=1400 audit(2000000169.285:699): avc: denied { open } for pid=22144 comm="syz.9.5907" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 342.683601][ T40] audit: type=1400 audit(2000000169.285:698): avc: denied { read append } for pid=22144 comm="syz.9.5907" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 342.739611][T22145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 342.742382][T22145] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 342.759695][T22145] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 343.261229][T22221] netlink: 'syz.9.5938': attribute type 10 has an invalid length. [ 343.419726][ T40] audit: type=1400 audit(2000000170.035:700): avc: denied { setopt } for pid=22236 comm="syz.2.5944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 343.465935][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.693111][T22260] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 344.389570][T22274] NILFS (nbd9): device size too small [ 344.505772][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.555200][ T40] audit: type=1400 audit(2000000171.165:701): avc: denied { write } for pid=22290 comm="syz.6.5964" path="socket:[78763]" dev="sockfs" ino=78763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 344.638326][T22304] netlink: 'syz.2.5970': attribute type 1 has an invalid length. [ 344.641669][T22304] netlink: 'syz.2.5970': attribute type 1 has an invalid length. [ 344.650390][T22306] netlink: 'syz.2.5970': attribute type 1 has an invalid length. [ 344.746076][ T5931] Bluetooth: hci4: command 0x0c1a tx timeout [ 344.995651][ T40] audit: type=1400 audit(2000000171.605:702): avc: denied { mounton } for pid=22347 comm="syz.9.5987" path="mnt:[4026533554]" dev="nsfs" ino=4026533554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 345.047442][T22361] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 345.256801][T22387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=22387 comm=syz.7.6001 [ 345.265059][ T40] audit: type=1400 audit(2000000171.875:703): avc: denied { connect } for pid=22386 comm="syz.7.6001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 345.545807][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.591045][T22441] NILFS (nbd9): device size too small [ 345.660437][T22456] tls_set_device_offload: netdev not found [ 345.883580][T22495] validate_nla: 4 callbacks suppressed [ 345.883600][T22495] netlink: 'syz.9.6035': attribute type 1 has an invalid length. [ 345.907298][T22495] bond1: entered promiscuous mode [ 345.909854][T22495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.353008][T22519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=22519 comm=syz.2.6044 [ 346.430961][T22528] __nla_validate_parse: 38 callbacks suppressed [ 346.430980][T22528] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6047'. [ 346.495128][T22536] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 346.517884][T22536] bond11: entered promiscuous mode [ 346.519838][T22536] 8021q: adding VLAN 0 to HW filter on device bond11 [ 346.552911][ T40] audit: type=1400 audit(2000000173.165:704): avc: denied { getopt } for pid=22539 comm="syz.9.6052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 346.585757][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 346.598507][T22545] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.687710][T22545] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.751415][T22545] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.780392][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6061'. [ 346.811079][T22545] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.829521][ T5931] Bluetooth: hci4: command 0x0c1a tx timeout [ 346.904963][T21076] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.918201][T21076] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.926764][T21076] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.938478][T21076] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.111079][T22605] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6077'. [ 347.216141][T22615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.217642][T22614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.635837][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.654645][T22639] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 347.900844][T22649] xt_cgroup: xt_cgroup: no path or classid specified [ 348.181793][T22683] IPVS: rr: FWM 3 0x00000003 - no destination available [ 348.421662][T22700] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6110'. [ 348.639029][T22727] bond5: entered allmulticast mode [ 348.641301][T22727] xfrm1: entered allmulticast mode [ 348.665847][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.712449][T22736] bond5: left allmulticast mode [ 348.714483][T22736] xfrm1: left allmulticast mode [ 348.821333][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6095'. [ 348.905861][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.906279][ T5931] Bluetooth: hci4: command 0x0c1a tx timeout [ 348.926780][ T40] audit: type=1400 audit(2000000175.545:705): avc: denied { getopt } for pid=22741 comm="syz.7.6125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.996095][T22752] binder: 22749:22752 ioctl c00c6211 0 returned -14 [ 349.493845][T22770] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6134'. [ 349.705901][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.853402][T22799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6147'. [ 349.875130][T22801] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6149'. [ 350.051384][T22814] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6155'. [ 350.205346][T22826] 9p: Bad value for 'rfdno' [ 350.240973][T22829] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6160'. [ 350.362698][T22837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22837 comm=syz.7.6163 [ 350.740489][ T40] audit: type=1400 audit(2000000177.355:706): avc: denied { create } for pid=22853 comm="syz.7.6170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 350.745873][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.755246][ T40] audit: type=1400 audit(2000000177.365:707): avc: denied { write } for pid=22853 comm="syz.7.6170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 350.767103][ T40] audit: type=1400 audit(2000000177.385:708): avc: denied { read } for pid=22853 comm="syz.7.6170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 351.298026][T22898] sctp: [Deprecated]: syz.7.6189 (pid 22898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.298026][T22898] Use struct sctp_sack_info instead [ 351.430910][T22909] overlayfs: failed to clone upperpath [ 351.659214][T22930] __nla_validate_parse: 5 callbacks suppressed [ 351.659225][T22930] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6202'. [ 351.785761][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.878528][T22946] netlink: 'syz.2.6208': attribute type 11 has an invalid length. [ 351.950324][T22955] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6213'. [ 351.988358][T22957] xt_hashlimit: size too large, truncated to 1048576 [ 352.050104][T22960] unsupported nla_type 4111 [ 352.200234][T22974] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 352.203961][T22974] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 352.310532][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6223'. [ 352.416216][T23009] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6227'. [ 352.438132][T23011] netlink: 'syz.6.6232': attribute type 13 has an invalid length. [ 352.497578][ T40] audit: type=1400 audit(2000000179.115:709): avc: denied { getopt } for pid=23014 comm="syz.2.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 352.498673][T23015] dns_resolver: Unsupported server list version (0) [ 352.702543][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6240'. [ 352.825885][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.854406][T23046] NILFS (nbd9): device size too small [ 352.869562][T23051] bond12 (unregistering): Released all slaves [ 352.900547][ T40] audit: type=1400 audit(2000000179.515:710): avc: denied { mount } for pid=23047 comm="syz.7.6246" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 353.032082][T23066] overlayfs: failed to clone upperpath [ 353.048172][T23068] netlink: 788 bytes leftover after parsing attributes in process `syz.6.6253'. [ 353.065927][T23068] bond0: entered allmulticast mode [ 353.067758][T23068] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 353.168587][T23088] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6259'. [ 353.268623][T23098] fuse: Bad value for 'fd' [ 353.278738][T23101] netlink: 'syz.6.6264': attribute type 1 has an invalid length. [ 353.296745][T23101] 8021q: adding VLAN 0 to HW filter on device bond10 [ 353.322646][T23107] tmpfs: Unknown parameter 'noswap: [ 353.322646][T23107] fþYP¾ å¬wiN[+ØŒ“åNp' [ 353.416419][T23115] qnx6: unable to set blocksize [ 353.440566][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6268'. [ 353.557686][T23129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6272'. [ 353.703645][T23144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6274'. [ 353.865890][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.283313][ T40] audit: type=1400 audit(2000000180.895:711): avc: denied { create } for pid=23197 comm="syz.6.6296" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 354.691266][T23230] overlayfs: failed to clone lowerpath [ 354.742146][T23230] overlayfs: failed to clone upperpath [ 354.828921][T23243] befs: (nbd9): unable to read superblock [ 354.905874][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.975365][T23254] input: syz0 as /devices/virtual/input/input13 [ 355.100682][ T40] audit: type=1400 audit(2000000181.715:712): avc: denied { setattr } for pid=23257 comm="syz.9.6320" name="/" dev="9p" ino=72614067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.394281][T23281] usb 1-1: USB disconnect, device number 2 [ 355.448391][T23290] 8021q: VLANs not supported on ip_vti0 [ 355.448673][ T40] audit: type=1400 audit(2000000182.065:713): avc: denied { ioctl } for pid=23288 comm="syz.7.6329" path="socket:[86068]" dev="sockfs" ino=86068 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 355.459946][T23289] usb usb1: check_ctrlrecip: process 23289 (syz.9.6323) requesting ep 01 but needs 81 [ 355.955794][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.958527][T23319] rdma_rxe: rxe_newlink: failed to add lo [ 355.961830][T23319] netlink: 'syz.7.6338': attribute type 9 has an invalid length. [ 356.103245][T23327] overlayfs: failed to clone lowerpath [ 356.108614][T23327] overlayfs: failed to clone lowerpath [ 356.267610][T23345] netlink: 'syz.2.6344': attribute type 13 has an invalid length. [ 356.429304][T23356] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 356.432600][T23356] netlink: 'syz.9.6350': attribute type 10 has an invalid length. [ 356.584187][T23365] NILFS (nbd9): device size too small [ 356.677512][T23369] input: syz0 as /devices/virtual/input/input14 [ 356.995735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.087553][T23393] input: syz0 as /devices/virtual/input/input15 [ 357.243848][T23412] __nla_validate_parse: 7 callbacks suppressed [ 357.243866][T23412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6367'. [ 357.250879][T23413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6367'. [ 357.267664][T23415] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6369'. [ 357.765568][T23470] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6389'. [ 357.778266][ T40] audit: type=1400 audit(2000000184.395:714): avc: denied { setopt } for pid=23471 comm="syz.6.6390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 357.786667][ T40] audit: type=1400 audit(2000000184.395:715): avc: denied { ioctl } for pid=23471 comm="syz.6.6390" path="socket:[83871]" dev="sockfs" ino=83871 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 357.884088][T23493] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6395'. [ 358.025775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.184505][T23528] netlink: 'syz.7.6410': attribute type 1 has an invalid length. [ 358.390919][T23534] netlink: 163496 bytes leftover after parsing attributes in process `syz.2.6412'. [ 358.395290][T23534] netlink: Unknown conntrack attr (0) [ 358.429244][T21049] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.513669][T21049] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.605826][T21049] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.654338][T23543] xt_ecn: cannot match TCP bits for non-tcp packets [ 358.660906][ T5925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.670742][ T5925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.677829][ T5925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.679390][T21049] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.682666][ T5925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.692272][ T5925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.708419][T23550] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6419'. [ 358.839304][T21049] bridge_slave_1: left allmulticast mode [ 358.841557][T21049] bridge_slave_1: left promiscuous mode [ 358.843885][T21049] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.849608][T21049] bridge_slave_0: left allmulticast mode [ 358.851972][T21049] bridge_slave_0: left promiscuous mode [ 358.854538][T21049] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.065941][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.099623][T21049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.104151][T21049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.109006][T21049] bond0 (unregistering): Released all slaves [ 359.113960][T21049] bond1 (unregistering): Released all slaves [ 359.272925][T23541] chnl_net:caif_netlink_parms(): no params data found [ 359.511336][T23541] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.514566][T23541] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.518050][T23541] bridge_slave_0: entered allmulticast mode [ 359.522075][T23541] bridge_slave_0: entered promiscuous mode [ 359.527604][T23541] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.530650][T23541] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.533408][T23541] bridge_slave_1: entered allmulticast mode [ 359.536576][T23541] bridge_slave_1: entered promiscuous mode [ 359.542347][T23598] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6434'. [ 359.568850][T23541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.607518][T23541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.634686][T23541] team0: Port device team_slave_0 added [ 359.642861][T23541] team0: Port device team_slave_1 added [ 359.673511][T23541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.675839][T23541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.683835][T23541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.690072][T23541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.692307][T23541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.700636][T23541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.761969][T23541] hsr_slave_0: entered promiscuous mode [ 359.765240][T23541] hsr_slave_1: entered promiscuous mode [ 359.770055][T23541] debugfs: 'hsr0' already exists in 'hsr' [ 359.774190][T23541] Cannot create hsr debugfs directory [ 359.897116][T23619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6437'. [ 359.980389][T21049] hsr_slave_0: left promiscuous mode [ 359.985818][T21049] hsr_slave_1: left promiscuous mode [ 359.990793][T21049] veth1_macvtap: left promiscuous mode [ 359.993183][T21049] veth0_macvtap: left promiscuous mode [ 359.995180][T21049] veth1_vlan: left promiscuous mode [ 359.999665][T21049] veth0_vlan: left promiscuous mode [ 360.105754][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.170735][T21049] team0 (unregistering): Port device team_slave_1 removed [ 360.180646][T21049] team0 (unregistering): Port device team_slave_0 removed [ 360.425894][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 360.464043][T23629] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6440'. [ 360.508255][T23635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40465 sclass=netlink_route_socket pid=23635 comm=syz.7.6442 [ 360.707932][T23655] macvlan0: entered promiscuous mode [ 360.710248][T23655] macvlan0: entered allmulticast mode [ 360.712736][T23655] veth1_vlan: entered allmulticast mode [ 360.746304][ T5931] Bluetooth: hci1: command tx timeout [ 360.878029][T23671] netlink: 'syz.7.6454': attribute type 39 has an invalid length. [ 361.155846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.298396][T23541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.311549][T23541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.323827][T23541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.328090][T23703] kAFS: unparsable volume name [ 361.345490][T23541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.408161][T23714] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 361.432437][T23714] macsec1: entered promiscuous mode [ 361.514085][T23541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.549124][T23541] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.585065][T21076] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.587564][T21076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.597162][T21076] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.599572][T21076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.641117][T23541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.872675][T23541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.929333][T23541] veth0_vlan: entered promiscuous mode [ 361.949653][T23541] veth1_vlan: entered promiscuous mode [ 361.980363][T23541] veth0_macvtap: entered promiscuous mode [ 361.987084][T23541] veth1_macvtap: entered promiscuous mode [ 362.000055][T23541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.005069][T23541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.014200][T21068] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.020260][T21068] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.023858][T21068] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.029425][T21068] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.092617][T21069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.095133][T21069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.134797][T21069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.145730][T21069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.195756][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.225188][T23771] xt_hashlimit: size too large, truncated to 1048576 [ 362.235367][T23774] veth0_to_bridge: entered promiscuous mode [ 362.495991][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 362.635816][ T60] usb 8-1: device descriptor read/64, error -71 [ 362.835890][ T5931] Bluetooth: hci1: command tx timeout [ 362.907081][ T60] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 363.075791][ T60] usb 8-1: device descriptor read/64, error -71 [ 363.176293][T23822] __nla_validate_parse: 4 callbacks suppressed [ 363.176310][T23822] netlink: 160 bytes leftover after parsing attributes in process `syz.7.6487'. [ 363.193641][ T60] usb usb8-port1: attempt power cycle [ 363.225813][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.545953][ T60] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 363.585931][ T60] usb 8-1: device descriptor read/8, error -71 [ 363.835923][ T60] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 363.857500][ T60] usb 8-1: device descriptor read/8, error -71 [ 363.965937][ T60] usb usb8-port1: unable to enumerate USB device [ 364.155845][T23888] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.276101][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.905795][ T5931] Bluetooth: hci1: command tx timeout [ 365.159446][T23932] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6522'. [ 365.206697][T23934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6523'. [ 365.248934][T23774] veth0_to_bridge: left promiscuous mode [ 365.265048][T23936] x_tables: duplicate underflow at hook 3 [ 365.274423][T23938] netlink: 'syz.3.6525': attribute type 1 has an invalid length. [ 365.305829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.769529][T23948] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 366.006966][T23959] overlayfs: failed to clone lowerpath [ 366.009877][T23959] overlayfs: failed to clone lowerpath [ 366.355944][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.417943][T23981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6543'. [ 366.593171][T23991] batman_adv: batadv0: Adding interface: gretap1 [ 366.596164][T23991] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.608559][T23991] batman_adv: batadv0: Interface activated: gretap1 [ 366.616180][T23991] input: syz0 as /devices/virtual/input/input16 [ 366.840943][T23999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.848644][T23999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.856834][T23999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.859285][T23999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.862914][T23999] batman_adv: batadv0: Interface deactivated: gretap1 [ 366.865399][T23999] batman_adv: batadv0: Removing interface: gretap1 [ 366.892493][ T40] audit: type=1400 audit(2000000193.505:716): avc: denied { map } for pid=23998 comm="syz.3.6553" path="socket:[86660]" dev="sockfs" ino=86660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 366.986365][ T5931] Bluetooth: hci1: command tx timeout [ 367.003091][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6554'. [ 367.138994][T24021] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6561'. [ 367.323303][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6568'. [ 367.385810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.455016][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6571'. [ 367.535823][ T40] audit: type=1400 audit(2000000194.145:717): avc: denied { getopt } for pid=24062 comm="syz.7.6575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.577917][T24066] netlink: 'syz.6.6577': attribute type 1 has an invalid length. [ 367.592783][T24066] bond11: entered promiscuous mode [ 367.594706][T24066] 8021q: adding VLAN 0 to HW filter on device bond11 [ 367.803347][T24087] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6584'. [ 367.891866][T24094] netlink: 'syz.3.6587': attribute type 1 has an invalid length. [ 368.037879][T24107] NILFS (nbd3): device size too small [ 368.108198][T24117] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1573 sclass=netlink_xfrm_socket pid=24117 comm=syz.7.6596 [ 368.129669][T24117] xt_hashlimit: size too large, truncated to 1048576 [ 368.142340][ T40] audit: type=1804 audit(2000000194.755:718): pid=24119 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.6597" name="file1" dev="tmpfs" ino=9211 res=1 errno=0 [ 368.158817][ T40] audit: type=1804 audit(2000000194.775:719): pid=24121 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6598" name="file0" dev="tmpfs" ino=9148 res=1 errno=0 [ 368.184763][T24125] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6596'. [ 368.425871][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.457415][ T40] audit: type=1400 audit(2000000195.075:720): avc: denied { setopt } for pid=24134 comm="syz.7.6602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 368.493657][T24151] netlink: 'syz.6.6609': attribute type 1 has an invalid length. [ 368.511883][T24151] bond12: entered promiscuous mode [ 368.513844][T24151] 8021q: adding VLAN 0 to HW filter on device bond12 [ 368.602815][T24157] netlink: 'syz.3.6612': attribute type 1 has an invalid length. [ 369.181929][T24180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24180 comm=syz.2.6616 [ 369.469428][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.218452][T24178] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 370.229197][T24188] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6619'. [ 370.245171][ T40] audit: type=1804 audit(2000000196.855:721): pid=24193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.6620" name="bus" dev="ramfs" ino=89315 res=1 errno=0 [ 370.254822][ T40] audit: type=1804 audit(2000000196.855:722): pid=24193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.6620" name="bus" dev="ramfs" ino=89315 res=1 errno=0 [ 370.494517][T24216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6627'. [ 370.505862][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.682831][ T40] audit: type=1400 audit(2000000197.295:723): avc: denied { view } for pid=24235 comm="syz.2.6633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 371.214033][T24270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.229490][ T40] audit: type=1400 audit(2000000197.845:724): avc: denied { ioctl } for pid=24269 comm="syz.7.6643" path="socket:[88542]" dev="sockfs" ino=88542 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 371.234847][T24270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.242309][ T40] audit: type=1400 audit(2000000197.845:725): avc: denied { write } for pid=24269 comm="syz.7.6643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 371.273683][T24266] netlink: 'syz.2.6638': attribute type 1 has an invalid length. [ 371.276711][T24266] netlink: 'syz.2.6638': attribute type 1 has an invalid length. [ 371.312342][T24272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.383213][T24276] NILFS (nbd3): device size too small [ 371.545798][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.705857][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 371.877551][T24296] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6652'. [ 371.885881][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 371.889746][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.892537][ T29] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 371.898474][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.904266][ T29] usb 8-1: config 0 descriptor?? [ 372.318221][ T29] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 372.438555][T24300] netlink: 'syz.6.6654': attribute type 1 has an invalid length. [ 372.519203][ T40] audit: type=1400 audit(2000000199.135:726): avc: denied { map } for pid=24286 comm="syz.3.6648" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.537026][ T6665] usb 8-1: USB disconnect, device number 7 [ 372.537989][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6656'. [ 372.574744][T24317] netlink: 'syz.2.6658': attribute type 1 has an invalid length. [ 372.585783][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.602938][T24317] bond12: entered promiscuous mode [ 372.605928][T24317] 8021q: adding VLAN 0 to HW filter on device bond12 [ 372.798782][T24351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6672'. [ 372.883529][T24361] netlink: 596 bytes leftover after parsing attributes in process `syz.7.6674'. [ 372.899021][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6676'. [ 373.076904][T24371] loop9: detected capacity change from 0 to 7 [ 373.098594][T23557] Dev loop9: unable to read RDB block 7 [ 373.100932][T23557] loop9: unable to read partition table [ 373.103431][T23557] loop9: partition table beyond EOD, truncated [ 373.116729][T24371] Dev loop9: unable to read RDB block 7 [ 373.119136][T24371] loop9: unable to read partition table [ 373.121857][T24371] loop9: partition table beyond EOD, truncated [ 373.125793][T24371] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!M‹ºÐ œëÜ%Ó«`Éæ˜Èµ4FLQcÝŠ5) failed (rc=-5) [ 373.205287][T24379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6684'. [ 373.240591][T24381] netlink: 'syz.3.6685': attribute type 4 has an invalid length. [ 373.397045][ T40] audit: type=1400 audit(2000000200.005:727): avc: denied { getopt } for pid=24389 comm="syz.3.6687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 373.430805][T24398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.445458][T24398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.635828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.810736][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6696'. [ 374.142133][T24446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 374.145545][T24446] overlayfs: failed to set xattr on upper [ 374.148665][T24446] overlayfs: ...falling back to redirect_dir=nofollow. [ 374.151958][T24446] overlayfs: ...falling back to index=off. [ 374.154440][T24446] overlayfs: ...falling back to uuid=null. [ 374.169120][T24446] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 374.200138][T24448] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 374.200182][T24446] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 374.666183][T24472] netlink: 'syz.6.6708': attribute type 1 has an invalid length. [ 374.675895][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.705048][T24478] netlink: 'syz.7.6709': attribute type 1 has an invalid length. [ 374.713161][T24472] bond13: entered promiscuous mode [ 374.716152][T24472] 8021q: adding VLAN 0 to HW filter on device bond13 [ 374.759475][T24471] 8021q: adding VLAN 0 to HW filter on device bond14 [ 374.763079][T24471] bond13: (slave bond14): making interface the new active one [ 374.765948][T24471] bond13: (slave bond14): Enslaving as an active interface with an up link [ 374.908131][T24501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6715'. [ 374.988364][T24516] Cannot find set identified by id 65534 to match [ 374.990580][T24517] Cannot find set identified by id 65534 to match [ 375.413340][T24569] __nla_validate_parse: 1 callbacks suppressed [ 375.413358][T24569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6734'. [ 375.445657][T24581] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6736'. [ 375.469797][ T40] audit: type=1400 audit(2000000202.085:728): avc: denied { getopt } for pid=24580 comm="syz.6.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.470080][T24582] mmap: syz.6.6737 (24582) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 375.530623][T24593] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6741'. [ 375.583047][T24605] vlan2: entered allmulticast mode [ 375.645328][T24616] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 375.673176][T24605] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6746'. [ 375.705978][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.751796][T24627] trusted_key: encrypted_key: hex blob is missing [ 375.845432][T24635] netlink: 'syz.6.6756': attribute type 1 has an invalid length. [ 375.861445][T24635] bond14: entered promiscuous mode [ 375.863784][T24635] 8021q: adding VLAN 0 to HW filter on device bond14 [ 375.874063][T24635] netlink: 'syz.6.6756': attribute type 32 has an invalid length. [ 375.991114][T24657] team0: Mode changed to "activebackup" [ 376.073158][T24661] netlink: 'syz.3.6758': attribute type 1 has an invalid length. [ 376.286542][T24660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6761'. [ 376.332745][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6770'. [ 376.745981][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.859360][T24699] NILFS (nbd3): device size too small [ 376.886334][T24704] validate_nla: 1 callbacks suppressed [ 376.886346][T24704] netlink: 'syz.6.6779': attribute type 11 has an invalid length. [ 376.896074][T24704] openvswitch: netlink: Invalid VLAN frame [ 376.899156][T24704] openvswitch: netlink: Invalid VLAN frame [ 376.957064][T24714] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.6783'. [ 376.962505][T24715] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.6783'. [ 377.175265][T24734] netlink: 'syz.6.6785': attribute type 1 has an invalid length. [ 377.185957][T24734] netlink: 'syz.6.6785': attribute type 1 has an invalid length. [ 377.618640][T24773] cgroup: noprefix used incorrectly [ 377.623215][T24773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6807'. [ 377.785980][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.978003][T24790] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6815'. [ 378.167874][ T40] audit: type=1400 audit(2000000204.785:729): avc: denied { execute } for pid=24800 comm="syz.3.6820" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 378.350526][T24833] netlink: 'syz.7.6832': attribute type 1 has an invalid length. [ 378.440582][T24834] hsr_slave_0: left promiscuous mode [ 378.444857][T24834] hsr_slave_1: left promiscuous mode [ 378.579376][ T40] audit: type=1326 audit(2000000205.195:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24859 comm="syz.7.6841" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49f4d9bf79 code=0x0 [ 378.640612][T24862] overlayfs: failed to resolve './file0/file0': -2 [ 378.825791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.149981][T24919] input: syz0 as /devices/virtual/input/input17 [ 379.486502][T24944] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 379.500342][T24943] bridge_slave_0: entered promiscuous mode [ 379.502938][T24943] bridge_slave_0: entered allmulticast mode [ 379.533310][T24952] tipc: Enabling of bearer rejected, already enabled [ 379.557607][T24952] sctp: [Deprecated]: syz.2.6873 (pid 24952) Use of int in max_burst socket option deprecated. [ 379.557607][T24952] Use struct sctp_assoc_value instead [ 379.690492][T24969] random: crng reseeded on system resumption [ 379.694244][ T40] audit: type=1400 audit(2000000206.305:731): avc: denied { write } for pid=24967 comm="syz.3.6879" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 379.708465][ T40] audit: type=1400 audit(2000000206.325:732): avc: denied { ioctl } for pid=24967 comm="syz.3.6879" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 379.812899][T24976] input: syz0 as /devices/virtual/input/input18 [ 379.865851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.001861][T24993] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 380.003051][ T40] audit: type=1804 audit(2000000206.615:733): pid=24993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6889" name="file0" dev="tmpfs" ino=9662 res=1 errno=0 [ 380.006375][T24993] ref_ctr increment failed for inode: 0x25be offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888023a1a4c0 [ 380.021172][T24993] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 380.024797][T24993] ref_ctr decrement failed for inode: 0x25be offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888023a1a4c0 [ 380.032064][T24993] uprobe: syz.2.6889:24993 failed to unregister, leaking uprobe [ 380.079416][T24995] veth1_to_hsr: entered allmulticast mode [ 380.105010][T24999] overlayfs: failed to clone upperpath [ 380.118054][ T60] kernel write not supported for file /audio1 (pid: 60 comm: kworker/2:1) [ 380.290699][T25018] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 380.295639][T25018] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 380.572354][T25042] __nla_validate_parse: 13 callbacks suppressed [ 380.572372][T25042] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6906'. [ 380.612207][T25040] netlink: 'syz.3.6901': attribute type 1 has an invalid length. [ 380.614937][T25040] netlink: 'syz.3.6901': attribute type 1 has an invalid length. [ 380.615882][T25042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25042 comm=syz.6.6906 [ 380.742018][T25051] fuse: Invalid rootmode [ 380.744909][T25051] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 380.756873][T25051] netlink: 268 bytes leftover after parsing attributes in process `syz.7.6910'. [ 380.906498][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.254486][T25059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6914'. [ 381.262201][T25059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6914'. [ 381.666277][T25099] netlink: 'syz.3.6923': attribute type 1 has an invalid length. [ 381.668818][T25099] netlink: 'syz.3.6923': attribute type 1 has an invalid length. [ 381.670869][T25103] xt_l2tp: missing protocol rule (udp|l2tpip) [ 381.720486][ T40] audit: type=1400 audit(2000000208.335:734): avc: denied { connect } for pid=25105 comm="syz.7.6932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.871122][T25120] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6934'. [ 381.880014][T25106] netlink: 'syz.7.6932': attribute type 1 has an invalid length. [ 381.911532][T25106] bond15: entered promiscuous mode [ 381.914198][T25106] 8021q: adding VLAN 0 to HW filter on device bond15 [ 381.945775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.129430][T25141] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6941'. [ 382.523528][ T40] audit: type=1400 audit(2000000209.135:735): avc: denied { append } for pid=25171 comm="syz.3.6952" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 382.533217][T25174] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 382.606982][T25174] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 382.607076][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6954'. [ 382.614542][T25174] cramfs: wrong magic [ 382.614623][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6954'. [ 382.948176][ T40] audit: type=1400 audit(2000000209.555:736): avc: denied { bind } for pid=25191 comm="syz.3.6960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 382.958768][ T40] audit: type=1400 audit(2000000209.565:737): avc: denied { ioctl } for pid=25191 comm="syz.3.6960" path="socket:[92543]" dev="sockfs" ino=92543 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 382.985802][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.194164][T25209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6965'. [ 383.409856][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6976'. [ 383.435479][T25236] ceph: separator ':' missing in source [ 383.468839][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.471547][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.655024][T25254] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 383.660272][ T40] audit: type=1400 audit(2000000210.275:738): avc: denied { map } for pid=25241 comm="syz.3.6979" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 383.743482][T25261] netlink: 'syz.6.6986': attribute type 1 has an invalid length. [ 383.781078][T25261] bond15: entered promiscuous mode [ 383.783650][T25261] 8021q: adding VLAN 0 to HW filter on device bond15 [ 383.918519][T25279] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 384.005068][T25287] netlink: 'syz.7.6997': attribute type 1 has an invalid length. [ 384.005342][T21089] bridge_slave_0: left allmulticast mode [ 384.010165][T21089] bridge_slave_0: left promiscuous mode [ 384.012273][T21089] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.025913][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.079910][ T40] audit: type=1400 audit(2000000210.695:739): avc: denied { name_bind } for pid=25292 comm="syz.2.6999" src=28194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 384.403222][T21089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.408732][T21089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.412400][T21089] bond0 (unregistering): Released all slaves [ 384.437638][T25287] bond16: entered promiscuous mode [ 384.440348][T25287] 8021q: adding VLAN 0 to HW filter on device bond16 [ 384.667470][ T5931] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 384.671648][ T5931] Bluetooth: hci1: Injecting HCI hardware error event [ 384.678398][ T5931] Bluetooth: hci1: hardware error 0x00 [ 384.696345][T25332] xt_l2tp: wrong L2TP version: 0 [ 384.743968][T25332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.817890][T25345] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 384.824540][ T40] audit: type=1400 audit(2000000211.435:740): avc: denied { mount } for pid=25344 comm="syz.6.7016" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 384.921385][T25352] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 385.075870][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.126607][T21089] hsr_slave_0: left promiscuous mode [ 385.129431][T21089] hsr_slave_1: left promiscuous mode [ 385.137544][T21089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.140608][T21089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.315446][T21089] team0 (unregistering): Port device team_slave_1 removed [ 385.328535][T21089] team0 (unregistering): Port device team_slave_0 removed [ 385.378835][T25392] netlink: 'syz.7.7027': attribute type 1 has an invalid length. [ 385.422017][T25392] bond17: entered promiscuous mode [ 385.424003][T25392] 8021q: adding VLAN 0 to HW filter on device bond17 [ 385.710310][T25426] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 386.088599][T25454] __nla_validate_parse: 8 callbacks suppressed [ 386.088612][T25454] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7047'. [ 386.104749][T25460] geneve1: entered allmulticast mode [ 386.107509][T25460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7049'. [ 386.115796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.119823][T25460] 8021q: adding VLAN 0 to HW filter on device bond18 [ 386.325897][T25464] netlink: 'syz.3.7050': attribute type 1 has an invalid length. [ 386.329148][T25464] netlink: 'syz.3.7050': attribute type 1 has an invalid length. [ 386.342644][ T5925] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 386.713237][T25482] netlink: 'syz.6.7055': attribute type 1 has an invalid length. [ 386.717352][T25482] netlink: 'syz.6.7055': attribute type 1 has an invalid length. [ 386.836268][ T5931] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 386.863788][T25492] netlink: 'syz.2.7062': attribute type 1 has an invalid length. [ 386.885493][T25492] bond13: entered promiscuous mode [ 386.889149][T25492] 8021q: adding VLAN 0 to HW filter on device bond13 [ 387.145790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.299653][T25516] netlink: 'syz.2.7071': attribute type 1 has an invalid length. [ 387.322803][T25516] bond14: entered promiscuous mode [ 387.325467][T25516] 8021q: adding VLAN 0 to HW filter on device bond14 [ 387.672573][T25536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7079'. [ 387.676665][T25536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7079'. [ 387.703481][T25538] netlink: 'syz.2.7080': attribute type 1 has an invalid length. [ 387.717910][T25538] bond15: entered promiscuous mode [ 387.720451][T25538] 8021q: adding VLAN 0 to HW filter on device bond15 [ 387.807780][T25548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7081'. [ 388.034627][T25575] fuse: Bad value for 'user_id' [ 388.037204][T25575] fuse: Bad value for 'user_id' [ 388.195775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.893430][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7111'. [ 388.948149][T25624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7110'. [ 389.014412][T25627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25627 comm=syz.6.7113 [ 389.230915][T25640] openvswitch: netlink: EtherType 50a is less than min 600 [ 389.235767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.373180][T25652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7122'. [ 389.434638][T25656] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 389.576835][T25672] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 390.015185][T25702] /dev/nullb0: Can't lookup blockdev [ 390.015975][T25703] /dev/nullb0: Can't lookup blockdev [ 390.154924][ T40] audit: type=1400 audit(2000000216.765:741): avc: denied { setopt } for pid=25711 comm="syz.7.7147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 390.209308][T25714] input: syz0 as /devices/virtual/input/input19 [ 390.265848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.273847][T25722] /dev/sg0: Can't lookup blockdev [ 390.423413][T25734] netlink: 'syz.7.7155': attribute type 4 has an invalid length. [ 390.426462][T25734] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7155'. [ 390.432722][T25734] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7155'. [ 390.442292][T25736] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 390.453493][T25736] CIFS mount error: No usable UNC path provided in device string! [ 390.453493][T25736] [ 390.457982][T25736] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 390.714269][T25764] netlink: 'syz.2.7164': attribute type 1 has an invalid length. [ 390.740510][T25764] bond16: entered promiscuous mode [ 390.742419][T25764] 8021q: adding VLAN 0 to HW filter on device bond16 [ 390.902721][T25797] netlink: 'syz.7.7177': attribute type 1 has an invalid length. [ 390.917672][T25797] bond19: entered promiscuous mode [ 390.920104][T25797] 8021q: adding VLAN 0 to HW filter on device bond19 [ 391.070941][T25820] netlink: 'syz.6.7185': attribute type 16 has an invalid length. [ 391.087477][T25820] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.090515][ T40] audit: type=1400 audit(2000000217.705:742): avc: denied { listen } for pid=25819 comm="syz.6.7185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 391.118218][T25817] __nla_validate_parse: 3 callbacks suppressed [ 391.118236][T25817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7184'. [ 391.140257][T25827] sctp: [Deprecated]: syz.7.7187 (pid 25827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.140257][T25827] Use struct sctp_sack_info instead [ 391.305862][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.345863][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.395779][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.025907][ T59] page_pool_release_retry() stalled pool shutdown: id 70, 42 inflight 241 sec [ 394.425987][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.465828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.515802][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.545835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.585813][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.625823][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.665817][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.705834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.745870][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.795824][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.955946][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 404.825790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.875916][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.725791][T25872] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7194'. [ 406.816635][T25883] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.834646][T25881] NILFS (nbd3): device size too small [ 406.915775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.963817][T25894] 8021q: adding VLAN 0 to HW filter on device bond17 [ 406.984640][T25894] bond17: (slave macvlan4): Enslaving as a backup interface with a down link [ 406.994060][T25894] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 407.199641][T25911] netlink: 'syz.2.7208': attribute type 1 has an invalid length. [ 407.224198][T25911] bond18: entered promiscuous mode [ 407.228986][T25911] 8021q: adding VLAN 0 to HW filter on device bond18 [ 407.343662][T25925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7211'. [ 407.456899][T25934] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7217'. [ 407.500784][T25938] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.504929][T25938] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.573015][T25938] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.577574][T25938] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.743286][T25938] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.747609][T25938] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.802037][T25959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7226'. [ 407.809951][T25938] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.813461][T25938] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.945892][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.956219][T21073] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.959101][T21073] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.977632][T21073] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.981386][T21073] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.984756][T21073] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.988201][T21073] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.999202][T21070] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.003054][T21070] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.080369][T25981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7236'. [ 408.151308][T25984] netlink: 'syz.7.7238': attribute type 1 has an invalid length. [ 408.178799][T25984] bond20: entered promiscuous mode [ 408.182081][T25984] 8021q: adding VLAN 0 to HW filter on device bond20 [ 408.483974][T26031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7250'. [ 408.492299][ T40] audit: type=1400 audit(2000000235.105:743): avc: denied { shutdown } for pid=26027 comm="syz.7.7251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 408.537230][T26035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7253'. [ 408.549924][T26035] bridge0: entered promiscuous mode [ 408.552956][T26035] macsec1: entered allmulticast mode [ 408.555200][T26035] bridge0: entered allmulticast mode [ 408.558554][T26035] bridge0: port 1(macsec1) entered blocking state [ 408.561672][T26035] bridge0: port 1(macsec1) entered disabled state [ 408.571186][T26035] bridge0: left allmulticast mode [ 408.573683][T26035] bridge0: left promiscuous mode [ 408.594156][T26041] netlink: 'syz.2.7256': attribute type 27 has an invalid length. [ 408.600631][T26041] bond0: left allmulticast mode [ 408.602820][T26041] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 408.607431][T26041] 0·: left allmulticast mode [ 408.609003][T26041] hsr_slave_0: left allmulticast mode [ 408.620053][T26041] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 408.626569][T26041] vlan4: left promiscuous mode [ 408.628232][T26041] vlan4: left allmulticast mode [ 408.629798][T26041] hsr_slave_1: left allmulticast mode [ 408.632015][T26041] gretap2: left promiscuous mode [ 408.667058][T26041] geneve2: left promiscuous mode [ 408.674266][T26041] vxlan0: left promiscuous mode [ 408.676949][T26041] vxlan0: left allmulticast mode [ 408.690473][T26041] ip6gre1: left promiscuous mode [ 408.692818][T26041] ip6gre1: left allmulticast mode [ 408.693530][T26052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7259'. [ 408.709148][T26041] bond7: left promiscuous mode [ 408.711286][T26041] xfrm1: left promiscuous mode [ 408.721989][T26041] ip6gre2: left promiscuous mode [ 408.723827][T26041] ip6gre2: left allmulticast mode [ 408.729742][T26041] bond8: left promiscuous mode [ 408.733689][T26041] ip6gre3: left promiscuous mode [ 408.738647][T26041] ip6gre3: left allmulticast mode [ 408.744670][T26041] bond9: left promiscuous mode [ 408.749140][T26041] bond10: left promiscuous mode [ 408.753048][T26041] bond11: left promiscuous mode [ 408.753165][T26054] --map-set only usable from mangle table [ 408.757166][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7260'. [ 408.760418][T26041] macsec1: left promiscuous mode [ 408.763256][T26041] bond12: left promiscuous mode [ 408.769845][T26041] bond13: left promiscuous mode [ 408.773876][T26041] bond14: left promiscuous mode [ 408.776729][T26041] bond15: left promiscuous mode [ 408.781042][T26041] bond16: left promiscuous mode [ 408.788160][T26041] bond18: left promiscuous mode [ 408.822565][T26047] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.831599][T26047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.838474][T21073] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.842028][T21073] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.845535][T21073] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.849870][T21073] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.861083][T21073] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.864022][T21073] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.866825][T21073] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.869596][T21073] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.985886][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.050406][T26079] netlink: 'syz.2.7269': attribute type 1 has an invalid length. [ 409.078019][T26079] bond19: entered promiscuous mode [ 409.080515][T26079] 8021q: adding VLAN 0 to HW filter on device bond19 [ 409.124614][ T40] audit: type=1800 audit(2000000235.735:744): pid=26087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.7271" name="/newroot/1907/file0" dev="tmpfs" ino=10093 res=0 errno=0 [ 409.177150][ T40] audit: type=1400 audit(2000000235.795:745): avc: denied { mounton } for pid=26092 comm="syz.3.7272" path="/137/file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 409.299720][T26099] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7273'. [ 410.025864][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.080197][T26172] --map-set only usable from mangle table [ 410.120793][ T40] audit: type=1400 audit(2000000236.735:746): avc: denied { ioctl } for pid=26177 comm="syz.2.7306" path="socket:[95674]" dev="sockfs" ino=95674 ioctlcmd=0x5875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 410.566610][ T40] audit: type=1400 audit(2000000237.185:747): avc: denied { lock } for pid=26229 comm="syz.7.7326" path="socket:[98342]" dev="sockfs" ino=98342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 410.814213][T26246] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 410.983477][T26262] VFS: Mount too revealing [ 411.075769][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.172720][T26288] vlan2: entered promiscuous mode [ 411.371663][T26306] batadv_slave_1: entered promiscuous mode [ 411.378234][T26304] batadv_slave_1: left promiscuous mode [ 411.385753][ T40] audit: type=1400 audit(2000000237.995:748): avc: denied { read } for pid=26305 comm="syz.3.7352" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.393797][ T40] audit: type=1400 audit(2000000237.995:749): avc: denied { read } for pid=26305 comm="syz.3.7352" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.397240][T26308] 9pnet_virtio: no channels available for device syz [ 411.403920][ T40] audit: type=1400 audit(2000000237.995:750): avc: denied { open } for pid=26305 comm="syz.3.7352" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.452666][T26313] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 411.457889][ T40] audit: type=1800 audit(2000000238.075:751): pid=26313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.7354" name="nullb0" dev="tmpfs" ino=3864 res=0 errno=0 [ 411.473179][ T40] audit: type=1400 audit(2000000238.085:752): avc: denied { ioctl } for pid=26305 comm="syz.3.7352" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.930860][T26327] __nla_validate_parse: 15 callbacks suppressed [ 411.930873][T26327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7359'. [ 411.968385][T26331] FAULT_INJECTION: forcing a failure. [ 411.968385][T26331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.972786][T26331] CPU: 3 UID: 0 PID: 26331 Comm: syz.3.7361 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.972803][T26331] Tainted: [L]=SOFTLOCKUP [ 411.972807][T26331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.972814][T26331] Call Trace: [ 411.972819][T26331] [ 411.972823][T26331] dump_stack_lvl+0x100/0x190 [ 411.972854][T26331] should_fail_ex.cold+0x5/0xa [ 411.972869][T26331] _copy_from_user+0x2e/0xd0 [ 411.972890][T26331] copy_msghdr_from_user+0x9f/0x4f0 [ 411.972918][T26331] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 411.972942][T26331] ___sys_sendmsg+0x106/0x1e0 [ 411.972962][T26331] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.972996][T26331] __sys_sendmsg+0x170/0x220 [ 411.973010][T26331] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.973033][T26331] do_syscall_64+0x106/0xf80 [ 411.973047][T26331] ? clear_bhb_loop+0x40/0x90 [ 411.973061][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.973073][T26331] RIP: 0033:0x7f7bbed9bf79 [ 411.973083][T26331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.973094][T26331] RSP: 002b:00007f7bbfc5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.973105][T26331] RAX: ffffffffffffffda RBX: 00007f7bbf015fa0 RCX: 00007f7bbed9bf79 [ 411.973111][T26331] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000009 [ 411.973118][T26331] RBP: 00007f7bbfc5c090 R08: 0000000000000000 R09: 0000000000000000 [ 411.973124][T26331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.973130][T26331] R13: 00007f7bbf016038 R14: 00007f7bbf015fa0 R15: 00007fffb2b42bc8 [ 411.973144][T26331] [ 412.115777][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.128844][T26343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7365'. [ 412.132806][T26343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7365'. [ 412.136846][T26343] netlink: 'syz.3.7365': attribute type 20 has an invalid length. [ 412.149483][T21073] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.149596][T26343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7365'. [ 412.153470][T21073] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.157408][T26343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7365'. [ 412.157440][T26343] netlink: 'syz.3.7365': attribute type 20 has an invalid length. [ 412.168753][T21073] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.172410][T21073] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.200352][T26344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7364'. [ 412.357680][T26352] overlayfs: failed to clone upperpath [ 412.624706][T26370] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 412.655719][T26372] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7376'. [ 412.820944][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7379'. [ 413.020019][T26392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7385'. [ 413.155836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.172188][T26410] FAULT_INJECTION: forcing a failure. [ 413.172188][T26410] name failslab, interval 1, probability 0, space 0, times 0 [ 413.185743][T26410] CPU: 1 UID: 0 PID: 26410 Comm: syz.3.7391 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.185764][T26410] Tainted: [L]=SOFTLOCKUP [ 413.185768][T26410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.185775][T26410] Call Trace: [ 413.185779][T26410] [ 413.185784][T26410] dump_stack_lvl+0x100/0x190 [ 413.185806][T26410] should_fail_ex.cold+0x5/0xa [ 413.185821][T26410] should_failslab+0xc2/0x120 [ 413.185837][T26410] __kvmalloc_node_noprof+0xfa/0xa00 [ 413.185850][T26410] ? xt_alloc_table_info+0x44/0xa0 [ 413.185872][T26410] xt_alloc_table_info+0x44/0xa0 [ 413.185891][T26410] do_ipt_set_ctl+0x504/0xb90 [ 413.185903][T26410] ? nf_sockopt_find.isra.0+0x222/0x290 [ 413.185924][T26410] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 413.185935][T26410] ? sockopt_release_sock+0x57/0x70 [ 413.185949][T26410] ? __local_bh_enable_ip+0x9e/0x120 [ 413.185963][T26410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 413.185987][T26410] ? nf_sockopt_find.isra.0+0x222/0x290 [ 413.186006][T26410] nf_setsockopt+0x8d/0xf0 [ 413.186025][T26410] ip_setsockopt+0xcb/0xf0 [ 413.186038][T26410] udp_setsockopt+0x7d/0xd0 [ 413.186055][T26410] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 413.186074][T26410] do_sock_setsockopt+0xf3/0x1d0 [ 413.186092][T26410] __sys_setsockopt+0x195/0x220 [ 413.186108][T26410] __x64_sys_setsockopt+0xbd/0x160 [ 413.186122][T26410] ? do_syscall_64+0x95/0xf80 [ 413.186137][T26410] ? lockdep_hardirqs_on+0x78/0x100 [ 413.186151][T26410] do_syscall_64+0x106/0xf80 [ 413.186165][T26410] ? clear_bhb_loop+0x40/0x90 [ 413.186179][T26410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.186191][T26410] RIP: 0033:0x7f7bbed9bf79 [ 413.186202][T26410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.186213][T26410] RSP: 002b:00007f7bbfc5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.186224][T26410] RAX: ffffffffffffffda RBX: 00007f7bbf015fa0 RCX: 00007f7bbed9bf79 [ 413.186231][T26410] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 413.186238][T26410] RBP: 00007f7bbfc5c090 R08: 0000000000000230 R09: 0000000000000000 [ 413.186244][T26410] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 413.186251][T26410] R13: 00007f7bbf016038 R14: 00007f7bbf015fa0 R15: 00007fffb2b42bc8 [ 413.186265][T26410] [ 413.297201][T26416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7392'. [ 413.571594][T26430] macvlan2: entered promiscuous mode [ 413.717471][T26440] Cannot find add_set index 2 as target [ 413.782189][T26445] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 413.786078][T26448] netlink: 'syz.7.7403': attribute type 1 has an invalid length. [ 413.812397][T26448] bond21: entered promiscuous mode [ 413.815059][T26448] 8021q: adding VLAN 0 to HW filter on device bond21 [ 413.853814][T26451] netlink: 'syz.3.7405': attribute type 13 has an invalid length. [ 414.195867][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.361743][T26482] --map-set only usable from mangle table [ 414.664396][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 414.664412][ T40] audit: type=1401 audit(2000000241.275:757): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 414.757146][T26520] netlink: 'syz.6.7432': attribute type 4 has an invalid length. [ 414.771187][T26520] wlan1: mtu less than device minimum [ 414.850015][T26534] bridge7: entered promiscuous mode [ 414.851703][T26534] bridge7: entered allmulticast mode [ 414.939960][T26539] No such timeout policy "syz1" [ 415.225831][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.730251][T26573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64788 sclass=netlink_route_socket pid=26573 comm=syz.3.7454 [ 415.804886][ T40] audit: type=1400 audit(2000000242.415:758): avc: denied { nlmsg_write } for pid=26577 comm="syz.7.7456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 415.813529][ T40] audit: type=1107 audit(2000000242.415:759): pid=26577 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 416.275748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.364674][T26627] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 416.369388][ T40] audit: type=1400 audit(2000000242.985:760): avc: denied { relabelto } for pid=26625 comm="syz.7.7476" name="1975" dev="tmpfs" ino=10407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 416.378516][ T40] audit: type=1400 audit(2000000242.985:761): avc: denied { associate } for pid=26625 comm="syz.7.7476" name="1975" dev="tmpfs" ino=10407 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 416.471256][T26637] netlink: 'syz.6.7479': attribute type 1 has an invalid length. [ 416.615511][T26651] sch_fq: defrate 4294967295 ignored. [ 416.719409][T26655] --map-set only usable from mangle table [ 417.112337][T26712] --map-set only usable from mangle table [ 417.136610][T26694] netlink: 'syz.7.7502': attribute type 1 has an invalid length. [ 417.140086][T26694] netlink: 'syz.7.7502': attribute type 1 has an invalid length. [ 417.152423][T26715] fuse: blksize only supported for fuseblk [ 417.284158][ T40] audit: type=1326 audit(2000000243.895:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz.2.7515" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f870e79bf79 code=0x0 [ 417.315884][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.557926][ T40] audit: type=1400 audit(2000000244.165:763): avc: denied { listen } for pid=26744 comm="syz.6.7522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.652963][T26759] overlayfs: failed to clone upperpath [ 417.695573][T26764] __nla_validate_parse: 21 callbacks suppressed [ 417.695591][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7528'. [ 418.054094][T26787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7537'. [ 418.058148][T26787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7537'. [ 418.123755][T26793] netlink: 'syz.7.7538': attribute type 1 has an invalid length. [ 418.146760][T26793] bond23: entered promiscuous mode [ 418.148675][T26793] 8021q: adding VLAN 0 to HW filter on device bond23 [ 418.197729][T26800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7540'. [ 418.202226][T26800] netlink: 'syz.7.7540': attribute type 322 has an invalid length. [ 418.355899][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.376541][T26811] --map-set only usable from mangle table [ 418.410950][T26815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7546'. [ 418.579097][T26835] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7553'. [ 418.636287][T26838] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7554'. [ 418.641206][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7554'. [ 418.727739][T26848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.758212][ T1458] IPVS: starting estimator thread 0... [ 418.865763][T26857] IPVS: using max 44 ests per chain, 105600 per kthread [ 418.931397][T26879] CUSE: unknown device info "" [ 418.933607][T26879] CUSE: zero length info key specified [ 419.006212][T26887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7572'. [ 419.209974][T26916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7581'. [ 419.262428][T26921] xt_CT: No such helper "pptp" [ 419.385939][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.491582][T26948] input: syz0 as /devices/virtual/input/input21 [ 419.746410][T26989] tmpfs: Bad value for 'mpol' [ 419.776796][T26996] overlayfs: failed to clone upperpath [ 419.778080][T26994] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 419.778080][T26994] cct.usage_percpu_sys' [ 419.841542][T27005] overlayfs: unescaped trailing colons in lowerdir mount option. [ 419.996305][T27019] bond1: option mode: unable to set because the bond device has slaves [ 420.271803][T27044] input: syz0 as /devices/virtual/input/input22 [ 420.435934][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.761223][ T40] audit: type=1400 audit(2000000247.365:764): avc: denied { setopt } for pid=27057 comm="syz.3.7634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 421.046577][T27068] netlink: 'syz.6.7636': attribute type 5 has an invalid length. [ 421.107946][T27072] netlink: 'syz.2.7638': attribute type 1 has an invalid length. [ 421.127975][T27072] bond20: entered promiscuous mode [ 421.129839][T27072] 8021q: adding VLAN 0 to HW filter on device bond20 [ 421.475757][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.599996][T27096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.873174][T27113] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.878498][T27113] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.940854][T27116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27116 comm=syz.6.7652 [ 421.955496][T27113] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.962666][T27113] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.071716][T27113] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.076118][T27113] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.149277][T27113] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.153383][T27113] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.278726][T21094] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.282740][T21094] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.300182][T21094] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.305816][T21094] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.321790][T21094] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.325337][T21094] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.345018][T21094] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.348527][T21094] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.457085][T27142] vlan3: entered promiscuous mode [ 422.459048][T27142] hsr_slave_1: entered promiscuous mode [ 422.461449][T27142] vlan3: entered allmulticast mode [ 422.463645][T27142] hsr_slave_1: entered allmulticast mode [ 422.505766][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.900632][T27174] __nla_validate_parse: 3 callbacks suppressed [ 422.900651][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7674'. [ 422.932362][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7676'. [ 422.984384][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7679'. [ 422.989204][T27191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7679'. [ 422.992895][T27191] netlink: 'syz.6.7679': attribute type 18 has an invalid length. [ 422.996553][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7679'. [ 423.051449][T27200] fuse: Bad value for 'fd' [ 423.175394][ T40] audit: type=1400 audit(2000000249.785:765): avc: denied { write } for pid=27211 comm="syz.7.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 423.178890][T27212] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 423.202993][ T40] audit: type=1400 audit(2000000249.815:766): avc: denied { bind } for pid=27211 comm="syz.7.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 423.277582][T27226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7693'. [ 423.545969][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.620088][T27253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.805997][ T40] audit: type=1800 audit(2000000250.415:767): pid=27265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.7707" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 424.053820][T27277] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7711'. [ 424.194873][T27284] random: crng reseeded on system resumption [ 424.562241][ T40] audit: type=1400 audit(2000000251.175:768): avc: denied { mount } for pid=27297 comm="syz.7.7720" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 424.585928][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.609930][T27303] input: syz0 as /devices/virtual/input/input23 [ 424.615408][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7723'. [ 424.671445][T27312] netlink: 'syz.2.7725': attribute type 3 has an invalid length. [ 424.674025][T27312] netlink: 'syz.2.7725': attribute type 3 has an invalid length. [ 424.677257][T27312] netlink: 'syz.2.7725': attribute type 3 has an invalid length. [ 424.680320][T27312] netlink: 'syz.2.7725': attribute type 3 has an invalid length. [ 424.682842][T27312] netlink: 'syz.2.7725': attribute type 3 has an invalid length. [ 424.685375][T27312] netlink: 'syz.2.7725': attribute type 3 has an invalid length. [ 424.688352][T27312] netlink: 'syz.2.7725': attribute type 3 has an invalid length. [ 424.765257][ T40] audit: type=1400 audit(2000000251.375:769): avc: denied { accept } for pid=27319 comm="syz.6.7729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 424.849969][T27331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7733'. [ 425.097008][T27345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.542806][T27371] bond17: entered promiscuous mode [ 425.545269][T27371] 8021q: adding VLAN 0 to HW filter on device bond17 [ 425.626106][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.801377][T27387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=27387 comm=syz.6.7756 [ 425.807778][T27387] 8021q: VLANs not supported on bond0 [ 425.845103][T27391] xt_l2tp: invalid flags combination: 8 [ 426.114322][T27416] validate_nla: 10 callbacks suppressed [ 426.114339][T27416] netlink: 'syz.6.7768': attribute type 1 has an invalid length. [ 426.140709][T27416] bond18: entered promiscuous mode [ 426.142723][T27416] 8021q: adding VLAN 0 to HW filter on device bond18 [ 426.276206][T27436] input: syz0 as /devices/virtual/input/input24 [ 426.303635][T27442] overlayfs: failed to clone upperpath [ 426.316840][T27442] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7775'. [ 426.329156][T27442] overlayfs: failed to clone upperpath [ 426.469039][T27454] /dev/nullb0: Can't lookup blockdev [ 426.544306][T27460] sock: sock_set_timeout: `syz.2.7783' (pid 27460) tries to set negative timeout [ 426.665851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.787120][T27474] netlink: 'syz.2.7787': attribute type 1 has an invalid length. [ 426.799990][T27474] bond21: entered promiscuous mode [ 426.802087][T27474] 8021q: adding VLAN 0 to HW filter on device bond21 [ 427.314075][ T40] audit: type=1400 audit(2000000253.925:770): avc: denied { ioctl } for pid=27512 comm="syz.3.7803" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 427.318155][T27513] devpts: Bad value for 'max' [ 427.401042][T27522] FAULT_INJECTION: forcing a failure. [ 427.401042][T27522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.408566][T27522] CPU: 3 UID: 0 PID: 27522 Comm: syz.3.7807 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.408596][T27522] Tainted: [L]=SOFTLOCKUP [ 427.408602][T27522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.408612][T27522] Call Trace: [ 427.408617][T27522] [ 427.408625][T27522] dump_stack_lvl+0x100/0x190 [ 427.408673][T27522] should_fail_ex.cold+0x5/0xa [ 427.408695][T27522] _copy_from_user+0x2e/0xd0 [ 427.408730][T27522] move_addr_to_kernel+0x65/0x170 [ 427.408771][T27522] __sys_connect+0xb5/0x170 [ 427.408790][T27522] ? __pfx___sys_connect+0x10/0x10 [ 427.408807][T27522] ? __fget_files+0x21f/0x3d0 [ 427.408838][T27522] ? __pfx_ksys_write+0x10/0x10 [ 427.408863][T27522] __x64_sys_connect+0x72/0xb0 [ 427.408880][T27522] ? lockdep_hardirqs_on+0x78/0x100 [ 427.408903][T27522] do_syscall_64+0x106/0xf80 [ 427.408924][T27522] ? clear_bhb_loop+0x40/0x90 [ 427.408946][T27522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.408963][T27522] RIP: 0033:0x7f7bbed9bf79 [ 427.408979][T27522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.408994][T27522] RSP: 002b:00007f7bbfc5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 427.409011][T27522] RAX: ffffffffffffffda RBX: 00007f7bbf015fa0 RCX: 00007f7bbed9bf79 [ 427.409022][T27522] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 427.409032][T27522] RBP: 00007f7bbfc5c090 R08: 0000000000000000 R09: 0000000000000000 [ 427.409042][T27522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.409051][T27522] R13: 00007f7bbf016038 R14: 00007f7bbf015fa0 R15: 00007fffb2b42bc8 [ 427.409075][T27522] [ 427.633961][T27546] netlink: 'syz.7.7815': attribute type 3 has an invalid length. [ 427.705848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.734926][T27554] netlink: 'syz.6.7818': attribute type 1 has an invalid length. [ 427.756718][T27554] bond19: entered promiscuous mode [ 427.759430][T27554] 8021q: adding VLAN 0 to HW filter on device bond19 [ 427.872340][T27564] mac80211_hwsim hwsim30 syzkaller0: Caught tx_queue_len zero misconfig [ 427.877353][T27563] ip6tnl0: Caught tx_queue_len zero misconfig [ 427.958475][T27575] __nla_validate_parse: 6 callbacks suppressed [ 427.958489][T27575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7827'. [ 427.964694][T27575] lo: Caught tx_queue_len zero misconfig [ 427.967626][T27575] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7827'. [ 428.097776][T27599] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 428.106955][ T40] audit: type=1400 audit(2000000254.715:771): avc: denied { execheap } for pid=27592 comm="syz.3.7833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 428.305394][T27618] netlink: 'syz.6.7843': attribute type 33 has an invalid length. [ 428.308206][T27618] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7843'. [ 428.479675][T27641] netlink: 'syz.6.7853': attribute type 1 has an invalid length. [ 428.489112][T27638] cgroup: fork rejected by pids controller in /syz7 [ 428.507580][T27641] bond20: entered promiscuous mode [ 428.509887][T27641] 8021q: adding VLAN 0 to HW filter on device bond20 [ 428.600989][T27654] netlink: 'syz.6.7855': attribute type 1 has an invalid length. [ 428.670570][T27646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7851'. [ 428.745839][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.079458][T27688] netlink: 'syz.6.7860': attribute type 1 has an invalid length. [ 429.087651][T27688] netlink: 'syz.6.7860': attribute type 1 has an invalid length. [ 429.094198][T27688] netlink: 9172 bytes leftover after parsing attributes in process `syz.6.7860'. [ 429.269349][T27701] netlink: 'syz.6.7863': attribute type 1 has an invalid length. [ 429.292604][T27701] bond21: entered promiscuous mode [ 429.295232][T27701] 8021q: adding VLAN 0 to HW filter on device bond21 [ 429.546001][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.785904][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.838706][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.911785][T27750] Cannot find map_set index 65532 as target [ 429.998279][T27750] Cannot find map_set index 65532 as target [ 430.050248][T27764] bond22: entered promiscuous mode [ 430.053014][T27764] 8021q: adding VLAN 0 to HW filter on device bond22 [ 430.119304][ T40] audit: type=1400 audit(2000000256.735:772): avc: denied { getopt } for pid=27773 comm="syz.2.7889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 430.239548][T27785] netlink: 17 bytes leftover after parsing attributes in process `syz.7.7888'. [ 430.505937][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 430.616335][ T5968] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 430.825910][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.879084][T27818] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.903985][ T40] audit: type=1400 audit(2000000257.515:773): avc: denied { unmount } for pid=23541 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 430.921242][T27813] : renamed from bond_slave_1 [ 431.638838][ T40] audit: type=1400 audit(2000000258.255:774): avc: denied { ioctl } for pid=27825 comm="syz.7.7906" path="socket:[102259]" dev="sockfs" ino=102259 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 431.796938][T27866] validate_nla: 2 callbacks suppressed [ 431.796956][T27866] netlink: 'syz.2.7918': attribute type 13 has an invalid length. [ 431.869286][T27870] netlink: 'syz.3.7920': attribute type 2 has an invalid length. [ 431.872092][T27870] netlink: 'syz.3.7920': attribute type 2 has an invalid length. [ 431.874607][T27870] netlink: 'syz.3.7920': attribute type 2 has an invalid length. [ 431.875790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.881883][T27870] netlink: 'syz.3.7920': attribute type 1 has an invalid length. [ 431.964279][T27887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7926'. [ 432.065436][T27900] overlayfs: failed to clone upperpath [ 432.161303][T27887] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7926'. [ 432.316116][T27927] netlink: 'syz.3.7940': attribute type 1 has an invalid length. [ 432.337932][T27927] bond1: entered promiscuous mode [ 432.340471][T27927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.433543][T27935] QAT: failed to copy from user cfg_data. [ 432.915856][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.921595][T27974] netlink: 'syz.2.7958': attribute type 1 has an invalid length. [ 432.971577][T27974] 8021q: adding VLAN 0 to HW filter on device bond23 [ 432.986163][T27974] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7958'. [ 432.994783][T27974] bond23: (slave gretap5): making interface the new active one [ 433.002420][T27974] bond23: (slave gretap5): Enslaving as an active interface with an up link [ 433.410675][T28015] netlink: 'syz.2.7973': attribute type 1 has an invalid length. [ 433.432280][T28015] bond24: entered promiscuous mode [ 433.435118][T28015] 8021q: adding VLAN 0 to HW filter on device bond24 [ 433.444059][T28016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=28016 comm=syz.7.7972 [ 433.621632][ T40] audit: type=1800 audit(2000000260.235:775): pid=28025 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.7978" name="nullb0" dev="tmpfs" ino=3188 res=0 errno=0 [ 433.635864][ T24] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 433.786852][ T24] usb 8-1: Invalid ep0 maxpacket: 32 [ 433.837146][T28043] netlink: 'syz.2.7986': attribute type 1 has an invalid length. [ 433.839909][T28043] netlink: 'syz.2.7986': attribute type 2 has an invalid length. [ 433.843913][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7986'. [ 433.916107][ T24] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 433.955529][T28048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7988'. [ 433.955753][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.016196][T28053] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 434.056807][ T40] audit: type=1400 audit(2000000260.675:776): avc: denied { bind } for pid=28060 comm="syz.2.7993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 434.065222][ T40] audit: type=1400 audit(2000000260.675:777): avc: denied { write } for pid=28060 comm="syz.2.7993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 434.075799][ T24] usb 8-1: Invalid ep0 maxpacket: 32 [ 434.079917][ T24] usb usb8-port1: attempt power cycle [ 434.415949][ T24] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 434.437363][ T24] usb 8-1: Invalid ep0 maxpacket: 32 [ 434.477007][T28092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8005'. [ 434.480995][T28092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8005'. [ 434.566716][ T24] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 434.586613][ T24] usb 8-1: Invalid ep0 maxpacket: 32 [ 434.589135][ T24] usb usb8-port1: unable to enumerate USB device [ 434.757006][T28117] bond0: Caught tx_queue_len zero misconfig [ 434.985785][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.398045][T28142] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 435.403086][T28142] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 436.025743][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.442979][T28157] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 436.462472][ T40] audit: type=1400 audit(2000000263.075:778): avc: denied { load_policy } for pid=28156 comm="syz.3.8032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 436.476295][T28157] SELinux: truncated policydb string identifier [ 436.479720][T28157] SELinux: failed to load policy [ 436.497916][T28157] 9pnet_fd: p9_fd_create_tcp (28157): problem binding to privport [ 436.720898][T28161] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8034'. [ 437.065788][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.109459][T28165] NILFS (nbd3): device size too small [ 437.340481][T28170] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 437.346090][T28170] binder: 28169:28170 ioctl c0306201 2000000001c0 returned -22 [ 437.709217][T28175] validate_nla: 5 callbacks suppressed [ 437.709236][T28175] netlink: 'syz.3.8040': attribute type 1 has an invalid length. [ 437.758166][T28175] bond2: entered promiscuous mode [ 437.760794][T28175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.902175][T28185] usb usb8: usbfs: process 28185 (syz.3.8044) did not claim interface 0 before use [ 437.905841][ T40] audit: type=1400 audit(2000000264.515:779): avc: denied { execute } for pid=28184 comm="syz.3.8044" path="/proc/754/task/755/net/igmp6" dev="proc" ino=4026534245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 438.105763][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.370717][T28212] xt_CT: No such helper "netbios-ns" [ 438.673035][T28241] overlayfs: workdir and upperdir must be separate subtrees [ 438.934608][T28253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42602 sclass=netlink_route_socket pid=28253 comm=syz.3.8070 [ 439.124589][T28267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8076'. [ 439.145861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.218022][T28276] --map-set only usable from mangle table [ 439.511899][T28297] netlink: 'syz.6.8087': attribute type 15 has an invalid length. [ 439.924038][T28335] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8100'. [ 440.085882][ T828] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 440.195775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.229150][T28346] --map-set only usable from mangle table [ 440.239542][ T828] usb 8-1: Using ep0 maxpacket: 8 [ 440.245604][ T828] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 440.249722][ T828] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.254947][ T828] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.259391][ T828] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.263576][ T828] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.269814][ T828] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 440.273758][ T828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.492234][ T828] usb 8-1: usb_control_msg returned -32 [ 440.494806][ T828] usbtmc 8-1:16.0: can't read capabilities [ 440.550999][T28370] sock: sock_timestamping_bind_phc: sock not bind to device [ 440.595379][T28378] --map-set only usable from mangle table [ 440.896165][T28402] netlink: 'syz.6.8124': attribute type 2 has an invalid length. [ 440.899286][T28402] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8124'. [ 441.121482][T28416] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 441.153998][T28410] Process accounting resumed [ 441.155967][T28418] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 441.225912][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.301004][T28424] sctp: [Deprecated]: syz.3.8099 (pid 28424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.301004][T28424] Use struct sctp_sack_info instead [ 441.678456][T28434] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 441.733907][T28439] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8135'. [ 441.778516][T28444] xt_hashlimit: size too large, truncated to 1048576 [ 441.954858][T28464] netlink: 'syz.6.8144': attribute type 1 has an invalid length. [ 441.958095][T28464] netlink: 'syz.6.8144': attribute type 2 has an invalid length. [ 441.959222][T28466] cgroup: Name too long [ 441.961380][T28464] netlink: 'syz.6.8144': attribute type 1 has an invalid length. [ 441.967877][T28464] netlink: 'syz.6.8144': attribute type 3 has an invalid length. [ 441.970876][T28464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8144'. [ 442.254664][T28485] netlink: 'syz.2.8153': attribute type 4 has an invalid length. [ 442.275817][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.313075][T28495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8153'. [ 442.316915][T28495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8153'. [ 442.681480][T28516] netlink: 'syz.7.8165': attribute type 1 has an invalid length. [ 442.702576][T28516] bond24: entered promiscuous mode [ 442.704687][T28516] 8021q: adding VLAN 0 to HW filter on device bond24 [ 442.826938][T28526] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8169'. [ 442.851259][ T10] usb 8-1: USB disconnect, device number 13 [ 442.893655][ T40] audit: type=1400 audit(2000000269.505:780): avc: denied { read } for pid=28533 comm="syz.3.8173" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 442.909297][ T40] audit: type=1400 audit(2000000269.525:781): avc: denied { open } for pid=28533 comm="syz.3.8173" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 442.922300][ T40] audit: type=1400 audit(2000000269.525:782): avc: denied { ioctl } for pid=28533 comm="syz.3.8173" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 443.064705][T28548] netlink: 'syz.6.8178': attribute type 1 has an invalid length. [ 443.068952][T28548] netlink: 'syz.6.8178': attribute type 2 has an invalid length. [ 443.072752][T28548] netlink: 'syz.6.8178': attribute type 1 has an invalid length. [ 443.076380][T28548] netlink: 'syz.6.8178': attribute type 3 has an invalid length. [ 443.084843][T28548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8178'. [ 443.104648][T28534] loop2: detected capacity change from 0 to 7 [ 443.110048][T28534] Dev loop2: unable to read RDB block 7 [ 443.112701][T28534] loop2: AHDI p1 p2 [ 443.114508][T28534] loop2: partition table partially beyond EOD, truncated [ 443.124883][T28534] loop2: p1 start 1818582900 is beyond EOD, truncated [ 443.225464][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8182'. [ 443.275222][T28563] netlink: 'syz.3.8184': attribute type 1 has an invalid length. [ 443.285254][T28565] overlayfs: failed to clone lowerpath [ 443.292334][T28563] bond3: entered promiscuous mode [ 443.294683][T28563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.305906][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.548269][T28603] netlink: 'syz.2.8197': attribute type 1 has an invalid length. [ 443.568020][T28603] bond25: entered promiscuous mode [ 443.571327][T28603] 8021q: adding VLAN 0 to HW filter on device bond25 [ 443.649775][T28613] Bluetooth: MGMT ver 1.23 [ 443.815293][T28632] --map-set only usable from mangle table [ 443.908757][T28640] netlink: 'syz.6.8208': attribute type 10 has an invalid length. [ 443.910472][T28641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 444.082338][ T40] audit: type=1326 audit(2000000270.695:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28657 comm="syz.6.8215" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ced59bf79 code=0x0 [ 444.158768][T28663] netlink: 'syz.3.8217': attribute type 9 has an invalid length. [ 444.347276][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.412143][T28684] kAFS: unparsable volume name [ 444.636974][T28692] NILFS (nbd3): device size too small [ 444.924117][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.928141][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.100527][T28723] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.239583][T28726] veth1_vlan: left allmulticast mode [ 445.385829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.505171][T28750] netlink: 'syz.7.8246': attribute type 1 has an invalid length. [ 445.516264][ T1150] ------------[ cut here ]------------ [ 445.518964][ T1150] time_after(jiffies, timeout) [ 445.518975][ T1150] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x42d/0xcdb, CPU#3: kworker/u32:8/1150 [ 445.524336][ T1150] Modules linked in: [ 445.525100][T28750] bond25: entered promiscuous mode [ 445.526080][ T1150] CPU: 3 UID: 0 PID: 1150 Comm: kworker/u32:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.526112][ T1150] Tainted: [L]=SOFTLOCKUP [ 445.526116][ T1150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.526125][ T1150] Workqueue: iou_exit io_ring_exit_work [ 445.526146][ T1150] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 445.528776][T28750] 8021q: adding VLAN 0 to HW filter on device bond25 [ 445.531897][ T1150] Code: 8e e8 e7 7a 3d 01 48 8b 05 a0 d4 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 ee ce d1 00 4d 85 ed 79 12 e8 04 d4 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 f2 d3 d1 00 48 8b 74 24 38 [ 445.552899][ T1150] RSP: 0018:ffffc90006997ab0 EFLAGS: 00010293 [ 445.556004][ T1150] RAX: 0000000000000000 RBX: ffff88802f442778 RCX: ffffffff81353df2 [ 445.559314][ T1150] RDX: ffff88802b1b2480 RSI: ffffffff81353dfc RDI: ffff88802b1b2480 [ 445.562617][ T1150] RBP: ffffc90006997c40 R08: 0000000000000007 R09: 0000000000000000 [ 445.566446][ T1150] R10: fffffffffffffffe R11: 0000000000000000 R12: ffff88802f442000 [ 445.567543][ T40] audit: type=1400 audit(2000000272.185:784): avc: denied { read } for pid=28752 comm="syz.3.8247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.570096][ T1150] R13: fffffffffffffffe R14: dffffc0000000000 R15: 0000000000000000 [ 445.570113][ T1150] FS: 0000000000000000(0000) GS:ffff8880d668b000(0000) knlGS:0000000000000000 [ 445.570147][ T1150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.586207][ T1150] CR2: 00007f870f5ced58 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 445.589226][ T1150] Call Trace: [ 445.590443][ T1150] [ 445.591489][ T1150] ? __pfx_io_ring_exit_work+0x10/0x10 [ 445.593371][ T1150] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.595270][ T1150] ? debug_object_deactivate+0x2e4/0x3b0 [ 445.597240][ T1150] ? process_one_work+0x80b/0x1840 [ 445.598885][ T1150] ? rcu_is_watching+0x12/0xc0 [ 445.600445][ T1150] process_one_work+0x9c2/0x1840 [ 445.602042][ T1150] ? __pfx_process_one_work+0x10/0x10 [ 445.603786][ T1150] ? __pfx_io_ring_exit_work+0x10/0x10 [ 445.605534][ T1150] worker_thread+0x5da/0xe40 [ 445.607125][ T1150] ? __pfx_worker_thread+0x10/0x10 [ 445.608767][ T1150] ? kthread+0x13a/0x450 [ 445.610377][ T1150] ? __pfx_worker_thread+0x10/0x10 [ 445.612457][ T1150] kthread+0x370/0x450 [ 445.614090][ T1150] ? __pfx_kthread+0x10/0x10 [ 445.615802][ T1150] ret_from_fork+0x754/0xd80 [ 445.617478][ T1150] ? __pfx_ret_from_fork+0x10/0x10 [ 445.619148][ T1150] ? __switch_to+0x7b4/0x10c0 [ 445.620857][ T1150] ? __pfx_kthread+0x10/0x10 [ 445.622371][ T1150] ret_from_fork_asm+0x1a/0x30 [ 445.624133][ T1150] [ 445.625423][ T1150] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 445.627788][ T1150] CPU: 3 UID: 0 PID: 1150 Comm: kworker/u32:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.631583][ T1150] Tainted: [L]=SOFTLOCKUP [ 445.633025][ T1150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.636421][ T1150] Workqueue: iou_exit io_ring_exit_work [ 445.638171][ T1150] Call Trace: [ 445.639287][ T1150] [ 445.640237][ T1150] dump_stack_lvl+0x100/0x190 [ 445.641915][ T1150] vpanic+0x552/0x970 [ 445.643486][ T1150] ? __pfx_vpanic+0x10/0x10 [ 445.645057][ T1150] panic+0xd1/0xe0 [ 445.646332][ T1150] ? __pfx_panic+0x10/0x10 [ 445.647859][ T1150] ? check_panic_on_warn+0x1f/0x90 [ 445.649609][ T1150] check_panic_on_warn.cold+0x19/0x34 [ 445.651353][ T1150] ? io_ring_exit_work+0x42d/0xcdb [ 445.653027][ T1150] __warn.cold+0x191/0x2f8 [ 445.654464][ T1150] __report_bug+0x296/0x3d0 [ 445.655938][ T1150] ? io_ring_exit_work+0x42d/0xcdb [ 445.657573][ T1150] ? __pfx___report_bug+0x10/0x10 [ 445.659214][ T1150] ? rcu_is_watching+0x12/0xc0 [ 445.661040][ T1150] ? trace_contention_end+0xd6/0x110 [ 445.662991][ T1150] ? __mutex_lock+0x26a/0x1b90 [ 445.664806][ T1150] ? find_held_lock+0x2b/0x80 [ 445.666696][ T1150] ? io_req_caches_free+0x49/0x60 [ 445.668763][ T1150] ? io_req_caches_free+0x49/0x60 [ 445.670636][ T1150] ? io_ring_exit_work+0x42d/0xcdb [ 445.672336][ T1150] report_bug+0xb2/0x220 [ 445.673744][ T1150] ? io_ring_exit_work+0x42d/0xcdb [ 445.675419][ T1150] handle_bug+0x166/0x2a0 [ 445.676979][ T1150] exc_invalid_op+0x17/0x50 [ 445.678817][ T1150] asm_exc_invalid_op+0x1a/0x20 [ 445.680745][ T1150] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 445.682680][ T1150] Code: 8e e8 e7 7a 3d 01 48 8b 05 a0 d4 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 ee ce d1 00 4d 85 ed 79 12 e8 04 d4 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 f2 d3 d1 00 48 8b 74 24 38 [ 445.688584][ T1150] RSP: 0018:ffffc90006997ab0 EFLAGS: 00010293 [ 445.690531][ T1150] RAX: 0000000000000000 RBX: ffff88802f442778 RCX: ffffffff81353df2 [ 445.693123][ T1150] RDX: ffff88802b1b2480 RSI: ffffffff81353dfc RDI: ffff88802b1b2480 [ 445.695640][ T1150] RBP: ffffc90006997c40 R08: 0000000000000007 R09: 0000000000000000 [ 445.698128][ T1150] R10: fffffffffffffffe R11: 0000000000000000 R12: ffff88802f442000 [ 445.700639][ T1150] R13: fffffffffffffffe R14: dffffc0000000000 R15: 0000000000000000 [ 445.703185][ T1150] ? io_ring_exit_work+0x422/0xcdb [ 445.704810][ T1150] ? io_ring_exit_work+0x42c/0xcdb [ 445.706453][ T1150] ? __pfx_io_ring_exit_work+0x10/0x10 [ 445.708238][ T1150] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.710101][ T1150] ? debug_object_deactivate+0x2e4/0x3b0 [ 445.711828][ T1150] ? process_one_work+0x80b/0x1840 [ 445.713458][ T1150] ? rcu_is_watching+0x12/0xc0 [ 445.714998][ T1150] process_one_work+0x9c2/0x1840 [ 445.716604][ T1150] ? __pfx_process_one_work+0x10/0x10 [ 445.718356][ T1150] ? __pfx_io_ring_exit_work+0x10/0x10 [ 445.720143][ T1150] worker_thread+0x5da/0xe40 [ 445.721653][ T1150] ? __pfx_worker_thread+0x10/0x10 [ 445.723379][ T1150] ? kthread+0x13a/0x450 [ 445.724799][ T1150] ? __pfx_worker_thread+0x10/0x10 [ 445.726478][ T1150] kthread+0x370/0x450 [ 445.727825][ T1150] ? __pfx_kthread+0x10/0x10 [ 445.729381][ T1150] ret_from_fork+0x754/0xd80 [ 445.730921][ T1150] ? __pfx_ret_from_fork+0x10/0x10 [ 445.733059][ T1150] ? __switch_to+0x7b4/0x10c0 [ 445.734978][ T1150] ? __pfx_kthread+0x10/0x10 [ 445.736915][ T1150] ret_from_fork_asm+0x1a/0x30 [ 445.738484][ T1150] [ 445.740221][ T1150] Kernel Offset: disabled [ 445.741615][ T1150] Rebooting in 86400 seconds..