last executing test programs: 14m18.234409209s ago: executing program 32 (id=1287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "51a30651b44deb71", "25084a0431c3e161539e7d177b0fd1fc", 'b*h3', "5b1eba86a32a62e3"}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc020000210aef1a699e0db74399f205903e43cf167b412f48d447420e135d71f6df0c627cc2567b79faf566b36ffe037213d0e79eb081df44774d04151a60457bb04dfa6de8e1ef39897e6fcb01d088254c0c743a453d95910592661841f8531c6ea3e81b1a0df6366b3c92e2e755817491cad6322e70c1dd33a6302efe408450ec"], 0x2cc}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @remote}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt(r1, 0x1, 0xa, &(0x7f0000000100)="3d17cbbad55672aafe1f4c388406ae3a07d6b173b7f127cfa5640341ffa223dcb71b3e8f8d85432dcbe2eba5447111b995f6564c084b442d09be98dfc70c1916e96d3733408f10a02b5236a80372db85adef1132dac9269a27678661addfe620c24497b7efe833c16376b987e9b4be3d7bc48649aa18ed9a7f257438dd2e91716460c285b1152886f633e6d5de069b059b439176670c8ff847609d2c4fb80a382daf82b848b837f9", 0xa8) 14m8.564040741s ago: executing program 33 (id=1198): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@random="5bb86bfba4bb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0x2001, 0x880d, 0x48, 0x0, @wg=@cookie={0x3, 0x6, "c3c649c5ddc06026fe83810e0fda3c7bb12fa2d65a6b4ac7", "ca46d9fee7499c032f101721b7a72a513d485fe06268d452057ee6a24bad4ff5"}}}}}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x42880, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) write(0xffffffffffffffff, &(0x7f0000000000)="0a000000010001", 0x7) 13m37.229809695s ago: executing program 34 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="00040ca8cd65237b9ebd7000ffdbdf250900000008000b0100000bf762a2e6d132db9ada3f03504901ff7f"], 0x24}}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8048) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000001000ff200700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e69637666300000000000000000000008000500040000000500530001000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13m27.953509712s ago: executing program 35 (id=1990): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149a82, 0x24a) write$cgroup_int(r0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x100000000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x917}, &(0x7f0000000500)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) read$FUSE(0xffffffffffffffff, &(0x7f0000000e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x2) ptrace$pokeuser(0x6, r2, 0x358, 0xafe8) r3 = syz_clone3(&(0x7f00000001c0)={0x80080000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000580), {0x2e}, &(0x7f0000000140)=""/37, 0x25, &(0x7f00000005c0)=""/164, &(0x7f0000000a80)=[0x0, r2, r1, r2, r2, r1, 0x0, r1, 0x0, 0x0], 0xa, {r0}}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}}, 0x0) ptrace$setregset(0x4205, r3, 0x201, &(0x7f00000000c0)={&(0x7f0000000300)="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", 0x14f}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 12m14.286652221s ago: executing program 36 (id=2796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x68, r1, 0x1e48fecacbd21e9b, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c081) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x10, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) 12m2.27888339s ago: executing program 37 (id=2780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async, rerun: 64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (rerun: 64) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) (async) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000001000000000000000100000000000000000000f6ff"]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000068000100030010000000008000000000000000000c00020001000000150000000c000c80f2ffffffffffffff0600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x40) (async) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req={0x6, 0x6, 0x8ed4, 0x7fffffff}, 0xe82d8ed8913b46a7) (async) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004"], 0xfdef) (async, rerun: 64) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1400000013000149993dde442213e97a79"], 0x14}], 0x1}, 0x4008000) (async, rerun: 32) fsync(r0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf12020000000000000500000000052c130008000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) (rerun: 64) 11m48.586206913s ago: executing program 38 (id=2865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r5 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0xd0c00) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x7) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r5, 0x0) shmctl$SHM_STAT(r5, 0xd, &(0x7f00000000c0)=""/211) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x12, 0x0, 0x200005}]}) 11m7.171302151s ago: executing program 39 (id=3544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4579a7eb61545c6533d3801000d6f001b67a27ff82a3833dda549934e8365bdeb1dec62a0f316eddb15c21b1a999e2be9d1c3b552f1c3419ca0e39e41f54", 0x3e) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x6c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x218, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "56c4307500cc6e6b749cde0a32cc36499717fd13c1916e7de1"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x24}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "10b4fcf9e9ac45f3e88e084930b68ba9610e3ade488f02d5e27f9dd5610eca5c76a87ea1fc96406ca91f69b1b440a65a0585919fb251ed1da58a93d568049e7eac8f360c312bb97dfa9a9b3ec3cc108a035f87cc346a1a6481f59acb70cdfbc85779a02796c1d54a74bb047443cff9e931aeb7d280a2063093df94f90a88ecee21b78307ba71dd4fa1f5788b713d68b2f5e9d3e84c50fb3122b484b766e94e2b93ba4429d5e045c0d7bfe219a7592b43"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3788}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffbd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x60040044}, 0x200088d0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000480), 0x4, 0x4a00) write$vhost_msg_v2(r7, &(0x7f0000001880)={0x2, 0x0, {&(0x7f0000000780)=""/4096, 0x1000, &(0x7f0000001780)=""/194, 0x2, 0x1}}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @empty, @empty, 0x40, 0x20, 0x2, 0x2}}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4579a7eb61545c6533d3801000d6f001b67a27ff82a3833dda549934e8365bdeb1dec62a0f316eddb15c21b1a999e2be9d1c3b552f1c3419ca0e39e41f54", 0x3e) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x6c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}]}]}, 0x34}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x218, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "56c4307500cc6e6b749cde0a32cc36499717fd13c1916e7de1"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x24}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "10b4fcf9e9ac45f3e88e084930b68ba9610e3ade488f02d5e27f9dd5610eca5c76a87ea1fc96406ca91f69b1b440a65a0585919fb251ed1da58a93d568049e7eac8f360c312bb97dfa9a9b3ec3cc108a035f87cc346a1a6481f59acb70cdfbc85779a02796c1d54a74bb047443cff9e931aeb7d280a2063093df94f90a88ecee21b78307ba71dd4fa1f5788b713d68b2f5e9d3e84c50fb3122b484b766e94e2b93ba4429d5e045c0d7bfe219a7592b43"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3788}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffbd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x60040044}, 0x200088d0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x2, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000480), 0x4, 0x4a00) (async) write$vhost_msg_v2(r7, &(0x7f0000001880)={0x2, 0x0, {&(0x7f0000000780)=""/4096, 0x1000, &(0x7f0000001780)=""/194, 0x2, 0x1}}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @empty, @empty, 0x40, 0x20, 0x2, 0x2}}) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) 9m21.665140299s ago: executing program 40 (id=4563): io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) io_cancel(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xc1, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x0, 0x2}, 0x0) 8m1.859931581s ago: executing program 41 (id=5189): sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 6m55.327083471s ago: executing program 3 (id=5712): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000000080)) 6m55.186453137s ago: executing program 3 (id=5714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x4, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244743bd4c0b02a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 6m54.730294994s ago: executing program 3 (id=5716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_clone3(&(0x7f0000000640)={0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000480), {0x19}, &(0x7f0000000500)=""/27, 0x1b, &(0x7f0000000580)=""/65, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000440)={0x8, r0, 0x9, {0x3, 0x5}, 0xe8}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000022c0)="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", 0xa93}], 0x1}, 0x20000044) prlimit64(0x0, 0x8, &(0x7f00000006c0)={0x31a1, 0x104}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') write$ppp(r7, &(0x7f0000001dc0), 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000740), &(0x7f0000000780)=@md5={0x1, "ffc3f9070cd08417aeb76e9ff4d05452"}, 0x11, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) 6m53.540869846s ago: executing program 3 (id=5723): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 6m53.204911627s ago: executing program 3 (id=5726): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x4, 0x0, 0x140000}, 0x20) 6m52.411020082s ago: executing program 3 (id=5731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) 6m51.977651261s ago: executing program 42 (id=5731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) 6m45.909058847s ago: executing program 0 (id=5766): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f0000000300)='./control/file0\x00', 0x1e70c1, 0x46) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 6m45.76785025s ago: executing program 0 (id=5762): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="33a8fdb3", 0x4}, {0x0}], 0x2, &(0x7f00000003c0)}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff2478efce8e1c831a44e5b275dc913413ade883c7809f2e7d309efcdf95b0bf5c99e1c5fa8e79b8324747a95f5cb9d34331920a09fcf5eaf91f8f568ef508062457545703382654de953beeadc0642c5a7e04ae02b306cb522a0ad0ee1f35bc40914751472df5b7b783902fdfee3ced1f656a422e16cd951779d4a5dc6adeda25ddf017e0a866c3d7a4c37913ae26a1d6b93d943841375533abaf215dddfb", 0xa7}], 0x1}}], 0x2, 0x0) r1 = dup(r0) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 6m44.679457824s ago: executing program 0 (id=5768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000900)="bada30fbc99b", 0x6, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 6m40.710008027s ago: executing program 0 (id=5769): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 6m40.487526953s ago: executing program 0 (id=5772): r0 = socket$inet6(0x10, 0x3, 0x0) dup2(r0, r0) 6m39.742520087s ago: executing program 0 (id=5775): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}], 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000240)=0x40, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xa, @loopback}], 0x1c) 6m39.479898387s ago: executing program 43 (id=5775): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}], 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000240)=0x40, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xa, @loopback}], 0x1c) 3m18.02506174s ago: executing program 7 (id=7503): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 3m17.95291783s ago: executing program 7 (id=7506): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x0, 0x1}, {0x3}}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x10000001}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x4}, {0x2, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x10) 3m17.460245901s ago: executing program 7 (id=7511): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x60}, 0x1, 0x7}, 0x0) 3m17.314912525s ago: executing program 7 (id=7512): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) brk(0x7ff877c47fff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r9], 0x4c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r13, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES16=r15, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r16, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)={0x26c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r16}}}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd000000080002", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m17.013205023s ago: executing program 7 (id=7518): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m16.610104614s ago: executing program 7 (id=7522): io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) rt_sigqueueinfo(0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x2, 0x0, 0xfffffff7}) 3m2.25702987s ago: executing program 44 (id=7522): io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) rt_sigqueueinfo(0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x2, 0x0, 0xfffffff7}) 1m29.535786417s ago: executing program 6 (id=8460): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4380, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x101400, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 1m29.132190882s ago: executing program 6 (id=8463): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) socket$inet6(0xa, 0x1, 0x8) listen(r0, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0xc0ff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3f}]}}}}}}}}, 0x0) 1m29.06492395s ago: executing program 6 (id=8468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) preadv(r4, &(0x7f0000001540)=[{&(0x7f0000001680)=""/4110, 0x100e}], 0x1, 0x0, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) socket$inet6(0xa, 0x1, 0x8) listen(r0, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22eb5bd67f32037c1930fdf490608a795941c32a361243944fa81574dd76f4ad557dbf9e3b8a070825c8e00b8aec95c637d8cb695494a364dc0574aac35d7b3184057b70fca7bad9ad4f660335e4e3da64da3e2d6bfd3e60d6acd8e2640288e33f07966b752078455278bd5575d2e36cd0c2b4263d54168a46670531a25b5d37cf7992e55c999bb378412ae51c2231e38ad4873590bb86c021d4772b84cbd56a959be16c9706216f429f9e7fa92f65a6b8400a9ea9df12e06db4f68e5ff759a4316404ad929cd91e2d36f06facea92fbea666f67e97f5be4a9802dbf8ced5a5eead3bb579b1fdbba45d25891575e6bbb286c7a64da36be0c874a42458a614ceeaf16af7cc534683c14f874a3a2f39261e934f6ec22b2b3b6d5c9ba8f1edef1565b73e5dcc3f5d54bc295", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a0000003f000000000000"], 0x0) 1m28.874662122s ago: executing program 6 (id=8472): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000380)="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") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0xb, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x20040001) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000280)=0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @bcast, @bcast]}, 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r7 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) setns(r9, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) (async) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x11, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x43, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@deltclass={0x50, 0x29, 0x4, 0x4e, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff, 0xb}, {0x9, 0xc}, {0xffff, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5, 0xeb}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1m28.613602745s ago: executing program 6 (id=8478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd09000200d48598570000000008000140000000000900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) inotify_init1(0x80800) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = gettid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe16) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x9a51, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x8, 0x4, 0x0, 0x6000, 0xf, r11, 0x0, 0x800004, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r11, r12, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)=ANY=[@ANYRESOCT=r10], 0x90}, {&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x444}, {&(0x7f0000000940)=ANY=[@ANYBLOB="800100002f002000610000c100bd4de720920b1492575a085d11e95ad3c593454407a650ae98217a55902338637c4e109febf0055bb37d2c63601f09333edb9065", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64=r12, @ANYBLOB="000c009c0000000000000000004400758026006000bebe341f7e8e1ed6eaa9c3b2b3fe3550d5585491ab065ff5f4bc865941d2013ad63b000004000a80fe1bc2ef971ac8ff27b38e1c3d9b9a0804004d80bc2ff0a5ca3deee90bfc7308fa4a0404999c6cc8"], 0x180}], 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000002c0000018e000000010000a0010000003f88758d4cad42735f06341e1a00a293446d37135c9e6528fde576054a91d07357217093b67925df8fc33df1f7c1e591ddcbbbf5c2a4054eda270be1cc3604d093e08ed23b35a5f5901f7a86b4d929d5f2420a4944b38fbf606e9f2fd64b17485dc6181f82f89cdf4f348c860bacb78e017ee5839815e97378", @ANYRES8=r2, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r12, @ANYRESOCT, @ANYRES32=r15, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r16, @ANYBLOB="e16b8b76c820fbb6c7f6d3c61974e8bdb5c868bc62304edf62505e9be2e782f06709a2342a27a3a247b7076bfd0b55a057d93e6898eb8bd652c693a22d19b8ddb0bc769f6f577e8e61ec74a3b8dc12b2593e6ec6050e63810e84b70009a11eacdb70229695fc00a6794f64646c44f74b223ace7750e706abcc5751ff842c91afcb4f3ed0680d1093509ffabd412fe94d94ac45616adadae925fd8a33d67fd9ba40"], 0xf0, 0x40085}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r17, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r18, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r19, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r20, @ANYRES32=r13, @ANYRES16=r15, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m28.035383987s ago: executing program 6 (id=8491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) 1m27.966973563s ago: executing program 45 (id=8491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) 46.243740146s ago: executing program 2 (id=9066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback={0x3f000000}, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) 46.161864928s ago: executing program 2 (id=9067): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x6, 0xf6f}, {0x3, 0xfffffffa}]}, 0x14, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') (async) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') 46.161365432s ago: executing program 2 (id=9069): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, 0x0, &(0x7f0000004880)=@udp}, 0x20) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000210, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000000000001ae, 0x9, &(0x7f00000001c0), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000300), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000500)={r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="851000000300000018110000", @ANYRES32=r0, @ANYBLOB="00000000b03e87d39f6f552f31a5ef000000008500000086"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309000800a000", 0x33a) write$cgroup_int(r4, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) 46.091192363s ago: executing program 2 (id=9070): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 46.081239513s ago: executing program 2 (id=9072): r0 = io_uring_setup(0x3875, &(0x7f00000000c0)={0x0, 0x7ae3, 0x400, 0x2, 0x325}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000500)=[{0x3, 0x1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000600)=""/4096, 0x1000}], &(0x7f0000000300)=[0x7, 0x9, 0x2, 0x9, 0xf0e6, 0x5]}, {0x1, 0x1, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/147, 0x93}], &(0x7f00000004c0)}], 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg/2:0:0:0\x00', 0x20400, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0x2, 0x4) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x8, 0x0, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) setsockopt$ax25_int(r6, 0x101, 0x8, &(0x7f0000000040)=0x6, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf2501000000000000000941000000140018000000037564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 45.062715796s ago: executing program 2 (id=9082): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f", 0x63}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {0x0}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf5", 0x9d}], 0x6}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000b40)="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", 0xff}, {&(0x7f0000000780)="967f03e89fc4d25a4f86b3e9b1c120ee5b71ab941d091cebeeb6b6918988f772a61761e2d2413ee457ace18ea74d3ba142fa7175879206cf96870fbac167cc1abf084dc651f1b6ed8978b0d242382cfdf6ec0fe4deaad1ff7f7deaa05b0c0e55cbb9c8a0a20a0a9d87cf0042b786cc5a06f362902dad20f791d51213aa17271bd3cb53ba6858b4528c07", 0x8a}, {&(0x7f0000000880)="4bbc967faa4ef6d51202a549ece82257e1ccb3f3d779071ce141ccc310927e6cbd93ba73a3e65672dffb7702d2f5a36c6bcb991e88c94a5d121df833acf944effea348998f16d85e0403d41eb4e34afe61c249ade760e5d1c9c1017799c4f68a8080aaa9d99bb5c354a572d3aa98089dc7d7743990e61c512867aacec00490ae5dbdb2a04f885cbd9a1f2e55e5301e0d457148b6bb11d9ff", 0x98}, {&(0x7f0000000c40)="74bd75671f278a68e1cc266eb58c78a568d1c745eb07fe53e164e76a7817e5db3cb8503399ba9f1d58802f0e212050261579be91d2a4cbb65a9368ce8b79cebe42d690a6aa7be14d6fff0f6bddfdaf29600bfbc3ee4195855fb8e8c8055eee81b4ed1ee9e544a019f1d0835637938122a601d76d3528b38aeb826c0eec5d995836cd05fdb18553a1b0b5566847a8cd6584446ddfbee6d4fb59d29fc825f358", 0x9f}], 0x4, &(0x7f0000000d00)=[@iv={0x118, 0x117, 0x2, 0xff, "f60264ac8f8a835f802c185af3807a8e37ef6b1853b2c157e19b755b55fceacd704b14f0602a2ebdddee152c3b3fdf7e01e57ce5e4bb4daa137d8203e46bcbd5420f809ab91b4488bc568ba7b470741a1a7706f97c4824b24801bd5263ad325e26752902ad65ea1997287ffee6e75dabefa793e1da946a06cb17a11d5f47672a01b419dbe2f57f31d19248bf5fc6cad3b544369d5b68cfd3f47aa0acc8626f52f2922728052786d8a865bd75f9671a2ea2ee8865d0e2e2ac1be106d5429aa21129e2d77fd02e705b0c2e8409c3a7df51b25f5f223e96d448ed800b9a56d419a56226a977fa664bb8be5c18d6216e6009c0db1f5a7955f87251455434848624"}], 0x118, 0x240089c5}], 0x2, 0x40800) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r5, 0xaae46000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) bind$netlink(r4, &(0x7f0000000a00)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r6, &(0x7f0000000f40)={0x6b58, 0x0, 0x1, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000002c0)="65660f71d6b966b9100300000f32ba6100edb810008ed067660f383a6a0066b9580b00000f320f1fdc66b9800000c00f326635008000000f30660fe85fd466b9331001c00f32", 0x46}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 44.957254236s ago: executing program 46 (id=9082): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f", 0x63}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105bee", 0x51}, {0x0}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf5", 0x9d}], 0x6}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000b40)="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", 0xff}, {&(0x7f0000000780)="967f03e89fc4d25a4f86b3e9b1c120ee5b71ab941d091cebeeb6b6918988f772a61761e2d2413ee457ace18ea74d3ba142fa7175879206cf96870fbac167cc1abf084dc651f1b6ed8978b0d242382cfdf6ec0fe4deaad1ff7f7deaa05b0c0e55cbb9c8a0a20a0a9d87cf0042b786cc5a06f362902dad20f791d51213aa17271bd3cb53ba6858b4528c07", 0x8a}, {&(0x7f0000000880)="4bbc967faa4ef6d51202a549ece82257e1ccb3f3d779071ce141ccc310927e6cbd93ba73a3e65672dffb7702d2f5a36c6bcb991e88c94a5d121df833acf944effea348998f16d85e0403d41eb4e34afe61c249ade760e5d1c9c1017799c4f68a8080aaa9d99bb5c354a572d3aa98089dc7d7743990e61c512867aacec00490ae5dbdb2a04f885cbd9a1f2e55e5301e0d457148b6bb11d9ff", 0x98}, {&(0x7f0000000c40)="74bd75671f278a68e1cc266eb58c78a568d1c745eb07fe53e164e76a7817e5db3cb8503399ba9f1d58802f0e212050261579be91d2a4cbb65a9368ce8b79cebe42d690a6aa7be14d6fff0f6bddfdaf29600bfbc3ee4195855fb8e8c8055eee81b4ed1ee9e544a019f1d0835637938122a601d76d3528b38aeb826c0eec5d995836cd05fdb18553a1b0b5566847a8cd6584446ddfbee6d4fb59d29fc825f358", 0x9f}], 0x4, &(0x7f0000000d00)=[@iv={0x118, 0x117, 0x2, 0xff, "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"}], 0x118, 0x240089c5}], 0x2, 0x40800) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r5, 0xaae46000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) bind$netlink(r4, &(0x7f0000000a00)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r6, &(0x7f0000000f40)={0x6b58, 0x0, 0x1, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000002c0)="65660f71d6b966b9100300000f32ba6100edb810008ed067660f383a6a0066b9580b00000f320f1fdc66b9800000c00f326635008000000f30660fe85fd466b9331001c00f32", 0x46}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 31.956368329s ago: executing program 8 (id=9290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback={0xfe80000000000000}, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) 31.871148521s ago: executing program 8 (id=9292): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x9, &(0x7f0000000140)=[{0x3ff, 0x0, 0x2, 0x3}, {0x8, 0x6, 0xc3, 0x8}, {0x2, 0x4, 0x8e, 0x1}, {0x3, 0x2, 0x2, 0x7}, {0xfe00, 0x1, 0x1, 0x4}, {0x8, 0x8, 0x4, 0xcbc}, {0x1, 0x8, 0x0, 0x7}, {0xff, 0xf0, 0xf, 0x6800000}, {0x8000, 0x5, 0x2, 0x5}]}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x4, @in=@local}}, [@migrate={0x50, 0x11, [{@in, @in=@broadcast, @in, @in=@remote}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000072, 0x0, 0x6}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x7fff}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={r9, 0x3, 0x6b33, 0x2}, &(0x7f0000000380)=0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r10}, 0x10) r11 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r0}) 30.827484825s ago: executing program 8 (id=9311): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000ec0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x6540000000, 0xfffffffffffffff5, 0x0, 0x2, 0x11, 0xc, "41d0bc8a658635a8284faa9680ffd8ae1019e683c9ce1688599c2ff36e163e643155b04f99c6db5bd97b4f1bea35f631cef2ac8b956accb93fee1f23d23b9b13", "a5a73aead9c30def9d7a4f89f914b4db341dcea6d8b4891ff5d146d20c0c01e52888e45349ab782e88e7058a9b58c0dfc9a9a292430cbafef2b4fb3b37edcbb7", "cfa2d9dcf3ad287122b02c9325d08d6d0064568342802135bf2c187fa989e6d9", [0xe44, 0x3d2b]}}) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, 0x8) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000400)={r4, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r4, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x1070, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r7}, @ptr={0x73682a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r8, 0x6}}, 0x10) 30.726969634s ago: executing program 8 (id=9314): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x40025f5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@struct={0x5, 0x5, 0x0, 0x4, 0x0, 0x200, [{0x3, 0x0, 0x7}, {0x0, 0x4, 0x6}, {0xa, 0x3, 0xfffffffa}, {0x5, 0x0, 0x7}, {0x8, 0x1, 0x5985}]}]}, {0x0, [0x61, 0x61, 0x30, 0x5f, 0x61, 0x30, 0x2e]}}, &(0x7f0000000180)=""/125, 0x69, 0x7d, 0x0, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, '\x00', r2, r3, 0x2, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x74}}, 0x0) 30.671564744s ago: executing program 8 (id=9317): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x6, &(0x7f0000937fed), &(0x7f0000000000)=0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r1, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41120024}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1404, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x898}, 0x4010) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 30.461682692s ago: executing program 8 (id=9320): pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03020a00006b0000004005b6b70108000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008814) (async) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03020a00006b0000004005b6b70108000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008814) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) (async) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x81}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) landlock_restrict_self(r8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) (async) r12 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r12, 0x0) r13 = getpgrp(0x0) fcntl$setownex(r11, 0xf, &(0x7f0000000100)={0x2, r13}) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0e"], 0xe) 16.011918727s ago: executing program 47 (id=9320): pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03020a00006b0000004005b6b70108000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008814) (async) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03020a00006b0000004005b6b70108000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008814) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) (async) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x81}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) landlock_restrict_self(r8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) (async) r12 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r12, 0x0) r13 = getpgrp(0x0) fcntl$setownex(r11, 0xf, &(0x7f0000000100)={0x2, r13}) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0e"], 0xe) 4.039709022s ago: executing program 9 (id=9594): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x39, 0xfb, 0x0, 0x6, 0x6, 0x2, 0x3, 0xffff, 0x282, 0x40, 0xb9, 0x80000001, 0x81, 0x38, 0x1, 0x72, 0x5, 0x40}, [{0x6474e551, 0x51, 0xa2d8, 0x3, 0x5, 0xffffffffffffffff, 0x0, 0x7}]}, 0x78) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000200)=0x4) 4.038949764s ago: executing program 9 (id=9596): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x407, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x110) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in=@dev, @in6=@private0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000280)=0xe8) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) ioperm(0x0, 0x7fff, 0x15f9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xb062, 0x1c080, 0xfffffffd, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = memfd_secret(0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="880000006800010028bd7000fedbdf250a0004000a0000003400020000000000020000000000000000000900000000000000050000000200000001000000020000002f000000060003000100000004000b001400020000000000810000000000000006000000060007000200000014000600fe8000000000000000000000000000bb000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x8001, 0x8001, @loopback, 0x6}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r6, 0x2) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.915179512s ago: executing program 9 (id=9598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"8e6801c9d7fe04c0fd864c8c8965406a", r4, 0x0, {0x2, 0x4}, {0x6343f108, 0x58}, 0x5, [0xd228, 0xfff, 0x2, 0xc9, 0xfffffffffffffe01, 0x7, 0x9, 0x4, 0x100000000, 0x40, 0x4, 0x3, 0x7f, 0x9, 0xf, 0x1]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000a00)={{r0}, r4, 0x2, @unused=[0x7a, 0xfffffffffffff6f8, 0x6, 0x8e], @devid=r5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000580)="e6baf80c48b8844fdc8787ed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x52}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"8e6801c9d7fe04c0fd864c8c8965406a", r4, 0x0, {0x2, 0x4}, {0x6343f108, 0x58}, 0x5, [0xd228, 0xfff, 0x2, 0xc9, 0xfffffffffffffe01, 0x7, 0x9, 0x4, 0x100000000, 0x40, 0x4, 0x3, 0x7f, 0x9, 0xf, 0x1]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000a00)={{r0}, r4, 0x2, @unused=[0x7a, 0xfffffffffffff6f8, 0x6, 0x8e], @devid=r5}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000580)="e6baf80c48b8844fdc8787ed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x52}], 0x1, 0x11, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x8}, 0x1c) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 3.761855624s ago: executing program 9 (id=9605): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0xc000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x8900, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x3, 0x0, [{0xc001189f, 0x0, 0x80000001}, {0x9a8, 0x0, 0x8001}, {0x85d, 0x0, 0x1000}]}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000300)={0x3, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c4}, 0x8981a677a465162f) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r9, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r1, 0x800, 0x70bd28, 0x7, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) read$sequencer(r4, &(0x7f0000000780)=""/254, 0xfe) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r10, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r11, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000c084) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000ac0)) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000b00)={'\x00', 0x8, 0x7, 0x7, 0x0, 0x8, 0xc000, 0xdddd1000, '\x00', 0x2}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x2d, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x4}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @func], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='syzkaller\x00', 0x200, 0x9c, &(0x7f0000000ec0)=""/156, 0x41100, 0x12, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000f80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000fc0)={0x1, 0xf, 0x4aa, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001000)=[r4, r4], &(0x7f0000001040)=[{0x0, 0x1, 0x2, 0x7}, {0x4, 0x3, 0x2, 0x7}, {0x1, 0x2, 0x6, 0x9}, {0x5, 0x4, 0xc, 0x8}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f0000000cc0)='cpuhp_multi_enter\x00', r12, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000001180)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x70, r14, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x2981}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x26, 0x1, 'system_u:object_r:crack_exec_t:s0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x4c}}, 0x40) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r8, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x8051) 3.626815114s ago: executing program 9 (id=9606): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xfc, {"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", 0x1000}}, 0x1006) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @empty, 0x3}, r5}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0xffffffff}}, 0x10) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, &(0x7f0000002000)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000287a1a0d203a2c9810000000000"], 0x28}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000000)={0x14, &(0x7f00000010c0)={0x0, 0x23, 0x3, {0x3, 0xd, "a5"}}, 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xf}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x1, 0xfffffffc, @remote, 0x18ff}, 0x1c) getsockname$ax25(r8, &(0x7f0000001100)={{0x3, @null}, [@netrom, @remote, @bcast, @rose, @null, @bcast, @rose]}, &(0x7f0000000040)=0x48) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) 2.429737234s ago: executing program 4 (id=9620): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r2, 0x0, 0x0, 0x4}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 2.370587678s ago: executing program 4 (id=9622): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000149202, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x414001, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xb45de255, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0xa8, 0x8}, 0xc) 2.29508053s ago: executing program 4 (id=9624): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$unix(r2, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="f0a31932", 0x4}], 0x1, 0x0, 0x0, 0x20008848}}], 0x1, 0xc000) accept4(r2, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1a7b55127ed0a1f3}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xfffffff9]}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x4800, 0xfffc, {0x4, 0x1}, {0x17, 0x2}, @rumble={0xc, 0x1005}}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) accept4(r1, 0x0, 0x0, 0x80800) (async) sendmmsg$unix(r2, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="f0a31932", 0x4}], 0x1, 0x0, 0x0, 0x20008848}}], 0x1, 0xc000) (async) accept4(r2, 0x0, 0x0, 0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1a7b55127ed0a1f3}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xfffffff9]}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r6, 0x400455c8, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x4800, 0xfffc, {0x4, 0x1}, {0x17, 0x2}, @rumble={0xc, 0x1005}}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) (async) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) (async) 733.535342ms ago: executing program 9 (id=9652): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x3b, 0x0, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c", 0x2e}], 0x1}, 0x4040044) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000140)=""/185) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) io_setup(0x10000, &(0x7f0000000000)) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000480)=@multiplanar_fd={0x4, 0x1, 0x4, 0x100004, 0x10000, {}, {0x4, 0x0, 0x52, 0x3, 0x6, 0xb, "e145c0f3"}, 0x5, 0x4, {0x0}, 0x5}) io_setup(0x80000001, &(0x7f0000000080)) 532.656917ms ago: executing program 5 (id=9654): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d03be7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b3358959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) poll(&(0x7f0000001240)=[{r1, 0x8400}, {}, {}], 0x3, 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 525.731303ms ago: executing program 5 (id=9656): r0 = socket$packet(0x11, 0x3, 0x300) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 447.733904ms ago: executing program 5 (id=9658): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0xae0000, @private2, 0x0, 0x4}, 0x20) (async) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0xffff9d95}, &(0x7f0000000180)=0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x85) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) (rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@ipv6_newrule={0xac, 0x20, 0x4, 0x70bd2c, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x5, 0x5, 0x0, 0x0, 0x3, 0x8}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x7ff}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1cfe}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e21}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40011}, 0x40014) (async) r4 = socket(0x5, 0x5, 0x4) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000005c0)=0x20, 0x4) (async) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000600)=@alg, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/47, 0x2f}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f00000007c0)=""/191, 0xbf}], 0x3, &(0x7f00000008c0)=""/76, 0x4c}, 0x101) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}]}, 0x44}}, 0x4000000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d40)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000f80)=[{}, {}], 0x10, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000001280)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=@getchain={0x5c, 0x66, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xa, 0xfff2}, {0xfff1, 0x5}, {0x4, 0x10}}, [{0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xa9c}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c000) fsetxattr(r0, &(0x7f00000012c0)=@known='trusted.overlay.impure\x00', &(0x7f0000001300)='\x00', 0x1, 0x1) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001340), 0x38800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000001380)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000013c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000001400)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02864c3, &(0x7f0000001480)={&(0x7f0000001440)=[r10, r11, r12], 0x5, 0x3, 0x7}) (async) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000014c0)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "e05e799497cc483151427196e25aef260d57a6ad7136dc50f33f7c57eb1d3af4", 0x8001, 0x401, 0x7, 0x7}, 0x3c) 447.058418ms ago: executing program 1 (id=9659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x29, 0x1, 0x1, "00000000bf2b000005000104000000e4f4ffff0000ea00000d00", 0x32344d59}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000400007012bbd700000000000017c00000400c2800c548067e9000600843b000008000280040419809096c760e1467aa3c992c53e36c0f93f044fbe1994407ef02c24ec7138ed819a01bbbb1a38fdd9cd11d8a6a0c5081dbdf22ceb0f89f135f708c94eef290b7d7676d460de0dc2a8d38eeff76d98c8ed254d4820cd2c6dd7ea0ad53fc4b4f3762e9a1cb71887177e9bd8ac2026"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 380.436399ms ago: executing program 1 (id=9660): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'w\x00'}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xee29c2db63f569c7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000003d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003d00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x1e0, 0x14, 0xa, 0x804, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x96, 0x8, "d38682cb8f4f4ad2d9a861810e915595c2b347e8926a4958caf7b537b6ec9328aae71bf5866cd3c0f3c5a6212399af27fe29c4511217a702ac99dc18e87918116131f7537239b5d5db5108e3131498c499f80210bb39f689ddae1cafe3d2fe0bd41605ac462998bebaca673132064984b32931b32acda8ed666b8cbf4b19f09db69341d53d67e743730004a3daf53b612cf8"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x103, 0x8, "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"}]}, @NFT_MSG_NEWSET={0x124, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xb4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8df3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x280000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffbff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9b2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc573}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x1cfc, 0xe, 0xa, 0x202, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1cdc, 0x3, 0x0, 0x1, [{0x1178, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}}, @NFTA_SET_ELEM_KEY_END={0x1130, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "eabd59867d6913be9e46ce70eb34273eaffdd9b7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x19, 0x1, "8c227a6701f9f36e7aee61645a24ae3808a6f0280e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x8b, 0x1, "b00c2cf9a22085c9ada8b9da7d25c8644d9b276ef758f86364c64bca1e0f84194ea9d5da9075d9be1e3ef7474d932027fce1f1cfa2c3fbcc0415ccc6fc753c0459c5ad87138af45321cec2b846eb983b1bd1db4c8f91ab13c48c598522dfc37920ae704a55e2ba9eac00ab34c6fb769624f5c24f21532c658bfef52c0781977326359878973724"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x880, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x260, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "ec0dad3751b07b54bb0753dc6148b06db93fc9c53f5a584c0f5db6af96c33c1939fc85612b336042d21fcc0abb378d016c24ae25cf780ffd4c8463759efba880eb510479d4d05109a966a81579934ff2ed65fa734c7c1ef07a0e809fc75ff6301997bf33efcf088864af3e12a50045db31ffc970"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x25, 0x1, "bc979a4e73961f4ccb5438e9b45c71df31d930e430844bf1bbfbfac6928bb7bbed"}, @NFTA_DATA_VALUE={0x98, 0x1, "21e60977cfddadeb588473f22abcdd1ed15ef53ff3aa4ee7a459c5e5ff3696439a6264095146ad51ae5e64472ed42910bcdc485f4ba332639082b8578663b9af3244b05e97dc720d4a0d59ddf6e577f3903801d6ae36fb1079771257b47119582f16e97510acc4e6d0d109bf2d21978ed8d1833a4b71dc635dd56ff749b49b42ec620e188a0da011d9b00180ed34bccbd2909acc"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "edf75e5ee55e584223e7534385218001bc376260a587fca7e0a6b5cac6e2e3923a25875d30032e94b9edd1bfa78d55f17a00cf655174cb985f849a677ca7e10d54d544f724fb023f08654064d1d557086575da2ba1d06ee291bb1dc7fa4671a1a9b85c9a40b927311a232a23a3c60734433bc627879e46212f7fb5344055e1d8586472ebbdcc51b3ed89dd8bb9a9a085ed023d83648b4d5f2f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0x2a, 0x6, 0x1, 0x0, "da41690324401520d7d6d2416641e155d280c7ff2e3d3b7775caf089eb3094e458992bcc0d02"}, @NFTA_SET_ELEM_EXPRESSIONS={0x268, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x1cc, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1bc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RANGE_TO_DATA={0x188, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x70, 0x1, "cdd2a105faef4b1ce74f4a54bdf6536e2bafdee9a44de73b5b9bc293aa5eb67be772fc4f474e4e2ce3ed3b67aadea0820c695357ce5561237fdd1533564c3de23e213cf347a2ea4ef04f34808634ed202a83721063b44bd1e2b8df71934ef927f945270f8118e09df988aac5"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "277a238c454c2c65343e256524d5429394ea09615095ff020628fb82629dd22c5903e40c57aca9549acd1a054e9712958e9d9ede4a147bf2045de5be27825c3c01416291ffbd6879e068d7a1437729408aaa628c9fb1bbcd3a65084fb919273ceb85fb3e93e9187a079fb3b2d45996471010146bad1d12a316986c1d7d20354f7b348a0f9e4934b93cde412e3c82de666425026697d8fdce41f4a168477e4a1752795329a12f8733d99a64feecd1f92b6e"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x2fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "74fe78b72b397f355288075287e88f816fe3e662cbb59a1a115bdd0a13bb855d408cbafd64a5f1ef3ed07b4636045393a0964a25a908093148d5b1c4e99fd1ea71624c93423a852d8b21b8f452ed473f6c558461106c86726db54a311dc51355fc331685b184fe4e6fbcf38e054f159a783bfe7c5d3f59e41e51c9797d88f16e7d718ea338bfb2f1d3b4f29b74a4389bf76ad86c8c942a8f2746137c44b3641726b7ae3748b7c099a2bacd5ceb1336de8cb2f29b18f83204e356a61bbe918f4e333ade89f94514fb67131b8c1f7d8c4c9ddfff8d271b02caa2eaf61763b25b246e94"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "e043ea1db6f94f15ea3dfa343eddba214104702afa9d410b8c6a2db4fba6f562b0f24fcd71a3ebc7c610494e20223e3e22b02522f68d5238e44b5069dab55fb99fb95895880894cc8b0ac46782d073d20dd6191c5f36300e5cbdf3aa376b1724c601c423b0fbeb4908067100bd68d62bb8248839e5d6dac0076913c60a972f4184fbbb6f505f4f52f5fcb2aeca0ea813f1862aaf34d30f52b4eba79953d773"}, @NFTA_DATA_VALUE={0x30, 0x1, "a806db6e1d3dca4aed34c7f2b97109ddba06161452742bedfad604d3c79a28cb3311d61065e258e6e935df7f"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "ff09495aeb194d142618e020f4861c67dc66d8e1e21142907d5ff17f7da10cf6ee862c25f98d9788d23a6624b47842b55fd1c1b94b5fe309d57ff5a23a368204d7537037d9b65daf"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffff4b}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "26080fca77af85a8f460bf36a3d06fefead02f4b7eb0fb6b67bc84ecc3d4cdecd19eb5b76a172451dd09dea45d0f2e859b277e74beda446996734ab909183ece489bf5b1d086b7d64fd6daf49ee1befd0533987b75db646321ef66e9c8ee7f4402d303ae9b50db405e020d5f062739f5b39b39830dfc5366a01aace77981c86e4ceedfd6706dfe504194529b59505fa7e396479c452536ce7dcdb9fde7ba3a0aa6b2018b6890de5bd2f3164c9222afcb3b8d4267d15e65eb759afe7f65392ab164e360e99548f3a90e4882cb627d2a1663290b822fa549128d01e6a9"}, @NFTA_DATA_VALUE={0xf1, 0x1, "647958e5614fd3e3e806f05649dfabe8eea3b7cc88b942732ded6eb34edadf018711212efff51e5da6c39a733b3e96484a133aa2a923e9ffec296457cb16e44c80219a4c219f572f82953511f5ef2a0fc166dd8d0db1a416ed2af4c7e9e4e455c737cc54624dfe62ff557d709b0f411aa8cccaede5ee065e3297e849192a152afa993f998c604e6af86d5ac9ace71a2e8c2837d436b11a1e097672cc31d125f420343e7d4cb2b5f210a999284cd61760df66011fa2d16094493e43f3a3371af0784a53c351dfd5583bd63bb104283e6ea4bbfc726e9962e90868c0be10aaa23f600902fa2999fc4bab6362bd1f"}]}, @NFTA_SET_ELEM_USERDATA={0xf8, 0x6, 0x1, 0x0, "f2f20e21767646cec196d4f23280bfedf9ad057c198ece926d5a9c62504b60ba1610ff4fef60933a96013cb8dde568da36f94a554a1a27bcc113caa19f8df0749cfeb2b988fa676390d6e19c0ddd10479e782fdfc3288cd02fab632b70cb1741916605990d64652704c51f167f0e4298dc6c2340beae4c8bb28bd780c823ab0884033e52dd4dc11751e41f7b4f95da4ec695d568583803fa4475784a3b05f31cd356bb4227b57d86d0e6f73f5b2614bbf9c36785a152cdf8a369de0f83e6e32600ac19c1d7f694720d11b0ecb9f6f1a73a89e82002f1a96ab26bee26b72672ce3b4104c5baf607fb421d3f0cd7b2cc9b6f480e8f"}]}]}]}, @NFT_MSG_NEWTABLE={0x48, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x12, 0x6, "62a221ffbb9c207cfed39a1dc85b"}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x147}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x2c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x26ff4bf4}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a0}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x1770, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1738, 0x3, 0x0, 0x1, [{0x430, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x2e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "cc4e320144cde12c1cf2ec3a814f6de6d04002b7384a5560b09f4b08d655c97d3246c4df63a32550f4349bda0e065c39226131a95ddb818501cdc4b7c5a7af3c181da392e2c26df9157a8c249e8e2b0589d7"}, @NFTA_DATA_VALUE={0x47, 0x1, "053707a50d63be33c3561c120c86d4d10c5593ec7ab40b29e846bd7627a74f52605ad1071387ae101e25f1b6554e61dd654c936f33df07610126adf47f74e043012c9f"}, @NFTA_DATA_VALUE={0xd3, 0x1, "bc55c03f4dfcdd918090831cef8aa4039a329c3ee553674d43938ea6a696cc6575dcbb10e9ad975bff571dd9694964a708d81efe89943b552c33acf6c3e5b03bca6a3d264b49dd97e78da633483482ebc384ef29e11b7faab03b5644c6ae0c6b5c2d8ec37c21451f85d2352e1668de14a445c77451df9218d5e9dee1bcd85606d231ab21ebb6448667c5bed71197ce43ed3ccbdba6c1655ccce767767d4e6bc91c14f5ef389eef8b562e8e6b6fdad52243491094a8dc41447e9b4849451b776409f40107837b023d2f380432b45a53"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x118, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xf8d2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xe7}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x60, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_TTL={0x5, 0x2, 0xf}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x480, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "f2ca7579d6833585b61e4d40b3019f8d05084d5623718098d307b5fd1e3fa058"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_KEY_END={0xb0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "edcc8aa5611a6006256135799ae2c4a86cd7a02b519e7ccad11d895e45ea82a014fdb9b78e156ad5b7d1abcf47bffdb8ebf6bfc7fb87161da65df449394f7b0bc7352105d30b44a98534926fc9d185212947fce8b285bb7588666863a846d9c92dc12614fa7b648ee2c6"}]}, @NFTA_SET_ELEM_KEY={0x88, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x74, 0x1, "632fc190e5a064ade1e6f744df8f7c68c850954779fc375ae91ffdfce8eef187e9cff102ad1f8038e9688d43b7437b3e38282748747de4a9ab83539bd9e1b8d660ee9f138b619c70c0ad54c233d188efe5a559ce21aec884c524b6cc821c86cfc253a27c52934ee131e257e3be74c3f0"}, @NFTA_DATA_VALUE={0x9d, 0x1, "8fa5ebbe3ddef0a01bbb99e2e4446fd7c1efdf18ce2dd886ec0d7e7c89170665b94103862485b5cccb4a33c51190212726de19f427f1d78b6ca86921211130346c83418fd548ee9ca193256a460aef501a3496edf910e16a0bedc1bb9d0a3205641a2295d95a6f02b01073f50a20762038cab9db40c94f288750e8e23d3ea42f19a342a992bf60dadaf95c23ee81061ea048ca22a49a1d1d8a"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_SET_ELEM_KEY={0x160, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x91, 0x1, "670a480c6c2003faadda7bd3f5b90d2e4b58493c4bed0cf1eb9b9f6404180a56ba49bf4766bb9cb9163c14864315f334cd8484563776024fe2ed5e7d4823c52e36818ac24b450d9ee8ceee86ab785b26b0624aebe0d6efcfcd5cdd290dbd8e33d4e43640afc97dc7400296f3c391cf0d12a92afb8d7ca4ba61eb4eaece965792b694c014dc066e7337556f5c2b"}, @NFTA_DATA_VALUE={0x30, 0x1, "4e3700f16be4c9f194549a9feca26575118611119ef25d738be8cf51cafb4c94ebaa399831f663b17b754c13"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x790, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xed, 0x6, 0x1, 0x0, "edc07787685e660e0ed7f0eef579bf19b8e47383f9b55c4b3a2bb3f8b6f09c4e2f3e7fdd7de56772af98437149ae7078eeef718bb8a2ab039fb2f8b5b24b2f83697c8e4bf099ca164916869fa55a2570be767061e36d4700ea84eafc4f5cd5156dfd5071638af9198234b77c75eb19bb32b39413943c017d2f7a32c0038ea7f76c11e09f433a318c3e5e027701530195a9e20160a1509f7dbf884af985ea35225f42eaf501f37c5f95a368c06e5f0c3a1701c81ebbf27b18fe6243a2500c9a77228795777f690c129048a0286c6955e430a6bbd81c22f64162b0f9cd02dd86cd48dcedb5e4866038a8"}, @NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa8, 0x1, "afb2ad5ebec408e5032d82751b487ce13fbcf7fa9ffc31c18441ebc25fb424bb6b23cc86d37e07c49e23d44dd001a7cc464c7ecb05227c4e35d88d738ae5565b5d89d826ba30557fa184df11aeb3888345a9ba4aff0967a058c835c9388f45769d4a12cf47d1411998f974fd23a24835ecacf1eca6b88d0e896db9ebd6074d7093aeb3bc4f6acf095101135a9ff8d6496688784ad4eccafbf6ba3556f75139c779238ac9"}]}, @NFTA_SET_ELEM_KEY_END={0x408, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9c, 0x1, "ed3c989521b52da6eb32c0a068e1162fecac21bf21502a7c50008832b202b3a6da03a32d93cc798c299d55a116dbf56ac8ec82e20c6a1446abc13e04d9e8dea1f897362a0d8df3bcd1bd2bb1fec121a6226482712f930b90ab5ef6885cb12e767b82a155ffef6c3e694a1595edd39a8c69c600c5293235e8aefb6fa42106468fbdeeee28a53dd2100ca9efff9e4d0f367165cbf868a38ff7"}, @NFTA_DATA_VALUE={0xef, 0x1, "9634f98789d11a5ee8042c5b847228cf93f08af529a6bb4dc3ae5b663927e75ba47c05ee25b3703555e0180987efeebd3d5b2da86fa6a648f1f3b8c18124aa8724368cf0712b9823c21a674dc34bc2ca18e7c6bbf1411bf5d88b7cf4ac6c80867abbb555c51423935511c4b7986649eb20e00e5d9d7c0268b6172bd62f10fc3df7832d3c1e854a1a6aacb1077dfd1ecbbde65a6e17376a944aa8065b5d5930bdd3627ba98bc61d3df752a5ad384057db7e8884f9f8d87bad0ab2451bb6b09c33e380e90d598464abf2a033131e64e768eb457843a05c487b076ba0acec66a2884abc13fe3e7f2e3644c530"}, @NFTA_DATA_VALUE={0xee, 0x1, "773579c70a4a9c7f34c10677f1dc251a58125e1aaf7ec9db37a0051375ad10793be4ac34e88fde66cd0859ddfa8e704c753046ed2445b87f84339d51fc869b805fe829baac86ef3d197e3bded5c0ef6409a179263babc8c53f28904ff5af8fde7f9416c897e5c97841bbec2cd4f975539b2d6f763c40245d78e4452975a510cbf1580067945bf5d46faabe2c9689ec3455cdbb4f8922bbf5c4a099901ae6038b6717dbefdad5b5ea73feb21bd79c17a2074de2e6610c565f469fc190b35081f79adc9e335504e6eb284c659cfef179736bc51d8f198ea853f6e505bb1f92b363cf2c0acd7bd48f2843a1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "d052c1c2fedda2b4fe68c23f230257e4e2dc3a4b2d1139cb3cadefa1b357e95af7b0e0e4cbe5e9115982c96299928244bf7ecd1515b85c8937910c4a9017963e3cd94b1fb9649d248269346054dcc8746a0f8b654e7ec016fa6ebc345cff87e196229ebfb0abd843759ddc08451f81a3f19e6ca89d54a9967eb54a161934f5362a8d9ab4fb75d91221ff375de24ab0de67bd7c04849154"}]}, @NFTA_SET_ELEM_KEY={0x120, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xda, 0x1, "fe7b3aecc5f00397237e7b5be90a880655301af3ac50a875fb9a2a3ac808ca542857086d0ab8d0e8db24780dbe9754d73ed4176dc9808ace2e2020ed5176d98c3eed97f853f64f2cd7387b6426b45dc62264c0d32205bd95ad57350e4cbec9a26e0c7b55d21d67263e18ecbc4d770860175d2ffbbbe8f04e6dfc2565cd80b23a8c66f6557c3f2ccf4c1bc1603328ba0ad01c199f00b7b0d60def8a61e5720ae2873abea1244caf3abb6c22d3c7d599d6a328c72f080d66abc01791eec31d7acb49e1856310e8d86a1ba9910b0cb80e70b3ca06c72947"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "03cf54ce5be979da55ba80ae08af12166d7ae4ce04d45f79b24007f8be668ae7c74e3e2f8670dd74df2bb4f4ed460815c2a63f"}, @NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "a998a31cc1d78ef64b"}, @NFTA_DATA_VALUE={0x56, 0x1, "8dc263d32b3d308e40554cb457487fc236c59b05f8b38e5891eb160316bc1f1b76cc9d413b86bad3e083ee6a0668f96d3ce48f74911cafd79c14603000bf22ab42d51c27ce1c197f65639f0ebed0fc258e82"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x598, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x434, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x43}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x41}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x6}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x300, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2ec, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x2e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "10f1ffc36cfe8321e2c524d2373f9bf9088977d399dd8a3187ec025a8adcadcd5524d363639a42615290c32e68f862d699d62911609483968f5aa77f278bd543cda2db275816d14f5827d311f8accf94318580"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "86f674634593a1c636ee5c187ee74240b7a2974ef17a65660f40e2dc8dd7fce6106f8abc415645277672e22f2e1ddddaca4c5072bf40a8e24b897bf07e13e7adf7df9d874e6c2690d95b07a1f5a7c44e39a338ac783491e2e34a38c69ed1b7bf52c2d8b292b48e0ea07367623ece02a49d0ce90738109fcad2c91a26f4d021de49fba85b0f1b44f871bc701f33542fc25b1739376d09c861152c57a73e34f54c185b99ff6892f5efab22af446c0e1ef6b44df6aea2d00950633a2b6d9191"}, @NFTA_DATA_VALUE={0xbb, 0x1, "cda8edfe2fc4e77229ad8eb7dcc755ae1e11c50c458008ad9f49e24841b06a415bedbb900cf16580f43eb29a7a52380e6e7b633d0aa2710e45a514ce882fd796e5420c87e22e70841ec02058e170bdc784ed461f96af8cb1172300ca941e8e512e1633a5048236330cb504fcddd5598d0264ded879833d52b5889d55a2652252bc851dcb98324c7e86ca8ffb9a21668f04c8f4d93186b71b1d60c48f425fcd8409d1dd2605a84520fe67675bff2e7ecce6d25296d5260f"}, @NFTA_DATA_VALUE={0x45, 0x1, "45c56286d3309a9d2d839390d73c383affa8d1439c244b31b7c89d082bd3524dfedf5bb2e2722dcbd7f7c8e44b46b02c0c88c3a6afe42a2787f0a1d2318077ebce"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x154, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa7, 0x1, "2eb67b23191e01a678853417d786f63d692dfea63959be44cc7a0cf586aa579044c55677039e959a9b0a987205bf1a7734bd849d8eea2e70d4d51e84d5d6780fd874cf5cbc828efad8c4eb2be55959d97fe7fb6f9321307b3de5103068e7ce3c01b1addf6647481950b9b762b5a57c977aaceb6f047fc66c01c18cd7bb3a569d9b566ef80ff75c8e22c6af956a6855965534cbf9426650cbe26ace6d2d2287113683f9"}, @NFTA_DATA_VALUE={0xa8, 0x1, "ac81d11d423e97c25b2fce9990e78f9ba3d83670706fb64a02d036ac26f170373d9406afd10154018de6db36e0285a03596a86b0d6099968c425da543eb659032a369ac02bddd532143c6f9c1b9187fbf72c4d2417ed230204724b470a0cc63467dcbb4de4750ac1f94ead6f97a4cb35741f557d678abe32435f855e54761f095cbc6cc30ab4296e6acaffbd239dfc01f609c7f0d2a6ecc9cb93abad071e8efbb2166449"}]}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x79, 0x6, 0x1, 0x0, "ead3b69df6fecb19b338312a5c4e90320f0fc49ab1af2f7d85d62e2b935f01e6c4ea784b2b7ba4d4735fa651f7ed79ad5b16ba7300992ef9c99239af41305203addf29a244210857cdf669747380fa987ece615cd7aae89199ebb2ad4dfeabc827e522c7fad80faf6a28f672b267246864ea3d0275"}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "8e9d3836f035e7da025434db4ca831deeeb047804dc989c91b6a01199924dd377c6a32a7f70f474c61ed039be5df2f8d4e5ffeb2ea953e8af7112d7ad20b3f16d75fd87b0e"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x54, 0x1, "dda81dcddb8b02ba952b1be1f68beb6b29d671caf40724fd71520cf676f7d65a86b8b96754df7705a680246bc8c79ef873ec8305f080e90042625e8e1626cd0bfd82318fc94c74698ab54c203388051b"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x210, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x29, 0x6, "cb3000f6525c372d40938352ade4338d6abc2f2a40531f16461a155f0075c27d0347aa561b"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x6a, 0x6, "d11703e4c3f2f472375f2bdaee5901f71e4fc2f7573c389eca6ccd1617179077c7e5aa9fd4f8d659dd1c560db0d298a50c2a8c92d79c85516805c2c0ad2bff0ac1a73dfc88264a8382cfa683157f5392c649c36e90c349410463a3c168cabea7bf64be29f2ba"}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "11d9e47046ba8edb08be86676b055f866a99040651a0a43001ed45d0b01c1a8233428ba13ac5014f4d8c06dd9e260dc72bffee7af9f6188d36e67b37de5a3be750ed214e12de124174cbc4fa922f019e677f4440627b50285596c28a2593b5c7a011de99e4c05d4c6c6695e19509c849c8518e42db1e42b5da04b29106d74ffbe4c3a72100dc0032d7509b15cc94bc6265529faca18b2010a40ff0ce4a49bfbcb0262f9dbfc74b6410bc7e3c52c92cf4877ede2f9bbaf49f4f4b80ea2c5ad1b1fcf7bf051545a951be8d15e4d52d838882ded7bbe489640ee5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x49, 0x6, "59d604e329e1cbcc91f21e19f489f3bf59b3447f3b7115b4fcd94c20c8adda09ade662b68c8e14951adec354b1834cfbea71d6c3da781b94ab54fe5f97dda79311598ec944"}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x8bf0f45c26eb08ca, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x6, 0x8, "fd2d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3ad0}}, 0x8001) syz_open_dev$video4linux(&(0x7f0000003d80), 0x8, 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000003dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$BLKGETZONESZ(r6, 0x80041284, &(0x7f0000003e00)=0x9) bpf$ENABLE_STATS(0x20, &(0x7f0000003e40), 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000004000)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_DELRULE={0xb4, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffff800}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x801}, 0x80c0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000004040)={0x4, 0x6, 0xb}) getsockname$netlink(r6, &(0x7f0000004080), &(0x7f00000040c0)=0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000004280)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004140)={0xfc, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa98b72c}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "3ac30f0fd0ee18107149438c23b83aeb1ec0ed1c23fc3dcf"}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44840}, 0x8040) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000004300)={0x0, 0x3, 0x7, &(0x7f00000042c0)={0x1d, "1661397a011001dd24b5e5cbbe8196c106510b782f65d6f9f7fd1841d94c7e2e07"}}) connect$inet6(r6, &(0x7f0000004340)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x5}, 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000043c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000004400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f00000044c0)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x30, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0cd17c3802ff8c74b9c50e70d31e0cc7"}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004500), 0x80, 0x0) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000004740)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004700)={&(0x7f0000004580)={0x148, r7, 0x400, 0x70bd27, 0x9, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x35}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x159}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc0}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xfffffffe, 0x3, 0x1a45, 0x54cf393d, 0x9, 0x1, 0x7fffffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x416}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xf, 0x5]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x41d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x639}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff218f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x34b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x10000, 0xffffffff, 0x5, 0x1, 0x4]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6, 0x100, 0x9, 0x3, 0xfea]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x53]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040100}, 0x11) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000047c0), r4) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000048c0)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004880)={&(0x7f0000004800)={0x58, r10, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x400c011) r11 = syz_clone3(&(0x7f0000004b40)={0x40800000, &(0x7f0000004900), &(0x7f0000004940), &(0x7f0000004980)=0x0, {0xf}, &(0x7f00000049c0)=""/205, 0xcd, &(0x7f0000004ac0)=""/37, &(0x7f0000004b00)=[0x0, 0x0], 0x2, {r9}}, 0x58) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r11, 0x4, 0x4002) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000004c80)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004c00)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000004d00)={0x2, 0x0, 0x3, 0x3, r12}) 314.566327ms ago: executing program 4 (id=9661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fanotify_init(0x8, 0x80000) (async) r2 = fanotify_init(0x8, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_proto_private(r3, 0x89ee, &(0x7f0000000480)="a5a87e929b8255d24b1acb8fe1c633fda21c93aadffc2550f36f881c8392abee9e6723e03beedb4b94d3efd805832a9b5a441826ca57b2796f26dc9dada8d1c9715f63442e9da73b4d0bbd6f8adb0c181de0c50aaf9150e63d6fe4def6139bab68cd0099d9ce856822e784c2c45417145af1f450d2a03c28d9377b8f8892558b7e") (async) ioctl$sock_proto_private(r3, 0x89ee, &(0x7f0000000480)="a5a87e929b8255d24b1acb8fe1c633fda21c93aadffc2550f36f881c8392abee9e6723e03beedb4b94d3efd805832a9b5a441826ca57b2796f26dc9dada8d1c9715f63442e9da73b4d0bbd6f8adb0c181de0c50aaf9150e63d6fe4def6139bab68cd0099d9ce856822e784c2c45417145af1f450d2a03c28d9377b8f8892558b7e") ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000001, 0xf, 0x7, 0x5, 0x8, 0x2, 0xb, 0xa51c, 0x80000000, 0x2, 0x5, 0x24c, 0xa36, 0x1, 0x6, 0x10000, 0x5, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x7, 0x7fff, 0xa, 0x2, 0x1, 0x9, 0xc, 0x1, 0xde1d, 0x7, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0xfff, 0xfffffffffffffb60, 0x400000000, 0x100000000, 0x8001, 0x2000000000001, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x1684bfb2, 0x3, 0x9, 0x8000, 0x0, 0x8000000000000000, 0x3, 0xca7, 0x5, 0x7fff, 0x120, 0x2da74e41, 0x9, 0x11, 0x80, 0x75, 0x1, 0x2, 0x2, 0x8, 0x9, 0x8000, 0x3, 0x1ff, 0x7ff, 0x3, 0x7687, 0x1ff, 0x7, 0xe648, 0x2, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x3, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x7fffffffffffffff, 0x7, 0x9, 0xca, 0x8, 0x7, 0xc144, 0x2, 0xfffffffffffff36f, 0x4]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000680)=0x144, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x140d, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x4000000) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x140d, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x4000000) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000400), &(0x7f0000000440)=0x4) fanotify_mark(r2, 0x80, 0x40100000, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) 314.073141ms ago: executing program 5 (id=9662): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x804, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {0x7, 0xe}, {0xfff2, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xceb}, {0x8, 0xb, 0x800}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c0}, 0x8000) r5 = dup3(r2, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a8000000000000800000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100b}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) ioctl$SIOCX25GSUBSCRIP(r0, 0x5411, &(0x7f0000000100)={'erspan0\x00', 0xfffffffffffffffc, 0x2}) fsopen(&(0x7f0000000000)='hpfs\x00', 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xff) 219.033225ms ago: executing program 4 (id=9663): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000a145e17cb39636500c4e3bf4d12415551647403a0c7c57c2fa88368ab181c73b05d13a8a0c157de3c53f2f68d7841931db7ec5309977ebda5724c67c957db6d2f158a6576496779ba354b1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000a00000000008000f0fffeffe809005300fff5dd00000010000100070c10000000000000000000", 0x58}], 0x1) r3 = syz_open_dev$vbi(&(0x7f0000000980), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000009c0)={0x4, @raw_data="fb388b746a26349507a674e9ef69f7aa53906d8b12fb7baa1bf45426fe178803b2a131113fcedf4d1661cb56032aef30649b98eb309b8ce5bf1f1e7c7c14c2affa408ee421732b58804fb9f940ba369da4ef81c8d3db45575c4770b5a4c3e01f3f0bb5069bdb53536849724e93088039c103b46a689f55414a5dbc942c8f5620b7b9f471751c57aa5fb527fca1784d0687a5f921fe72fa53dfee8b205d2ae04c9cf9a99d1d2d1f10a11b7c1f1a05caf05e9033b69356e66c036c5cf9ca636cfa8e247faaf584efaf"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14c, 0x300}}) 218.692222ms ago: executing program 5 (id=9664): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x1b0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e"], 0x509) close(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x450c01, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000000)=0xffffff8c) 152.239744ms ago: executing program 4 (id=9665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x9, "baa1df156c3c3aec744d3adabb80eed2"}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) connect$unix(r2, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 150.487131ms ago: executing program 1 (id=9666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x0, 0xdddd0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3e9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d498c4c2999aaddd8bceb38fe8eca2a8810000003766baf80cb8303fa984ef66bafc0ced660f38810b", 0x3e}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = dup2(r0, r4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x90, r7, 0x7, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x7}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x2a, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000e00)={0xc, {"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", 0x1000}}, 0x1006) ioctl$HIDIOCGRAWPHYS(r9, 0x80404805, &(0x7f0000000000)) 102.04178ms ago: executing program 1 (id=9667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) mlockall(0x6) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x8400, 0x0) ioctl$BSG_EMULATED_HOST(r1, 0x2203, &(0x7f00000030c0)) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x400000000000000}}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) socket$kcm(0xa, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x8) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8001, 0x1, 0x2, 0xc, 0x6b, 0x8}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000200)=@raw=[@alu={0x4, 0x0, 0x8, 0x8, 0x3, 0x1, 0xfffffffffffffff0}, @ldst={0x1, 0x0, 0x0, 0x2, 0x8, 0x80, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0x4, 0xc9, &(0x7f0000000440)=""/201, 0x40f00, 0xec29489f64d51de7, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xc, 0xfffffffc, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000380)=[r1, r6, r6], &(0x7f0000000540)=[{0x3, 0x5, 0x10, 0xb}, {0x2, 0x1, 0xf, 0xe}, {0x4, 0x1, 0x0, 0x1}, {0x2, 0x3, 0x1f, 0xc}, {0x3, 0x5, 0xa, 0x7}], 0x10, 0xfffffffa, @value=r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000740)='ext4_alloc_da_blocks\x00', r7, 0x0, 0x1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0xf, 0x5, 0x40, @private2, @private2, 0x700, 0x8, 0x7, 0x12}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb000000000000001800000018000000080000000400000000000007000000000800000000000002010000000061005f3e301e0077606729a87ea60373ab7c9fadd9cf49548d0ff78acc20c7"], &(0x7f0000000a40)=""/163, 0x38, 0xa3, 0x0, 0x8}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x8c}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x8000, 0xc) 101.003305ms ago: executing program 1 (id=9668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0xd8ff}, 0x0) 238.051µs ago: executing program 5 (id=9669): syz_open_dev$dri(&(0x7f0000002500), 0x2, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x212180, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd) (rerun: 32) 0s ago: executing program 1 (id=9670): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents(r1, &(0x7f0000000040)=""/50, 0x32) getdents64(r1, 0x0, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180000000000000000000000070000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/232, 0xe8}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 997.392963][ T3025] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 997.392972][ T3025] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 997.392980][ T3025] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 997.392986][ T3025] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 997.392993][ T3025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 997.392999][ T3025] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 997.393014][ T3025] [ 997.393019][ T3025] memory: usage 307200kB, limit 307200kB, failcnt 32883 [ 997.426625][ T40] audit: type=1400 audit(969.673:41883): avc: denied { unmount } for pid=32732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 997.435658][ T3025] memory+swap: usage 414728kB, limit 9007199254740988kB, failcnt 0 [ 997.574767][ T3025] kmem: usage 16748kB, limit 9007199254740988kB, failcnt 0 [ 997.577297][ T3025] Memory cgroup stats for /syz4: [ 997.577391][ T3025] cache 266420224 [ 997.580314][ T3025] rss 40960 [ 997.581665][ T3025] rss_huge 0 [ 997.582781][ T3025] shmem 266375168 [ 997.583993][ T3025] mapped_file 0 [ 997.585202][ T3025] dirty 0 [ 997.586167][ T3025] writeback 0 [ 997.587294][ T3025] workingset_refault_anon 32 [ 997.588884][ T3025] workingset_refault_file 12045 [ 997.590542][ T3025] swap 104275968 [ 997.591719][ T3025] swapcached 4096 [ 997.592921][ T3025] pgpgin 265607 [ 997.594077][ T3025] pgpgout 201574 [ 997.595268][ T3025] pgfault 176636 [ 997.596486][ T3025] pgmajfault 588 [ 997.597800][ T3025] inactive_anon 55697408 [ 997.599203][ T3025] active_anon 210722816 [ 997.600648][ T3025] inactive_file 20480 [ 997.602298][ T40] audit: type=1400 audit(969.851:41884): avc: denied { write } for pid=3112 comm="syz.9.9356" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 997.602348][ T3025] active_file 24576 [ 997.602355][ T3025] unevictable 0 [ 997.615359][ T3025] hierarchical_memory_limit 314572800 [ 997.617793][ T3025] hierarchical_memsw_limit 9223372036854771712 [ 997.620489][ T3025] total_cache 266420224 [ 997.622329][ T3025] total_rss 40960 [ 997.623948][ T3025] total_rss_huge 0 [ 997.625639][ T3025] total_shmem 266375168 [ 997.628183][ T3025] total_mapped_file 0 [ 997.629924][ T3025] total_dirty 0 [ 997.631462][ T3025] total_writeback 0 [ 997.633130][ T3025] total_workingset_refault_anon 32 [ 997.635345][ T3025] total_workingset_refault_file 12045 [ 997.638049][ T3025] total_swap 104275968 [ 997.639858][ T3025] total_swapcached 4096 [ 997.641712][ T3025] total_pgpgin 265607 [ 997.643494][ T3025] total_pgpgout 201574 [ 997.645499][ T3025] total_pgfault 176636 [ 997.647317][ T3025] total_pgmajfault 588 [ 997.648996][ T3025] total_inactive_anon 55697408 [ 997.650660][ T3025] total_active_anon 210722816 [ 997.652418][ T3025] total_inactive_file 20480 [ 997.653962][ T3025] total_active_file 24576 [ 997.655487][ T3025] total_unevictable 0 [ 997.656845][ T3025] anon_cost 0 [ 997.657994][ T3025] file_cost 0 [ 997.659146][ T3025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3030,uid=0 [ 997.664961][ T3025] Memory cgroup out of memory: Killed process 3030 (syz.4.9332) total-vm:98456kB, anon-rss:1096kB, file-rss:23008kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 997.758248][ T40] audit: type=1400 audit(970.019:41885): avc: denied { read } for pid=3112 comm="syz.9.9356" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 997.767730][ T40] audit: type=1400 audit(970.019:41886): avc: denied { open } for pid=3112 comm="syz.9.9356" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 997.775212][ T40] audit: type=1400 audit(970.019:41887): avc: denied { ioctl } for pid=3112 comm="syz.9.9356" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 997.819770][ T40] audit: type=1400 audit(970.082:41888): avc: denied { create } for pid=3112 comm="syz.9.9356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 997.967335][ T3113] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 998.000189][ T40] audit: type=1400 audit(970.271:41889): avc: denied { create } for pid=3112 comm="syz.9.9356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 998.093184][ T40] audit: type=1400 audit(970.366:41890): avc: denied { create } for pid=3123 comm="syz.1.9357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 998.540587][ T3022] syz.4.9332 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 998.607575][ T3022] CPU: 0 UID: 0 PID: 3022 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 998.607597][ T3022] Tainted: [L]=SOFTLOCKUP [ 998.607602][ T3022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 998.607609][ T3022] Call Trace: [ 998.607614][ T3022] [ 998.607618][ T3022] dump_stack_lvl+0x16c/0x1f0 [ 998.607639][ T3022] dump_header+0x101/0x960 [ 998.607663][ T3022] oom_kill_process+0x176/0x910 [ 998.607683][ T3022] out_of_memory+0x350/0x1700 [ 998.607703][ T3022] ? __lock_acquire+0x436/0x2890 [ 998.607720][ T3022] ? __pfx_out_of_memory+0x10/0x10 [ 998.607743][ T3022] mem_cgroup_out_of_memory+0x118/0x130 [ 998.607756][ T3022] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 998.607772][ T3022] ? do_raw_spin_unlock+0x172/0x230 [ 998.607791][ T3022] try_charge_memcg+0x695/0xd30 [ 998.607810][ T3022] ? __pfx_try_charge_memcg+0x10/0x10 [ 998.607827][ T3022] ? __print_lock_name+0xd1/0xe0 [ 998.607845][ T3022] ? rcu_read_unlock+0x17/0x60 [ 998.607867][ T3022] charge_memcg+0x8a/0x230 [ 998.607883][ T3022] __mem_cgroup_charge+0x2b/0x1e0 [ 998.607902][ T3022] filemap_add_folio+0xe6/0x610 [ 998.607915][ T3022] ? __pfx_filemap_add_folio+0x10/0x10 [ 998.607931][ T3022] __filemap_get_folio_mpol+0x511/0xc60 [ 998.607948][ T3022] filemap_fault+0x684/0x29d0 [ 998.607962][ T3022] ? __pfx_lru_add+0x10/0x10 [ 998.607973][ T3022] ? __pfx_filemap_fault+0x10/0x10 [ 998.607992][ T3022] ? __pfx_filemap_map_pages+0x10/0x10 [ 998.608002][ T3022] __do_fault+0x10d/0x490 [ 998.608015][ T3022] ? __pfx_filemap_map_pages+0x10/0x10 [ 998.608026][ T3022] do_fault+0xae4/0x1ad0 [ 998.608040][ T3022] ? __pfx_filemap_map_pages+0x10/0x10 [ 998.608054][ T3022] __handle_mm_fault+0x1919/0x2bb0 [ 998.608103][ T3022] ? __pfx___handle_mm_fault+0x10/0x10 [ 998.608129][ T3022] ? __pte_offset_map_lock+0x174/0x310 [ 998.608145][ T3022] ? find_held_lock+0x2b/0x80 [ 998.608168][ T3022] ? follow_page_pte+0x5cf/0x1390 [ 998.608187][ T3022] handle_mm_fault+0x3fe/0xad0 [ 998.608221][ T3022] __get_user_pages+0x54e/0x3590 [ 998.608244][ T3022] ? __pfx___get_user_pages+0x10/0x10 [ 998.608259][ T3022] ? __kernel_write_iter+0x5a5/0xb10 [ 998.608278][ T3022] get_dump_page+0x257/0x3d0 [ 998.608294][ T3022] ? __pfx_get_dump_page+0x10/0x10 [ 998.608311][ T3022] ? dump_user_range+0x756/0xb70 [ 998.608334][ T3022] dump_user_range+0x195/0xb70 [ 998.608356][ T3022] ? __pfx_dump_user_range+0x10/0x10 [ 998.608378][ T3022] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 998.608396][ T3022] ? __pfx_writenote+0x10/0x10 [ 998.608411][ T3022] elf_core_dump+0x29c3/0x3c10 [ 998.608432][ T3022] ? __pfx_elf_core_dump+0x10/0x10 [ 998.608442][ T3022] ? kasan_save_stack+0x33/0x60 [ 998.608455][ T3022] ? kasan_save_track+0x14/0x30 [ 998.608468][ T3022] ? __kasan_kmalloc+0xaa/0xb0 [ 998.608480][ T3022] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 998.608493][ T3022] ? vfs_coredump+0x1dd9/0x55e0 [ 998.608510][ T3022] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 998.608527][ T3022] ? irqentry_exit+0x38a/0x8c0 [ 998.608541][ T3022] ? asm_exc_page_fault+0x26/0x30 [ 998.608558][ T3022] ? 0xffffffffff600000 [ 998.608594][ T3022] ? vfs_coredump+0x2b85/0x55e0 [ 998.608612][ T3022] vfs_coredump+0x2b85/0x55e0 [ 998.608636][ T3022] ? __pfx_vfs_coredump+0x10/0x10 [ 998.608654][ T3022] ? __lock_acquire+0x436/0x2890 [ 998.608671][ T3022] ? __lock_acquire+0x436/0x2890 [ 998.608686][ T3022] ? lock_acquire+0x179/0x330 [ 998.608704][ T3022] ? lock_acquire+0x179/0x330 [ 998.608728][ T3022] ? arch_stack_walk+0xa6/0x100 [ 998.608750][ T3022] ? stack_trace_save+0x8e/0xc0 [ 998.608764][ T3022] ? __pfx_stack_trace_save+0x10/0x10 [ 998.608778][ T3022] ? stack_depot_save_flags+0x29/0x9b0 [ 998.608797][ T3022] ? __lock_acquire+0x436/0x2890 [ 998.608812][ T3022] ? kasan_save_stack+0x42/0x60 [ 998.608852][ T3022] ? proc_coredump_connector+0x2d1/0x4f0 [ 998.608867][ T3022] ? __pfx_proc_coredump_connector+0x10/0x10 [ 998.608886][ T3022] ? rcu_is_watching+0x12/0xc0 [ 998.608900][ T3022] get_signal+0x22e1/0x26d0 [ 998.608925][ T3022] ? __pfx_get_signal+0x10/0x10 [ 998.608947][ T3022] arch_do_signal_or_restart+0x8f/0x7e0 [ 998.608965][ T3022] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 998.608987][ T3022] ? __bad_area_nosemaphore+0x350/0x690 [ 998.609006][ T3022] irqentry_exit+0x38a/0x8c0 [ 998.609023][ T3022] asm_exc_page_fault+0x26/0x30 [ 998.609034][ T3022] RIP: 0033:0x7f1571c4f6b7 [ 998.609045][ T3022] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 998.609057][ T3022] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 998.609067][ T3022] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 998.609074][ T3022] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 998.609081][ T3022] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 998.609088][ T3022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 998.609095][ T3022] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 998.609116][ T3022] [ 998.609133][ T3022] memory: usage 307200kB, limit 307200kB, failcnt 42010 [ 998.863715][ T3022] memory+swap: usage 414888kB, limit 9007199254740988kB, failcnt 0 [ 998.867084][ T3022] kmem: usage 16704kB, limit 9007199254740988kB, failcnt 0 [ 998.869974][ T3022] Memory cgroup stats for /syz4: [ 998.870092][ T3022] cache 297414656 [ 998.873553][ T3022] rss 53248 [ 998.874905][ T3022] rss_huge 0 [ 998.876242][ T3022] shmem 297385984 [ 998.877485][ T3022] mapped_file 0 [ 998.878553][ T3022] dirty 0 [ 998.879467][ T3022] writeback 0 [ 998.880529][ T3022] workingset_refault_anon 38 [ 998.881924][ T3022] workingset_refault_file 19053 [ 998.883394][ T3022] swap 110272512 [ 998.884851][ T3022] swapcached 0 [ 998.886248][ T3022] pgpgin 289860 [ 998.887674][ T3022] pgpgout 218258 [ 998.889124][ T3022] pgfault 178168 [ 998.890504][ T3022] pgmajfault 836 [ 998.891634][ T3022] inactive_anon 46854144 [ 998.892977][ T3022] active_anon 250585088 [ 998.894549][ T3022] inactive_file 28672 [ 998.896016][ T3022] active_file 0 [ 998.897138][ T3022] unevictable 0 [ 998.898228][ T3022] hierarchical_memory_limit 314572800 [ 998.899848][ T3022] hierarchical_memsw_limit 9223372036854771712 [ 998.901710][ T3022] total_cache 297414656 [ 998.903087][ T3022] total_rss 53248 [ 998.904217][ T3022] total_rss_huge 0 [ 998.905443][ T3022] total_shmem 297385984 [ 998.906709][ T3022] total_mapped_file 0 [ 998.907950][ T3022] total_dirty 0 [ 998.909031][ T3022] total_writeback 0 [ 998.910608][ T3022] total_workingset_refault_anon 38 [ 998.912659][ T3022] total_workingset_refault_file 19053 [ 998.914288][ T3022] total_swap 110272512 [ 998.915518][ T3022] total_swapcached 0 [ 998.916734][ T3022] total_pgpgin 289860 [ 998.917936][ T3022] total_pgpgout 218258 [ 998.919155][ T3022] total_pgfault 178168 [ 998.920385][ T3022] total_pgmajfault 836 [ 998.921613][ T3022] total_inactive_anon 36245504 [ 998.923343][ T3022] total_active_anon 261193728 [ 998.924763][ T3022] total_inactive_file 28672 [ 998.926161][ T3022] total_active_file 0 [ 998.927784][ T3022] total_unevictable 0 [ 998.929364][ T3022] anon_cost 0 [ 998.930652][ T3022] file_cost 0 [ 998.932354][ T3022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3042,uid=0 [ 998.937087][ T3022] Memory cgroup out of memory: Killed process 3042 (syz.4.9332) total-vm:98456kB, anon-rss:1104kB, file-rss:22764kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 999.012740][ T3016] syz.4.9332 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 999.016044][ T3016] CPU: 2 UID: 0 PID: 3016 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.016065][ T3016] Tainted: [L]=SOFTLOCKUP [ 999.016094][ T3016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 999.016105][ T3016] Call Trace: [ 999.016111][ T3016] [ 999.016116][ T3016] dump_stack_lvl+0x16c/0x1f0 [ 999.016136][ T3016] dump_header+0x101/0x960 [ 999.016158][ T3016] oom_kill_process+0x176/0x910 [ 999.016179][ T3016] out_of_memory+0x350/0x1700 [ 999.016198][ T3016] ? __lock_acquire+0x436/0x2890 [ 999.016216][ T3016] ? __pfx_out_of_memory+0x10/0x10 [ 999.016239][ T3016] mem_cgroup_out_of_memory+0x118/0x130 [ 999.016252][ T3016] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 999.016268][ T3016] ? do_raw_spin_unlock+0x172/0x230 [ 999.016287][ T3016] try_charge_memcg+0x695/0xd30 [ 999.016306][ T3016] ? __pfx_try_charge_memcg+0x10/0x10 [ 999.016323][ T3016] ? __print_lock_name+0xd1/0xe0 [ 999.016347][ T3016] ? rcu_read_unlock+0x17/0x60 [ 999.016368][ T3016] charge_memcg+0x8a/0x230 [ 999.016385][ T3016] __mem_cgroup_charge+0x2b/0x1e0 [ 999.016404][ T3016] shmem_alloc_and_add_folio+0x50c/0xc20 [ 999.016428][ T3016] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 999.016448][ T3016] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 999.016471][ T3016] shmem_get_folio_gfp+0x67f/0x1610 [ 999.016494][ T3016] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 999.016514][ T3016] ? __pfx_timestamp_truncate+0x10/0x10 [ 999.016535][ T3016] shmem_write_begin+0x1a4/0x3b0 [ 999.016547][ T3016] ? __pfx_shmem_write_begin+0x10/0x10 [ 999.016559][ T3016] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 999.016578][ T3016] generic_perform_write+0x3c4/0x900 [ 999.016601][ T3016] ? __pfx_generic_perform_write+0x10/0x10 [ 999.016618][ T3016] ? generic_update_time+0xcf/0xf0 [ 999.016629][ T3016] ? mnt_put_write_access_file+0x45/0xf0 [ 999.016646][ T3016] ? file_update_time_flags+0x35c/0x520 [ 999.016668][ T3016] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 999.016688][ T3016] shmem_file_write_iter+0x10e/0x140 [ 999.016712][ T3016] __kernel_write_iter+0x31a/0xb10 [ 999.016744][ T3016] ? __pfx___kernel_write_iter+0x10/0x10 [ 999.016770][ T3016] ? __up_read+0x2d1/0x700 [ 999.016796][ T3016] ? dump_user_range+0x756/0xb70 [ 999.016828][ T3016] dump_user_range+0x413/0xb70 [ 999.016858][ T3016] ? __pfx_dump_user_range+0x10/0x10 [ 999.016878][ T3016] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 999.016896][ T3016] ? __pfx_writenote+0x10/0x10 [ 999.016912][ T3016] elf_core_dump+0x29c3/0x3c10 [ 999.016938][ T3016] ? __pfx_elf_core_dump+0x10/0x10 [ 999.016954][ T3016] ? kasan_save_stack+0x33/0x60 [ 999.016969][ T3016] ? kasan_save_track+0x14/0x30 [ 999.016981][ T3016] ? __kasan_kmalloc+0xaa/0xb0 [ 999.016992][ T3016] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 999.017005][ T3016] ? vfs_coredump+0x1dd9/0x55e0 [ 999.017045][ T3016] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 999.017064][ T3016] ? irqentry_exit+0x38a/0x8c0 [ 999.017079][ T3016] ? asm_exc_page_fault+0x26/0x30 [ 999.017096][ T3016] ? 0xffffffffff600000 [ 999.017153][ T3016] ? vfs_coredump+0x2b85/0x55e0 [ 999.017173][ T3016] vfs_coredump+0x2b85/0x55e0 [ 999.017203][ T3016] ? __pfx_vfs_coredump+0x10/0x10 [ 999.017227][ T3016] ? __lock_acquire+0x436/0x2890 [ 999.017252][ T3016] ? __lock_acquire+0x436/0x2890 [ 999.017269][ T3016] ? lock_acquire+0x179/0x330 [ 999.017295][ T3016] ? lock_acquire+0x179/0x330 [ 999.017337][ T3016] ? arch_stack_walk+0xa6/0x100 [ 999.017363][ T3016] ? stack_trace_save+0x8e/0xc0 [ 999.017382][ T3016] ? __pfx_stack_trace_save+0x10/0x10 [ 999.017401][ T3016] ? stack_depot_save_flags+0x29/0x9b0 [ 999.017427][ T3016] ? __lock_acquire+0x436/0x2890 [ 999.017445][ T3016] ? kasan_save_stack+0x42/0x60 [ 999.017505][ T3016] ? proc_coredump_connector+0x2d1/0x4f0 [ 999.017523][ T3016] ? __pfx_proc_coredump_connector+0x10/0x10 [ 999.017551][ T3016] ? rcu_is_watching+0x12/0xc0 [ 999.017570][ T3016] get_signal+0x22e1/0x26d0 [ 999.017601][ T3016] ? __pfx_get_signal+0x10/0x10 [ 999.017630][ T3016] arch_do_signal_or_restart+0x8f/0x7e0 [ 999.017655][ T3016] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 999.017684][ T3016] ? __bad_area_nosemaphore+0x350/0x690 [ 999.017703][ T3016] irqentry_exit+0x38a/0x8c0 [ 999.017719][ T3016] asm_exc_page_fault+0x26/0x30 [ 999.017730][ T3016] RIP: 0033:0x7f1571c4f6b7 [ 999.017740][ T3016] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 999.017751][ T3016] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 999.017760][ T3016] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 999.017767][ T3016] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 999.017774][ T3016] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 999.017780][ T3016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 999.017787][ T3016] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 999.017802][ T3016] [ 999.207635][ T3016] memory: usage 307200kB, limit 307200kB, failcnt 43402 [ 999.210036][ T3016] memory+swap: usage 414752kB, limit 9007199254740988kB, failcnt 0 [ 999.212688][ T3016] kmem: usage 16700kB, limit 9007199254740988kB, failcnt 0 [ 999.215329][ T3016] Memory cgroup stats for /syz4: [ 999.215403][ T3016] cache 297418752 [ 999.218533][ T3016] rss 53248 [ 999.219613][ T3016] rss_huge 0 [ 999.220700][ T3016] shmem 297390080 [ 999.221975][ T3016] mapped_file 0 [ 999.223175][ T3016] dirty 0 [ 999.224195][ T3016] writeback 0 [ 999.225308][ T3016] workingset_refault_anon 38 [ 999.227394][ T3016] workingset_refault_file 19056 [ 999.229056][ T3016] swap 110133248 [ 999.230353][ T3016] swapcached 0 [ 999.231543][ T3016] pgpgin 289864 [ 999.232770][ T3016] pgpgout 218261 [ 999.233989][ T3016] pgfault 178170 [ 999.235189][ T3016] pgmajfault 837 [ 999.236533][ T3016] inactive_anon 252682240 [ 999.238268][ T3016] active_anon 44761088 [ 999.239623][ T3016] inactive_file 0 [ 999.240840][ T3016] active_file 28672 [ 999.242103][ T3016] unevictable 0 [ 999.243272][ T3016] hierarchical_memory_limit 314572800 [ 999.245057][ T3016] hierarchical_memsw_limit 9223372036854771712 [ 999.247138][ T3016] total_cache 297418752 [ 999.248561][ T3016] total_rss 53248 [ 999.249802][ T3016] total_rss_huge 0 [ 999.251047][ T3016] total_shmem 297390080 [ 999.252460][ T3016] total_mapped_file 0 [ 999.253777][ T3016] total_dirty 0 [ 999.254904][ T3016] total_writeback 0 [ 999.256533][ T3016] total_workingset_refault_anon 38 [ 999.258261][ T3016] total_workingset_refault_file 19056 [ 999.259969][ T3016] total_swap 110133248 [ 999.261322][ T3016] total_swapcached 0 [ 999.262658][ T3016] total_pgpgin 289864 [ 999.263950][ T3016] total_pgpgout 218261 [ 999.265370][ T3016] total_pgfault 178170 [ 999.266714][ T3016] total_pgmajfault 837 [ 999.268098][ T3016] total_inactive_anon 252682240 [ 999.269716][ T3016] total_active_anon 44761088 [ 999.271236][ T3016] total_inactive_file 0 [ 999.272772][ T3016] total_active_file 28672 [ 999.274700][ T3016] total_unevictable 0 [ 999.276218][ T3016] anon_cost 0 [ 999.277511][ T3016] file_cost 0 [ 999.278685][ T3016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3016,uid=0 [ 999.283537][ T3016] Memory cgroup out of memory: Killed process 3016 (syz.4.9332) total-vm:98324kB, anon-rss:968kB, file-rss:22952kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 999.348338][ T3025] syz.4.9332 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 999.353549][ T3025] CPU: 2 UID: 0 PID: 3025 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.353578][ T3025] Tainted: [L]=SOFTLOCKUP [ 999.353584][ T3025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 999.353596][ T3025] Call Trace: [ 999.353603][ T3025] [ 999.353611][ T3025] dump_stack_lvl+0x16c/0x1f0 [ 999.353641][ T3025] dump_header+0x101/0x960 [ 999.353674][ T3025] oom_kill_process+0x176/0x910 [ 999.353706][ T3025] out_of_memory+0x350/0x1700 [ 999.353736][ T3025] ? __lock_acquire+0x436/0x2890 [ 999.353762][ T3025] ? __pfx_out_of_memory+0x10/0x10 [ 999.353798][ T3025] mem_cgroup_out_of_memory+0x118/0x130 [ 999.353818][ T3025] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 999.353844][ T3025] ? do_raw_spin_unlock+0x172/0x230 [ 999.353874][ T3025] try_charge_memcg+0x695/0xd30 [ 999.353905][ T3025] ? __pfx_try_charge_memcg+0x10/0x10 [ 999.353930][ T3025] ? __print_lock_name+0xd1/0xe0 [ 999.353959][ T3025] ? rcu_read_unlock+0x17/0x60 [ 999.353994][ T3025] charge_memcg+0x8a/0x230 [ 999.354020][ T3025] __mem_cgroup_charge+0x2b/0x1e0 [ 999.354049][ T3025] filemap_add_folio+0xe6/0x610 [ 999.354069][ T3025] ? __pfx_filemap_add_folio+0x10/0x10 [ 999.354112][ T3025] __filemap_get_folio_mpol+0x511/0xc60 [ 999.354142][ T3025] filemap_fault+0x684/0x29d0 [ 999.354165][ T3025] ? __pfx_filemap_fault+0x10/0x10 [ 999.354198][ T3025] ? __pfx_filemap_map_pages+0x10/0x10 [ 999.354214][ T3025] __do_fault+0x10d/0x490 [ 999.354235][ T3025] ? __pfx_filemap_map_pages+0x10/0x10 [ 999.354250][ T3025] do_fault+0xae4/0x1ad0 [ 999.354273][ T3025] ? __pfx_filemap_map_pages+0x10/0x10 [ 999.354296][ T3025] __handle_mm_fault+0x1919/0x2bb0 [ 999.354333][ T3025] ? __pfx___handle_mm_fault+0x10/0x10 [ 999.354362][ T3025] ? __pte_offset_map_lock+0x174/0x310 [ 999.354386][ T3025] ? find_held_lock+0x2b/0x80 [ 999.354428][ T3025] ? follow_page_pte+0x5cf/0x1390 [ 999.354458][ T3025] handle_mm_fault+0x3fe/0xad0 [ 999.354492][ T3025] __get_user_pages+0x54e/0x3590 [ 999.354529][ T3025] ? __pfx___get_user_pages+0x10/0x10 [ 999.354553][ T3025] ? __kernel_write_iter+0x5a5/0xb10 [ 999.354583][ T3025] get_dump_page+0x257/0x3d0 [ 999.354608][ T3025] ? __pfx_get_dump_page+0x10/0x10 [ 999.354634][ T3025] ? dump_user_range+0x756/0xb70 [ 999.354668][ T3025] dump_user_range+0x195/0xb70 [ 999.354702][ T3025] ? __pfx_dump_user_range+0x10/0x10 [ 999.354732][ T3025] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 999.354760][ T3025] ? __pfx_writenote+0x10/0x10 [ 999.354786][ T3025] elf_core_dump+0x29c3/0x3c10 [ 999.354821][ T3025] ? __pfx_elf_core_dump+0x10/0x10 [ 999.354837][ T3025] ? kasan_save_stack+0x33/0x60 [ 999.354858][ T3025] ? kasan_save_track+0x14/0x30 [ 999.354877][ T3025] ? __kasan_kmalloc+0xaa/0xb0 [ 999.354896][ T3025] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 999.354917][ T3025] ? vfs_coredump+0x1dd9/0x55e0 [ 999.354944][ T3025] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 999.354969][ T3025] ? irqentry_exit+0x38a/0x8c0 [ 999.354991][ T3025] ? asm_exc_page_fault+0x26/0x30 [ 999.355016][ T3025] ? 0xffffffffff600000 [ 999.355077][ T3025] ? vfs_coredump+0x2b85/0x55e0 [ 999.355105][ T3025] vfs_coredump+0x2b85/0x55e0 [ 999.355143][ T3025] ? __pfx_vfs_coredump+0x10/0x10 [ 999.355170][ T3025] ? __lock_acquire+0x436/0x2890 [ 999.355197][ T3025] ? __lock_acquire+0x436/0x2890 [ 999.355222][ T3025] ? lock_acquire+0x179/0x330 [ 999.355250][ T3025] ? lock_acquire+0x179/0x330 [ 999.355290][ T3025] ? arch_stack_walk+0xa6/0x100 [ 999.355325][ T3025] ? stack_trace_save+0x8e/0xc0 [ 999.355346][ T3025] ? __pfx_stack_trace_save+0x10/0x10 [ 999.355367][ T3025] ? stack_depot_save_flags+0x29/0x9b0 [ 999.355400][ T3025] ? __lock_acquire+0x436/0x2890 [ 999.355425][ T3025] ? kasan_save_stack+0x42/0x60 [ 999.355492][ T3025] ? proc_coredump_connector+0x2d1/0x4f0 [ 999.355517][ T3025] ? __pfx_proc_coredump_connector+0x10/0x10 [ 999.355547][ T3025] ? rcu_is_watching+0x12/0xc0 [ 999.355569][ T3025] get_signal+0x22e1/0x26d0 [ 999.355608][ T3025] ? __pfx_get_signal+0x10/0x10 [ 999.355643][ T3025] arch_do_signal_or_restart+0x8f/0x7e0 [ 999.355670][ T3025] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 999.355705][ T3025] ? __bad_area_nosemaphore+0x350/0x690 [ 999.355737][ T3025] irqentry_exit+0x38a/0x8c0 [ 999.355764][ T3025] asm_exc_page_fault+0x26/0x30 [ 999.355782][ T3025] RIP: 0033:0x7f1571c4f6b7 [ 999.355799][ T3025] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 999.355817][ T3025] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 999.355833][ T3025] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 999.355845][ T3025] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 999.355857][ T3025] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 999.355869][ T3025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 999.355880][ T3025] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 999.355908][ T3025] [ 999.355991][ T3025] memory: usage 307200kB, limit 307200kB, failcnt 44397 [ 999.559108][ T3025] memory+swap: usage 414748kB, limit 9007199254740988kB, failcnt 0 [ 999.561817][ T3025] kmem: usage 16508kB, limit 9007199254740988kB, failcnt 0 [ 999.564147][ T3025] Memory cgroup stats for /syz4: [ 999.564224][ T3025] cache 297590784 [ 999.567037][ T3025] rss 73728 [ 999.568135][ T3025] rss_huge 0 [ 999.569282][ T3025] shmem 297586688 [ 999.570852][ T3025] mapped_file 0 [ 999.572045][ T3025] dirty 0 [ 999.573057][ T3025] writeback 0 [ 999.574517][ T3025] workingset_refault_anon 38 [ 999.575994][ T3025] workingset_refault_file 19300 [ 999.577906][ T3025] swap 110137344 [ 999.579176][ T3025] swapcached 0 [ 999.580324][ T3025] pgpgin 292311 [ 999.581489][ T3025] pgpgout 220661 [ 999.582676][ T3025] pgfault 178335 [ 999.583963][ T3025] pgmajfault 846 [ 999.585171][ T3025] inactive_anon 49848320 [ 999.586561][ T3025] active_anon 247812096 [ 999.587929][ T3025] inactive_file 0 [ 999.589626][ T3025] active_file 4096 [ 999.590869][ T3025] unevictable 0 [ 999.592046][ T3025] hierarchical_memory_limit 314572800 [ 999.594080][ T3025] hierarchical_memsw_limit 9223372036854771712 [ 999.596091][ T3025] total_cache 297590784 [ 999.597481][ T3025] total_rss 73728 [ 999.598793][ T3025] total_rss_huge 0 [ 999.600030][ T3025] total_shmem 297586688 [ 999.601403][ T3025] total_mapped_file 0 [ 999.602700][ T3025] total_dirty 0 [ 999.603848][ T3025] total_writeback 0 [ 999.605116][ T3025] total_workingset_refault_anon 38 [ 999.606778][ T3025] total_workingset_refault_file 19300 [ 999.608677][ T3025] total_swap 110137344 [ 999.610013][ T3025] total_swapcached 0 [ 999.611303][ T3025] total_pgpgin 292311 [ 999.612626][ T3025] total_pgpgout 220661 [ 999.613967][ T3025] total_pgfault 178335 [ 999.615309][ T3025] total_pgmajfault 846 [ 999.616673][ T3025] total_inactive_anon 49848320 [ 999.618323][ T3025] total_active_anon 247812096 [ 999.619866][ T3025] total_inactive_file 0 [ 999.621441][ T3025] total_active_file 4096 [ 999.622857][ T3025] total_unevictable 0 [ 999.624293][ T3025] anon_cost 0 [ 999.625437][ T3025] file_cost 0 [ 999.626554][ T3025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3044,uid=0 [ 999.634974][ T3025] Memory cgroup out of memory: Killed process 3044 (syz.4.9332) total-vm:98456kB, anon-rss:1104kB, file-rss:24276kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 999.803953][ T3148] tmpfs: Unknown parameter 'obj_role' [ 999.947240][ T3028] syz.4.9332 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 999.950369][ T3028] CPU: 2 UID: 0 PID: 3028 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.950387][ T3028] Tainted: [L]=SOFTLOCKUP [ 999.950391][ T3028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 999.950399][ T3028] Call Trace: [ 999.950403][ T3028] [ 999.950408][ T3028] dump_stack_lvl+0x16c/0x1f0 [ 999.950431][ T3028] dump_header+0x101/0x960 [ 999.950452][ T3028] oom_kill_process+0x176/0x910 [ 999.950471][ T3028] out_of_memory+0x350/0x1700 [ 999.950489][ T3028] ? __lock_acquire+0x436/0x2890 [ 999.950504][ T3028] ? __pfx_out_of_memory+0x10/0x10 [ 999.950526][ T3028] mem_cgroup_out_of_memory+0x118/0x130 [ 999.950538][ T3028] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 999.950566][ T3028] ? do_raw_spin_unlock+0x172/0x230 [ 999.950584][ T3028] try_charge_memcg+0x695/0xd30 [ 999.950603][ T3028] ? __pfx_try_charge_memcg+0x10/0x10 [ 999.950618][ T3028] ? __print_lock_name+0xd1/0xe0 [ 999.950635][ T3028] ? rcu_read_unlock+0x17/0x60 [ 999.950655][ T3028] charge_memcg+0x8a/0x230 [ 999.950671][ T3028] __mem_cgroup_charge+0x2b/0x1e0 [ 999.950688][ T3028] shmem_alloc_and_add_folio+0x50c/0xc20 [ 999.950711][ T3028] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 999.950731][ T3028] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 999.950753][ T3028] shmem_get_folio_gfp+0x67f/0x1610 [ 999.950774][ T3028] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 999.950797][ T3028] shmem_write_begin+0x1a4/0x3b0 [ 999.950809][ T3028] ? __pfx_shmem_write_begin+0x10/0x10 [ 999.950820][ T3028] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 999.950835][ T3028] ? lockdep_hardirqs_on+0x7c/0x110 [ 999.950851][ T3028] generic_perform_write+0x3c4/0x900 [ 999.950873][ T3028] ? __pfx_generic_perform_write+0x10/0x10 [ 999.950891][ T3028] ? file_update_time_flags+0x35c/0x520 [ 999.950905][ T3028] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 999.950917][ T3028] shmem_file_write_iter+0x10e/0x140 [ 999.950932][ T3028] __kernel_write_iter+0x31a/0xb10 [ 999.950948][ T3028] ? __pfx___kernel_write_iter+0x10/0x10 [ 999.950962][ T3028] ? __up_read+0x2d1/0x700 [ 999.950978][ T3028] ? dump_user_range+0x756/0xb70 [ 999.950999][ T3028] dump_user_range+0x413/0xb70 [ 999.951020][ T3028] ? __pfx_dump_user_range+0x10/0x10 [ 999.951038][ T3028] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 999.951055][ T3028] ? __pfx_writenote+0x10/0x10 [ 999.951070][ T3028] elf_core_dump+0x29c3/0x3c10 [ 999.951089][ T3028] ? __pfx_elf_core_dump+0x10/0x10 [ 999.951099][ T3028] ? kasan_save_stack+0x33/0x60 [ 999.951111][ T3028] ? kasan_save_track+0x14/0x30 [ 999.951123][ T3028] ? __kasan_kmalloc+0xaa/0xb0 [ 999.951134][ T3028] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 999.951146][ T3028] ? vfs_coredump+0x1dd9/0x55e0 [ 999.951162][ T3028] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 999.951177][ T3028] ? irqentry_exit+0x38a/0x8c0 [ 999.951191][ T3028] ? asm_exc_page_fault+0x26/0x30 [ 999.951205][ T3028] ? 0xffffffffff600000 [ 999.951238][ T3028] ? vfs_coredump+0x2b85/0x55e0 [ 999.951254][ T3028] vfs_coredump+0x2b85/0x55e0 [ 999.951277][ T3028] ? __pfx_vfs_coredump+0x10/0x10 [ 999.951293][ T3028] ? __lock_acquire+0x436/0x2890 [ 999.951309][ T3028] ? __lock_acquire+0x436/0x2890 [ 999.951324][ T3028] ? lock_acquire+0x179/0x330 [ 999.951340][ T3028] ? lock_acquire+0x179/0x330 [ 999.951362][ T3028] ? arch_stack_walk+0xa6/0x100 [ 999.951382][ T3028] ? stack_trace_save+0x8e/0xc0 [ 999.951395][ T3028] ? __pfx_stack_trace_save+0x10/0x10 [ 999.951408][ T3028] ? stack_depot_save_flags+0x29/0x9b0 [ 999.951429][ T3028] ? __lock_acquire+0x436/0x2890 [ 999.951443][ T3028] ? kasan_save_stack+0x42/0x60 [ 999.951481][ T3028] ? proc_coredump_connector+0x2d1/0x4f0 [ 999.951496][ T3028] ? __pfx_proc_coredump_connector+0x10/0x10 [ 999.951514][ T3028] ? rcu_is_watching+0x12/0xc0 [ 999.951526][ T3028] get_signal+0x22e1/0x26d0 [ 999.951549][ T3028] ? __pfx_get_signal+0x10/0x10 [ 999.951570][ T3028] arch_do_signal_or_restart+0x8f/0x7e0 [ 999.951587][ T3028] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 999.951607][ T3028] ? __bad_area_nosemaphore+0x350/0x690 [ 999.951625][ T3028] irqentry_exit+0x38a/0x8c0 [ 999.951641][ T3028] asm_exc_page_fault+0x26/0x30 [ 999.951652][ T3028] RIP: 0033:0x7f1571c4f6b7 [ 999.951662][ T3028] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 999.951673][ T3028] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 999.951683][ T3028] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 999.951690][ T3028] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 999.951697][ T3028] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 999.951703][ T3028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 999.951710][ T3028] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 999.951725][ T3028] [ 1000.210731][ T3157] netlink: 100 bytes leftover after parsing attributes in process `syz.9.9372'. [ 1000.274867][T21919] bridge_slave_1: left allmulticast mode [ 1000.276879][T21919] bridge_slave_1: left promiscuous mode [ 1000.278889][T21919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.284832][ T3161] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9374'. [ 1000.291734][T21919] bridge_slave_0: left allmulticast mode [ 1000.293968][T21919] bridge_slave_0: left promiscuous mode [ 1000.295948][T21919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.297657][ T3028] memory: usage 307200kB, limit 307200kB, failcnt 47877 [ 1000.301796][ T3028] memory+swap: usage 414900kB, limit 9007199254740988kB, failcnt 0 [ 1000.305502][ T3028] kmem: usage 16048kB, limit 9007199254740988kB, failcnt 0 [ 1000.308818][ T3028] Memory cgroup stats for /syz4: [ 1000.308946][ T3028] cache 298078208 [ 1000.313078][ T3028] rss 61440 [ 1000.314631][ T3028] rss_huge 0 [ 1000.316097][ T3028] shmem 298074112 [ 1000.317718][ T3028] mapped_file 0 [ 1000.319857][ T3028] dirty 0 [ 1000.321290][ T3028] writeback 0 [ 1000.323230][ T3028] workingset_refault_anon 40 [ 1000.325326][ T3028] workingset_refault_file 20228 [ 1000.327602][ T3028] swap 110284800 [ 1000.329433][ T3028] swapcached 0 [ 1000.331030][ T3028] pgpgin 303800 [ 1000.332842][ T3028] pgpgout 232034 [ 1000.334433][ T3028] pgfault 179411 [ 1000.336047][ T3028] pgmajfault 913 [ 1000.337755][ T3028] inactive_anon 60710912 [ 1000.339679][ T3028] active_anon 237424640 [ 1000.341737][ T3028] inactive_file 4096 [ 1000.343545][ T3028] active_file 0 [ 1000.345175][ T3028] unevictable 0 [ 1000.346727][ T3028] hierarchical_memory_limit 314572800 [ 1000.349216][ T3028] hierarchical_memsw_limit 9223372036854771712 [ 1000.352050][ T3028] total_cache 298078208 [ 1000.353910][ T3028] total_rss 61440 [ 1000.355555][ T3028] total_rss_huge 0 [ 1000.357301][ T3028] total_shmem 298074112 [ 1000.359186][ T3028] total_mapped_file 0 [ 1000.361198][ T3028] total_dirty 0 [ 1000.362676][ T3028] total_writeback 0 [ 1000.364338][ T3028] total_workingset_refault_anon 40 [ 1000.366909][ T3028] total_workingset_refault_file 20228 [ 1000.369352][ T3028] total_swap 110284800 [ 1000.371193][ T3028] total_swapcached 0 [ 1000.372907][ T3028] total_pgpgin 303800 [ 1000.374667][ T3028] total_pgpgout 232034 [ 1000.376439][ T3028] total_pgfault 179411 [ 1000.378265][ T3028] total_pgmajfault 913 [ 1000.380177][ T3028] total_inactive_anon 60710912 [ 1000.382266][ T3028] total_active_anon 237424640 [ 1000.384306][ T3028] total_inactive_file 4096 [ 1000.386256][ T3028] total_active_file 0 [ 1000.388200][ T3028] total_unevictable 0 [ 1000.390042][ T3028] anon_cost 0 [ 1000.391525][ T3028] file_cost 0 [ 1000.392932][ T3028] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3021,uid=0 [ 1000.399681][ T3028] Memory cgroup out of memory: Killed process 3021 (syz.4.9332) total-vm:98324kB, anon-rss:968kB, file-rss:27548kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 1000.550422][ T3037] syz.4.9332 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1000.561012][ T3037] CPU: 1 UID: 0 PID: 3037 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1000.561034][ T3037] Tainted: [L]=SOFTLOCKUP [ 1000.561038][ T3037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1000.561045][ T3037] Call Trace: [ 1000.561049][ T3037] [ 1000.561053][ T3037] dump_stack_lvl+0x16c/0x1f0 [ 1000.561073][ T3037] dump_header+0x101/0x960 [ 1000.561095][ T3037] oom_kill_process+0x176/0x910 [ 1000.561114][ T3037] out_of_memory+0x350/0x1700 [ 1000.561132][ T3037] ? __lock_acquire+0x436/0x2890 [ 1000.561147][ T3037] ? __pfx_out_of_memory+0x10/0x10 [ 1000.561169][ T3037] mem_cgroup_out_of_memory+0x118/0x130 [ 1000.561181][ T3037] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1000.561196][ T3037] ? do_raw_spin_unlock+0x172/0x230 [ 1000.561214][ T3037] try_charge_memcg+0x695/0xd30 [ 1000.561232][ T3037] ? __pfx_try_charge_memcg+0x10/0x10 [ 1000.561247][ T3037] ? __print_lock_name+0xd1/0xe0 [ 1000.561265][ T3037] ? rcu_read_unlock+0x17/0x60 [ 1000.561285][ T3037] charge_memcg+0x8a/0x230 [ 1000.561301][ T3037] __mem_cgroup_charge+0x2b/0x1e0 [ 1000.561318][ T3037] shmem_alloc_and_add_folio+0x50c/0xc20 [ 1000.561347][ T3037] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1000.561366][ T3037] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1000.561388][ T3037] shmem_get_folio_gfp+0x67f/0x1610 [ 1000.561409][ T3037] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1000.561446][ T3037] shmem_write_begin+0x1a4/0x3b0 [ 1000.561458][ T3037] ? __pfx_shmem_write_begin+0x10/0x10 [ 1000.561469][ T3037] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1000.561484][ T3037] ? lockdep_hardirqs_on+0x7c/0x110 [ 1000.561500][ T3037] generic_perform_write+0x3c4/0x900 [ 1000.561522][ T3037] ? __pfx_generic_perform_write+0x10/0x10 [ 1000.561540][ T3037] ? file_update_time_flags+0x35c/0x520 [ 1000.561554][ T3037] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1000.561567][ T3037] shmem_file_write_iter+0x10e/0x140 [ 1000.561581][ T3037] __kernel_write_iter+0x31a/0xb10 [ 1000.561597][ T3037] ? __pfx___kernel_write_iter+0x10/0x10 [ 1000.561611][ T3037] ? __up_read+0x2d1/0x700 [ 1000.561628][ T3037] ? dump_user_range+0x756/0xb70 [ 1000.561645][ T3037] ? dump_user_range+0x467/0xb70 [ 1000.561664][ T3037] dump_user_range+0x413/0xb70 [ 1000.561684][ T3037] ? __pfx_dump_user_range+0x10/0x10 [ 1000.561703][ T3037] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1000.561719][ T3037] ? __pfx_writenote+0x10/0x10 [ 1000.561734][ T3037] elf_core_dump+0x29c3/0x3c10 [ 1000.561753][ T3037] ? __pfx_elf_core_dump+0x10/0x10 [ 1000.561763][ T3037] ? kasan_save_stack+0x33/0x60 [ 1000.561775][ T3037] ? kasan_save_track+0x14/0x30 [ 1000.561787][ T3037] ? __kasan_kmalloc+0xaa/0xb0 [ 1000.561798][ T3037] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 1000.561812][ T3037] ? vfs_coredump+0x1dd9/0x55e0 [ 1000.561828][ T3037] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 1000.561843][ T3037] ? irqentry_exit+0x38a/0x8c0 [ 1000.561857][ T3037] ? asm_exc_page_fault+0x26/0x30 [ 1000.561871][ T3037] ? 0xffffffffff600000 [ 1000.561905][ T3037] ? vfs_coredump+0x2b85/0x55e0 [ 1000.561921][ T3037] vfs_coredump+0x2b85/0x55e0 [ 1000.561944][ T3037] ? __pfx_vfs_coredump+0x10/0x10 [ 1000.561960][ T3037] ? __lock_acquire+0x436/0x2890 [ 1000.561976][ T3037] ? __lock_acquire+0x436/0x2890 [ 1000.561990][ T3037] ? lock_acquire+0x179/0x330 [ 1000.562006][ T3037] ? lock_acquire+0x179/0x330 [ 1000.562029][ T3037] ? arch_stack_walk+0xa6/0x100 [ 1000.562049][ T3037] ? stack_trace_save+0x8e/0xc0 [ 1000.562061][ T3037] ? __pfx_stack_trace_save+0x10/0x10 [ 1000.562076][ T3037] ? stack_depot_save_flags+0x29/0x9b0 [ 1000.562093][ T3037] ? __lock_acquire+0x436/0x2890 [ 1000.562107][ T3037] ? kasan_save_stack+0x42/0x60 [ 1000.562144][ T3037] ? proc_coredump_connector+0x2d1/0x4f0 [ 1000.562160][ T3037] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1000.562177][ T3037] ? rcu_is_watching+0x12/0xc0 [ 1000.562190][ T3037] get_signal+0x22e1/0x26d0 [ 1000.562213][ T3037] ? __pfx_get_signal+0x10/0x10 [ 1000.562234][ T3037] arch_do_signal_or_restart+0x8f/0x7e0 [ 1000.562250][ T3037] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1000.562271][ T3037] ? __bad_area_nosemaphore+0x350/0x690 [ 1000.562289][ T3037] irqentry_exit+0x38a/0x8c0 [ 1000.562305][ T3037] asm_exc_page_fault+0x26/0x30 [ 1000.562315][ T3037] RIP: 0033:0x7f1571c4f6b7 [ 1000.562329][ T3037] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1000.562340][ T3037] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 1000.562350][ T3037] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 1000.562357][ T3037] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 1000.562364][ T3037] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1000.562370][ T3037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1000.562377][ T3037] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 1000.562392][ T3037] [ 1000.562442][ T3037] memory: usage 307200kB, limit 307200kB, failcnt 48947 [ 1000.785189][ T3037] memory+swap: usage 414772kB, limit 9007199254740988kB, failcnt 0 [ 1000.788530][ T3037] kmem: usage 16048kB, limit 9007199254740988kB, failcnt 0 [ 1000.791484][ T3037] Memory cgroup stats for /syz4: [ 1000.791600][ T3037] cache 298045440 [ 1000.794823][ T3037] rss 61440 [ 1000.795875][ T3037] rss_huge 0 [ 1000.797059][ T3037] shmem 298045440 [ 1000.798430][ T3037] mapped_file 0 [ 1000.799616][ T3037] dirty 0 [ 1000.800743][ T3037] writeback 0 [ 1000.802377][ T3037] workingset_refault_anon 40 [ 1000.804652][ T3037] workingset_refault_file 20228 [ 1000.806451][ T3037] swap 109154304 [ 1000.807971][ T3037] swapcached 0 [ 1000.809189][ T3037] pgpgin 303801 [ 1000.810472][ T3037] pgpgout 232041 [ 1000.811774][ T3037] pgfault 179411 [ 1000.813088][ T3037] pgmajfault 913 [ 1000.814303][ T3037] inactive_anon 222621696 [ 1000.815752][ T3037] active_anon 75493376 [ 1000.817245][ T3037] inactive_file 0 [ 1000.818489][ T3037] active_file 0 [ 1000.819694][ T3037] unevictable 0 [ 1000.820986][ T3037] hierarchical_memory_limit 314572800 [ 1000.822819][ T3037] hierarchical_memsw_limit 9223372036854771712 [ 1000.824867][ T3037] total_cache 298045440 [ 1000.826262][ T3037] total_rss 61440 [ 1000.828104][ T3037] total_rss_huge 0 [ 1000.829400][ T3037] total_shmem 298045440 [ 1000.830892][ T3037] total_mapped_file 0 [ 1000.832367][ T3037] total_dirty 0 [ 1000.833652][ T3037] total_writeback 0 [ 1000.834957][ T3037] total_workingset_refault_anon 40 [ 1000.836776][ T3037] total_workingset_refault_file 20228 [ 1000.838606][ T3037] total_swap 109154304 [ 1000.840123][ T3037] total_swapcached 0 [ 1000.841469][ T3037] total_pgpgin 303801 [ 1000.842810][ T3037] total_pgpgout 232041 [ 1000.844282][ T3037] total_pgfault 179411 [ 1000.845697][ T3037] total_pgmajfault 913 [ 1000.847224][ T3037] total_inactive_anon 222621696 [ 1000.849008][ T3037] total_active_anon 75493376 [ 1000.850576][ T3037] total_inactive_file 0 [ 1000.851978][ T3037] total_active_file 0 [ 1000.853335][ T3037] total_unevictable 0 [ 1000.854765][ T3037] anon_cost 0 [ 1000.856349][ T3037] file_cost 0 [ 1000.857596][ T3037] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3035,uid=0 [ 1000.863081][ T3037] Memory cgroup out of memory: Killed process 3035 (syz.4.9332) total-vm:98456kB, anon-rss:976kB, file-rss:30048kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 1001.511341][ T3025] syz.4.9332 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1001.531865][ T3025] CPU: 3 UID: 0 PID: 3025 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.531886][ T3025] Tainted: [L]=SOFTLOCKUP [ 1001.531890][ T3025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1001.531897][ T3025] Call Trace: [ 1001.531901][ T3025] [ 1001.531905][ T3025] dump_stack_lvl+0x16c/0x1f0 [ 1001.531936][ T3025] dump_header+0x101/0x960 [ 1001.531957][ T3025] oom_kill_process+0x176/0x910 [ 1001.531976][ T3025] out_of_memory+0x350/0x1700 [ 1001.531994][ T3025] ? __lock_acquire+0x436/0x2890 [ 1001.532011][ T3025] ? __pfx_out_of_memory+0x10/0x10 [ 1001.532033][ T3025] mem_cgroup_out_of_memory+0x118/0x130 [ 1001.532061][ T3025] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1001.532079][ T3025] ? do_raw_spin_unlock+0x172/0x230 [ 1001.532097][ T3025] try_charge_memcg+0x695/0xd30 [ 1001.532115][ T3025] ? __pfx_try_charge_memcg+0x10/0x10 [ 1001.532130][ T3025] ? __print_lock_name+0xd1/0xe0 [ 1001.532148][ T3025] ? rcu_read_unlock+0x17/0x60 [ 1001.532168][ T3025] charge_memcg+0x8a/0x230 [ 1001.532183][ T3025] __mem_cgroup_charge+0x2b/0x1e0 [ 1001.532201][ T3025] shmem_alloc_and_add_folio+0x50c/0xc20 [ 1001.532224][ T3025] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1001.532243][ T3025] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1001.532278][ T3025] shmem_get_folio_gfp+0x67f/0x1610 [ 1001.532312][ T3025] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1001.532339][ T3025] shmem_write_begin+0x1a4/0x3b0 [ 1001.532351][ T3025] ? __pfx_shmem_write_begin+0x10/0x10 [ 1001.532362][ T3025] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1001.532377][ T3025] ? lockdep_hardirqs_on+0x7c/0x110 [ 1001.532393][ T3025] generic_perform_write+0x3c4/0x900 [ 1001.532415][ T3025] ? __pfx_generic_perform_write+0x10/0x10 [ 1001.532433][ T3025] ? file_update_time_flags+0x35c/0x520 [ 1001.532447][ T3025] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1001.532459][ T3025] shmem_file_write_iter+0x10e/0x140 [ 1001.532473][ T3025] __kernel_write_iter+0x31a/0xb10 [ 1001.532489][ T3025] ? __pfx___kernel_write_iter+0x10/0x10 [ 1001.532503][ T3025] ? __up_read+0x2d1/0x700 [ 1001.532520][ T3025] ? dump_user_range+0x756/0xb70 [ 1001.532541][ T3025] dump_user_range+0x413/0xb70 [ 1001.532561][ T3025] ? __pfx_dump_user_range+0x10/0x10 [ 1001.532580][ T3025] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1001.532596][ T3025] ? __pfx_writenote+0x10/0x10 [ 1001.532612][ T3025] elf_core_dump+0x29c3/0x3c10 [ 1001.532630][ T3025] ? __pfx_elf_core_dump+0x10/0x10 [ 1001.532640][ T3025] ? kasan_save_stack+0x33/0x60 [ 1001.532653][ T3025] ? kasan_save_track+0x14/0x30 [ 1001.532665][ T3025] ? __kasan_kmalloc+0xaa/0xb0 [ 1001.532676][ T3025] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 1001.532688][ T3025] ? vfs_coredump+0x1dd9/0x55e0 [ 1001.532705][ T3025] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 1001.532720][ T3025] ? irqentry_exit+0x38a/0x8c0 [ 1001.532733][ T3025] ? asm_exc_page_fault+0x26/0x30 [ 1001.532747][ T3025] ? 0xffffffffff600000 [ 1001.532781][ T3025] ? vfs_coredump+0x2b85/0x55e0 [ 1001.532797][ T3025] vfs_coredump+0x2b85/0x55e0 [ 1001.532820][ T3025] ? __pfx_vfs_coredump+0x10/0x10 [ 1001.532836][ T3025] ? __lock_acquire+0x436/0x2890 [ 1001.532852][ T3025] ? __lock_acquire+0x436/0x2890 [ 1001.532866][ T3025] ? lock_acquire+0x179/0x330 [ 1001.532883][ T3025] ? lock_acquire+0x179/0x330 [ 1001.532905][ T3025] ? arch_stack_walk+0xa6/0x100 [ 1001.532926][ T3025] ? stack_trace_save+0x8e/0xc0 [ 1001.532938][ T3025] ? __pfx_stack_trace_save+0x10/0x10 [ 1001.532951][ T3025] ? stack_depot_save_flags+0x29/0x9b0 [ 1001.532969][ T3025] ? __lock_acquire+0x436/0x2890 [ 1001.532983][ T3025] ? kasan_save_stack+0x42/0x60 [ 1001.533020][ T3025] ? proc_coredump_connector+0x2d1/0x4f0 [ 1001.533035][ T3025] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1001.533053][ T3025] ? rcu_is_watching+0x12/0xc0 [ 1001.533065][ T3025] get_signal+0x22e1/0x26d0 [ 1001.533088][ T3025] ? __pfx_get_signal+0x10/0x10 [ 1001.533109][ T3025] arch_do_signal_or_restart+0x8f/0x7e0 [ 1001.533125][ T3025] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1001.533145][ T3025] ? __bad_area_nosemaphore+0x350/0x690 [ 1001.533164][ T3025] irqentry_exit+0x38a/0x8c0 [ 1001.533180][ T3025] asm_exc_page_fault+0x26/0x30 [ 1001.533190][ T3025] RIP: 0033:0x7f1571c4f6b7 [ 1001.533200][ T3025] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1001.533211][ T3025] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 1001.533220][ T3025] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 1001.533227][ T3025] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 1001.533234][ T3025] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1001.533240][ T3025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1001.533247][ T3025] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 1001.533262][ T3025] [ 1001.533354][ T3025] memory: usage 307200kB, limit 307200kB, failcnt 53938 [ 1001.686963][ T3025] memory+swap: usage 414812kB, limit 9007199254740988kB, failcnt 0 [ 1001.690083][ T3025] kmem: usage 15968kB, limit 9007199254740988kB, failcnt 0 [ 1001.692662][ T3025] Memory cgroup stats for /syz4: [ 1001.692737][ T3025] cache 297979904 [ 1001.696447][ T3025] rss 237568 [ 1001.697621][ T3025] rss_huge 0 [ 1001.699950][ T3025] shmem 297967616 [ 1001.701311][ T3025] mapped_file 0 [ 1001.703364][ T3025] dirty 0 [ 1001.704644][ T3025] writeback 0 [ 1001.706063][ T3025] workingset_refault_anon 48 [ 1001.708006][ T3025] workingset_refault_file 21212 [ 1001.710068][ T3025] swap 110194688 [ 1001.711665][ T3025] swapcached 20480 [ 1001.713410][ T3025] pgpgin 321404 [ 1001.714821][ T3025] pgpgout 249619 [ 1001.716347][ T3025] pgfault 193578 [ 1001.717890][ T3025] pgmajfault 961 [ 1001.719486][ T3025] inactive_anon 149635072 [ 1001.721335][ T3025] active_anon 148570112 [ 1001.721666][T21919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.723185][ T3025] inactive_file 12288 [ 1001.727602][ T3025] active_file 0 [ 1001.728933][ T3025] unevictable 0 [ 1001.730150][ T3025] hierarchical_memory_limit 314572800 [ 1001.732022][ T3025] hierarchical_memsw_limit 9223372036854771712 [ 1001.734366][ T3025] total_cache 297979904 [ 1001.736106][ T3025] total_rss 237568 [ 1001.737734][ T3025] total_rss_huge 0 [ 1001.739269][ T3025] total_shmem 297967616 [ 1001.740706][ T3025] total_mapped_file 0 [ 1001.742159][ T3025] total_dirty 0 [ 1001.743360][ T3025] total_writeback 0 [ 1001.744679][ T3025] total_workingset_refault_anon 48 [ 1001.746762][ T3025] total_workingset_refault_file 21212 [ 1001.749196][ T3025] total_swap 110194688 [ 1001.751110][ T3025] total_swapcached 20480 [ 1001.753034][ T3025] total_pgpgin 321404 [ 1001.754850][ T3025] total_pgpgout 249619 [ 1001.756691][ T3025] total_pgfault 193578 [ 1001.758547][ T3025] total_pgmajfault 961 [ 1001.760393][ T3025] total_inactive_anon 149635072 [ 1001.763078][ T3025] total_active_anon 148570112 [ 1001.763344][T21919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.765207][ T3025] total_inactive_file 12288 [ 1001.770188][ T3025] total_active_file 0 [ 1001.772031][ T3025] total_unevictable 0 [ 1001.774056][ T3025] anon_cost 0 [ 1001.775582][ T3025] file_cost 0 [ 1001.777112][ T3025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3047,uid=0 [ 1001.783911][ T3025] Memory cgroup out of memory: Killed process 3047 (syz.4.9332) total-vm:98456kB, anon-rss:976kB, file-rss:37728kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 1001.824186][ T3025] syz.4.9332 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 1001.827970][ T3025] CPU: 3 UID: 0 PID: 3025 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.827998][ T3025] Tainted: [L]=SOFTLOCKUP [ 1001.828005][ T3025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1001.828016][ T3025] Call Trace: [ 1001.828022][ T3025] [ 1001.828029][ T3025] dump_stack_lvl+0x16c/0x1f0 [ 1001.828084][ T3025] dump_header+0x101/0x960 [ 1001.828116][ T3025] oom_kill_process+0x176/0x910 [ 1001.828146][ T3025] out_of_memory+0x350/0x1700 [ 1001.828172][ T3025] ? __lock_acquire+0x436/0x2890 [ 1001.828197][ T3025] ? __pfx_out_of_memory+0x10/0x10 [ 1001.828230][ T3025] mem_cgroup_out_of_memory+0x118/0x130 [ 1001.828249][ T3025] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1001.828272][ T3025] ? do_raw_spin_unlock+0x172/0x230 [ 1001.828300][ T3025] try_charge_memcg+0x695/0xd30 [ 1001.828328][ T3025] ? __pfx_try_charge_memcg+0x10/0x10 [ 1001.828350][ T3025] ? peak_open+0x21/0x50 [ 1001.828378][ T3025] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1001.828400][ T3025] obj_cgroup_charge_account+0x336/0x670 [ 1001.828427][ T3025] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1001.828455][ T3025] ? kasan_save_track+0x14/0x30 [ 1001.828477][ T3025] kmem_cache_alloc_lru_noprof+0x58f/0x770 [ 1001.828497][ T3025] ? xas_nomem+0x101/0x2c0 [ 1001.828522][ T3025] ? xas_nomem+0x101/0x2c0 [ 1001.828540][ T3025] xas_nomem+0x101/0x2c0 [ 1001.828558][ T3025] ? _raw_spin_unlock_irq+0x29/0x50 [ 1001.828581][ T3025] shmem_add_to_page_cache+0x6de/0xa70 [ 1001.828613][ T3025] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 1001.828652][ T3025] shmem_alloc_and_add_folio+0x662/0xc20 [ 1001.828685][ T3025] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1001.828713][ T3025] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1001.828746][ T3025] shmem_get_folio_gfp+0x67f/0x1610 [ 1001.828778][ T3025] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1001.828812][ T3025] shmem_write_begin+0x1a4/0x3b0 [ 1001.828830][ T3025] ? __pfx_shmem_write_begin+0x10/0x10 [ 1001.828848][ T3025] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1001.828869][ T3025] ? lockdep_hardirqs_on+0x7c/0x110 [ 1001.828893][ T3025] generic_perform_write+0x3c4/0x900 [ 1001.828926][ T3025] ? __pfx_generic_perform_write+0x10/0x10 [ 1001.828955][ T3025] ? file_update_time_flags+0x35c/0x520 [ 1001.828977][ T3025] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1001.828995][ T3025] shmem_file_write_iter+0x10e/0x140 [ 1001.829017][ T3025] __kernel_write_iter+0x31a/0xb10 [ 1001.829041][ T3025] ? __pfx___kernel_write_iter+0x10/0x10 [ 1001.829062][ T3025] ? __up_read+0x2d1/0x700 [ 1001.829093][ T3025] ? dump_user_range+0x756/0xb70 [ 1001.829125][ T3025] dump_user_range+0x413/0xb70 [ 1001.829156][ T3025] ? __pfx_dump_user_range+0x10/0x10 [ 1001.829183][ T3025] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1001.829208][ T3025] ? __pfx_writenote+0x10/0x10 [ 1001.829235][ T3025] elf_core_dump+0x29c3/0x3c10 [ 1001.829265][ T3025] ? __pfx_elf_core_dump+0x10/0x10 [ 1001.829280][ T3025] ? kasan_save_stack+0x33/0x60 [ 1001.829296][ T3025] ? kasan_save_track+0x14/0x30 [ 1001.829308][ T3025] ? __kasan_kmalloc+0xaa/0xb0 [ 1001.829319][ T3025] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 1001.829331][ T3025] ? vfs_coredump+0x1dd9/0x55e0 [ 1001.829348][ T3025] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 1001.829363][ T3025] ? irqentry_exit+0x38a/0x8c0 [ 1001.829376][ T3025] ? asm_exc_page_fault+0x26/0x30 [ 1001.829390][ T3025] ? 0xffffffffff600000 [ 1001.829424][ T3025] ? vfs_coredump+0x2b85/0x55e0 [ 1001.829440][ T3025] vfs_coredump+0x2b85/0x55e0 [ 1001.829462][ T3025] ? __pfx_vfs_coredump+0x10/0x10 [ 1001.829479][ T3025] ? __lock_acquire+0x436/0x2890 [ 1001.829495][ T3025] ? __lock_acquire+0x436/0x2890 [ 1001.829509][ T3025] ? lock_acquire+0x179/0x330 [ 1001.829525][ T3025] ? lock_acquire+0x179/0x330 [ 1001.829548][ T3025] ? arch_stack_walk+0xa6/0x100 [ 1001.829568][ T3025] ? stack_trace_save+0x8e/0xc0 [ 1001.829581][ T3025] ? __pfx_stack_trace_save+0x10/0x10 [ 1001.829593][ T3025] ? stack_depot_save_flags+0x29/0x9b0 [ 1001.829612][ T3025] ? __lock_acquire+0x436/0x2890 [ 1001.829626][ T3025] ? kasan_save_stack+0x42/0x60 [ 1001.829662][ T3025] ? proc_coredump_connector+0x2d1/0x4f0 [ 1001.829677][ T3025] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1001.829695][ T3025] ? rcu_is_watching+0x12/0xc0 [ 1001.829708][ T3025] get_signal+0x22e1/0x26d0 [ 1001.829731][ T3025] ? __pfx_get_signal+0x10/0x10 [ 1001.829751][ T3025] arch_do_signal_or_restart+0x8f/0x7e0 [ 1001.829768][ T3025] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1001.829789][ T3025] ? __bad_area_nosemaphore+0x350/0x690 [ 1001.829807][ T3025] irqentry_exit+0x38a/0x8c0 [ 1001.829824][ T3025] asm_exc_page_fault+0x26/0x30 [ 1001.829834][ T3025] RIP: 0033:0x7f1571c4f6b7 [ 1001.829844][ T3025] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1001.829855][ T3025] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 1001.829864][ T3025] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 1001.829871][ T3025] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 1001.829878][ T3025] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1001.829885][ T3025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1001.829891][ T3025] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 1001.829906][ T3025] [ 1001.829910][ T3025] memory: usage 307200kB, limit 307200kB, failcnt 54218 [ 1001.841918][T21919] bond0 (unregistering): Released all slaves [ 1001.842680][ T3025] memory+swap: usage 414668kB, limit 9007199254740988kB, failcnt 0 [ 1001.854699][T21919] bond1 (unregistering): Released all slaves [ 1001.866856][ T3025] kmem: usage 15928kB, limit 9007199254740988kB, failcnt 0 [ 1001.866874][ T3025] Memory cgroup stats for /syz4: [ 1001.866964][ T3025] cache 298016768 [ 1001.866972][ T3025] rss 241664 [ 1001.866978][ T3025] rss_huge 0 [ 1001.866984][ T3025] shmem 298004480 [ 1001.866990][ T3025] mapped_file 0 [ 1001.866995][ T3025] dirty 0 [ 1001.867001][ T3025] writeback 0 [ 1001.867007][ T3025] workingset_refault_anon 48 [ 1001.877152][T21919] bond2 (unregistering): Released all slaves [ 1001.882314][ T3025] workingset_refault_file 21239 [ 1002.057653][ T3025] swap 110055424 [ 1002.058901][ T3025] swapcached 20480 [ 1002.060180][ T3025] pgpgin 321442 [ 1002.061378][ T3025] pgpgout 249646 [ 1002.062636][ T3025] pgfault 193608 [ 1002.063931][ T3025] pgmajfault 968 [ 1002.065235][ T3025] inactive_anon 149655552 [ 1002.066794][ T3025] active_anon 148590592 [ 1002.068451][ T3025] inactive_file 12288 [ 1002.069935][ T3025] active_file 0 [ 1002.071346][ T3025] unevictable 0 [ 1002.072735][ T3025] hierarchical_memory_limit 314572800 [ 1002.074740][ T3025] hierarchical_memsw_limit 9223372036854771712 [ 1002.076832][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 1002.076845][ T40] audit: type=1400 audit(974.544:41933): avc: denied { unmount } for pid=32732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1002.077140][ T3025] total_cache 298016768 [ 1002.087432][ T3025] total_rss 241664 [ 1002.088704][ T3025] total_rss_huge 0 [ 1002.089927][ T3025] total_shmem 298004480 [ 1002.091023][ T40] audit: type=1400 audit(974.565:41934): avc: denied { unmount } for pid=32732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1002.091305][ T3025] total_mapped_file 0 [ 1002.091312][ T3025] total_dirty 0 [ 1002.091317][ T3025] total_writeback 0 [ 1002.103626][ T3025] total_workingset_refault_anon 48 [ 1002.105455][ T3025] total_workingset_refault_file 21239 [ 1002.107371][ T3025] total_swap 110055424 [ 1002.108417][ T40] audit: type=1400 audit(974.586:41935): avc: denied { read write } for pid=32732 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1002.108841][ T3025] total_swapcached 20480 [ 1002.108850][ T3025] total_pgpgin 321442 [ 1002.120085][ T40] audit: type=1400 audit(974.586:41936): avc: denied { open } for pid=32732 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1002.120750][ T3025] total_pgpgout 249646 [ 1002.124679][ T40] audit: type=1400 audit(974.586:41937): avc: denied { ioctl } for pid=32732 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1002.130248][ T3025] total_pgfault 193608 [ 1002.140675][ T40] audit: type=1400 audit(974.607:41938): avc: denied { read } for pid=3173 comm="syz.9.9377" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1002.142217][ T3025] total_pgmajfault 968 [ 1002.150770][ T40] audit: type=1400 audit(974.607:41939): avc: denied { open } for pid=3173 comm="syz.9.9377" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1002.151844][ T3025] total_inactive_anon 149655552 [ 1002.159572][ T40] audit: type=1400 audit(974.628:41940): avc: denied { create } for pid=3173 comm="syz.9.9377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1002.167582][ T40] audit: type=1400 audit(974.628:41941): avc: denied { write } for pid=3173 comm="syz.9.9377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1002.169509][ T3025] total_active_anon 148590592 [ 1002.170415][T21919] tipc: Disabling bearer [ 1002.172485][T21919] tipc: Left network mode [ 1002.175427][ T40] audit: type=1400 audit(974.628:41942): avc: denied { ioctl } for pid=3173 comm="syz.9.9377" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1002.176758][ T3025] total_inactive_file 12288 [ 1002.190599][ T3025] total_active_file 0 [ 1002.192292][ T3025] total_unevictable 0 [ 1002.193620][ T2980] mkiss: ax0: crc mode is auto. [ 1002.198929][ T3025] anon_cost 0 [ 1002.200307][ T3025] file_cost 0 [ 1002.201449][ T3025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3041,uid=0 [ 1002.209587][ T3025] Memory cgroup out of memory: Killed process 3041 (syz.4.9332) total-vm:98456kB, anon-rss:976kB, file-rss:36356kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 1002.330413][ T3169] syz.4.9375 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=2, oom_score_adj=1000 [ 1002.342109][ T3169] CPU: 3 UID: 0 PID: 3169 Comm: syz.4.9375 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.342150][ T3169] Tainted: [L]=SOFTLOCKUP [ 1002.342157][ T3169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1002.342168][ T3169] Call Trace: [ 1002.342174][ T3169] [ 1002.342183][ T3169] dump_stack_lvl+0x16c/0x1f0 [ 1002.342211][ T3169] dump_header+0x101/0x960 [ 1002.342244][ T3169] oom_kill_process+0x176/0x910 [ 1002.342275][ T3169] out_of_memory+0x350/0x1700 [ 1002.342304][ T3169] ? __lock_acquire+0x436/0x2890 [ 1002.342329][ T3169] ? __pfx_out_of_memory+0x10/0x10 [ 1002.342364][ T3169] mem_cgroup_out_of_memory+0x118/0x130 [ 1002.342398][ T3169] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1002.342424][ T3169] ? do_raw_spin_unlock+0x172/0x230 [ 1002.342454][ T3169] try_charge_memcg+0x695/0xd30 [ 1002.342484][ T3169] ? __pfx_try_charge_memcg+0x10/0x10 [ 1002.342509][ T3169] ? peak_open+0x21/0x50 [ 1002.342535][ T3169] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1002.342560][ T3169] obj_cgroup_charge_account+0x336/0x670 [ 1002.342588][ T3169] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1002.342620][ T3169] ? kasan_save_track+0x14/0x30 [ 1002.342643][ T3169] kmem_cache_alloc_node_noprof+0x5cd/0x800 [ 1002.342663][ T3169] ? copy_process+0x4b5/0x7430 [ 1002.342697][ T3169] ? copy_process+0x4b5/0x7430 [ 1002.342723][ T3169] copy_process+0x4b5/0x7430 [ 1002.342760][ T3169] ? __pfx_copy_process+0x10/0x10 [ 1002.342796][ T3169] ? _copy_from_user+0x59/0xd0 [ 1002.342827][ T3169] kernel_clone+0xfc/0x910 [ 1002.342845][ T3169] ? __pfx_kernel_clone+0x10/0x10 [ 1002.342870][ T3169] ? __lock_acquire+0x436/0x2890 [ 1002.342895][ T3169] __do_sys_clone3+0x212/0x290 [ 1002.342913][ T3169] ? __pfx___do_sys_clone3+0x10/0x10 [ 1002.342964][ T3169] do_syscall_64+0xcd/0xf80 [ 1002.342991][ T3169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.343008][ T3169] RIP: 0033:0x7f1571dc3f09 [ 1002.343025][ T3169] Code: ee 08 00 48 8d 3d dc ee 08 00 e8 f2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 1002.343042][ T3169] RSP: 002b:00007ffedc183298 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 1002.343061][ T3169] RAX: ffffffffffffffda RBX: 00007f1571d46300 RCX: 00007f1571dc3f09 [ 1002.343073][ T3169] RDX: 00007f1571d46300 RSI: 0000000000000058 RDI: 00007ffedc1832e0 [ 1002.343084][ T3169] RBP: 00007f1572c016c0 R08: 00007f1572c016c0 R09: 00007ffedc1833c7 [ 1002.343096][ T3169] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 1002.343107][ T3169] R13: 000000000000006e R14: 00007ffedc1832e0 R15: 00007ffedc1833c8 [ 1002.343173][ T3169] [ 1002.346395][ T3169] memory: usage 307200kB, limit 307200kB, failcnt 55961 [ 1002.380327][ T6023] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 1002.392062][ T3169] memory+swap: usage 414876kB, limit 9007199254740988kB, failcnt 0 [ 1002.448882][ T3169] kmem: usage 15900kB, limit 9007199254740988kB, failcnt 0 [ 1002.464468][ T3169] Memory cgroup stats for /syz4: [ 1002.464779][ T3169] cache 297521152 [ 1002.468589][ T3169] rss 237568 [ 1002.470093][ T3169] rss_huge 0 [ 1002.471577][ T3169] shmem 296722432 [ 1002.473470][ T3169] mapped_file 405504 [ 1002.476890][ T3169] dirty 0 [ 1002.478036][ T3169] writeback 0 [ 1002.479524][ T3169] workingset_refault_anon 48 [ 1002.481603][ T3169] workingset_refault_file 22426 [ 1002.483718][ T3169] swap 110211072 [ 1002.496791][ T3169] swapcached 20480 [ 1002.498615][ T3169] pgpgin 323330 [ 1002.500260][ T3169] pgpgout 251636 [ 1002.501654][ T3169] pgfault 194363 [ 1002.502888][ T3169] pgmajfault 1027 [ 1002.504312][ T3169] inactive_anon 144982016 [ 1002.505885][ T3169] active_anon 151683072 [ 1002.507330][ T3169] inactive_file 290816 [ 1002.508745][ T3169] active_file 184320 [ 1002.510114][ T3169] unevictable 0 [ 1002.511410][ T3169] hierarchical_memory_limit 314572800 [ 1002.513323][ T3169] hierarchical_memsw_limit 9223372036854771712 [ 1002.515769][ T3169] total_cache 297521152 [ 1002.517312][ T3169] total_rss 237568 [ 1002.518745][ T3169] total_rss_huge 0 [ 1002.520173][ T3169] total_shmem 296722432 [ 1002.522335][ T3169] total_mapped_file 405504 [ 1002.524169][ T3169] total_dirty 0 [ 1002.525745][ T3169] total_writeback 0 [ 1002.527340][ T3169] total_workingset_refault_anon 48 [ 1002.529212][ T3169] total_workingset_refault_file 22426 [ 1002.531041][ T3169] total_swap 110211072 [ 1002.541650][ T3169] total_swapcached 20480 [ 1002.543255][ T3169] total_pgpgin 323330 [ 1002.544968][ T3169] total_pgpgout 251636 [ 1002.546390][ T3169] total_pgfault 194363 [ 1002.547828][ T3169] total_pgmajfault 1027 [ 1002.549376][ T3169] total_inactive_anon 144982016 [ 1002.564858][ T3169] total_active_anon 151683072 [ 1002.566569][ T3169] total_inactive_file 290816 [ 1002.568172][ T3169] total_active_file 184320 [ 1002.569701][ T3169] total_unevictable 0 [ 1002.579782][ T6023] usb 14-1: device descriptor read/64, error -71 [ 1002.580599][ T3169] anon_cost 0 [ 1002.584582][ T3169] file_cost 0 [ 1002.586130][ T3169] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3037,uid=0 [ 1002.593895][ T3169] Memory cgroup out of memory: Killed process 3037 (syz.4.9332) total-vm:98456kB, anon-rss:1104kB, file-rss:34024kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 1002.727687][ T3022] syz.4.9332 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1002.731570][ T3022] CPU: 0 UID: 0 PID: 3022 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.731590][ T3022] Tainted: [L]=SOFTLOCKUP [ 1002.731595][ T3022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1002.731603][ T3022] Call Trace: [ 1002.731608][ T3022] [ 1002.731613][ T3022] dump_stack_lvl+0x16c/0x1f0 [ 1002.731632][ T3022] dump_header+0x101/0x960 [ 1002.731654][ T3022] oom_kill_process+0x176/0x910 [ 1002.731674][ T3022] out_of_memory+0x350/0x1700 [ 1002.731694][ T3022] ? __lock_acquire+0x436/0x2890 [ 1002.731711][ T3022] ? __pfx_out_of_memory+0x10/0x10 [ 1002.731734][ T3022] mem_cgroup_out_of_memory+0x118/0x130 [ 1002.731747][ T3022] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1002.731763][ T3022] ? do_raw_spin_unlock+0x172/0x230 [ 1002.731782][ T3022] try_charge_memcg+0x695/0xd30 [ 1002.731801][ T3022] ? __pfx_try_charge_memcg+0x10/0x10 [ 1002.731818][ T3022] ? __print_lock_name+0xd1/0xe0 [ 1002.731837][ T3022] ? rcu_read_unlock+0x17/0x60 [ 1002.731861][ T3022] charge_memcg+0x8a/0x230 [ 1002.731885][ T3022] __mem_cgroup_charge+0x2b/0x1e0 [ 1002.731921][ T3022] filemap_add_folio+0xe6/0x610 [ 1002.731936][ T3022] ? __pfx_filemap_add_folio+0x10/0x10 [ 1002.731953][ T3022] __filemap_get_folio_mpol+0x511/0xc60 [ 1002.731969][ T3022] filemap_fault+0x684/0x29d0 [ 1002.731984][ T3022] ? __pfx_filemap_fault+0x10/0x10 [ 1002.732004][ T3022] ? __pfx_filemap_map_pages+0x10/0x10 [ 1002.732014][ T3022] __do_fault+0x10d/0x490 [ 1002.732065][ T3022] ? __pfx_filemap_map_pages+0x10/0x10 [ 1002.732080][ T3022] do_fault+0xae4/0x1ad0 [ 1002.732095][ T3022] ? __pfx_filemap_map_pages+0x10/0x10 [ 1002.732109][ T3022] __handle_mm_fault+0x1919/0x2bb0 [ 1002.732132][ T3022] ? __pfx___handle_mm_fault+0x10/0x10 [ 1002.732151][ T3022] ? __pte_offset_map_lock+0x174/0x310 [ 1002.732167][ T3022] ? find_held_lock+0x2b/0x80 [ 1002.732189][ T3022] ? follow_page_pte+0x5cf/0x1390 [ 1002.732208][ T3022] handle_mm_fault+0x3fe/0xad0 [ 1002.732229][ T3022] __get_user_pages+0x54e/0x3590 [ 1002.732251][ T3022] ? __pfx___get_user_pages+0x10/0x10 [ 1002.732267][ T3022] ? __kernel_write_iter+0x5a5/0xb10 [ 1002.732293][ T3022] get_dump_page+0x257/0x3d0 [ 1002.732321][ T3022] ? __pfx_get_dump_page+0x10/0x10 [ 1002.732340][ T3022] ? dump_user_range+0x756/0xb70 [ 1002.732363][ T3022] dump_user_range+0x195/0xb70 [ 1002.732384][ T3022] ? __pfx_dump_user_range+0x10/0x10 [ 1002.732404][ T3022] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1002.732423][ T3022] ? __pfx_writenote+0x10/0x10 [ 1002.732439][ T3022] elf_core_dump+0x29c3/0x3c10 [ 1002.732459][ T3022] ? __pfx_elf_core_dump+0x10/0x10 [ 1002.732469][ T3022] ? kasan_save_stack+0x33/0x60 [ 1002.732483][ T3022] ? kasan_save_track+0x14/0x30 [ 1002.732495][ T3022] ? __kasan_kmalloc+0xaa/0xb0 [ 1002.732507][ T3022] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 1002.732520][ T3022] ? vfs_coredump+0x1dd9/0x55e0 [ 1002.732537][ T3022] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 1002.732555][ T3022] ? irqentry_exit+0x38a/0x8c0 [ 1002.732570][ T3022] ? asm_exc_page_fault+0x26/0x30 [ 1002.732585][ T3022] ? 0xffffffffff600000 [ 1002.732622][ T3022] ? vfs_coredump+0x2b85/0x55e0 [ 1002.732639][ T3022] vfs_coredump+0x2b85/0x55e0 [ 1002.732663][ T3022] ? __pfx_vfs_coredump+0x10/0x10 [ 1002.732681][ T3022] ? __lock_acquire+0x436/0x2890 [ 1002.732698][ T3022] ? __lock_acquire+0x436/0x2890 [ 1002.732713][ T3022] ? lock_acquire+0x179/0x330 [ 1002.732730][ T3022] ? lock_acquire+0x179/0x330 [ 1002.732755][ T3022] ? arch_stack_walk+0xa6/0x100 [ 1002.732776][ T3022] ? stack_trace_save+0x8e/0xc0 [ 1002.732793][ T3022] ? __pfx_stack_trace_save+0x10/0x10 [ 1002.732814][ T3022] ? stack_depot_save_flags+0x29/0x9b0 [ 1002.732840][ T3022] ? __lock_acquire+0x436/0x2890 [ 1002.732855][ T3022] ? kasan_save_stack+0x42/0x60 [ 1002.732895][ T3022] ? proc_coredump_connector+0x2d1/0x4f0 [ 1002.732911][ T3022] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1002.732930][ T3022] ? rcu_is_watching+0x12/0xc0 [ 1002.732943][ T3022] get_signal+0x22e1/0x26d0 [ 1002.732967][ T3022] ? __pfx_get_signal+0x10/0x10 [ 1002.732989][ T3022] arch_do_signal_or_restart+0x8f/0x7e0 [ 1002.733007][ T3022] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1002.733029][ T3022] ? __bad_area_nosemaphore+0x350/0x690 [ 1002.733048][ T3022] irqentry_exit+0x38a/0x8c0 [ 1002.733065][ T3022] asm_exc_page_fault+0x26/0x30 [ 1002.733076][ T3022] RIP: 0033:0x7f1571c4f6b7 [ 1002.733087][ T3022] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1002.733098][ T3022] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 1002.733108][ T3022] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 1002.733115][ T3022] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 1002.733122][ T3022] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1002.733129][ T3022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1002.733135][ T3022] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 1002.733152][ T3022] [ 1002.958750][ T3022] memory: usage 307200kB, limit 307200kB, failcnt 57637 [ 1002.962231][ T3022] memory+swap: usage 414744kB, limit 9007199254740988kB, failcnt 0 [ 1002.965788][ T3022] kmem: usage 15624kB, limit 9007199254740988kB, failcnt 0 [ 1002.968927][ T3022] Memory cgroup stats for /syz4: [ 1002.969076][ T3022] cache 297918464 [ 1002.969925][ T3170] geneve0 speed is unknown, defaulting to 1000 [ 1002.971335][ T3022] rss 249856 [ 1002.976815][ T3022] rss_huge 0 [ 1002.978132][ T3022] shmem 297914368 [ 1002.979542][ T3022] mapped_file 0 [ 1002.980873][ T3022] dirty 0 [ 1002.981931][ T3022] writeback 0 [ 1002.983296][ T3022] workingset_refault_anon 49 [ 1002.985239][ T3022] workingset_refault_file 23318 [ 1002.987204][ T3022] swap 110047232 [ 1002.988491][ T3022] swapcached 20480 [ 1002.990006][ T3022] pgpgin 329803 [ 1002.991212][ T3022] pgpgout 258026 [ 1002.992441][ T3022] pgfault 195066 [ 1002.993634][ T3022] pgmajfault 1047 [ 1002.994815][ T3022] inactive_anon 180891648 [ 1002.996287][ T3022] active_anon 117288960 [ 1002.997951][ T3022] inactive_file 0 [ 1002.999457][ T6023] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 1003.002035][ T3022] active_file 4096 [ 1003.003448][ T3022] unevictable 0 [ 1003.004993][ T3022] hierarchical_memory_limit 314572800 [ 1003.006748][ T3022] hierarchical_memsw_limit 9223372036854771712 [ 1003.008882][ T3022] total_cache 297918464 [ 1003.010312][ T3022] total_rss 249856 [ 1003.011627][ T3022] total_rss_huge 0 [ 1003.012963][ T3022] total_shmem 297914368 [ 1003.014331][ T3022] total_mapped_file 0 [ 1003.015656][ T3022] total_dirty 0 [ 1003.016830][ T3022] total_writeback 0 [ 1003.018339][ T3022] total_workingset_refault_anon 49 [ 1003.020017][ T3022] total_workingset_refault_file 23318 [ 1003.021774][ T3022] total_swap 110047232 [ 1003.023152][ T3022] total_swapcached 20480 [ 1003.024560][ T3022] total_pgpgin 329803 [ 1003.025877][ T3022] total_pgpgout 258026 [ 1003.027230][ T3022] total_pgfault 195066 [ 1003.028633][ T3022] total_pgmajfault 1047 [ 1003.030006][ T3022] total_inactive_anon 180891648 [ 1003.031841][ T3022] total_active_anon 117288960 [ 1003.033420][ T3022] total_inactive_file 0 [ 1003.034778][ T3022] total_active_file 4096 [ 1003.036146][ T3022] total_unevictable 0 [ 1003.037551][ T3022] anon_cost 0 [ 1003.038657][ T3022] file_cost 0 [ 1003.039775][ T3022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3038,uid=0 [ 1003.044514][ T3022] Memory cgroup out of memory: Killed process 3038 (syz.4.9332) total-vm:98456kB, anon-rss:848kB, file-rss:32984kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1003.141919][ T6023] usb 14-1: device descriptor read/64, error -71 [ 1003.246666][ T6023] usb usb14-port1: attempt power cycle [ 1003.472995][ T3025] syz.4.9332 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1003.491582][ T3025] CPU: 2 UID: 0 PID: 3025 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.491618][ T3025] Tainted: [L]=SOFTLOCKUP [ 1003.491626][ T3025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1003.491637][ T3025] Call Trace: [ 1003.491644][ T3025] [ 1003.491652][ T3025] dump_stack_lvl+0x16c/0x1f0 [ 1003.491680][ T3025] dump_header+0x101/0x960 [ 1003.491711][ T3025] oom_kill_process+0x176/0x910 [ 1003.491741][ T3025] out_of_memory+0x350/0x1700 [ 1003.491769][ T3025] ? __lock_acquire+0x436/0x2890 [ 1003.491794][ T3025] ? __pfx_out_of_memory+0x10/0x10 [ 1003.491828][ T3025] mem_cgroup_out_of_memory+0x118/0x130 [ 1003.491847][ T3025] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1003.491871][ T3025] ? do_raw_spin_unlock+0x172/0x230 [ 1003.491915][ T3025] try_charge_memcg+0x695/0xd30 [ 1003.491944][ T3025] ? __pfx_try_charge_memcg+0x10/0x10 [ 1003.491969][ T3025] ? __print_lock_name+0xd1/0xe0 [ 1003.491997][ T3025] ? rcu_read_unlock+0x17/0x60 [ 1003.492057][ T3025] charge_memcg+0x8a/0x230 [ 1003.492087][ T3025] __mem_cgroup_charge+0x2b/0x1e0 [ 1003.492120][ T3025] shmem_alloc_and_add_folio+0x50c/0xc20 [ 1003.492155][ T3025] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1003.492186][ T3025] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1003.492220][ T3025] shmem_get_folio_gfp+0x67f/0x1610 [ 1003.492254][ T3025] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1003.492290][ T3025] shmem_write_begin+0x1a4/0x3b0 [ 1003.492309][ T3025] ? __pfx_shmem_write_begin+0x10/0x10 [ 1003.492328][ T3025] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1003.492350][ T3025] ? lockdep_hardirqs_on+0x7c/0x110 [ 1003.492382][ T3025] generic_perform_write+0x3c4/0x900 [ 1003.492417][ T3025] ? __pfx_generic_perform_write+0x10/0x10 [ 1003.492446][ T3025] ? file_update_time_flags+0x35c/0x520 [ 1003.492469][ T3025] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1003.492489][ T3025] shmem_file_write_iter+0x10e/0x140 [ 1003.492511][ T3025] __kernel_write_iter+0x31a/0xb10 [ 1003.492537][ T3025] ? __pfx___kernel_write_iter+0x10/0x10 [ 1003.492561][ T3025] ? __up_read+0x2d1/0x700 [ 1003.492590][ T3025] ? dump_user_range+0x756/0xb70 [ 1003.492627][ T3025] dump_user_range+0x413/0xb70 [ 1003.492665][ T3025] ? __pfx_dump_user_range+0x10/0x10 [ 1003.492698][ T3025] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1003.492730][ T3025] ? __pfx_writenote+0x10/0x10 [ 1003.492759][ T3025] elf_core_dump+0x29c3/0x3c10 [ 1003.492796][ T3025] ? __pfx_elf_core_dump+0x10/0x10 [ 1003.492816][ T3025] ? kasan_save_stack+0x33/0x60 [ 1003.492840][ T3025] ? kasan_save_track+0x14/0x30 [ 1003.492862][ T3025] ? __kasan_kmalloc+0xaa/0xb0 [ 1003.492882][ T3025] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 1003.492905][ T3025] ? vfs_coredump+0x1dd9/0x55e0 [ 1003.492933][ T3025] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 1003.492961][ T3025] ? irqentry_exit+0x38a/0x8c0 [ 1003.492984][ T3025] ? asm_exc_page_fault+0x26/0x30 [ 1003.493012][ T3025] ? 0xffffffffff600000 [ 1003.493082][ T3025] ? vfs_coredump+0x2b85/0x55e0 [ 1003.493113][ T3025] vfs_coredump+0x2b85/0x55e0 [ 1003.493156][ T3025] ? __pfx_vfs_coredump+0x10/0x10 [ 1003.493186][ T3025] ? __lock_acquire+0x436/0x2890 [ 1003.493216][ T3025] ? __lock_acquire+0x436/0x2890 [ 1003.493243][ T3025] ? lock_acquire+0x179/0x330 [ 1003.493275][ T3025] ? lock_acquire+0x179/0x330 [ 1003.493323][ T3025] ? arch_stack_walk+0xa6/0x100 [ 1003.493377][ T3025] ? stack_trace_save+0x8e/0xc0 [ 1003.493403][ T3025] ? __pfx_stack_trace_save+0x10/0x10 [ 1003.493427][ T3025] ? stack_depot_save_flags+0x29/0x9b0 [ 1003.493459][ T3025] ? __lock_acquire+0x436/0x2890 [ 1003.493487][ T3025] ? kasan_save_stack+0x42/0x60 [ 1003.493571][ T3025] ? proc_coredump_connector+0x2d1/0x4f0 [ 1003.493601][ T3025] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1003.493635][ T3025] ? rcu_is_watching+0x12/0xc0 [ 1003.493661][ T3025] get_signal+0x22e1/0x26d0 [ 1003.493707][ T3025] ? __pfx_get_signal+0x10/0x10 [ 1003.493746][ T3025] arch_do_signal_or_restart+0x8f/0x7e0 [ 1003.493779][ T3025] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1003.493818][ T3025] ? __bad_area_nosemaphore+0x350/0x690 [ 1003.493855][ T3025] irqentry_exit+0x38a/0x8c0 [ 1003.493889][ T3025] asm_exc_page_fault+0x26/0x30 [ 1003.493910][ T3025] RIP: 0033:0x7f1571c4f6b7 [ 1003.493930][ T3025] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1003.493952][ T3025] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 1003.493971][ T3025] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 1003.493985][ T3025] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 1003.493999][ T3025] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1003.494012][ T3025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1003.494025][ T3025] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 1003.494058][ T3025] [ 1003.494068][ T3025] memory: usage 307200kB, limit 307200kB, failcnt 59692 [ 1003.580690][ T6023] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 1003.599450][ T6023] usb 14-1: device descriptor read/8, error -71 [ 1003.599719][ T3025] memory+swap: usage 414668kB, limit 9007199254740988kB, failcnt 0 [ 1003.697294][T21919] hsr_slave_0: left promiscuous mode [ 1003.701052][ T3025] kmem: usage 15284kB, limit 9007199254740988kB, failcnt 0 [ 1003.704927][ T3025] Memory cgroup stats for /syz4: [ 1003.704989][T21919] hsr_slave_1: left promiscuous mode [ 1003.705057][ T3025] cache 298635264 [ 1003.707965][T21919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.709403][ T3025] rss 266240 [ 1003.714916][ T3025] rss_huge 0 [ 1003.716008][ T3025] shmem 298635264 [ 1003.717255][ T3025] mapped_file 0 [ 1003.718392][ T3025] dirty 0 [ 1003.719363][ T3025] writeback 0 [ 1003.720507][ T3025] workingset_refault_anon 53 [ 1003.722058][ T3025] workingset_refault_file 23481 [ 1003.722981][T21919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.725295][ T3025] swap 110047232 [ 1003.727718][ T3025] swapcached 12288 [ 1003.729010][ T3025] pgpgin 344079 [ 1003.730186][ T3025] pgpgout 272127 [ 1003.731383][ T3025] pgfault 204043 [ 1003.733443][ T3025] pgmajfault 1053 [ 1003.734737][ T3025] inactive_anon 159686656 [ 1003.736227][ T3025] active_anon 139214848 [ 1003.737666][ T3025] inactive_file 0 [ 1003.738942][ T3025] active_file 0 [ 1003.740120][ T3025] unevictable 0 [ 1003.741291][ T3025] hierarchical_memory_limit 314572800 [ 1003.743379][ T3025] hierarchical_memsw_limit 9223372036854771712 [ 1003.745490][ T3025] total_cache 298635264 [ 1003.746867][ T3025] total_rss 266240 [ 1003.748229][ T3025] total_rss_huge 0 [ 1003.749703][ T3025] total_shmem 298635264 [ 1003.751535][ T3025] total_mapped_file 0 [ 1003.752895][ T3025] total_dirty 0 [ 1003.754160][ T3025] total_writeback 0 [ 1003.755526][ T3025] total_workingset_refault_anon 53 [ 1003.757276][ T3025] total_workingset_refault_file 23481 [ 1003.759081][ T3025] total_swap 110047232 [ 1003.760459][ T3025] total_swapcached 12288 [ 1003.761999][ T3025] total_pgpgin 344079 [ 1003.763393][ T3025] total_pgpgout 272127 [ 1003.764759][ T3025] total_pgfault 204043 [ 1003.766200][ T3025] total_pgmajfault 1053 [ 1003.767685][ T3025] total_inactive_anon 159686656 [ 1003.769308][ T3025] total_active_anon 139214848 [ 1003.770951][ T3025] total_inactive_file 0 [ 1003.772496][ T3025] total_active_file 0 [ 1003.773927][ T3025] total_unevictable 0 [ 1003.775239][ T3025] anon_cost 0 [ 1003.776403][ T3025] file_cost 0 [ 1003.777550][ T3025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3022,uid=0 [ 1003.782699][ T3025] Memory cgroup out of memory: Killed process 3022 (syz.4.9332) total-vm:98324kB, anon-rss:968kB, file-rss:27652kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1003.810129][ T3032] syz.4.9332 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1003.818978][ T3032] CPU: 3 UID: 0 PID: 3032 Comm: syz.4.9332 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.819010][ T3032] Tainted: [L]=SOFTLOCKUP [ 1003.819017][ T3032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1003.819028][ T3032] Call Trace: [ 1003.819035][ T3032] [ 1003.819042][ T3032] dump_stack_lvl+0x16c/0x1f0 [ 1003.819071][ T3032] dump_header+0x101/0x960 [ 1003.819104][ T3032] oom_kill_process+0x176/0x910 [ 1003.819136][ T3032] out_of_memory+0x350/0x1700 [ 1003.819165][ T3032] ? __lock_acquire+0x436/0x2890 [ 1003.819190][ T3032] ? __pfx_out_of_memory+0x10/0x10 [ 1003.819226][ T3032] mem_cgroup_out_of_memory+0x118/0x130 [ 1003.819244][ T3032] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1003.819267][ T3032] ? do_raw_spin_unlock+0x172/0x230 [ 1003.819294][ T3032] try_charge_memcg+0x695/0xd30 [ 1003.819329][ T3032] ? __pfx_try_charge_memcg+0x10/0x10 [ 1003.819355][ T3032] ? __print_lock_name+0xd0/0xe0 [ 1003.819383][ T3032] ? rcu_read_unlock+0x17/0x60 [ 1003.819416][ T3032] charge_memcg+0x8a/0x230 [ 1003.819441][ T3032] __mem_cgroup_charge+0x2b/0x1e0 [ 1003.819470][ T3032] shmem_alloc_and_add_folio+0x50c/0xc20 [ 1003.819507][ T3032] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1003.819539][ T3032] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1003.819575][ T3032] shmem_get_folio_gfp+0x67f/0x1610 [ 1003.819610][ T3032] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1003.819648][ T3032] shmem_write_begin+0x1a4/0x3b0 [ 1003.819668][ T3032] ? __pfx_shmem_write_begin+0x10/0x10 [ 1003.819688][ T3032] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1003.819728][ T3032] ? lockdep_hardirqs_on+0x7c/0x110 [ 1003.819756][ T3032] generic_perform_write+0x3c4/0x900 [ 1003.819792][ T3032] ? __pfx_generic_perform_write+0x10/0x10 [ 1003.819823][ T3032] ? file_update_time_flags+0x35c/0x520 [ 1003.819847][ T3032] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1003.819868][ T3032] shmem_file_write_iter+0x10e/0x140 [ 1003.819892][ T3032] __kernel_write_iter+0x31a/0xb10 [ 1003.819919][ T3032] ? __pfx___kernel_write_iter+0x10/0x10 [ 1003.819942][ T3032] ? __up_read+0x2d1/0x700 [ 1003.819971][ T3032] ? dump_user_range+0x756/0xb70 [ 1003.820005][ T3032] dump_user_range+0x413/0xb70 [ 1003.820061][ T3032] ? __pfx_dump_user_range+0x10/0x10 [ 1003.820091][ T3032] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1003.820119][ T3032] ? __pfx_writenote+0x10/0x10 [ 1003.820144][ T3032] elf_core_dump+0x29c3/0x3c10 [ 1003.820174][ T3032] ? __pfx_elf_core_dump+0x10/0x10 [ 1003.820191][ T3032] ? kasan_save_stack+0x33/0x60 [ 1003.820212][ T3032] ? kasan_save_track+0x14/0x30 [ 1003.820231][ T3032] ? __kasan_kmalloc+0xaa/0xb0 [ 1003.820251][ T3032] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 1003.820272][ T3032] ? vfs_coredump+0x1dd9/0x55e0 [ 1003.820299][ T3032] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 1003.820329][ T3032] ? irqentry_exit+0x38a/0x8c0 [ 1003.820351][ T3032] ? asm_exc_page_fault+0x26/0x30 [ 1003.820376][ T3032] ? 0xffffffffff600000 [ 1003.820438][ T3032] ? vfs_coredump+0x2b85/0x55e0 [ 1003.820465][ T3032] vfs_coredump+0x2b85/0x55e0 [ 1003.820503][ T3032] ? __pfx_vfs_coredump+0x10/0x10 [ 1003.820530][ T3032] ? __lock_acquire+0x436/0x2890 [ 1003.820557][ T3032] ? __lock_acquire+0x436/0x2890 [ 1003.820581][ T3032] ? lock_acquire+0x179/0x330 [ 1003.820609][ T3032] ? lock_acquire+0x179/0x330 [ 1003.820650][ T3032] ? arch_stack_walk+0xa6/0x100 [ 1003.820686][ T3032] ? stack_trace_save+0x8e/0xc0 [ 1003.820707][ T3032] ? __pfx_stack_trace_save+0x10/0x10 [ 1003.820728][ T3032] ? stack_depot_save_flags+0x29/0x9b0 [ 1003.820757][ T3032] ? __lock_acquire+0x436/0x2890 [ 1003.820782][ T3032] ? kasan_save_stack+0x42/0x60 [ 1003.820848][ T3032] ? proc_coredump_connector+0x2d1/0x4f0 [ 1003.820874][ T3032] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1003.820904][ T3032] ? rcu_is_watching+0x12/0xc0 [ 1003.820926][ T3032] get_signal+0x22e1/0x26d0 [ 1003.820964][ T3032] ? __pfx_get_signal+0x10/0x10 [ 1003.820999][ T3032] arch_do_signal_or_restart+0x8f/0x7e0 [ 1003.821027][ T3032] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1003.821060][ T3032] ? __bad_area_nosemaphore+0x350/0x690 [ 1003.821092][ T3032] irqentry_exit+0x38a/0x8c0 [ 1003.821119][ T3032] asm_exc_page_fault+0x26/0x30 [ 1003.821137][ T3032] RIP: 0033:0x7f1571c4f6b7 [ 1003.821154][ T3032] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1003.821172][ T3032] RSP: 002b:00007f1572be21a0 EFLAGS: 00010206 [ 1003.821188][ T3032] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1571d8f7c9 [ 1003.821199][ T3032] RDX: 00007f1572be21c0 RSI: 00007f1572be22f0 RDI: 000000000000000b [ 1003.821210][ T3032] RBP: 00007f1571e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1003.821222][ T3032] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1003.821232][ T3032] R13: 00007f1571fe6128 R14: 00007f1571fe6090 R15: 00007ffedc1833c8 [ 1003.821260][ T3032] [ 1003.821356][ T3032] memory: usage 307200kB, limit 307200kB, failcnt 60042 [ 1003.856626][ T6023] usb 14-1: new high-speed USB device number 22 using dummy_hcd [ 1003.861309][ T3032] memory+swap: usage 414892kB, limit 9007199254740988kB, failcnt 0 [ 1003.885738][ T6023] usb 14-1: device descriptor read/8, error -71 [ 1003.887348][ T3032] kmem: usage 15044kB, limit 9007199254740988kB, failcnt 0 [ 1003.999320][ T6023] usb usb14-port1: unable to enumerate USB device [ 1004.000187][ T3032] Memory cgroup stats for /syz4: [ 1004.030762][ T3032] cache 274063360 [ 1004.034013][ T3032] rss 266240 [ 1004.035442][ T3032] rss_huge 0 [ 1004.036856][ T3032] shmem 274063360 [ 1004.038529][ T3032] mapped_file 0 [ 1004.039985][ T3032] dirty 0 [ 1004.041228][ T3032] writeback 0 [ 1004.042423][ T3032] workingset_refault_anon 53 [ 1004.044318][ T3032] workingset_refault_file 23481 [ 1004.046407][ T3032] swap 95576064 [ 1004.048057][ T3032] swapcached 12288 [ 1004.049609][ T3032] pgpgin 344183 [ 1004.051094][ T3032] pgpgout 278230 [ 1004.052688][ T3032] pgfault 204043 [ 1004.054247][ T3032] pgmajfault 1053 [ 1004.055851][ T3032] inactive_anon 139771904 [ 1004.058090][ T3032] active_anon 134557696 [ 1004.059607][ T3032] inactive_file 0 [ 1004.061125][ T3032] active_file 0 [ 1004.062609][ T3032] unevictable 0 [ 1004.064089][ T3032] hierarchical_memory_limit 314572800 [ 1004.066464][ T3032] hierarchical_memsw_limit 9223372036854771712 [ 1004.068998][ T3032] total_cache 274063360 [ 1004.070610][ T3032] total_rss 266240 [ 1004.072251][ T3032] total_rss_huge 0 [ 1004.073874][ T3032] total_shmem 274063360 [ 1004.075866][ T3032] total_mapped_file 0 [ 1004.077718][ T3032] total_dirty 0 [ 1004.079268][ T3032] total_writeback 0 [ 1004.081272][ T3032] total_workingset_refault_anon 53 [ 1004.083434][ T3032] total_workingset_refault_file 23481 [ 1004.085806][ T3032] total_swap 95576064 [ 1004.087521][ T3032] total_swapcached 12288 [ 1004.089364][ T3032] total_pgpgin 344183 [ 1004.091094][ T3032] total_pgpgout 278230 [ 1004.092922][ T3032] total_pgfault 204043 [ 1004.094745][ T3032] total_pgmajfault 1053 [ 1004.096590][ T3032] total_inactive_anon 139771904 [ 1004.098669][ T3032] total_active_anon 134557696 [ 1004.100687][ T3032] total_inactive_file 0 [ 1004.102497][ T3032] total_active_file 0 [ 1004.104319][ T3032] total_unevictable 0 [ 1004.106008][ T3032] anon_cost 0 [ 1004.107427][ T3032] file_cost 0 [ 1004.108905][ T3032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9332,pid=3023,uid=0 [ 1004.115287][ T3032] Memory cgroup out of memory: Killed process 3023 (syz.4.9332) total-vm:98324kB, anon-rss:968kB, file-rss:27024kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1005.025507][T21919] team0 (unregistering): Port device team_slave_1 removed [ 1005.080354][T21919] team0 (unregistering): Port device C removed [ 1005.106187][ T3199] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9384'. [ 1005.154931][ T3200] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9384'. [ 1005.490676][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1005.494109][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1005.506735][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1005.510032][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1005.517934][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1005.521031][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1005.526758][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1005.526811][ T3205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1005.800442][ T5942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1005.806252][ T5942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1005.809955][ T5942] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1005.813759][ T5942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1005.817021][ T5942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1006.055616][ T3216] geneve0 speed is unknown, defaulting to 1000 [ 1006.209328][ T3216] chnl_net:caif_netlink_parms(): no params data found [ 1006.254347][ T3231] overlayfs: failed to clone upperpath [ 1006.297119][ T3216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.299578][ T3216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.301988][ T3216] bridge_slave_0: entered allmulticast mode [ 1006.305756][ T3216] bridge_slave_0: entered promiscuous mode [ 1006.311248][ T3216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.315122][ T3216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.318432][ T3216] bridge_slave_1: entered allmulticast mode [ 1006.322487][ T3216] bridge_slave_1: entered promiscuous mode [ 1006.350397][ T3216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.357614][ T3216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.385881][ T3216] team0: Port device team_slave_0 added [ 1006.391273][ T3216] team0: Port device team_slave_1 added [ 1006.415188][ T3216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.418236][ T3216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.429919][ T3216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.436470][ T3216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.439544][ T3216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.450835][ T3216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.478959][ T3216] hsr_slave_0: entered promiscuous mode [ 1006.481602][ T3216] hsr_slave_1: entered promiscuous mode [ 1006.484609][ T3216] debugfs: 'hsr0' already exists in 'hsr' [ 1006.487261][ T3216] Cannot create hsr debugfs directory [ 1006.994852][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 1006.994868][ T40] audit: type=1400 audit(979.720:42021): avc: denied { create } for pid=3216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1006.996371][ T3216] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1006.997728][ T40] audit: type=1400 audit(979.720:42022): avc: denied { write } for pid=3216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1007.017617][ T40] audit: type=1400 audit(979.720:42023): avc: denied { read } for pid=3216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1007.020415][ T3216] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1007.033148][ T3216] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1007.039653][ T3216] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1007.040863][ T3239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3239 comm=syz.1.9393 [ 1007.098424][ T40] audit: type=1400 audit(979.825:42024): avc: denied { create } for pid=3246 comm="syz.1.9394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1007.107768][ T40] audit: type=1400 audit(979.825:42025): avc: denied { write } for pid=3246 comm="syz.1.9394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1007.131423][ T3216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.146956][ T3216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.156517][T32754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.159279][T32754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.174465][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.176864][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.181279][ T40] audit: type=1400 audit(979.919:42026): avc: denied { create } for pid=3251 comm="syz.1.9395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1007.240100][ T40] audit: type=1400 audit(979.972:42027): avc: denied { create } for pid=3254 comm="syz.1.9396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1007.253093][ T40] audit: type=1400 audit(979.982:42028): avc: denied { sys_module } for pid=3216 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1007.333163][ T3216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.341765][ T40] audit: type=1400 audit(980.077:42029): avc: denied { mounton } for pid=3261 comm="syz.1.9398" path="/362/bus" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1007.342731][ T3262] overlayfs: failed to clone upperpath [ 1007.389454][ T40] audit: type=1400 audit(980.129:42030): avc: denied { unmount } for pid=32732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1007.476797][ T3275] netlink: 'syz.1.9401': attribute type 1 has an invalid length. [ 1007.500395][ T3279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1007.551249][ T3216] veth0_vlan: entered promiscuous mode [ 1007.559383][ T3216] veth1_vlan: entered promiscuous mode [ 1007.599096][ T3216] veth0_macvtap: entered promiscuous mode [ 1007.606776][ T3216] veth1_macvtap: entered promiscuous mode [ 1007.627005][ T3216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.637747][ T3216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.644233][T21919] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.650996][T21919] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.655776][T21919] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.669416][T21919] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.745454][ T3290] netlink: zone id is out of range [ 1007.747905][T21956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.750658][T21956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.770570][T21951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.774869][T21951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.812094][T30386] Bluetooth: hci5: command tx timeout [ 1008.438747][ T3330] Failed to get privilege flags for destination (handle=0x2:0x2) [ 1008.747377][ T3341] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (45449099936 ns) > initial count (5257758976 ns). Using initial count to start timer. [ 1009.244392][ T3345] overlayfs: failed to clone upperpath [ 1009.262460][ T3345] overlayfs: failed to clone upperpath [ 1009.269526][ T3354] netlink: 'syz.9.9425': attribute type 1 has an invalid length. [ 1009.272272][ T3354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1009.315528][ T3361] geneve2: entered promiscuous mode [ 1009.319532][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.325712][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.331600][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.337320][ T3361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3361 comm=syz.1.9426 [ 1009.348709][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.402429][ T3358] SELinux: ebitmap: truncated map [ 1009.407584][ T3358] SELinux: failed to load policy [ 1009.633240][ T3383] overlay: Bad value for 'workdir' [ 1009.707741][ T3389] netlink: 'syz.5.9436': attribute type 29 has an invalid length. [ 1009.711722][ T3389] netlink: 'syz.5.9436': attribute type 29 has an invalid length. [ 1009.750449][ T3394] netlink: 'syz.9.9438': attribute type 1 has an invalid length. [ 1009.755910][ T3394] netlink: 'syz.9.9438': attribute type 2 has an invalid length. [ 1009.792132][T30386] Bluetooth: hci5: command tx timeout [ 1009.947167][ T3414] netlink: 'syz.4.9443': attribute type 12 has an invalid length. [ 1010.052880][ T3422] cgroup2: Unknown parameter 'euid' [ 1010.061752][ T3425] __nla_validate_parse: 62 callbacks suppressed [ 1010.061771][ T3425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9447'. [ 1010.101997][ T3429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9448'. [ 1010.107956][ T3425] macvlan2: entered promiscuous mode [ 1010.110247][ T3425] macvlan2: entered allmulticast mode [ 1010.113733][ T3425] bond4: entered promiscuous mode [ 1010.117103][ T3425] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1010.153843][ T3425] bond4: left promiscuous mode [ 1010.300438][ T3436] netlink: 'syz.5.9450': attribute type 1 has an invalid length. [ 1010.311270][ T3440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9451'. [ 1010.366995][ T3443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9451'. [ 1010.424268][ T3448] pim6reg9: entered allmulticast mode [ 1010.472254][ T3452] kAFS: unparsable volume name [ 1010.570143][ T3461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9458'. [ 1010.842189][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.845440][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.847956][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.854813][ T3474] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1010.866710][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.870029][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.873031][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.875616][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.880197][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.882754][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.885293][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.888055][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.964058][ T3476] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 1010.968931][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.972706][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.975984][ T3474] lo speed is unknown, defaulting to 1000 [ 1010.979215][ T3474] lo speed is unknown, defaulting to 1000 [ 1011.288704][ T3494] SQUASHFS error: Failed to read block 0x0: -5 [ 1011.291918][ T3494] unable to read squashfs_super_block [ 1011.296009][ T6004] usb 14-1: new high-speed USB device number 23 using dummy_hcd [ 1011.311336][ T3494] netlink: 'syz.5.9471': attribute type 1 has an invalid length. [ 1011.387160][ T3507] netlink: 'syz.1.9474': attribute type 1 has an invalid length. [ 1011.405793][ T3507] bond3: entered promiscuous mode [ 1011.408064][ T3507] bond3: entered allmulticast mode [ 1011.410572][ T3507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1011.416539][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9474'. [ 1011.426451][ T3507] erspan1: entered allmulticast mode [ 1011.432196][ T3507] bond3: (slave erspan1): making interface the new active one [ 1011.435522][ T3507] erspan1: entered promiscuous mode [ 1011.438378][ T6004] usb 14-1: Using ep0 maxpacket: 8 [ 1011.441170][ T3507] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 1011.445465][ T6004] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1011.449194][ T6004] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.454534][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9474'. [ 1011.461556][ T6004] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1011.464484][ T6004] pvrusb2: ********** [ 1011.465825][ T6004] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1011.470312][ T6004] pvrusb2: Important functionality might not be entirely working. [ 1011.473008][ T6004] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1011.477268][ T6004] pvrusb2: ********** [ 1011.595174][ T3507] bond3 (unregistering): (slave erspan1): Releasing active interface [ 1011.598268][ T3507] erspan1: left promiscuous mode [ 1011.632364][ T3507] bond3 (unregistering): Released all slaves [ 1011.652394][ T2493] pvrusb2: Invalid write control endpoint [ 1011.683334][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.690006][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.691476][ T2493] pvrusb2: Invalid write control endpoint [ 1011.699415][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1011.701173][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.713743][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1011.714813][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.716894][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1011.727073][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.728106][ T2493] pvrusb2: Device being rendered inoperable [ 1011.736427][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.737533][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1011.742667][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1011.748818][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.754951][ T2493] pvrusb2: Attached sub-driver cx25840 [ 1011.755444][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.757779][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1011.765116][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1011.770157][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.772073][T30386] Bluetooth: hci5: command tx timeout [ 1011.776560][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.777003][ T40] kauditd_printk_skb: 180 callbacks suppressed [ 1011.777015][ T40] audit: type=1400 audit(984.738:42211): avc: denied { firmware_load } for pid=3515 comm="syz.1.9476" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1011.801279][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.808773][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.815652][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.824778][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.829559][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.835600][ T40] audit: type=1400 audit(984.790:42212): avc: denied { ioctl } for pid=3525 comm="syz.1.9477" path="socket:[181196]" dev="sockfs" ino=181196 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1011.839234][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.846144][ T3490] pvrusb2: Killing an I2C read to 9 that has wlen too large (desired=121 limit=60) [ 1011.853217][ T40] audit: type=1400 audit(984.801:42213): avc: denied { append } for pid=3488 comm="syz.9.9468" name="i2c-2" dev="devtmpfs" ino=4124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1011.863488][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.865930][T25355] usb 14-1: USB disconnect, device number 23 [ 1011.869476][ T40] audit: type=1400 audit(984.832:42214): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53058 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1011.870105][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.882056][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.897157][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.901418][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.911393][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.930548][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.939152][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.944936][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.948327][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.951836][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.957566][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.960980][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.965529][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.969160][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.972303][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1011.991667][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.004973][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.008142][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.020422][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.027446][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.030831][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.041081][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.044533][ T3512] cgroup: fork rejected by pids controller in /syz5 [ 1012.045391][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.058874][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.064594][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.078148][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.086994][ T40] audit: type=1400 audit(985.063:42215): avc: denied { egress } for pid=1368 comm="ipvs-m:146:0" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1012.087124][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.104845][ T40] audit: type=1400 audit(985.063:42216): avc: denied { sendto } for pid=1368 comm="ipvs-m:146:0" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1012.106054][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.131772][ T40] audit: type=1400 audit(985.105:42217): avc: denied { create } for pid=3591 comm="syz.1.9479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1012.132760][ T3598] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9479'. [ 1012.155173][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.163474][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.163623][ T40] audit: type=1400 audit(985.105:42218): avc: denied { connect } for pid=3591 comm="syz.1.9479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1012.180398][ T3511] overlayfs: maximum fs stacking depth exceeded [ 1012.219423][ T40] audit: type=1400 audit(985.200:42219): avc: denied { unmount } for pid=3216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1012.231062][ T40] audit: type=1400 audit(985.210:42220): avc: denied { unmount } for pid=3216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1012.285179][ T3677] overlayfs: failed to clone upperpath [ 1012.290049][ T3675] syzkaller0: entered promiscuous mode [ 1012.292513][ T3675] syzkaller0: entered allmulticast mode [ 1012.449448][ T3685] ALSA: seq fatal error: cannot create timer (-22) [ 1012.576905][ T3695] bpf: Bad value for 'gid' [ 1012.777389][ T3707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9494'. [ 1012.893289][ T3185] mkiss: ax0: crc mode is auto. [ 1012.907114][ T3714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9496'. [ 1012.990610][ T3711] geneve0 speed is unknown, defaulting to 1000 [ 1012.995587][ T3711] lo speed is unknown, defaulting to 1000 [ 1013.337877][ T3738] xt_l2tp: invalid flags combination: 8 [ 1013.551223][ T3754] pim6reg: entered allmulticast mode [ 1013.578297][ T3757] delete_channel: no stack [ 1013.753258][T30386] Bluetooth: hci5: command tx timeout [ 1013.834510][ T3777] syzkaller0: entered promiscuous mode [ 1013.836508][ T3777] syzkaller0: entered allmulticast mode [ 1014.252204][ T3797] autofs: Bad value for 'fd' [ 1014.412723][ T3806] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4238726434 (542556983552 ns) > initial count (358389898240 ns). Using initial count to start timer. [ 1014.540336][ T3811] program syz.5.9529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1014.577102][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.581453][ T3813] batadv_slave_0: entered promiscuous mode [ 1014.585506][ T3813] batadv_slave_0: entered allmulticast mode [ 1014.603272][ T3813] Cannot find add_set index 65532 as target [ 1014.837069][ T3827] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1014.841802][ T3827] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1014.909393][ T3833] __nla_validate_parse: 3 callbacks suppressed [ 1014.909407][ T3833] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9539'. [ 1015.141981][ T3850] Bluetooth: MGMT ver 1.23 [ 1015.144271][ T3850] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 1015.362454][ T3868] SELinux: policydb version -1117077352 does not match my version range 15-35 [ 1015.366275][ T3868] SELinux: failed to load policy [ 1015.404981][ T3870] xt_hashlimit: size too large, truncated to 1048576 [ 1015.429078][ T3875] xt_TCPMSS: Only works on TCP SYN packets [ 1016.211104][ T3915] devpts: Bad value for 'max' [ 1016.442544][ T3931] fuse: Unknown parameter 'Fd' [ 1016.553375][ T40] kauditd_printk_skb: 311 callbacks suppressed [ 1016.553453][ T40] audit: type=1400 audit(989.745:42532): avc: denied { mount } for pid=3937 comm="syz.1.9570" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1016.589277][ T40] audit: type=1400 audit(989.766:42533): avc: denied { remount } for pid=3937 comm="syz.1.9570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1016.657980][ T3941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9571'. [ 1016.720507][ T3943] NILFS (nbd5): device size too small [ 1016.727121][ T40] audit: type=1400 audit(989.934:42534): avc: denied { create } for pid=3942 comm="syz.5.9572" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1016.777343][ T40] audit: type=1400 audit(989.987:42535): avc: denied { watch } for pid=3944 comm="syz.5.9573" path="/52/control" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1016.787515][ T40] audit: type=1400 audit(989.997:42536): avc: denied { mount } for pid=3944 comm="syz.5.9573" name="/" dev="9p" ino=72095515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1016.792204][ T3945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1016.799434][ T40] audit: type=1400 audit(989.997:42537): avc: denied { unlink } for pid=3944 comm="syz.5.9573" name="#cf" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1016.813466][ T40] audit: type=1400 audit(989.997:42538): avc: denied { getattr } for pid=3944 comm="syz.5.9573" name="/" dev="9p" ino=72095515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1016.823492][ T40] audit: type=1400 audit(990.018:42539): avc: denied { mount } for pid=3944 comm="syz.5.9573" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1016.833435][ T40] audit: type=1400 audit(990.029:42540): avc: denied { read } for pid=3944 comm="syz.5.9573" name="file0" dev="9p" ino=72095517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1016.843053][ T40] audit: type=1400 audit(990.029:42541): avc: denied { append } for pid=3944 comm="syz.5.9573" name="file0" dev="overlay" ino=72095517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1016.859451][ T3947] Process accounting resumed [ 1016.899346][ T3949] veth1_to_bond: entered allmulticast mode [ 1016.934873][ T3948] veth1_to_bond: left allmulticast mode [ 1016.951834][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805555d800: rx timeout, send abort [ 1017.010263][ T3958] netlink: 'syz.5.9576': attribute type 1 has an invalid length. [ 1017.016660][ T3958] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1017.059664][ T3964] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1017.260161][ T3973] geneve0 speed is unknown, defaulting to 1000 [ 1017.262907][ T3973] lo speed is unknown, defaulting to 1000 [ 1017.335553][ T3985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9583'. [ 1017.431320][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805555d800: abort rx timeout. Force session deactivation [ 1017.447111][ T3990] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1017.482393][ T3997] netlink: 'syz.5.9587': attribute type 322 has an invalid length. [ 1017.644116][ T4011] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9592'. [ 1017.672463][ T4016] nvme_fabrics: unknown parameter or missing value 'ELF9û' in ctrl creation request [ 1017.830983][ T4012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9591'. [ 1017.905270][ T4039] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9601'. [ 1018.061964][ T4048] dlm: non-version read from control device 254 [ 1018.373407][ T1337] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 1018.525982][ T1337] usb 14-1: Using ep0 maxpacket: 8 [ 1018.533899][ T1337] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1018.554845][ T1337] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1018.561143][ T1337] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1018.573106][ T1337] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 1018.578255][ T1337] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1018.606206][ T1337] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1018.620889][ T1337] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1018.624959][ T1337] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.849784][ T1337] usb 14-1: usb_control_msg returned -32 [ 1018.851994][ T1337] usbtmc 14-1:16.0: can't read capabilities [ 1019.101812][ T4098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9614'. [ 1019.117961][ T4098] bridge0: entered promiscuous mode [ 1019.120507][ T4098] macsec1: entered allmulticast mode [ 1019.123110][ T4098] bridge0: entered allmulticast mode [ 1019.129598][ T4098] bridge0: port 3(macsec1) entered blocking state [ 1019.132713][ T4098] bridge0: port 3(macsec1) entered disabled state [ 1019.141572][ T4098] bridge0: left allmulticast mode [ 1019.144057][ T4098] bridge0: left promiscuous mode [ 1019.345711][ T4111] nilfs2: Unknown parameter 'acl' [ 1019.366772][ T4116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1019.616555][ T4138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9628'. [ 1019.896102][ T4146] geneve0 speed is unknown, defaulting to 1000 [ 1019.899005][ T4146] lo speed is unknown, defaulting to 1000 [ 1019.936599][ T4157] /dev/nullb0: Can't lookup blockdev [ 1019.964547][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9635'. [ 1020.468554][ T4179] sd 0:0:0:0: PR command failed: 1026 [ 1020.471059][ T4179] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 1020.474114][ T4179] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 1020.483685][ T4179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.546770][ T4188] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9644'. [ 1020.942921][ T4207] overlayfs: failed to clone upperpath [ 1021.008855][ T6004] usb 14-1: USB disconnect, device number 24 [ 1021.315701][ T4224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9659'. [ 1021.319109][ T4224] openvswitch: netlink: Flow key attr not present in new flow. [ 1021.335105][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 1021.335118][ T40] audit: type=1400 audit(994.763:42833): avc: denied { read } for pid=4220 comm="syz.5.9658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1021.343687][ T40] audit: type=1400 audit(994.763:42834): avc: denied { read } for pid=4220 comm="syz.5.9658" dev="nsfs" ino=4026533791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1021.350736][ T6004] usb 14-1: new high-speed USB device number 25 using dummy_hcd [ 1021.352579][ T40] audit: type=1400 audit(994.774:42835): avc: denied { open } for pid=4220 comm="syz.5.9658" path="net:[4026533791]" dev="nsfs" ino=4026533791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1021.362303][ T40] audit: type=1400 audit(994.774:42836): avc: denied { setattr } for pid=4220 comm="syz.5.9658" name="L2TP/IPv6" dev="sockfs" ino=185048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1021.373636][T30386] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1021.405553][ T40] audit: type=1400 audit(994.847:42837): avc: denied { ioctl } for pid=4227 comm="syz.1.9660" path="socket:[183863]" dev="sockfs" ino=183863 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1021.418444][ T40] audit: type=1400 audit(994.858:42838): avc: denied { create } for pid=4229 comm="syz.5.9662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1021.428240][ T4231] binder: 4229:4231 unknown command 0 [ 1021.430141][ T4231] binder: 4229:4231 ioctl c0306201 200000000080 returned -22 [ 1021.433466][ T40] audit: type=1400 audit(994.868:42839): avc: denied { read } for pid=4229 comm="syz.5.9662" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1021.440698][ T40] audit: type=1400 audit(994.868:42840): avc: denied { open } for pid=4229 comm="syz.5.9662" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1021.448458][ T40] audit: type=1400 audit(994.868:42841): avc: denied { ioctl } for pid=4229 comm="syz.5.9662" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1021.456445][ T40] audit: type=1400 audit(994.879:42842): avc: denied { ioctl } for pid=4229 comm="syz.5.9662" path="socket:[183866]" dev="sockfs" ino=183866 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1021.488761][ T4237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9662'. [ 1021.492845][ T4231] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9662'. [ 1021.499077][ T6004] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.509513][ T6004] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.512140][ T4228] geneve0 speed is unknown, defaulting to 1000 [ 1021.513800][ T6004] usb 14-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1021.517057][ T4228] lo speed is unknown, defaulting to 1000 [ 1021.527630][ T6004] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.533316][ T6004] usb 14-1: config 0 descriptor?? [ 1021.595936][ T4249] xt_TCPMSS: Only works on TCP SYN packets [ 1021.642792][ T4247] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1021.646893][ T4247] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1021.656029][ T4247] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1021.791962][ T4263] ------------[ cut here ]------------ [ 1021.794571][ T4263] WARNING: net/core/skbuff.c:7243 at skb_attempt_defer_free+0x641/0x710, CPU#3: syz.1.9670/4263 [ 1021.799009][ T4263] Modules linked in: [ 1021.801100][ T4263] CPU: 3 UID: 0 PID: 4263 Comm: syz.1.9670 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.805792][ T4263] Tainted: [L]=SOFTLOCKUP [ 1021.807734][ T4263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1021.812405][ T4263] RIP: 0010:skb_attempt_defer_free+0x641/0x710 [ 1021.815376][ T4263] Code: 66 e6 f8 e9 5d ff ff ff e8 fc 8b 7c f8 90 0f 0b 90 e9 f0 fc ff ff e8 ee 8b 7c f8 90 0f 0b 90 e9 74 fc ff ff e8 e0 8b 7c f8 90 <0f> 0b 90 e9 95 fc ff ff e8 d2 8b 7c f8 90 0f 0b 90 48 b8 00 00 00 [ 1021.823693][ T4263] RSP: 0018:ffffc90004b6f5a8 EFLAGS: 00010287 [ 1021.826450][ T4263] RAX: 00000000000014c6 RBX: ffff88805b9c2280 RCX: ffffc9002960d000 [ 1021.830009][ T4263] RDX: 0000000000080000 RSI: ffffffff89425a90 RDI: ffff88805b9c22e0 [ 1021.833445][ T4263] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000001 [ 1021.836828][ T4263] R10: 0000000000000000 R11: ffff888028782ff0 R12: 0000000000000000 [ 1021.840274][ T4263] R13: 1ffff9200096deb9 R14: 0000000000000000 R15: ffff88805b9c22d8 [ 1021.843579][ T4263] FS: 00007f61d57ab6c0(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 1021.847417][ T4263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1021.850277][ T4263] CR2: 00007f61d57aaf98 CR3: 0000000048c25000 CR4: 0000000000352ef0 [ 1021.853670][ T4263] DR0: 0000000000000000 DR1: 5b809bae5686eb93 DR2: 0000000000000000 [ 1021.857192][ T4263] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1021.861030][ T4263] Call Trace: [ 1021.862492][ T4263] [ 1021.863818][ T4263] ? __pfx__copy_to_iter+0x10/0x10 [ 1021.865998][ T4263] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 1021.868529][ T4263] ? __lock_acquire+0x436/0x2890 [ 1021.870718][ T4263] skb_consume_udp+0x19f/0x250 [ 1021.872831][ T4263] udp_recvmsg+0x6c7/0x1350 [ 1021.874841][ T4263] ? __pfx_udp_recvmsg+0x10/0x10 [ 1021.877026][ T4263] ? find_held_lock+0x2b/0x80 [ 1021.879186][ T4263] sk_udp_recvmsg+0x9b/0x120 [ 1021.881213][ T4263] udp_bpf_recvmsg+0x5c0/0xe40 [ 1021.883276][ T4263] ? trace_mm_page_alloc+0x11b/0x180 [ 1021.885572][ T4263] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 1021.887976][ T4263] ? sock_has_perm+0x258/0x2f0 [ 1021.890074][ T4263] ? __pfx_sock_has_perm+0x10/0x10 [ 1021.892443][ T4263] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 1021.894754][ T4263] inet_recvmsg+0x625/0x6a0 [ 1021.896719][ T4263] ? __pfx_inet_recvmsg+0x10/0x10 [ 1021.898895][ T4263] sock_recvmsg+0x1b2/0x250 [ 1021.900884][ T4263] ____sys_recvmsg+0x218/0x6b0 [ 1021.902971][ T4263] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1021.905265][ T4263] ? __lock_acquire+0x436/0x2890 [ 1021.907675][ T4263] ___sys_recvmsg+0x114/0x1a0 [ 1021.909874][ T4263] ? __pfx____sys_recvmsg+0x10/0x10 [ 1021.912201][ T4263] ? find_held_lock+0x2b/0x80 [ 1021.914183][ T4263] do_recvmmsg+0x2fe/0x750 [ 1021.916236][ T4263] ? __pfx_do_recvmmsg+0x10/0x10 [ 1021.918474][ T4263] ? find_held_lock+0x2b/0x80 [ 1021.920904][ T4263] __x64_sys_recvmmsg+0x22a/0x280 [ 1021.923045][ T4263] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1021.925452][ T4263] do_syscall_64+0xcd/0xf80 [ 1021.927620][ T4263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.930416][ T4263] RIP: 0033:0x7f61d498f7c9 [ 1021.932541][ T4263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.940707][ T4263] RSP: 002b:00007f61d57ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1021.944270][ T4263] RAX: ffffffffffffffda RBX: 00007f61d4be6090 RCX: 00007f61d498f7c9 [ 1021.947771][ T4263] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000003 [ 1021.951139][ T4263] RBP: 00007f61d4a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1021.954707][ T4263] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1021.958096][ T4263] R13: 00007f61d4be6128 R14: 00007f61d4be6090 R15: 00007ffe0a5e13b8 [ 1021.961461][ T4263] [ 1021.962809][ T4263] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1021.965885][ T4263] CPU: 3 UID: 0 PID: 4263 Comm: syz.1.9670 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.970391][ T4263] Tainted: [L]=SOFTLOCKUP [ 1021.972298][ T4263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1021.976866][ T4263] Call Trace: [ 1021.978372][ T4263] [ 1021.979743][ T4263] dump_stack_lvl+0x3d/0x1f0 [ 1021.981788][ T4263] vpanic+0x640/0x6f0 [ 1021.983547][ T4263] ? skb_attempt_defer_free+0x641/0x710 [ 1021.985972][ T4263] panic+0xca/0xd0 [ 1021.987730][ T4263] ? __pfx_panic+0x10/0x10 [ 1021.989654][ T4263] check_panic_on_warn+0xab/0xb0 [ 1021.991745][ T4263] __warn+0x108/0x3c0 [ 1021.993453][ T4263] __report_bug+0x2a0/0x520 [ 1021.995502][ T4263] ? skb_attempt_defer_free+0x641/0x710 [ 1021.997876][ T4263] ? __pfx___report_bug+0x10/0x10 [ 1022.000022][ T4263] ? __lock_acquire+0x436/0x2890 [ 1022.002110][ T4263] ? skb_attempt_defer_free+0x641/0x710 [ 1022.004397][ T4263] report_bug+0xb2/0x220 [ 1022.006230][ T4263] ? skb_attempt_defer_free+0x641/0x710 [ 1022.008535][ T4263] handle_bug+0x127/0x260 [ 1022.010372][ T4263] exc_invalid_op+0x17/0x50 [ 1022.012237][ T4263] asm_exc_invalid_op+0x1a/0x20 [ 1022.014119][ T4263] RIP: 0010:skb_attempt_defer_free+0x641/0x710 [ 1022.016757][ T4263] Code: 66 e6 f8 e9 5d ff ff ff e8 fc 8b 7c f8 90 0f 0b 90 e9 f0 fc ff ff e8 ee 8b 7c f8 90 0f 0b 90 e9 74 fc ff ff e8 e0 8b 7c f8 90 <0f> 0b 90 e9 95 fc ff ff e8 d2 8b 7c f8 90 0f 0b 90 48 b8 00 00 00 [ 1022.024650][ T4263] RSP: 0018:ffffc90004b6f5a8 EFLAGS: 00010287 [ 1022.027248][ T4263] RAX: 00000000000014c6 RBX: ffff88805b9c2280 RCX: ffffc9002960d000 [ 1022.030578][ T4263] RDX: 0000000000080000 RSI: ffffffff89425a90 RDI: ffff88805b9c22e0 [ 1022.033930][ T4263] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000001 [ 1022.037316][ T4263] R10: 0000000000000000 R11: ffff888028782ff0 R12: 0000000000000000 [ 1022.040630][ T4263] R13: 1ffff9200096deb9 R14: 0000000000000000 R15: ffff88805b9c22d8 [ 1022.043950][ T4263] ? skb_attempt_defer_free+0x640/0x710 [ 1022.046347][ T4263] ? skb_attempt_defer_free+0x640/0x710 [ 1022.048771][ T4263] ? __pfx__copy_to_iter+0x10/0x10 [ 1022.051072][ T4263] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 1022.053621][ T4263] ? __lock_acquire+0x436/0x2890 [ 1022.055721][ T4263] skb_consume_udp+0x19f/0x250 [ 1022.057817][ T4263] udp_recvmsg+0x6c7/0x1350 [ 1022.059758][ T4263] ? __pfx_udp_recvmsg+0x10/0x10 [ 1022.061902][ T4263] ? find_held_lock+0x2b/0x80 [ 1022.063940][ T4263] sk_udp_recvmsg+0x9b/0x120 [ 1022.065916][ T4263] udp_bpf_recvmsg+0x5c0/0xe40 [ 1022.068044][ T4263] ? trace_mm_page_alloc+0x11b/0x180 [ 1022.070279][ T4263] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 1022.072551][ T4263] ? sock_has_perm+0x258/0x2f0 [ 1022.074606][ T4263] ? __pfx_sock_has_perm+0x10/0x10 [ 1022.076796][ T4263] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 1022.079268][ T4263] inet_recvmsg+0x625/0x6a0 [ 1022.081249][ T4263] ? __pfx_inet_recvmsg+0x10/0x10 [ 1022.083421][ T4263] sock_recvmsg+0x1b2/0x250 [ 1022.085400][ T4263] ____sys_recvmsg+0x218/0x6b0 [ 1022.087465][ T4263] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1022.089775][ T4263] ? __lock_acquire+0x436/0x2890 [ 1022.091926][ T4263] ___sys_recvmsg+0x114/0x1a0 [ 1022.093981][ T4263] ? __pfx____sys_recvmsg+0x10/0x10 [ 1022.096228][ T4263] ? find_held_lock+0x2b/0x80 [ 1022.098326][ T4263] do_recvmmsg+0x2fe/0x750 [ 1022.100276][ T4263] ? __pfx_do_recvmmsg+0x10/0x10 [ 1022.102576][ T4263] ? find_held_lock+0x2b/0x80 [ 1022.104650][ T4263] __x64_sys_recvmmsg+0x22a/0x280 [ 1022.106840][ T4263] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1022.109372][ T4263] do_syscall_64+0xcd/0xf80 [ 1022.111351][ T4263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.113941][ T4263] RIP: 0033:0x7f61d498f7c9 [ 1022.115834][ T4263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.124291][ T4263] RSP: 002b:00007f61d57ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1022.127768][ T4263] RAX: ffffffffffffffda RBX: 00007f61d4be6090 RCX: 00007f61d498f7c9 [ 1022.131097][ T4263] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000003 [ 1022.134547][ T4263] RBP: 00007f61d4a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1022.138053][ T4263] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1022.141460][ T4263] R13: 00007f61d4be6128 R14: 00007f61d4be6090 R15: 00007ffe0a5e13b8 [ 1022.144942][ T4263] [ 1022.147083][ T4263] Kernel Offset: disabled [ 1022.148938][ T4263] Rebooting in 86400 seconds..