last executing test programs: 6m43.171469148s ago: executing program 32 (id=492): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0xfffe, 0x8, 0x20c, 0x0, 0x0, 0x0, 0xfffffffe}}], 0x30}], 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x2400c080) io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r4 = socket(0x10, 0x3, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r4], 0x40}}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@private0, 0x0, 0xbf, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1791}, {0x3, 0x0, 0x101, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) 6m18.254636148s ago: executing program 33 (id=943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000e00010000000900030073797a320000000014000480080002400000000008000140000000000800010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c00000014000000110001"], 0xe0}}, 0x0) 5m50.325961057s ago: executing program 34 (id=1258): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x41, &(0x7f0000000480)={0x11, 0x16, r1, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0xb0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38) 5m5.374494289s ago: executing program 35 (id=1961): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x2, 0x0, 0x200000}, 0x0, [0x9, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x661, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x703a, 0x6, 0xae4f, 0x8000000, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0xd5e4, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffb, 0x4, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x6, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5, 0x8, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x7fffffff]}) 4m59.066965804s ago: executing program 36 (id=2021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 4m34.816114502s ago: executing program 37 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}]}], {0x68, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) 2m39.537599071s ago: executing program 38 (id=3977): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) 2m37.396518114s ago: executing program 39 (id=4001): openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x181800, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@dellinkprop={0x2c, 0x6d, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x2000}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000580)="fb6c", 0xc3ff, 0x4008804, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') (async) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) (async) syz_fuse_handle_req(r7, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r9, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x26, 0x9, 0x70bd26, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4008050) (async) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) write$FUSE_STATFS(r7, &(0x7f0000000180)={0x60, 0x0, r8, {{0x8, 0x2, 0x3, 0x7, 0x3, 0xfffffd0c, 0x3, 0x6}}}, 0x60) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x90, 0x30, 0x9, 0x70bd2b, 0x0, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x4}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 2m32.885769912s ago: executing program 40 (id=4189): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56061, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xa}, {0x1c, 0xfff2}}}, 0x24}}, 0x4b880) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) (async) fcntl$setstatus(r0, 0x4, 0x0) (async, rerun: 64) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 64) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x4, "07000f00007eaba9a208000000706de400000000000000000000008000", 0xffffffffffffffff}) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000040)={"311a0ca960c7b39fab36cd14e9cb89e6c099cdbd674f59f1f98b00d9e7bac8c0", r3}) r4 = dup(r0) copy_file_range(r0, 0x0, r4, 0x0, 0x0, 0x0) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000305000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaabb000008000300000000000a0001"], 0x5c}}, 0x0) (async) write$cgroup_pid(r0, &(0x7f0000000180)=r5, 0x12) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 32) setsockopt$sock_int(r8, 0x1, 0x31, &(0x7f0000001600), 0x4) (rerun: 32) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async, rerun: 64) r10 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) 1m44.415987976s ago: executing program 41 (id=4791): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x9a51, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x8, 0x4, 0x0, 0x6000, 0xf, r2, 0x0, 0x800004, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x1, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0xb, 0xfffffffffffffffd, 0x3, 0x2, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0x10f0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) 1m18.157861483s ago: executing program 42 (id=4883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x144, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e9f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5fa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x14}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff801}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x302}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) pipe2$watch_queue(&(0x7f0000000080), 0x80) 58.720656791s ago: executing program 2 (id=5475): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5a930, 0x11800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 58.574430146s ago: executing program 2 (id=5477): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf2502000000050005000500000005000500060000000400068008009d00000000002c59718e58bcc36ddc3835c06a1828e578b39e9c42e57b7f135c973f"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) (async, rerun: 64) r3 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0xbc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) (async) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd22, 0x1a1802) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x6, 0xbf8b, 0x4f6}) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="6d1ea961f596265398078a1569818ff8b474ee9bfefe9a2f5a4c7809d0d006e9c8b2b87f80cd478e2312a69e8f951f0f000000000600002502ea89a49e04a361e674a3425f7e0fe667a0f9a360874b4a56"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 32) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 58.472773706s ago: executing program 2 (id=5481): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x40305828, &(0x7f0000000200)={{r2}, "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"}) fsmount(0xffffffffffffffff, 0x1, 0xf2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@private1}, &(0x7f0000000280)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x3, 0x4}, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f0000000a80)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 58.318603413s ago: executing program 2 (id=5488): process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x8, &(0x7f0000000100)=[{0x4, 0x3, 0xe, 0x8}, {0x2afe, 0x9, 0x9, 0x4}, {0x7, 0x9, 0xaa, 0xfd69}, {0x400, 0xf0, 0x8, 0x7}, {0x800, 0x2, 0x7, 0x7}, {0x7, 0xcd, 0x3, 0x7ff}, {0x2, 0xb, 0x2, 0xcb}, {0x2, 0xb, 0xe6, 0x800}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@access_user}, {@version_u}, {@fscache}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}, {@hash}, {@obj_role}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '!'}}]}}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000001c0)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00') 58.231655292s ago: executing program 2 (id=5490): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffe85, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)={[{0x2b, 'cpuset'}, {0x2d, 'net_prio'}]}, 0x12) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000080)=ANY=[@ANYBLOB="f000000010000100000000000000000000000000000000000000000000000000fc0100000000000000000000000000010000fff7200000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xf0}}, 0x4810) 57.730573288s ago: executing program 2 (id=5503): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x0, 0x270, 0x430, 0x0, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xfffc, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'vlan1\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1d, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x40000}}, {0x28}}}}, 0x790) 57.677508628s ago: executing program 43 (id=5503): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x0, 0x270, 0x430, 0x0, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xfffc, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'vlan1\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1d, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x40000}}, {0x28}}}}, 0x790) 51.323774588s ago: executing program 9 (id=5571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000070000000400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r1}, 0x10) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r4, 0x21eae}}, 0x20}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r0, 0x0, 0x0, 0x80800) (async) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f00000000c0)={0xffffffd9, 0x103, 0x0, 0x7fffffff, 0x3, "03f03f0900000000000000000007000000fbff", 0x2, 0x203}) readv(r8, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}], 0x4) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x9) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x4000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) (async) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 51.02238521s ago: executing program 9 (id=5575): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x40305828, &(0x7f0000000200)={{r1}, "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"}) fsmount(0xffffffffffffffff, 0x1, 0xf2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f0000000a80)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 50.96949096s ago: executing program 6 (id=5576): r0 = socket$inet6(0x1c, 0x3, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x9, &(0x7f00000001c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0x3120ce25) (async) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x9, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@local={0xfe, 0x80, '\x00', 0x0}, r2}, 0x14) 50.968670794s ago: executing program 9 (id=5578): write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0x2190, {0x48, 0x2, 0x2}, 0x81, 0x0, 0x0, 0x8, 0x100000001, 0x0, 0xfb, 0x5, 0x2, 0xfffffffffffffff2, 0x7fffffffffffffff, 0x9, 0x3, 0xb, 0x3, 0x5, 0x1, 0x15}}, 0xa0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000180), 0x72, r0}, 0x38) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async, rerun: 32) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 50.883607585s ago: executing program 6 (id=5580): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600894f0000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';-H?', 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000000c0)={r3}) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000040)) 50.883495901s ago: executing program 9 (id=5581): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = dup(r3) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) 50.801608434s ago: executing program 9 (id=5584): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) setpgid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x848002, 0x68) 50.744625526s ago: executing program 6 (id=5586): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010000104000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="01310100000000002c0012800e00010069703665727370616e0000001800028008001500fca70e00040012000500160001"], 0x4c}}, 0x0) 50.680456198s ago: executing program 6 (id=5588): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000000000000000000000ff", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5a930, 0x11800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 50.626175106s ago: executing program 6 (id=5589): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000740)="2ae0", 0x2, 0x24000040, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x424, 0x3f3, 0x400, 0x70bd2c, 0x25dfdbff, {0x5, 0x2, 0x1a, [0x1, 0x0, 0x53, 0xfff, 0xbcd, 0x2, 0xd13442a, 0x1, 0x6, 0x24000, 0x400, 0x9, 0x1, 0x8, 0x5, 0xad3, 0x4, 0x9, 0x3, 0x0, 0xa, 0xf, 0x401, 0x1, 0x2, 0x1, 0xf0000000, 0xf, 0x4fe4877c, 0x21, 0x7fff, 0x40, 0x7, 0x7, 0x4, 0x5, 0x5, 0x8, 0x3, 0x9, 0x7ff, 0x800, 0x8, 0xfffffffc, 0x8, 0xf, 0x8, 0x200, 0x43, 0xe, 0x7, 0xfffffff8, 0xc25, 0x2, 0xce4a, 0x8000, 0x6, 0x1, 0x800, 0x0, 0x7, 0x8, 0x80, 0x1], [0x1ff, 0x4, 0x39, 0xf5, 0x8, 0x6, 0x6, 0xef, 0x4, 0xfffffffa, 0x707, 0x7, 0xbd, 0xffb, 0x401, 0xde, 0x7, 0x8000, 0x4, 0x5, 0x3, 0x9, 0x400, 0x9, 0xa0, 0x9, 0x5, 0xfffffff9, 0x8, 0x3, 0x1, 0xffffffff, 0x1, 0x401, 0x9, 0x6, 0x400, 0x2, 0xf0d, 0xca75, 0x7, 0x9, 0x7, 0x7, 0x6, 0x9, 0xa, 0xfffffffb, 0x6, 0x0, 0x7, 0x9, 0x1, 0x4, 0x4e9b, 0x408, 0x401, 0xd, 0x7, 0xf, 0x0, 0x4, 0x80000001, 0x4], [0x2, 0x6, 0xa5, 0x7, 0x401, 0x3, 0x10000, 0x6895, 0xc, 0x1d5, 0xeb2, 0x200, 0x6, 0x8, 0x1, 0x8e9, 0x1, 0xa, 0x5, 0x0, 0x6, 0xffff, 0xffffffff, 0x27, 0x6480, 0xf9cb, 0xd, 0x8, 0x9, 0x6, 0x2, 0x800, 0x5, 0x7f, 0x9, 0x1, 0x5403b90c, 0x8, 0x5, 0x1, 0xfffffffc, 0xfffffc01, 0x36, 0xf, 0x5, 0x8, 0x1, 0xfffffff9, 0x0, 0x9, 0x40, 0x100, 0x8, 0x9, 0x7fff, 0x101, 0x70, 0x800, 0x9, 0x5, 0x0, 0x80000000, 0x8, 0x4], [0xf, 0x4, 0x0, 0x200, 0x400, 0x40000, 0x9, 0x4, 0x1000, 0x3, 0x3, 0x4, 0x8e20, 0xfffffffd, 0x6, 0x7, 0x6, 0x0, 0x0, 0xdab, 0x5, 0x80000000, 0xfffffff8, 0x4, 0x6, 0x400000, 0x3, 0x1ff, 0xed, 0xffffffff, 0xff, 0x42, 0x3, 0x9, 0x6e, 0x2, 0x80, 0xb, 0x1, 0x5, 0x72, 0xfff, 0x3, 0xa65, 0x2, 0x6, 0x6, 0xbce593f, 0x1, 0x1, 0x3, 0x101, 0x2, 0x0, 0x7fffffff, 0x401, 0x2, 0x101, 0x71, 0x1ff, 0x7fff, 0x5, 0x9, 0x8], 0x3, ['\x00', '\x00', '\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x884c}, 0x0) 50.62587263s ago: executing program 6 (id=5590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0xc00) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) accept4(r0, 0x0, &(0x7f0000000000), 0xc00) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) (async) 49.797858784s ago: executing program 9 (id=5605): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x9, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xb0b, r3}, 0x38) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock(&(0x7f0000682000/0x3000)=nil, 0x3000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) syz_open_procfs(0x0, 0x0) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x55, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES64=r7, @ANYRES32=r2], 0x5c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='efs\x00', 0x208000, 0x0) 49.708807854s ago: executing program 7 (id=5608): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f0000000a80)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 49.569239393s ago: executing program 7 (id=5612): unshare(0x8000280) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DVD_WRITE_STRUCT(r2, 0x5392, &(0x7f0000000040)=@manufact={0x4, 0x1, 0x800, "2a0f4ae0c5ccce729a11edd79942c0212d4634883d022096474a51b2b0739eef9db9a8e3f9593f30f1ec8e7ca1779ea6be097581b6d7ea598455a45f07bd9385bbbf8c1848ccae4c757e29c725b90da5444920f9c33397de332b6cdc99647966e21111d29ba18914022ed8b42c5d5f62e68faa8f2313c10443ba6ebd0d3877672fad10a0b9cc49866c45d9fd356d8c0e85f892d993bd66784c1c9a3dbf3f98c6bc9ff263e7b66e486a3d44e998525457c0cf170f983832eed6980c41fbb90e27b7289adb638f565c563006dea7ea1ba530203a8b7ad01aad83bcfe1ec59c633b2967c130cbbcb3742a0741037b21b889620439097501cc47dd35f89f40512f4edd5b8dee80ec61524e74475978a00729f2756e7c8bd9cf334ff060c32f13335ca5af86c234cf673b90952df13193717a5b46b5e196d13bae0c42a80f624674023c5d489f3658bb78eac01ac8c14977ea67f7fe61dcc27e9ff1d8dee1fbef34706442faf771f3130b6db6d6c9d55d489bdfdd7e85388e4a4833533716089f57c5072fb9eb644abfba1cd876fe0bc1899224f388abd9d6d98dfd538ee9bf53122e5fbd7e071b2027667c13ad563ee9793e11b78a172950aee2ebd70012e79e7632d11bfd142876ae5737f02a2caf387efb82326d3c192efe92c48a7fba1619bdbad00d5406776eab3dfbd7a37c9d1c34a4f6bf146bdae6887fc8dc3618bfdfcad305aaaf4bf6e3c01228c3e0d851b35e9adcd073fb7f6a6c320c23ee6b49a23a9f0cf93848cfe2e075407d60a323b488e8340f41fdbec5ca4c5bb6dbc4a06f383a93173ad9981d7c3013f8e5c9350f8735c10f03684ea153370960ed68262ad6a1fab2d8c32eaa3518b0deaf7824bb1162b799ca37fa92895b55be68863c744de55487c177de77be3c34c1cfd98ea74516cf7db16fc24fa44410c1387dbc9f474552b10cd07787234f0b261ab4a3cdf857787fb6423bb2ff5b91e8f046bab7505b4f228925b9b265b111c48b2d6f47005cc17caa2028ea7bf212a5ad376427a0ada893d3270963b56ad89e88b427a32842b362e6e8c3dde6f85a951462bb35e2f144e822fc22482ef2bc0cc6ce6a14368ba21cb9478329d297ab3404db925fdb15c276abd68bd6c6c2631201955665486ac04684b218e99063313f9c253f87f0b24ff5400dba723af5539dba57e559f99b3ecd20afda64655a660b98251a655e64904efe8355b0f4a2ab51ba65082d53c917682e649dfdde840911a1de8b5718b6113d5bff0762cd1af082af9919adefa82c096957491a26ca7fdcd1321f03a98273171ce8c87dc88e042a89fac7338aaf3c5013e892f5261427ea0815a4d73e5d9a727728354ebd6c1167b1c6a403522f38cea7c2b304fa990448da94ccc70d088c7a670f6be8a598ca88a4b9f9eebac5a0303eacfde3f0b2bd678748073ad1870031690208eb44620c07ec534c3573f3a8ce004b4cd12b1acabd1fad6de14608a6a030e2be32810987d560b414105a5e482fb3c50589688a4de2cc18af131f1877144dfc20c4278b3bd5bc3941742ce67164601af442f102d289b57a36af2cfe46ed1817939b778d1d46e4ead978ff3b3503497dedc1e200c69abd040843cc5fc250b0fd467d721f0269b4c593133f4cc6533a1ac5d2ae29d1cc46500852e883bf66e30174c64b3ac364a50642a7386a9176806b891bb5d2eff293af249ed5846215144193c80ed7f2d7622cd1b539f5f665aa72babfa9132b7aeeee3af1e8a7b7f945863a72402f5ad422683b11dddc853de9295f0f2cb5590306605841330c76ad01b5332132fcd9d71b2a1500914907b774a4b40846d54afc4da70b9d90c21632f4b9feb2823cde55ea8ef56d3e078451c059cd3a2493af350dc5dcb4bd03f11b56bc29baf34129d597f3bcd756d37a5efc10da07bc81215038776f246570ce946083632334ae0f9858208e6c3acf1aff359c40653222c122227649b58ec1b1e1dad453b3844612c72f136950ae8da64703c9e7d7e1a45e9e8ef44c83c68e410660f58dffc801c68b232ca901ee2750e016bd66da20b1455c89c06ba10cc9b98ffad61c7dbe6123aa589bdc7768edec907ab13f714c18e894b6ed83e96c4b325165b2d488d99a96db14089b2a9914b121518fa1603dbf0b2c07416ce49351f4a226b1a7279e31e0e3fdce94e2f1705d8a9694ab5a355ae6e1edc002545d2cbc7edfa9f37274583dfcc3f2aa5eccc990bef4a7bdf94b8785b9e9b6550276ca81ec602c4172d2ef1c53ee07b3967a5e342fc754a0196cb0a8b11d9e2d8d5e5604e46005fc1e69c9880da385ace2180e3fcee0ad548e3dff6b2e46c501d474e16f4be2f4cec16fb9f822d73786a413d6f164a6e05dbc3ed128dee0df27896826a1f344248d0e621c791ad8d069786937f3a12155377e029a8b7c0659dbd600341568f7a958de673ef7294663396adc41cd020de797ff7e84fbe0ae60dfa9d72b3e9c8ec12fb1904f819d594901c335329e6d6b2a8482b1aa67dd2b1d5a84ad597b9422c555ec9a0123b13249e9a44e25c7750dafcd5cf98e237392226c6966538571cb295cba322831480ebe753c49549166f19a689d869fd22beafee3920584c2d6442e1afe28a65ca72224c833defc086b15bf3b6e282cf222b44649e6a2f00c35e5fb75d2164588c4dc339fbfd7660e7889150d42f4b4c6d6b4af223da52e403387de5fd6cb1c5455bd3b3340dcf83230a4af2ef2551fef06e8b3ec44a704f24821d09a51fd68a6bfd29cb67e5ce3849e041e2b4a90836cb29247f5cee937cc532484786c2c1133e39d94c616a61a334b05370f8b0129611aa09018c82c8d22a7d7609b1b45904b2af417b08d367e72416676981056efed1092a6ccc75276"}) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) 49.376478796s ago: executing program 7 (id=5614): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async, rerun: 32) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') (async) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x17, 0x0, &(0x7f0000000200)) (async) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x26, 0x1, 0x0, "4f80a7a456b1798141336bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x47504a4d}) (async) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 49.29118977s ago: executing program 7 (id=5617): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000000000007f", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5a930, 0x11800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 49.17013686s ago: executing program 7 (id=5619): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 48.253140064s ago: executing program 7 (id=5627): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x24, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_b, @device_b, @broadcast, {0x2, 0x1}, @device_b, @value={0x4, 0x1, 0x1, 0x0, 0x20}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 34.467802153s ago: executing program 44 (id=5590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0xc00) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) accept4(r0, 0x0, &(0x7f0000000000), 0xc00) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) (async) 33.363819353s ago: executing program 45 (id=5605): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x9, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xb0b, r3}, 0x38) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock(&(0x7f0000682000/0x3000)=nil, 0x3000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) syz_open_procfs(0x0, 0x0) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x55, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES64=r7, @ANYRES32=r2], 0x5c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='efs\x00', 0x208000, 0x0) 32.023799511s ago: executing program 46 (id=5627): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x24, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_b, @device_b, @broadcast, {0x2, 0x1}, @device_b, @value={0x4, 0x1, 0x1, 0x0, 0x20}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 23.051020774s ago: executing program 5 (id=5807): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf251500000008000100", @ANYRES32, @ANYBLOB="0c001400626174616476300008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x40000c0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2a13bf316b0b7bffde63efea6d5cdefd", 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf251500000008000100", @ANYRES32, @ANYBLOB="0c001400626174616476300008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x40000c0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2a13bf316b0b7bffde63efea6d5cdefd", 0x10) (async) 22.966112331s ago: executing program 5 (id=5810): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) connect$rose(r2, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) (async) 22.876727968s ago: executing program 5 (id=5812): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000580)="646a9923cce23748a13d2eae3c194332f7237f232f754130c385fae21342c99ded7ba894d5314a5b45178c8fcaaa4b22d7346c35e41f41b852318cb4b92a063fc8a70a0095ac411f5a723fa3ee46c48e1b94cc2865fe03ed59554a8d480e7302f26a98a29432693e0c083d95d9bb74b9fc0b4557cef787686adf8025be435e0c822528b27d5200f1ba419ef242f31e0d373c4c847635b7ba50539a41f9012be0e3091c4e220da58a2278ffa4d357eeb2597c804669256c701ee3fdadc2bce7bc88f07f1dc93d15fddc348700a4ddf9d53cefb7df77057b71b2e97f11901bbe167976bb835319ee003cf1bbe368628b79b949377d", 0xf4}, {&(0x7f0000000300)="8f09a8d816e608c36513ed63a833e3d018fc43ec143e3a3558fdc90d203f8ca1e0fd11c824e2de949bde0fb193632c2f9c7b663dea9e457a8df6d7adab8a50958dfa90237d177b5a90c208d5cf6e0369", 0x50}, {&(0x7f0000000100)="3d1a", 0x2}, {&(0x7f0000000400)="ab9901b57a771ed93a6857708c801a24f5ddfc6e2b95ea45601dced67382857d2b02cb23c3a56a405c7740581afd535c52f80f0db50e52c6705c738c715c0e7e05d04567eac99b15296c", 0x4a}], 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000002001000000000000000000000000000100000000000000000a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000800000000ffffffff8fffffff7f00000000000000000000010000000000000019000000000000004eea352100000000000000000000fbffffffffffffff0000000000000000040000000000000000000000000000020000000000000000000000000000000000010302000000cb9d8785a83e37770ae2eb7ee32057c596d3aa30a8123e6a3a3bf77a8ec4979a0095f000818de2e9c3e6272de0f8b70006f0cd18328a7bb6d9382228bf653f6918836414c8b9af0403f71456f2bace9a8b3f2f3065f95a20680900"], 0xb8}}, 0x2c000010) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000002001000000000000000000000000000100000000000000000a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000800000000ffffffff8fffffff7f00000000000000000000010000000000000019000000000000004eea352100000000000000000000fbffffffffffffff0000000000000000040000000000000000000000000000020000000000000000000000000000000000010302000000cb9d8785a83e37770ae2eb7ee32057c596d3aa30a8123e6a3a3bf77a8ec4979a0095f000818de2e9c3e6272de0f8b70006f0cd18328a7bb6d9382228bf653f6918836414c8b9af0403f71456f2bace9a8b3f2f3065f95a20680900"], 0xb8}}, 0x2c000010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010015, 0x0, 0x9}]}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0xfffffffd, 0x0, 0x3, 0x2, 0x6}, &(0x7f00000002c0)=0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x39, 0x1a, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x2, 0xd, 0x3, 0x2, 0x5d, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sec_ctx={0x12, 0x18, 0x7, 0x40, 0x81, "e65cf9499ca150fe8f5335090687568d600f9e0e1e5e488e6f3ac7688c024f51736c6f37585d28b8c2b0897da54b5cdb81b4942a610a82cbe55d9cf1838d258e479b4cb9dd46dfff4a21c93559a37fded0ce1edb7fa0e635df384315fdb1f2c20665ac950d70a4532a7696a5ae7346f92b159b9709ddefd4fee6abad30f6fb8d1d"}, @sadb_x_sec_ctx={0x1e, 0x18, 0x1, 0xd, 0xe6, "3fb9c19acf3f62ef8ac3bf1461c400b1a8a71f4b7dd6bbc3eb8098c1f5dca03ab69f09c18e2fd0f65922ef7ac130d65ffc098b813ce68657a2e7d67cc40b9a88b2b25922d3fb9cc7d230b23e59c38e31b557609e90473de90709db7677d3094b034e7f6bbb6af4600611cf12175dc9eaf9e85222e122b87d1821ecaba7582fab2d0ff0d89b54e5b4db6c11a62893e4983392bf0d2f4306796e6224629a416822f82d2d756d2f1d1a038744bfea662ee81c05bd542b2098dc2750ea509ca38e164d81e8e65b565fcf7ab34d2a872e2b8f4812e4702fc8aa9d47f155a4f0e17eb710c8045d6382"}, @sadb_key={0x18, 0x9, 0x588, 0x0, "16786dc6d53eaf42408ce576fc5a1839e245db217ff21f0000ed72812bed12073903b92b38570559a8ae810cca685e011d879851050000000000000013d8868c7b773cf7212f0dc450c9cc5d2d2d0d5192a331b47a5a7c957294f2bbbcd26b0fac28f9a4a700c85837d007d9f4103f7acb01f2524326b738a9b3f4c603273303d712edc486922276888f6a25496945faef95895287ae2423cd4e1e2c582756624600"/177}, @sadb_x_sa2={0x2, 0x13, 0x81, 0x0, 0x0, 0x70bd28, 0x3506}, @sadb_x_sa2={0x2, 0x13, 0xfd, 0x0, 0x0, 0x70bd2c, 0x3505}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@mcast2, 0x15, 0x10, 0x4}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6e63848c}}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x1}]}, 0x2e8}}, 0x4008010) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = memfd_secret(0x80000) ftruncate(r11, 0x10) (async) ftruncate(r11, 0x10) fanotify_mark(0xffffffffffffffff, 0x1, 0x2032, r11, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 22.730391366s ago: executing program 5 (id=5814): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="56c78e3c733d76697274d7002c6e6f657874656e642c6163638173733d2ca8600763616368653d667363616368652c76657273696f6e3d3970323030302e75c7d421715dfc5cc6c9c2caf3f086ac5d2bff8fe76ca352070eac926fad7d5732cb60ea7d62e064559dd861896d0a9fbeeec0c0becbcd9e0a68d5d4327735e94b74cb4776d28e3b61ba5eabbaff5b2893b2513fc49be96f181bddc5373c8471e3542217476396db5dce250a4f39155340e353a77a0158eeeb470f9af788f662127b4e10fa473cb32d070555ed378c5e770996f94e61"]) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0xffffffff, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0xffffffff, 0x4) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="c22326a905f2d12869b6db61fd55da9d7fd787cda048d1bc1d2c932aea4e1b981038496163d7e4a718f9d2b836045627d3a5a894f6ffbb23bc8b52ca8c0c7040140e1872444fe4f5a0b5f3fa", 0x4c}], 0x1}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) socket$inet6(0xa, 0x802, 0x88) (async) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000080)=0x43df, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x240000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @mcast1, 0x9}, 0x1c) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000240)="dd9ee2ba00"/18, 0x12}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) tkill(r1, 0x17) tkill(r1, 0x23) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900040100"], 0x30}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) 22.581158107s ago: executing program 5 (id=5816): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0xaa8, 0x0, 0x20}}) r3 = getpid() syz_pidfd_open(r3, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = getpgid(0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = getuid() mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x1004000, &(0x7f00000005c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0xf}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xe00}}, {@default_permissions}, {@default_permissions}, {@blksize}], [{@fsmagic={'fsmagic', 0x3d, 0x8000}}]}}) getgroups(0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000480)=r5) r8 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x200080, 0x0) r10 = getpgid(r8) write$cgroup_pid(r9, &(0x7f0000000740)=r10, 0x12) syz_open_procfs(r8, &(0x7f00000001c0)='mounts\x00') r11 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0x0}}, './file0\x00'}) sendmsg$netlink(r1, &(0x7f0000000440)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x18, 0x29, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x1c, 0x0, 0x0, @pid=r3}]}, 0x18}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, r12}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x88}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r13 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r13, 0x0) syz_io_uring_setup(0x66a9, &(0x7f0000000140)={0x0, 0x6e96, 0x10000, 0x2, 0x166}, &(0x7f0000000080), &(0x7f0000001040)) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 21.575487785s ago: executing program 5 (id=5824): r0 = bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = dup3(r0, r0, 0x80000) accept4$x25(r1, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) 21.52967932s ago: executing program 47 (id=5824): r0 = bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = dup3(r0, r0, 0x80000) accept4$x25(r1, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) 10.857528835s ago: executing program 0 (id=5889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000003240)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x100, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) syz_usb_disconnect(r1) 10.782309682s ago: executing program 4 (id=5891): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x0, 0x20}, 0xc) 10.714556422s ago: executing program 4 (id=5892): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) ioctl$sock_netdev_private(r1, 0x8948, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x1, 0xe) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) 10.599880101s ago: executing program 4 (id=5897): syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000)=0x80000000, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 10.32089381s ago: executing program 4 (id=5902): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) (rerun: 64) chroot(&(0x7f0000000180)='./file0\x00') (async) r0 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x6, 0x7f05}) (async, rerun: 64) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) (async, rerun: 64) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 10.171968272s ago: executing program 4 (id=5907): r0 = socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0x0) 9.711393197s ago: executing program 4 (id=5916): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000a80)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @private1}}}}}}, 0x0) 9.623467693s ago: executing program 48 (id=5916): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000a80)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @private1}}}}}}, 0x0) 9.048657507s ago: executing program 0 (id=5919): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x38, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x409e, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7.220580591s ago: executing program 0 (id=5931): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x0, 0x0, 0x0) 7.049824031s ago: executing program 0 (id=5932): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000", @ANYBLOB="0001"], 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x5, 0x662e00) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000340)={0x1, 0x4, 0x2, 0x9, 0x3, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000004c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, r5, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3f6, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}}, 0x41010) 7.003285888s ago: executing program 0 (id=5933): r0 = fanotify_init(0x2, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0xffffffffffffffce, 0x0, 0x0, 0xffffffff, 0x10000, @value=r1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000840000000000000000009500000000000000782b4eb2b8f066cfab256a5022f2d1"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) read$FUSE(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x141301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000001140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x400, 0xfffffffc, 0x2d0}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x8, 0x0, r5, &(0x7f00000011c0)={0x8000000c}, r5, 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x100847c0, 0x1, 0x1, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000300000000020000000900020073797a310000000005000100070000002c0007800c00018008000140640101000500070084000000060004404e2200000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.859410468s ago: executing program 0 (id=5935): sync() (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$can_bcm(r2, 0x0, 0x8002) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 3.535143459s ago: executing program 1 (id=5983): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffe, 0x800000df}) 3.466067585s ago: executing program 1 (id=5985): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x8, 0x10002) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x10, 0x0, &(0x7f0000000500)=[@request_death={0x40086315}], 0x0, 0x0, 0x0}) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000001c0)=""/221, &(0x7f00000002c0)=0xdd) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x81, 0x7f, 0x21185045, 0xffffffb3}) 1.241141812s ago: executing program 8 (id=6006): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r4}, 0x38) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0xc0f85403, &(0x7f00000000c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0x4, 0xea, 0x10, "1012a2c2e0d99745e394509d287560250d00"}) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f0000000040)=0xa) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x1610, 0x0, 0x1, 0x0, 0x2f, 0xcc7, 0x9, 0xaab, 0x1, 0x103, 0x2, 0x1, 0x8, 0x1100004, 0x6, 0x409, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0xa, 0x4, 0x9, 0x3, 0x1, 0x3ff, 0x10000, 0xfffffff7]}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}]}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa04009078e00000e04500000000000017c1b7df60c7"], 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040), 0x2) 1.144812538s ago: executing program 8 (id=6007): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffe, 0x800000df}) 1.143820211s ago: executing program 8 (id=6008): r0 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x34}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000240)={0x1, "fe4bc2070c8230d64a620097e2e1ba0f1a42e3cdf62cae9e6917621a41f878718cb22ae0bbb7e638ac26b457037d91397c1455e56b87562a90ae102a79d4d8bf", {0xff, 0xfff}}) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r5 = socket$isdn_base(0x22, 0x2, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000180)=0x2, 0x4) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000005f00)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x20b409, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, 0x0, r9}, 0x68) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') 1.048159395s ago: executing program 8 (id=6009): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') (async) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x20050800) (async) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b090b, 0xf, '\x00', @p_u32=&(0x7f0000000040)=0x45f6}}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.047962112s ago: executing program 8 (id=6010): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_mmap={0xa0000, 0x0, 0x4, 0x4, 0x2, {r3, r4/1000+10000}, {0x3, 0x1, 0x14, 0x0, 0xb, 0x2, "965572f8"}, 0x0, 0x1, {&(0x7f0000000200)=[{0x7ff, 0x3, {0x4}, 0x100}, {0x400, 0x1, {0x6}, 0xfffffacf}]}, 0x0, 0x0, r5}) 984.467483ms ago: executing program 8 (id=6011): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x3458, 0x6, 0x7, 0x10001, 0x80000000, 0xff}) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x1) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x56}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000140)={0x80, 0x1, 0x7, 0x4}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x4, 0x9, 0x6, 0xffff06bb}, {0x0, 0xf, 0xd, 0x2}, {0x98, 0x14, 0x5, 0xfffffffb}, {0x80, 0x0, 0xa, 0x2}, {0x0, 0x6, 0x1, 0x253}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_newroute={0x24, 0x18, 0x300, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x10, 0x10, 0x5b, 0xfc, 0x6, 0xff, 0x3, 0x2200}, [@RTA_DST={0x8, 0x1, {0xfff, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f00000003c0)=0x8000, 0x4) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000400)) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000500)={0x1, 0x0, 0x98, &(0x7f0000000440)={0x8, 0x0, 0x12}}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000580)=""/64, &(0x7f00000005c0)=0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'tunl0\x00', 0x0}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000640)={{r3}, 0xfffffffffffff354, 0x4, 0x200}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000680)={0xeeee0000, 0x26000, 0x10, 0x2}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) bind$isdn(r5, &(0x7f00000007c0)={0x22, 0x4, 0xfe, 0x7, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x20, 0x0, 0x2, 0x100, 0x40010, 0xffffffffffffffff, 0x4, '\x00', r6, r5, 0x1, 0x5, 0x2}, 0x50) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x10, r1, 0x59a13000) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000940)={0x2, 0x0, 0x98, &(0x7f0000000880)={0x7fff, 0x6, 0x6}}) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000980), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0xf, 0xffffffff}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x2c}, 0xffffff00, 0xffffff, 0xf, 0x9, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x9, 0xb, 0x4, 0x1d, 0x9, 0xd, 'ipvlan1\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @remote, 0x4}}}, {{@arp={@remote, @multicast2, 0xffffff00, 0xffffff00, 0x9, 0xd, {@mac=@broadcast, {[0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x80, 0xff, 0x0, 0xff]}}, 0x7, 0x0, 0xebc9, 0x3ff, 0x9, 0xda39, 'vlan1\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x25e, 0x800, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000e40)=[@textreal={0x8, &(0x7f0000000e00)="0fae65630f01c866b8d70000000f23d00f21f86635300000020f23f836c073f62f0fdfe80f01d1f30f001c66b9bc0a00000f32b808008ee882a3ee9009", 0x3d}], 0x1, 0x4b, &(0x7f0000000e80), 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000ec0), 0x8000, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd29, 0x25dfdbff, 0x1800000, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$SNAPSHOT_FREE(r7, 0x3305) 649.526551ms ago: executing program 1 (id=6012): syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 649.004496ms ago: executing program 1 (id=6013): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1214040, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) 645.336926ms ago: executing program 3 (id=6014): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xef) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@abs={0x1}, 0x6e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 555.539307ms ago: executing program 3 (id=6015): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000400)={0x80}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x180, 0xcb10, 0x4, 0x3}, &(0x7f0000000500)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000540)={r1, 0xc529}, &(0x7f0000000580)=0x8) r3 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x2, 0xf02) ioctl$CDROMGETSPINDOWN(r3, 0x531d, &(0x7f0000000600)) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r3, r3, 0x2b, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x4, 0x0, &(0x7f00000006c0)=[0x7, 0x56e, 0x4, 0x7], 0x400}}, 0x30) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000740)=@mmap={0x2, 0x5, 0x4, 0x8, 0x9, {r5, r6/1000+10000}, {0x3, 0x0, 0x9, 0xf9, 0x1, 0x3, "c0357a92"}, 0x3, 0x1, {}, 0xa5, 0x0, r7}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000900)={0x1, 0x0, 0x1000, 0x79, &(0x7f00000007c0)="bd6e0ac7933571e5f0ecfc26053d047063b808455e3cd0aabc1b41d88af56dffbd83593a6cc99b56464bf0940df35d3421cb8f45d6b25db6947a4bbc4f2b67055d0a3455f1e0bbe5767a310ce2bef0e1991716ac6ae9766400ba0bd100b1d492ee10a0f0f165ec6adb5f1bacb2db8aa813c89e71d913c70bfa", 0x97, 0x0, &(0x7f0000000840)="91d6f3d4f9bc944e4932c045bc8ca58f2a2a17438c8fb4c894802b0e3717969c4331b72c0a639fceb8fe7d678951674df075f00b4b3c205abad95e252413eb6c026552a1887d7a29f839af46e2e01aa80fb46484ce79578515003ad985ed059919a608e8712a829bddfc72e214ae60ed90b35542c9e1b555b806c9624589d58a0b911fd2e83dd0f73579e155f2da78d7f12b3787591a8d"}) r8 = socket$inet6(0xa, 0x800, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000980)={@rand_addr=' \x01\x00'}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000009c0)={r2, 0xffff, 0x5, 0x8, 0xc14b6add, 0x5}, &(0x7f0000000a00)=0x14) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000a40)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000b40)={0xe00000, 0xe}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000cc0)={r9, 0x86c}, 0x8) r11 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r11, 0xc008561b, &(0x7f0000000d40)={0x4, 0x1ff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000d80)={0x0, 'macvlan0\x00', {0x1}, 0x5}) recvfrom$ax25(r10, &(0x7f0000000dc0)=""/246, 0xf6, 0x40002000, &(0x7f0000000ec0)={{0x3, @null, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @null]}, 0x48) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000f40)={'raw\x00', 0x0, [0xfffffffc, 0x9, 0x5e10, 0x8, 0x5d6dea80]}, &(0x7f0000000fc0)=0x54) r12 = epoll_create(0x80000000) quotactl_fd$Q_SYNC(r12, 0xffffffff80000102, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000001000)=@assoc_value={r2, 0x6}, &(0x7f0000001040)=0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000001080), &(0x7f00000010c0)=0x4) connect$rose(r3, &(0x7f0000001100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000001140)={[0x1, 0x9, 0x6, 0x3, 0x8de, 0x401, 0x6, 0x3, 0x200, 0x9, 0x2, 0x9, 0x7, 0xffffffff, 0x1], 0x54000, 0x200000}) 448.572221ms ago: executing program 3 (id=6016): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffe, 0x800000df}) 448.275532ms ago: executing program 3 (id=6017): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000fcb000)=0xffffffff, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "3a8e080800b3020000000010000f0000000100", 0x3234564e}) 352.800877ms ago: executing program 3 (id=6018): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020591af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r7, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[], 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 278.616546ms ago: executing program 1 (id=6019): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000080) (fail_nth: 46) 153.584µs ago: executing program 3 (id=6020): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x54, r4, 0x300, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) fcntl$setlease(r2, 0x400, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000980)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000b80)={{r0}, r5, 0x8, @unused=[0x2, 0x10001, 0x9, 0x3], @name="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"}) r6 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x40001) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000480)={[{0x7ff, 0x7fff, 0xe0, 0xfc, 0x38, 0x8, 0x4, 0x21, 0x0, 0xfe, 0x7d, 0x5, 0x5}, {0x80000001, 0x150, 0xff, 0xff, 0x4, 0x0, 0x1e, 0x0, 0x80, 0x2}, {0x6, 0x8, 0x0, 0xf, 0x2, 0x9, 0xf8, 0x2, 0xfd, 0x6, 0xfd, 0x8, 0xe0ee}], 0x7c1d}) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000085"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xd6}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71b", 0x7a}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x2}, 0x10040) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283b06fe800000000000000000000000000000fe8000000000000000000000000000aa8900907800000000fe800000000000000000000000000020fca31b2e7fb982cb59ef710db7e5049a0100"/109], 0x0) 0s ago: executing program 1 (id=6021): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xc, 0x0, 0x0, 0x9, 0x1, 0x10cf, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40003) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0x9, {0x3, 0x8, 0x9, 0x200}}) kernel console output (not intermixed with test programs): RIP: 0033:0x7f766838f7c9 [ 448.970506][T23475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.970516][T23475] RSP: 002b:00007f76691ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.970527][T23475] RAX: ffffffffffffffda RBX: 00007f76685e5fa0 RCX: 00007f766838f7c9 [ 448.970534][T23475] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 448.970540][T23475] RBP: 00007f76691ae090 R08: 0000000000000000 R09: 0000000000000000 [ 448.970546][T23475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.970552][T23475] R13: 00007f76685e6038 R14: 00007f76685e5fa0 R15: 00007ffc741d6c38 [ 448.970566][T23475] [ 449.050700][T23477] xt_hashlimit: size too large, truncated to 1048576 [ 449.199789][T23480] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 449.342918][T23487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5663'. [ 449.662366][T23497] netlink: 'syz.5.5666': attribute type 1 has an invalid length. [ 449.684580][T23497] 8021q: adding VLAN 0 to HW filter on device bond32 [ 449.728347][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 449.728364][ T40] audit: type=1400 audit(2001048610.644:2800): avc: denied { watch watch_reads } for pid=23499 comm="syz.5.5667" path="/385" dev="tmpfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 449.816472][T23507] FAULT_INJECTION: forcing a failure. [ 449.816472][T23507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.820678][T23507] CPU: 2 UID: 0 PID: 23507 Comm: syz.5.5669 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.820704][T23507] Tainted: [L]=SOFTLOCKUP [ 449.820726][T23507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.820736][T23507] Call Trace: [ 449.820744][T23507] [ 449.820753][T23507] dump_stack_lvl+0x16c/0x1f0 [ 449.820775][T23507] should_fail_ex+0x512/0x640 [ 449.820800][T23507] _copy_from_user+0x2e/0xd0 [ 449.820822][T23507] move_addr_to_kernel+0x65/0x170 [ 449.820847][T23507] __copy_msghdr+0x386/0x470 [ 449.820892][T23507] copy_msghdr_from_user+0xc1/0x160 [ 449.820915][T23507] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 449.820964][T23507] ___sys_sendmsg+0xfe/0x1d0 [ 449.820992][T23507] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.821047][T23507] __sys_sendmsg+0x16d/0x220 [ 449.821072][T23507] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.821111][T23507] do_syscall_64+0xcd/0xf80 [ 449.821131][T23507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.821149][T23507] RIP: 0033:0x7f766838f7c9 [ 449.821164][T23507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.821180][T23507] RSP: 002b:00007f76691ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.821198][T23507] RAX: ffffffffffffffda RBX: 00007f76685e5fa0 RCX: 00007f766838f7c9 [ 449.821209][T23507] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 449.821220][T23507] RBP: 00007f76691ae090 R08: 0000000000000000 R09: 0000000000000000 [ 449.821231][T23507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.821241][T23507] R13: 00007f76685e6038 R14: 00007f76685e5fa0 R15: 00007ffc741d6c38 [ 449.821266][T23507] [ 449.918698][ T40] audit: type=1400 audit(2001048610.822:2801): avc: denied { ioctl } for pid=23508 comm="syz.5.5670" path="socket:[119921]" dev="sockfs" ino=119921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 449.935612][T23509] macsec1: entered allmulticast mode [ 449.937933][T23509] bridge0: entered allmulticast mode [ 449.998568][ T40] audit: type=1400 audit(2001048610.897:2802): avc: denied { create } for pid=23510 comm="syz.5.5671" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.007792][ T40] audit: type=1400 audit(2001048610.906:2803): avc: denied { map } for pid=23510 comm="syz.5.5671" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=118581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.021217][ T40] audit: type=1400 audit(2001048610.906:2804): avc: denied { read write } for pid=23510 comm="syz.5.5671" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=118581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.032956][ T40] audit: type=1400 audit(2001048610.906:2805): avc: denied { ioctl } for pid=23510 comm="syz.5.5671" path="socket:[119373]" dev="sockfs" ino=119373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.044558][ T40] audit: type=1400 audit(2001048610.906:2806): avc: denied { module_request } for pid=23510 comm="syz.5.5671" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 450.053760][ T40] audit: type=1400 audit(2001048610.925:2807): avc: denied { read } for pid=23510 comm="syz.5.5671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.062056][ T40] audit: type=1400 audit(2001048610.925:2808): avc: denied { create } for pid=23510 comm="syz.5.5671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.070515][ T40] audit: type=1400 audit(2001048610.925:2809): avc: denied { write } for pid=23510 comm="syz.5.5671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.121761][T18624] net_ratelimit: 35 callbacks suppressed [ 450.121781][T18624] bond1: (slave lo): failed to get link speed/duplex [ 450.210452][T23521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5673'. [ 450.241400][T10072] bond1: (slave lo): failed to get link speed/duplex [ 450.358353][ T170] bond1: (slave lo): failed to get link speed/duplex [ 450.473712][T22507] bond1: (slave lo): failed to get link speed/duplex [ 450.603686][T18624] bond1: (slave lo): failed to get link speed/duplex [ 450.731135][ T46] bond1: (slave lo): failed to get link speed/duplex [ 450.848987][ T170] bond1: (slave lo): failed to get link speed/duplex [ 450.976686][ T170] bond1: (slave lo): failed to get link speed/duplex [ 451.094014][T22760] bond1: (slave lo): failed to get link speed/duplex [ 451.212389][ T13] bond1: (slave lo): failed to get link speed/duplex [ 451.423192][T23533] netlink: 'syz.5.5677': attribute type 1 has an invalid length. [ 451.448311][T23533] 8021q: adding VLAN 0 to HW filter on device bond33 [ 451.496970][T23536] FAULT_INJECTION: forcing a failure. [ 451.496970][T23536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.504009][T23536] CPU: 0 UID: 0 PID: 23536 Comm: syz.5.5678 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.504035][T23536] Tainted: [L]=SOFTLOCKUP [ 451.504042][T23536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 451.504052][T23536] Call Trace: [ 451.504059][T23536] [ 451.504065][T23536] dump_stack_lvl+0x16c/0x1f0 [ 451.504091][T23536] should_fail_ex+0x512/0x640 [ 451.504118][T23536] _copy_from_user+0x2e/0xd0 [ 451.504140][T23536] ____sys_sendmsg+0x607/0xc30 [ 451.504167][T23536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.504196][T23536] ___sys_sendmsg+0x134/0x1d0 [ 451.504220][T23536] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.504273][T23536] __sys_sendmsg+0x16d/0x220 [ 451.504291][T23536] ? __pfx___sys_sendmsg+0x10/0x10 [ 451.504329][T23536] do_syscall_64+0xcd/0xf80 [ 451.504348][T23536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.504365][T23536] RIP: 0033:0x7f766838f7c9 [ 451.504380][T23536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.504394][T23536] RSP: 002b:00007f76691ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.504412][T23536] RAX: ffffffffffffffda RBX: 00007f76685e5fa0 RCX: 00007f766838f7c9 [ 451.504423][T23536] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 451.504434][T23536] RBP: 00007f76691ae090 R08: 0000000000000000 R09: 0000000000000000 [ 451.504444][T23536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.504452][T23536] R13: 00007f76685e6038 R14: 00007f76685e5fa0 R15: 00007ffc741d6c38 [ 451.504473][T23536] [ 451.610561][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5679'. [ 452.683310][T23545] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5681'. [ 453.091821][T23557] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 453.354811][T23559] 9p: Bad value for 'port' [ 453.405083][T23561] netlink: 'syz.5.5685': attribute type 1 has an invalid length. [ 453.407561][T23561] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5685'. [ 453.411505][T23561] atomic_op ffff888063709198 conn xmit_atomic 0000000000000000 [ 453.459893][T23563] xt_hashlimit: size too large, truncated to 1048576 [ 453.572034][T23567] FAULT_INJECTION: forcing a failure. [ 453.572034][T23567] name failslab, interval 1, probability 0, space 0, times 0 [ 453.576346][T23567] CPU: 2 UID: 0 PID: 23567 Comm: syz.5.5687 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.576364][T23567] Tainted: [L]=SOFTLOCKUP [ 453.576368][T23567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 453.576374][T23567] Call Trace: [ 453.576379][T23567] [ 453.576384][T23567] dump_stack_lvl+0x16c/0x1f0 [ 453.576400][T23567] should_fail_ex+0x512/0x640 [ 453.576416][T23567] should_failslab+0xc2/0x120 [ 453.576430][T23567] kmem_cache_alloc_noprof+0x83/0x770 [ 453.576442][T23567] ? dst_alloc+0x99/0x1a0 [ 453.576458][T23567] ? dst_alloc+0x99/0x1a0 [ 453.576470][T23567] dst_alloc+0x99/0x1a0 [ 453.576485][T23567] rt_dst_alloc+0x35/0x3a0 [ 453.576498][T23567] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 453.576517][T23567] ip_route_output_key_hash+0x10f/0x2b0 [ 453.576532][T23567] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 453.576547][T23567] ? ns_capable+0xd7/0x110 [ 453.576565][T23567] ? find_held_lock+0x2b/0x80 [ 453.576582][T23567] ip_route_output_flow+0x27/0x150 [ 453.576598][T23567] udp_sendmsg+0x1af9/0x2870 [ 453.576612][T23567] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 453.576626][T23567] ? __pfx_udp_sendmsg+0x10/0x10 [ 453.576636][T23567] ? tomoyo_supervisor+0xb0c/0x13b0 [ 453.576651][T23567] ? vsnprintf+0x331/0x11e0 [ 453.576669][T23567] ? __pfx_vsnprintf+0x10/0x10 [ 453.576686][T23567] ? down_write+0x14d/0x200 [ 453.576702][T23567] ? __lock_acquire+0x436/0x2890 [ 453.576713][T23567] ? look_up_lock_class+0x6b/0x130 [ 453.576730][T23567] udpv6_sendmsg+0x128f/0x2d30 [ 453.576754][T23567] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 453.576773][T23567] ? __lock_acquire+0x436/0x2890 [ 453.576790][T23567] ? reacquire_held_locks+0xcd/0x1f0 [ 453.576807][T23567] ? rcu_is_watching+0x12/0xc0 [ 453.576846][T23567] ? __local_bh_enable_ip+0xa4/0x120 [ 453.576866][T23567] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.576876][T23567] ? inet_autobind+0x145/0x1a0 [ 453.576888][T23567] ? __local_bh_enable_ip+0xa4/0x120 [ 453.576903][T23567] ? inet_autobind+0x14a/0x1a0 [ 453.576914][T23567] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 453.576932][T23567] ? inet6_sendmsg+0x105/0x140 [ 453.576941][T23567] inet6_sendmsg+0x105/0x140 [ 453.576952][T23567] ____sys_sendmsg+0x705/0xc30 [ 453.576965][T23567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.576983][T23567] ___sys_sendmsg+0x134/0x1d0 [ 453.576999][T23567] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.577031][T23567] __sys_sendmsg+0x16d/0x220 [ 453.577046][T23567] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.577071][T23567] do_syscall_64+0xcd/0xf80 [ 453.577083][T23567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.577095][T23567] RIP: 0033:0x7f766838f7c9 [ 453.577105][T23567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.577116][T23567] RSP: 002b:00007f76691ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.577126][T23567] RAX: ffffffffffffffda RBX: 00007f76685e5fa0 RCX: 00007f766838f7c9 [ 453.577133][T23567] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 453.577139][T23567] RBP: 00007f76691ae090 R08: 0000000000000000 R09: 0000000000000000 [ 453.577145][T23567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.577151][T23567] R13: 00007f76685e6038 R14: 00007f76685e5fa0 R15: 00007ffc741d6c38 [ 453.577166][T23567] [ 453.661651][T23571] netlink: 'syz.5.5689': attribute type 1 has an invalid length. [ 453.750367][T23571] 8021q: adding VLAN 0 to HW filter on device bond34 [ 453.836230][T23577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5691'. [ 454.023457][T23585] xt_hashlimit: size too large, truncated to 1048576 [ 454.149988][T23589] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 455.209390][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 455.209405][ T40] audit: type=1400 audit(2001048615.767:2872): avc: denied { append } for pid=23603 comm="syz.5.5699" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.221466][ T40] audit: type=1400 audit(2001048615.767:2873): avc: denied { bpf } for pid=23603 comm="syz.5.5699" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 455.228231][ T40] audit: type=1400 audit(2001048615.767:2874): avc: denied { perfmon } for pid=23603 comm="syz.5.5699" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 455.228258][ T40] audit: type=1400 audit(2001048615.767:2875): avc: denied { prog_run } for pid=23603 comm="syz.5.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 455.228278][ T40] audit: type=1400 audit(2001048615.767:2876): avc: denied { map_create } for pid=23603 comm="syz.5.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 455.257116][ T40] audit: type=1400 audit(2001048615.814:2877): avc: denied { create } for pid=23603 comm="syz.5.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 455.265213][ T40] audit: type=1400 audit(2001048615.814:2878): avc: denied { write } for pid=23603 comm="syz.5.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 455.272268][T23604] Bluetooth: hci6: Frame reassembly failed (-84) [ 455.279035][T22503] Bluetooth: hci6: Frame reassembly failed (-84) [ 455.480069][T22503] net_ratelimit: 34 callbacks suppressed [ 455.480088][T22503] bond1: (slave lo): failed to get link speed/duplex [ 455.597837][T10855] bond1: (slave lo): failed to get link speed/duplex [ 455.715471][T22555] bond1: (slave lo): failed to get link speed/duplex [ 455.832868][T22503] bond1: (slave lo): failed to get link speed/duplex [ 455.961130][T10817] bond1: (slave lo): failed to get link speed/duplex [ 456.089818][ T170] bond1: (slave lo): failed to get link speed/duplex [ 456.207653][T22507] bond1: (slave lo): failed to get link speed/duplex [ 456.323745][ T40] audit: type=1400 audit(2001048616.805:2879): avc: denied { execute } for pid=23605 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 456.333476][ T40] audit: type=1400 audit(2001048616.805:2880): avc: denied { execute_no_trans } for pid=23605 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 456.336324][T22503] bond1: (slave lo): failed to get link speed/duplex [ 456.417395][ T40] audit: type=1400 audit(2001048616.898:2881): avc: denied { create } for pid=23606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 456.434973][ T5941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 456.438853][ T5941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 456.442837][ T5941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 456.445698][ T5941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 456.448353][ T5941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 456.453624][ T170] bond1: (slave lo): failed to get link speed/duplex [ 456.575626][T23606] chnl_net:caif_netlink_parms(): no params data found [ 456.637814][T23606] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.640903][T23606] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.643985][T23606] bridge_slave_0: entered allmulticast mode [ 456.648990][T23606] bridge_slave_0: entered promiscuous mode [ 456.653889][T23606] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.657297][T23606] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.660425][T23606] bridge_slave_1: entered allmulticast mode [ 456.664759][T23606] bridge_slave_1: entered promiscuous mode [ 456.688145][T23606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.693367][T23606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.721506][T23606] team0: Port device team_slave_0 added [ 456.725981][T23606] team0: Port device team_slave_1 added [ 456.744991][T23606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.747334][T23606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.755650][T23606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.760206][T23606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.762473][T23606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.770885][T23606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.793815][T23606] hsr_slave_0: entered promiscuous mode [ 456.796259][T23606] hsr_slave_1: entered promiscuous mode [ 456.798450][T23606] debugfs: 'hsr0' already exists in 'hsr' [ 456.800321][T23606] Cannot create hsr debugfs directory [ 456.895490][T23606] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.955893][T10855] bond1: (slave lo): failed to get link speed/duplex [ 456.992057][T23606] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.090569][T23606] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.187611][T23606] netdevsim netdevsim8 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.377276][T23606] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 457.384672][T23606] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 457.390635][T23606] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 457.398217][T23606] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 457.424580][T23606] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.427819][T23606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.431033][T23606] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.433897][T23606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.471245][T21106] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 457.491249][T23606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.510891][T23606] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.524135][ T5943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 457.531775][ T5943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 457.536197][ T5943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 457.541812][ T5943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 457.543083][T23624] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 457.546906][ T5943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 457.633218][T23627] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 457.726944][T23635] /dev/nullb0: Can't open blockdev [ 457.729845][T23635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5703'. [ 457.821663][T23606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.837153][T23621] chnl_net:caif_netlink_parms(): no params data found [ 457.868430][T23642] xt_hashlimit: size too large, truncated to 1048576 [ 457.919006][T23621] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.922224][T23621] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.925358][T23621] bridge_slave_0: entered allmulticast mode [ 457.931708][T23621] bridge_slave_0: entered promiscuous mode [ 457.936751][T23621] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.941619][T23621] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.944520][T23621] bridge_slave_1: entered allmulticast mode [ 457.948442][T23621] bridge_slave_1: entered promiscuous mode [ 457.977415][T23621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.990434][T23621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.020948][T23621] team0: Port device team_slave_0 added [ 458.021396][T23653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23653 comm=syz.5.5706 [ 458.029844][T23621] team0: Port device team_slave_1 added [ 458.067188][T23621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.070687][T23621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.082011][T23621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.088293][T23621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.091485][T23621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.100492][T23621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.151137][T23621] hsr_slave_0: entered promiscuous mode [ 458.153599][T23621] hsr_slave_1: entered promiscuous mode [ 458.156045][T23621] debugfs: 'hsr0' already exists in 'hsr' [ 458.157868][T23621] Cannot create hsr debugfs directory [ 458.161737][T23657] smc: net device bond0 applied user defined pnetid SYZ2 [ 458.168014][T23657] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5708'. [ 458.168617][T23606] veth0_vlan: entered promiscuous mode [ 458.193216][T23657] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.232614][T23657] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.286132][T23657] .` (unregistering): (slave batadv0): Releasing backup interface [ 458.331236][T23657] .` (unregistering): Released all slaves [ 458.369661][T23606] veth1_vlan: entered promiscuous mode [ 458.446237][T23606] veth0_macvtap: entered promiscuous mode [ 458.456741][T23621] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.462060][T23621] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.482665][T23606] veth1_macvtap: entered promiscuous mode [ 458.492558][T23606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.501587][T23606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.509259][T13491] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.513066][T13491] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.517619][T13491] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.522109][T13491] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.543653][T23621] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.548011][T23621] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.616471][T22555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.619827][T22555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.625308][T23621] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.630724][T23621] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.667506][T21106] Bluetooth: hci7: command tx timeout [ 458.672868][ T8181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.675610][ T8181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.708311][T23621] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.712573][T23621] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.836893][ T5943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 458.842879][ T5943] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 458.844863][T23665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=23665 comm=syz.8.5710 [ 458.846688][ T5943] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 458.861437][ T5943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 458.873180][ T5943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 458.900245][T23667] netlink: 'syz.8.5711': attribute type 1 has an invalid length. [ 458.965345][T23621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.971029][T23669] xt_hashlimit: size too large, truncated to 1048576 [ 458.976396][T23621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.984518][T23621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 459.000606][T23621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 459.208833][T23662] chnl_net:caif_netlink_parms(): no params data found [ 459.247729][T23621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.321716][T23698] program syz.5.5718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.514337][T23703] netlink: 'syz.5.5719': attribute type 1 has an invalid length. [ 459.551842][T23703] 8021q: adding VLAN 0 to HW filter on device bond35 [ 459.589050][T13491] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.599216][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 459.601383][ T1114] ata1: failed to read log page 10h (errno=-5) [ 459.603367][ T1114] ata1.00: exception Emask 0x1 SAct 0x2000 SErr 0x0 action 0x0 [ 459.605986][ T1114] ata1.00: irq_stat 0x40000000 [ 459.607648][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 459.612650][ T1114] ata1.00: cmd 61/80:68:86:16:10/00:00:00:00:00/40 tag 13 ncq dma 65536 out [ 459.612650][ T1114] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 459.618238][ T1114] ata1.00: status: { DRDY } [ 459.620870][ T1114] ata1.00: error: { ABRT } [ 459.623201][ T1114] ata1.00: configured for UDMA/100 [ 459.625155][ T1114] ata1: EH complete [ 459.627591][T23662] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.630758][T23662] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.633148][T23662] bridge_slave_0: entered allmulticast mode [ 459.635905][T23662] bridge_slave_0: entered promiscuous mode [ 459.659204][T23662] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.661613][T23662] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.666830][T23662] bridge_slave_1: entered allmulticast mode [ 459.669634][T23662] bridge_slave_1: entered promiscuous mode [ 459.677227][T23621] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.717629][T13491] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.742679][T23662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.750895][T23662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.769981][T23713] netlink: 'syz.5.5721': attribute type 1 has an invalid length. [ 459.775570][ T8183] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.778480][ T8183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.784500][T21106] Bluetooth: hci6: command tx timeout [ 459.832422][T23713] 8021q: adding VLAN 0 to HW filter on device bond36 [ 459.833932][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5722'. [ 459.882567][T13491] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.895268][T23662] team0: Port device team_slave_0 added [ 459.931204][T23712] veth3: entered promiscuous mode [ 459.938586][T23712] bond36: (slave veth3): Enslaving as an active interface with a down link [ 459.942509][T23715] bridge_slave_1: left allmulticast mode [ 459.945206][T23715] bridge_slave_1: left promiscuous mode [ 459.947927][T23715] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.958650][T23715] bridge_slave_0: left allmulticast mode [ 459.961066][T23715] bridge_slave_0: left promiscuous mode [ 459.963787][T23715] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.062886][T23713] vlan0: entered allmulticast mode [ 460.064621][T23713] bond36: entered allmulticast mode [ 460.067213][T23713] bond36: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 460.088033][T23662] team0: Port device team_slave_1 added [ 460.093429][T23712] vlan0: entered allmulticast mode [ 460.096681][T23712] bond36: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 460.135800][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.138984][T10863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.168582][T13491] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.177526][T23662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.180301][T23662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.190799][T23662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.195568][T23662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.198032][T23662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.206597][T23662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.218834][T23712] vlan0: entered allmulticast mode [ 460.222351][T23712] bond36: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 460.283141][T23662] hsr_slave_0: entered promiscuous mode [ 460.285624][T23662] hsr_slave_1: entered promiscuous mode [ 460.287856][T23662] debugfs: 'hsr0' already exists in 'hsr' [ 460.289793][T23662] Cannot create hsr debugfs directory [ 460.334266][T23712] vlan0: entered allmulticast mode [ 460.338916][T23712] bond36: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 460.457276][T23712] vlan0: entered allmulticast mode [ 460.461111][T23712] bond36: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 460.530259][T13491] bridge_slave_1: left allmulticast mode [ 460.532639][T13491] bridge_slave_1: left promiscuous mode [ 460.535065][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.544691][T13491] bridge_slave_0: left allmulticast mode [ 460.547022][T13491] bridge_slave_0: left promiscuous mode [ 460.549480][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.608579][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 460.608590][ T40] audit: type=1400 audit(2001048620.816:2985): avc: denied { bpf } for pid=23725 comm="syz.8.5724" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 460.617671][ T40] audit: type=1400 audit(2001048620.816:2986): avc: denied { perfmon } for pid=23725 comm="syz.8.5724" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 460.624531][ T40] audit: type=1400 audit(2001048620.816:2987): avc: denied { read } for pid=23725 comm="syz.8.5724" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 460.632241][ T40] audit: type=1400 audit(2001048620.816:2988): avc: denied { open } for pid=23725 comm="syz.8.5724" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 460.640542][ T40] audit: type=1400 audit(2001048620.816:2989): avc: denied { ioctl } for pid=23725 comm="syz.8.5724" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 460.669556][ T40] audit: type=1400 audit(2001048620.872:2990): avc: denied { execute } for pid=23725 comm="syz.8.5724" path="/8/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.670939][T23726] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 460.677003][ T40] audit: type=1804 audit(2001048620.872:2991): pid=23726 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.5724" name="/newroot/8/file0" dev="tmpfs" ino=60 res=1 errno=0 [ 460.690907][T23726] ref_ctr increment failed for inode: 0x3c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ae8ee40 [ 460.698393][T23725] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 460.704400][T23725] ref_ctr decrement failed for inode: 0x3c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ae8ee40 [ 460.709186][T23725] uprobe: syz.8.5724:23725 failed to unregister, leaking uprobe [ 460.903280][T21106] Bluetooth: hci7: command tx timeout [ 460.984930][T13491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.023651][ T40] audit: type=1400 audit(2001048621.208:2992): avc: denied { create } for pid=23727 comm="syz.8.5725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 461.033023][ T40] audit: type=1400 audit(2001048621.208:2993): avc: denied { setopt } for pid=23727 comm="syz.8.5725" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 461.041425][ T40] audit: type=1400 audit(2001048621.208:2994): avc: denied { getopt } for pid=23727 comm="syz.8.5725" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 461.054336][T13491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.063583][T21106] Bluetooth: hci5: command tx timeout [ 461.098402][T13491] bond0 (unregistering): Released all slaves [ 461.153148][T23712] vlan0: entered allmulticast mode [ 461.156051][T23712] bond36: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 461.301341][T23735] netlink: 'syz.8.5726': attribute type 1 has an invalid length. [ 461.418203][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 461.539040][T23621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.545416][T22753] net_ratelimit: 8 callbacks suppressed [ 461.545432][T22753] bond1: (slave lo): failed to get link speed/duplex [ 461.596377][T23750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1190 sclass=netlink_route_socket pid=23750 comm=syz.5.5732 [ 461.789320][T23754] geneve2: entered promiscuous mode [ 461.794003][T23754] geneve2: entered allmulticast mode [ 461.806809][T23621] veth0_vlan: entered promiscuous mode [ 461.815861][T23621] veth1_vlan: entered promiscuous mode [ 461.902123][T13491] hsr_slave_0: left promiscuous mode [ 461.904918][T13491] hsr_slave_1: left promiscuous mode [ 461.908171][T13491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.913880][T13491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.926914][T23767] netlink: 'syz.5.5736': attribute type 1 has an invalid length. [ 461.928335][T13491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.934565][T13491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.997576][T13491] veth1_macvtap: left promiscuous mode [ 462.000255][T13491] veth0_macvtap: left promiscuous mode [ 462.003019][T13491] veth1_vlan: left promiscuous mode [ 462.006000][T13491] veth0_vlan: left promiscuous mode [ 462.013260][T23772] IPVS: Scheduler module ip_vs_sip not found [ 462.015940][T21106] Bluetooth: hci6: command tx timeout [ 462.530608][T13491] team0 (unregistering): Port device team_slave_1 removed [ 462.563819][T13491] team0 (unregistering): Port device team_slave_0 removed [ 462.976604][T23621] veth0_macvtap: entered promiscuous mode [ 462.984450][T23767] workqueue: Failed to create a rescuer kthread for wq "bond37": -EINTR [ 463.012338][T23621] veth1_macvtap: entered promiscuous mode [ 463.072058][T23779] random: crng reseeded on system resumption [ 463.086856][T23777] usb 2-1: USB disconnect, device number 2 [ 463.114753][T23621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.122738][T21106] Bluetooth: hci7: command tx timeout [ 463.144573][T23621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.149853][T23662] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 463.154976][T23662] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 463.176976][T23662] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 463.196152][T23662] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 463.228584][T10088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.237798][T10088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.242298][T10088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.249474][T13782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.256467][T13782] bond1: (slave lo): failed to get link speed/duplex [ 463.299394][T21106] Bluetooth: hci5: command tx timeout [ 463.365391][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.368017][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.401284][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5743'. [ 463.413446][T23790] syzkaller1: entered promiscuous mode [ 463.415388][T23790] syzkaller1: entered allmulticast mode [ 463.419787][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.422267][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.436889][T23662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.439801][T22613] bond1: (slave lo): failed to get link speed/duplex [ 463.558440][T23662] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.568577][T21003] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.570933][T21003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.593054][T10802] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.596000][T10802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.634260][T23662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.638464][T23799] netlink: 'syz.5.5745': attribute type 1 has an invalid length. [ 463.665647][T23799] 8021q: adding VLAN 0 to HW filter on device bond37 [ 463.740013][T21003] bond1: (slave lo): failed to get link speed/duplex [ 463.856651][T23817] mkiss: ax0: crc mode is auto. [ 463.862617][T23662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.891866][T23824] FAULT_INJECTION: forcing a failure. [ 463.891866][T23824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.897387][T23824] CPU: 0 UID: 0 PID: 23824 Comm: syz.8.5753 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.897413][T23824] Tainted: [L]=SOFTLOCKUP [ 463.897419][T23824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 463.897429][T23824] Call Trace: [ 463.897435][T23824] [ 463.897442][T23824] dump_stack_lvl+0x16c/0x1f0 [ 463.897487][T23824] should_fail_ex+0x512/0x640 [ 463.897518][T23824] _copy_from_user+0x2e/0xd0 [ 463.897540][T23824] copy_msghdr_from_user+0x98/0x160 [ 463.897563][T23824] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 463.897595][T23824] ___sys_sendmsg+0xfe/0x1d0 [ 463.897620][T23824] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.897671][T23824] __sys_sendmsg+0x16d/0x220 [ 463.897694][T23824] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.897742][T23824] do_syscall_64+0xcd/0xf80 [ 463.897762][T23824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.897778][T23824] RIP: 0033:0x7ff4d538f7c9 [ 463.897792][T23824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.897807][T23824] RSP: 002b:00007ff4d61ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.897822][T23824] RAX: ffffffffffffffda RBX: 00007ff4d55e5fa0 RCX: 00007ff4d538f7c9 [ 463.897832][T23824] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 463.897841][T23824] RBP: 00007ff4d61ce090 R08: 0000000000000000 R09: 0000000000000000 [ 463.897850][T23824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.897877][T23824] R13: 00007ff4d55e6038 R14: 00007ff4d55e5fa0 R15: 00007ffcc4b365c8 [ 463.897902][T23824] [ 463.930764][T10802] bond1: (slave lo): failed to get link speed/duplex [ 463.998563][T23830] netlink: 'syz.8.5755': attribute type 1 has an invalid length. [ 464.055481][T23833] sp0: Synchronizing with TNC [ 464.072327][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5757'. [ 464.138046][T23662] veth0_vlan: entered promiscuous mode [ 464.145373][T23662] veth1_vlan: entered promiscuous mode [ 464.166722][T23832] [U] è [ 464.182273][T23845] /dev/nullb0: Can't open blockdev [ 464.213657][T23662] veth0_macvtap: entered promiscuous mode [ 464.218114][T23662] veth1_macvtap: entered promiscuous mode [ 464.231435][T21106] Bluetooth: hci6: command tx timeout [ 464.233249][T23662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.246450][T23662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.258410][T10096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.266492][T10096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.270178][T10096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.283887][T10096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.302872][T23856] FAULT_INJECTION: forcing a failure. [ 464.302872][T23856] name failslab, interval 1, probability 0, space 0, times 0 [ 464.307907][T23856] CPU: 3 UID: 0 PID: 23856 Comm: syz.5.5763 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.307925][T23856] Tainted: [L]=SOFTLOCKUP [ 464.307929][T23856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 464.307936][T23856] Call Trace: [ 464.307940][T23856] [ 464.307944][T23856] dump_stack_lvl+0x16c/0x1f0 [ 464.307964][T23856] should_fail_ex+0x512/0x640 [ 464.307978][T23856] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 464.307991][T23856] should_failslab+0xc2/0x120 [ 464.308005][T23856] kmem_cache_alloc_node_noprof+0x86/0x800 [ 464.308015][T23856] ? __alloc_skb+0x156/0x410 [ 464.308032][T23856] ? __alloc_skb+0x156/0x410 [ 464.308044][T23856] __alloc_skb+0x156/0x410 [ 464.308056][T23856] ? __alloc_skb+0x35d/0x410 [ 464.308068][T23856] ? __pfx___alloc_skb+0x10/0x10 [ 464.308082][T23856] ? netlink_autobind.isra.0+0x158/0x370 [ 464.308096][T23856] netlink_alloc_large_skb+0x69/0x140 [ 464.308107][T23856] netlink_sendmsg+0x698/0xdd0 [ 464.308120][T23856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.308135][T23856] ____sys_sendmsg+0xa5d/0xc30 [ 464.308147][T23856] ? copy_msghdr_from_user+0x10a/0x160 [ 464.308162][T23856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.308179][T23856] ___sys_sendmsg+0x134/0x1d0 [ 464.308195][T23856] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.308226][T23856] __sys_sendmsg+0x16d/0x220 [ 464.308241][T23856] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.308264][T23856] do_syscall_64+0xcd/0xf80 [ 464.308276][T23856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.308287][T23856] RIP: 0033:0x7f766838f7c9 [ 464.308296][T23856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.308306][T23856] RSP: 002b:00007f76691ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.308316][T23856] RAX: ffffffffffffffda RBX: 00007f76685e5fa0 RCX: 00007f766838f7c9 [ 464.308323][T23856] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 464.308330][T23856] RBP: 00007f76691ae090 R08: 0000000000000000 R09: 0000000000000000 [ 464.308336][T23856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.308342][T23856] R13: 00007f76685e6038 R14: 00007f76685e5fa0 R15: 00007ffc741d6c38 [ 464.308356][T23856] [ 464.550232][T23863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5765'. [ 464.568291][T10802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.570921][T10802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.597383][T10866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.600361][T10866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.626598][ T1228] bond1: (slave lo): failed to get link speed/duplex [ 464.632668][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5766'. [ 464.757824][ T9567] bond1: (slave lo): failed to get link speed/duplex [ 464.802077][T23884] fuse: Bad value for 'group_id' [ 464.804189][T23884] fuse: Bad value for 'group_id' [ 464.818752][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5770'. [ 464.821968][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5770'. [ 464.825505][T23886] netlink: 'syz.4.5770': attribute type 11 has an invalid length. [ 464.828039][T23886] netlink: 'syz.4.5770': attribute type 13 has an invalid length. [ 464.871875][ T1228] bond1: (slave lo): failed to get link speed/duplex [ 464.964342][T23892] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 465.021375][ T8181] bond1: (slave lo): failed to get link speed/duplex [ 465.024184][T23897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5775'. [ 465.189254][T10855] bond1: (slave lo): failed to get link speed/duplex [ 465.344012][T21106] Bluetooth: hci7: command tx timeout [ 465.515899][T21106] Bluetooth: hci5: command tx timeout [ 465.745792][T23921] xt_l2tp: missing protocol rule (udp|l2tpip) [ 465.951546][T23931] FAULT_INJECTION: forcing a failure. [ 465.951546][T23931] name failslab, interval 1, probability 0, space 0, times 0 [ 465.957952][T23931] CPU: 3 UID: 0 PID: 23931 Comm: syz.3.5786 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.957980][T23931] Tainted: [L]=SOFTLOCKUP [ 465.957986][T23931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.958003][T23931] Call Trace: [ 465.958009][T23931] [ 465.958017][T23931] dump_stack_lvl+0x16c/0x1f0 [ 465.958040][T23931] should_fail_ex+0x512/0x640 [ 465.958062][T23931] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 465.958087][T23931] should_failslab+0xc2/0x120 [ 465.958110][T23931] kmem_cache_alloc_noprof+0x83/0x770 [ 465.958128][T23931] ? skb_clone+0x190/0x3f0 [ 465.958157][T23931] ? skb_clone+0x190/0x3f0 [ 465.958179][T23931] skb_clone+0x190/0x3f0 [ 465.958203][T23931] netlink_deliver_tap+0xabd/0xd30 [ 465.958235][T23931] netlink_unicast+0x64c/0x870 [ 465.958257][T23931] ? __pfx_netlink_unicast+0x10/0x10 [ 465.958283][T23931] netlink_sendmsg+0x8c8/0xdd0 [ 465.958305][T23931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.958332][T23931] ____sys_sendmsg+0xa5d/0xc30 [ 465.958351][T23931] ? copy_msghdr_from_user+0x10a/0x160 [ 465.958374][T23931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.958404][T23931] ___sys_sendmsg+0x134/0x1d0 [ 465.958429][T23931] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.958484][T23931] __sys_sendmsg+0x16d/0x220 [ 465.958509][T23931] ? __pfx___sys_sendmsg+0x10/0x10 [ 465.958547][T23931] do_syscall_64+0xcd/0xf80 [ 465.958568][T23931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.958585][T23931] RIP: 0033:0x7f3106f8f7c9 [ 465.958600][T23931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.958615][T23931] RSP: 002b:00007f3107e63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.958632][T23931] RAX: ffffffffffffffda RBX: 00007f31071e5fa0 RCX: 00007f3106f8f7c9 [ 465.958644][T23931] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 465.958654][T23931] RBP: 00007f3107e63090 R08: 0000000000000000 R09: 0000000000000000 [ 465.958665][T23931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.958675][T23931] R13: 00007f31071e6038 R14: 00007f31071e5fa0 R15: 00007fffe80638c8 [ 465.958700][T23931] [ 466.043542][ T40] kauditd_printk_skb: 192 callbacks suppressed [ 466.043557][ T40] audit: type=1400 audit(2001048625.892:3187): avc: denied { getopt } for pid=23928 comm="syz.4.5785" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 466.073543][ T40] audit: type=1400 audit(2001048625.911:3188): avc: denied { module_request } for pid=23928 comm="syz.4.5785" kmod="arpt_ipvs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 466.144110][ T40] audit: type=1400 audit(2001048625.985:3189): avc: denied { sqpoll } for pid=23936 comm="syz.3.5788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 466.154867][ T40] audit: type=1400 audit(2001048625.995:3190): avc: denied { checkpoint_restore } for pid=23928 comm="syz.4.5785" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 466.178413][ T40] audit: type=1400 audit(2001048626.023:3191): avc: denied { write } for pid=23928 comm="syz.4.5785" name="tcp6" dev="proc" ino=4026535611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 466.203863][ T40] audit: type=1400 audit(2001048626.032:3192): avc: denied { read } for pid=23936 comm="syz.3.5788" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 466.215385][ T40] audit: type=1400 audit(2001048626.032:3193): avc: denied { open } for pid=23936 comm="syz.3.5788" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 466.236736][ T40] audit: type=1400 audit(2001048626.032:3194): avc: denied { name_bind } for pid=23928 comm="syz.4.5785" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 466.257774][ T40] audit: type=1400 audit(2001048626.032:3195): avc: denied { node_bind } for pid=23928 comm="syz.4.5785" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 466.267017][ T40] audit: type=1400 audit(2001048626.032:3196): avc: denied { setopt } for pid=23928 comm="syz.4.5785" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 466.338969][T23954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1082 sclass=netlink_route_socket pid=23954 comm=syz.5.5792 [ 466.406463][T23961] FAULT_INJECTION: forcing a failure. [ 466.406463][T23961] name failslab, interval 1, probability 0, space 0, times 0 [ 466.414468][T23961] CPU: 3 UID: 0 PID: 23961 Comm: syz.3.5796 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.414496][T23961] Tainted: [L]=SOFTLOCKUP [ 466.414503][T23961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 466.414514][T23961] Call Trace: [ 466.414521][T23961] [ 466.414529][T23961] dump_stack_lvl+0x16c/0x1f0 [ 466.414568][T23961] should_fail_ex+0x512/0x640 [ 466.414589][T23961] ? __kmalloc_noprof+0xca/0x910 [ 466.414617][T23961] should_failslab+0xc2/0x120 [ 466.414640][T23961] __kmalloc_noprof+0xeb/0x910 [ 466.414663][T23961] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 466.414691][T23961] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 466.414712][T23961] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 466.414744][T23961] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 466.414768][T23961] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 466.414797][T23961] ? bpf_lsm_capable+0x9/0x10 [ 466.414816][T23961] ? security_capable+0x7e/0x260 [ 466.414842][T23961] ? ns_capable+0xd7/0x110 [ 466.414868][T23961] genl_rcv_msg+0x55c/0x800 [ 466.414905][T23961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.414927][T23961] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 466.414958][T23961] netlink_rcv_skb+0x158/0x420 [ 466.414977][T23961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.414996][T23961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.415025][T23961] ? netlink_deliver_tap+0x1ae/0xd30 [ 466.415054][T23961] genl_rcv+0x28/0x40 [ 466.415073][T23961] netlink_unicast+0x5aa/0x870 [ 466.415094][T23961] ? __pfx_netlink_unicast+0x10/0x10 [ 466.415121][T23961] netlink_sendmsg+0x8c8/0xdd0 [ 466.415145][T23961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.415172][T23961] ____sys_sendmsg+0xa5d/0xc30 [ 466.415192][T23961] ? copy_msghdr_from_user+0x10a/0x160 [ 466.415216][T23961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.415246][T23961] ___sys_sendmsg+0x134/0x1d0 [ 466.415272][T23961] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.415327][T23961] __sys_sendmsg+0x16d/0x220 [ 466.415353][T23961] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.415394][T23961] do_syscall_64+0xcd/0xf80 [ 466.415415][T23961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.415432][T23961] RIP: 0033:0x7f3106f8f7c9 [ 466.415447][T23961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.415463][T23961] RSP: 002b:00007f3107e63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.415481][T23961] RAX: ffffffffffffffda RBX: 00007f31071e5fa0 RCX: 00007f3106f8f7c9 [ 466.415492][T23961] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 466.415502][T23961] RBP: 00007f3107e63090 R08: 0000000000000000 R09: 0000000000000000 [ 466.415513][T23961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.415523][T23961] R13: 00007f31071e6038 R14: 00007f31071e5fa0 R15: 00007fffe80638c8 [ 466.415549][T23961] [ 466.665657][T23967] bond38: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 466.673693][T23967] 8021q: adding VLAN 0 to HW filter on device bond38 [ 466.741005][T23974] binder: 23973:23974 unknown command 0 [ 466.743608][T23974] binder: 23973:23974 ioctl c0306201 2000000005c0 returned -22 [ 466.915222][T23978] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 466.919813][T23978] block device autoloading is deprecated and will be removed. [ 466.959129][ T46] net_ratelimit: 12 callbacks suppressed [ 466.959148][ T46] bond1: (slave lo): failed to get link speed/duplex [ 466.968275][ T6025] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 467.075450][ T9567] bond1: (slave lo): failed to get link speed/duplex [ 467.130269][ T6025] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.134526][ T6025] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.137483][ T6025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.142509][ T6025] usb 8-1: config 0 descriptor?? [ 467.203601][T10096] bond1: (slave lo): failed to get link speed/duplex [ 467.321144][T18766] bond1: (slave lo): failed to get link speed/duplex [ 467.438977][ T170] bond1: (slave lo): failed to get link speed/duplex [ 467.556597][ T9567] bond1: (slave lo): failed to get link speed/duplex [ 467.582112][ T6025] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 467.586842][ T6025] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 467.591872][ T6025] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x4 [ 467.595088][ T6025] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 467.605560][ T6025] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 467.656689][T23989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5804'. [ 467.676867][T18766] bond1: (slave lo): failed to get link speed/duplex [ 467.708376][T23993] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5806'. [ 467.747367][T23997] comedi comedi0: Cannot bond this driver to itself! [ 467.749597][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5807'. [ 467.804010][ T8182] bond1: (slave lo): failed to get link speed/duplex [ 467.857117][T23969] netlink: 'syz.3.5797': attribute type 1 has an invalid length. [ 467.876451][T24015] xt_hashlimit: size too large, truncated to 1048576 [ 467.930922][T17516] bond1: (slave lo): failed to get link speed/duplex [ 468.050563][T10087] bond1: (slave lo): failed to get link speed/duplex [ 468.490707][T24047] FAULT_INJECTION: forcing a failure. [ 468.490707][T24047] name failslab, interval 1, probability 0, space 0, times 0 [ 468.495934][T24047] CPU: 2 UID: 0 PID: 24047 Comm: syz.8.5819 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.495964][T24047] Tainted: [L]=SOFTLOCKUP [ 468.495970][T24047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 468.495980][T24047] Call Trace: [ 468.495987][T24047] [ 468.495995][T24047] dump_stack_lvl+0x16c/0x1f0 [ 468.496017][T24047] should_fail_ex+0x512/0x640 [ 468.496035][T24047] ? __kmalloc_noprof+0xca/0x910 [ 468.496064][T24047] should_failslab+0xc2/0x120 [ 468.496085][T24047] __kmalloc_noprof+0xeb/0x910 [ 468.496109][T24047] ? rfkill_alloc+0xac/0x330 [ 468.496134][T24047] ? rfkill_alloc+0xac/0x330 [ 468.496153][T24047] rfkill_alloc+0xac/0x330 [ 468.496179][T24047] wiphy_new_nm+0x136a/0x2190 [ 468.496199][T24047] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 468.496220][T24047] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 468.496237][T24047] ieee80211_alloc_hw_nm+0x1bb5/0x22b0 [ 468.496256][T24047] ? __local_bh_enable_ip+0xa4/0x120 [ 468.496282][T24047] mac80211_hwsim_new_radio+0x1d3/0x5150 [ 468.496313][T24047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.496335][T24047] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 468.496364][T24047] hwsim_new_radio_nl+0xba2/0x1330 [ 468.496387][T24047] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 468.496417][T24047] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 468.496438][T24047] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 468.496463][T24047] genl_family_rcv_msg_doit+0x209/0x2f0 [ 468.496484][T24047] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.496512][T24047] ? bpf_lsm_capable+0x9/0x10 [ 468.496530][T24047] ? security_capable+0x7e/0x260 [ 468.496554][T24047] ? ns_capable+0xd7/0x110 [ 468.496577][T24047] genl_rcv_msg+0x55c/0x800 [ 468.496599][T24047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.496616][T24047] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 468.496646][T24047] netlink_rcv_skb+0x158/0x420 [ 468.496662][T24047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.496681][T24047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.496729][T24047] ? netlink_deliver_tap+0x1ae/0xd30 [ 468.496758][T24047] genl_rcv+0x28/0x40 [ 468.496775][T24047] netlink_unicast+0x5aa/0x870 [ 468.496794][T24047] ? __pfx_netlink_unicast+0x10/0x10 [ 468.496821][T24047] netlink_sendmsg+0x8c8/0xdd0 [ 468.496842][T24047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.496867][T24047] ____sys_sendmsg+0xa5d/0xc30 [ 468.496886][T24047] ? copy_msghdr_from_user+0x10a/0x160 [ 468.496908][T24047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.496938][T24047] ___sys_sendmsg+0x134/0x1d0 [ 468.496967][T24047] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.497021][T24047] __sys_sendmsg+0x16d/0x220 [ 468.497043][T24047] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.497082][T24047] do_syscall_64+0xcd/0xf80 [ 468.497101][T24047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.497119][T24047] RIP: 0033:0x7ff4d538f7c9 [ 468.497133][T24047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.497148][T24047] RSP: 002b:00007ff4d61ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.497164][T24047] RAX: ffffffffffffffda RBX: 00007ff4d55e5fa0 RCX: 00007ff4d538f7c9 [ 468.497175][T24047] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 468.497186][T24047] RBP: 00007ff4d61ce090 R08: 0000000000000000 R09: 0000000000000000 [ 468.497196][T24047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.497205][T24047] R13: 00007ff4d55e6038 R14: 00007ff4d55e5fa0 R15: 00007ffcc4b365c8 [ 468.497227][T24047] [ 468.685878][T24049] netlink: 'syz.8.5820': attribute type 322 has an invalid length. [ 468.697188][T24049] bridge2: entered promiscuous mode [ 468.699446][T24049] bridge2: entered allmulticast mode [ 468.748675][T24051] xt_hashlimit: size too large, truncated to 1048576 [ 468.884844][T24055] __nla_validate_parse: 1 callbacks suppressed [ 468.884860][T24055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5822'. [ 469.021972][T21106] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 469.025217][T21106] Bluetooth: hci6: Injecting HCI hardware error event [ 469.029349][T21106] Bluetooth: hci6: hardware error 0x00 [ 469.122300][T24057] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5823'. [ 469.125815][T24057] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5823'. [ 469.334672][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.339898][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.347731][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.351028][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.356516][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.496946][T24066] 9p: Bad value for 'rfdno' [ 469.518214][T24060] chnl_net:caif_netlink_parms(): no params data found [ 469.610567][T24060] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.614445][T24060] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.618536][T24060] bridge_slave_0: entered allmulticast mode [ 469.625829][T24060] bridge_slave_0: entered promiscuous mode [ 469.630634][T24060] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.636095][T24060] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.639161][T24060] bridge_slave_1: entered allmulticast mode [ 469.643969][T24060] bridge_slave_1: entered promiscuous mode [ 469.678217][T24060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.693705][T24060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.712051][T24060] team0: Port device team_slave_0 added [ 469.716128][T24060] team0: Port device team_slave_1 added [ 469.771278][T24060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.773822][T24060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.782882][T24060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.787474][T24086] netlink: 'syz.4.5832': attribute type 14 has an invalid length. [ 469.787987][T24084] sit0: entered promiscuous mode [ 469.790651][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5832'. [ 469.802110][T24084] netlink: 'syz.8.5831': attribute type 1 has an invalid length. [ 469.805438][T24084] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5831'. [ 469.809414][T24086] netlink: 'syz.4.5832': attribute type 14 has an invalid length. [ 469.809994][T24060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.812706][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5832'. [ 469.824794][T24060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.835381][T24060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.840796][ T6138] usb 8-1: USB disconnect, device number 32 [ 469.903994][T24060] hsr_slave_0: entered promiscuous mode [ 469.907330][T24060] hsr_slave_1: entered promiscuous mode [ 469.910811][T24060] debugfs: 'hsr0' already exists in 'hsr' [ 469.920281][T24060] Cannot create hsr debugfs directory [ 469.950586][T24101] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5835'. [ 469.971467][T24101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.988968][T24102] bond1: (slave batadv1): Opening slave failed [ 470.004941][T24104] bond1: (slave batadv1): Opening slave failed [ 470.048892][ T5941] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 470.055403][ T5941] Bluetooth: hci5: Injecting HCI hardware error event [ 470.061552][ T5943] Bluetooth: hci5: hardware error 0x00 [ 470.230146][T24114] bond0: entered allmulticast mode [ 470.232161][T24114] bond_slave_0: entered allmulticast mode [ 470.233989][T24114] bond_slave_1: entered allmulticast mode [ 470.499912][T24129] xt_hashlimit: size too large, truncated to 1048576 [ 470.535519][T24132] netlink: 'syz.8.5844': attribute type 1 has an invalid length. [ 470.660507][T24136] FAULT_INJECTION: forcing a failure. [ 470.660507][T24136] name failslab, interval 1, probability 0, space 0, times 0 [ 470.664745][T24136] CPU: 1 UID: 0 PID: 24136 Comm: syz.3.5845 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.664762][T24136] Tainted: [L]=SOFTLOCKUP [ 470.664766][T24136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 470.664773][T24136] Call Trace: [ 470.664778][T24136] [ 470.664783][T24136] dump_stack_lvl+0x16c/0x1f0 [ 470.664798][T24136] should_fail_ex+0x512/0x640 [ 470.664813][T24136] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 470.664828][T24136] should_failslab+0xc2/0x120 [ 470.664843][T24136] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 470.664856][T24136] ? kasprintf+0xc7/0x100 [ 470.664872][T24136] ? kvasprintf+0xbc/0x150 [ 470.664884][T24136] kvasprintf+0xbc/0x150 [ 470.664902][T24136] ? __pfx_kvasprintf+0x10/0x10 [ 470.664915][T24136] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 470.664932][T24136] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.664943][T24136] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 470.664961][T24136] kasprintf+0xc7/0x100 [ 470.664974][T24136] ? __pfx_kasprintf+0x10/0x10 [ 470.664993][T24136] ieee80211_alloc_led_names+0x1b0/0x420 [ 470.665008][T24136] ieee80211_alloc_hw_nm+0x197c/0x22b0 [ 470.665023][T24136] mac80211_hwsim_new_radio+0x1d3/0x5150 [ 470.665043][T24136] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 470.665057][T24136] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 470.665074][T24136] hwsim_new_radio_nl+0xba2/0x1330 [ 470.665089][T24136] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 470.665107][T24136] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 470.665121][T24136] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 470.665137][T24136] genl_family_rcv_msg_doit+0x209/0x2f0 [ 470.665150][T24136] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 470.665167][T24136] ? bpf_lsm_capable+0x9/0x10 [ 470.665179][T24136] ? security_capable+0x7e/0x260 [ 470.665195][T24136] ? ns_capable+0xd7/0x110 [ 470.665211][T24136] genl_rcv_msg+0x55c/0x800 [ 470.665224][T24136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.665237][T24136] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 470.665255][T24136] netlink_rcv_skb+0x158/0x420 [ 470.665265][T24136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.665278][T24136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.665294][T24136] ? netlink_deliver_tap+0x1ae/0xd30 [ 470.665312][T24136] genl_rcv+0x28/0x40 [ 470.665322][T24136] netlink_unicast+0x5aa/0x870 [ 470.665334][T24136] ? __pfx_netlink_unicast+0x10/0x10 [ 470.665350][T24136] netlink_sendmsg+0x8c8/0xdd0 [ 470.665362][T24136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.665378][T24136] ____sys_sendmsg+0xa5d/0xc30 [ 470.665390][T24136] ? copy_msghdr_from_user+0x10a/0x160 [ 470.665405][T24136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.665422][T24136] ___sys_sendmsg+0x134/0x1d0 [ 470.665438][T24136] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.665470][T24136] __sys_sendmsg+0x16d/0x220 [ 470.665485][T24136] ? __pfx___sys_sendmsg+0x10/0x10 [ 470.665508][T24136] do_syscall_64+0xcd/0xf80 [ 470.665520][T24136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.665532][T24136] RIP: 0033:0x7f3106f8f7c9 [ 470.665541][T24136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.665551][T24136] RSP: 002b:00007f3107e63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.665562][T24136] RAX: ffffffffffffffda RBX: 00007f31071e5fa0 RCX: 00007f3106f8f7c9 [ 470.665569][T24136] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 470.665575][T24136] RBP: 00007f3107e63090 R08: 0000000000000000 R09: 0000000000000000 [ 470.665582][T24136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.665588][T24136] R13: 00007f31071e6038 R14: 00007f31071e5fa0 R15: 00007fffe80638c8 [ 470.665601][T24136] [ 470.901867][T24132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.916495][T24134] bond2: (slave erspan1): making interface the new active one [ 470.919904][T24134] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 470.988139][T10817] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.993283][T10817] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.026236][T24060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 471.031186][T24060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 471.037370][T24060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 471.043056][T24060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 471.076651][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5848'. [ 471.100763][T10817] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.105084][T10817] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.144295][T24060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.159794][T24060] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.189309][T10817] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.192703][T10817] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.201828][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.204160][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.205327][ T5941] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 471.214943][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.217504][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.297671][T10817] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.300854][T10817] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.401760][T24060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.418735][T21106] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 471.437069][T24060] veth0_vlan: entered promiscuous mode [ 471.442921][T24060] veth1_vlan: entered promiscuous mode [ 471.475957][ T40] kauditd_printk_skb: 239 callbacks suppressed [ 471.475973][ T40] audit: type=1400 audit(2001048630.977:3436): avc: denied { read write } for pid=23621 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.492218][ T40] audit: type=1400 audit(2001048630.977:3437): avc: denied { open } for pid=23621 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.505161][ T40] audit: type=1400 audit(2001048630.977:3438): avc: denied { ioctl } for pid=23621 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.506749][T10817] bridge_slave_1: left allmulticast mode [ 471.513818][ T40] audit: type=1400 audit(2001048630.987:3439): avc: denied { read write } for pid=24169 comm="syz.3.5854" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 471.516079][T10817] bridge_slave_1: left promiscuous mode [ 471.523770][ T40] audit: type=1400 audit(2001048630.987:3440): avc: denied { open } for pid=24169 comm="syz.3.5854" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 471.524429][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.531566][ T40] audit: type=1400 audit(2001048630.987:3441): avc: denied { ioctl } for pid=24169 comm="syz.3.5854" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 471.543312][T10817] bridge_slave_0: left allmulticast mode [ 471.545729][T10817] bridge_slave_0: left promiscuous mode [ 471.548415][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.589229][T21106] Bluetooth: hci0: command tx timeout [ 471.613273][ T40] audit: type=1400 audit(2001048631.108:3442): avc: denied { map_create } for pid=24172 comm="syz.3.5855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 471.620335][ T40] audit: type=1400 audit(2001048631.108:3443): avc: denied { bpf } for pid=24172 comm="syz.3.5855" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 471.628724][ T40] audit: type=1400 audit(2001048631.108:3444): avc: denied { map_read map_write } for pid=24172 comm="syz.3.5855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 471.628754][ T40] audit: type=1400 audit(2001048631.108:3445): avc: denied { mounton } for pid=24172 comm="syz.3.5855" path="/40/bus" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 471.978751][T10817] bond1 (unregistering): (slave erspan1): Releasing active interface [ 472.045258][T10817] dvmrp6 (unregistering): left allmulticast mode [ 472.128120][T10817] bridge0 (unregistering): left allmulticast mode [ 472.376949][ T5943] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 472.672366][T10817] bond1 (unregistering): Released all slaves [ 472.782429][T10817] bond2 (unregistering): Released all slaves [ 472.908364][T10817] bond3 (unregistering): Released all slaves [ 472.914782][T10817] bond4 (unregistering): Released all slaves [ 473.006755][T24182] netlink: 'syz.4.5858': attribute type 1 has an invalid length. [ 473.055862][T10817] smc: removing net device bond0 with user defined pnetid SYZ2 [ 473.060214][T10817] bond0 (unregistering): Released all slaves [ 473.062208][T24183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5858'. [ 473.066502][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5858'. [ 473.171711][T10817] bond5 (unregistering): Released all slaves [ 473.177464][T24185] xt_hashlimit: size too large, truncated to 1048576 [ 473.179707][T10817] bond6 (unregistering): Released all slaves [ 473.317489][T10817] bond7 (unregistering): Released all slaves [ 473.423445][T10817] bond8 (unregistering): Released all slaves [ 473.547544][T10817] bond9 (unregistering): Released all slaves [ 473.688183][T10817] bond10 (unregistering): Released all slaves [ 473.824577][ T5943] Bluetooth: hci0: command tx timeout [ 473.834162][T10817] bond11 (unregistering): (slave bond12): Releasing backup interface [ 473.838052][T10817] bond12 (unregistering): left promiscuous mode [ 473.889681][T10817] bond11 (unregistering): Released all slaves [ 474.034976][T10817] bond12 (unregistering): Released all slaves [ 474.174482][T10817] bond13 (unregistering): Released all slaves [ 474.309980][T10817] bond14 (unregistering): Released all slaves [ 474.446412][T10817] bond15 (unregistering): Released all slaves [ 474.556191][T10817] bond16 (unregistering): Released all slaves [ 474.670197][T10817] bond17 (unregistering): Released all slaves [ 474.813600][T10817] bond18 (unregistering): Released all slaves [ 474.947836][T10817] bond19 (unregistering): Released all slaves [ 475.068564][T10817] bond20 (unregistering): Released all slaves [ 475.210777][T10817] bond21 (unregistering): Released all slaves [ 475.342888][T10817] bond22 (unregistering): Released all slaves [ 475.478206][T10817] bond23 (unregistering): Released all slaves [ 475.603028][T10817] bond24 (unregistering): Released all slaves [ 475.738967][T10817] bond25 (unregistering): Released all slaves [ 475.892767][T10817] bond26 (unregistering): Released all slaves [ 476.032245][T10817] bond27 (unregistering): Released all slaves [ 476.038890][ T5943] Bluetooth: hci0: command tx timeout [ 476.133970][T10817] bond28 (unregistering): Released all slaves [ 476.140559][T10817] bond29 (unregistering): Released all slaves [ 476.241370][T10817] bond30 (unregistering): Released all slaves [ 476.336661][T10817] bond31 (unregistering): Released all slaves [ 476.430521][T10817] bond32 (unregistering): Released all slaves [ 476.534465][T10817] bond33 (unregistering): Released all slaves [ 476.629438][T10817] bond34 (unregistering): Released all slaves [ 476.725717][T10817] bond35 (unregistering): Released all slaves [ 476.822847][T10817] bond36 (unregistering): (slave veth3): Releasing active interface [ 476.874839][T10817] bond36 (unregistering): Released all slaves [ 476.976526][T10817] bond37 (unregistering): Released all slaves [ 477.097422][T10817] bond38 (unregistering): Released all slaves [ 477.134567][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 477.134578][ T40] audit: type=1400 audit(2001048636.259:3458): avc: denied { unmount } for pid=23621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 477.151538][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.167153][T24189] __nla_validate_parse: 1 callbacks suppressed [ 477.167164][T24189] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5859'. [ 477.195094][ T40] audit: type=1400 audit(2001048636.325:3459): avc: denied { recv } for pid=0 comm="swapper/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=52768 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 477.224903][T24060] veth0_macvtap: entered promiscuous mode [ 477.274346][T24060] veth1_macvtap: entered promiscuous mode [ 477.383695][ T40] audit: type=1400 audit(2001048636.493:3460): avc: denied { setattr } for pid=24190 comm="syz.4.5860" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 477.390839][T24060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.393991][ T40] audit: type=1400 audit(2001048636.493:3461): avc: denied { create } for pid=24190 comm="syz.4.5860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.410093][ T40] audit: type=1400 audit(2001048636.493:3462): avc: denied { ioctl } for pid=24190 comm="syz.4.5860" path="socket:[126294]" dev="sockfs" ino=126294 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.455311][ T40] audit: type=1400 audit(2001048636.568:3463): avc: denied { cmd } for pid=24194 comm="syz.4.5862" path="socket:[125605]" dev="sockfs" ino=125605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 477.532334][T24060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.551365][ T40] audit: type=1400 audit(2001048636.652:3464): avc: denied { create } for pid=24200 comm="syz.4.5863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 477.573265][ T40] audit: type=1400 audit(2001048636.661:3465): avc: denied { write } for pid=24200 comm="syz.4.5863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 477.700012][T22503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.706239][T22503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.712369][T22503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.715592][T22503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.745249][ T40] audit: type=1400 audit(2001048636.830:3466): avc: denied { read write } for pid=24202 comm="syz.4.5864" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 477.753409][ T40] audit: type=1400 audit(2001048636.848:3467): avc: denied { open } for pid=24202 comm="syz.4.5864" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 477.827988][ T9994] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 477.857567][ T170] net_ratelimit: 19 callbacks suppressed [ 477.857583][ T170] bond1: (slave lo): failed to get link speed/duplex [ 477.937039][T24211] xt_hashlimit: size too large, truncated to 1048576 [ 477.970414][T24215] xt_hashlimit: size too large, truncated to 1048576 [ 478.026385][ T46] bond1: (slave lo): failed to get link speed/duplex [ 478.109145][T22555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.111558][T22555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.243658][T10096] bond1: (slave lo): failed to get link speed/duplex [ 478.246013][T10092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.256664][T10092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.263895][ T5943] Bluetooth: hci0: command tx timeout [ 478.353361][T24227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5870'. [ 478.556522][T22555] bond1: (slave lo): failed to get link speed/duplex [ 478.605300][T24242] FAULT_INJECTION: forcing a failure. [ 478.605300][T24242] name failslab, interval 1, probability 0, space 0, times 0 [ 478.605333][T24242] CPU: 0 UID: 0 PID: 24242 Comm: syz.0.5876 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.605358][T24242] Tainted: [L]=SOFTLOCKUP [ 478.605364][T24242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.605375][T24242] Call Trace: [ 478.605381][T24242] [ 478.605388][T24242] dump_stack_lvl+0x16c/0x1f0 [ 478.605432][T24242] should_fail_ex+0x512/0x640 [ 478.605460][T24242] ? kmem_cache_alloc_noprof+0x62/0x770 [ 478.605481][T24242] should_failslab+0xc2/0x120 [ 478.605505][T24242] kmem_cache_alloc_noprof+0x83/0x770 [ 478.605522][T24242] ? kernfs_add_one+0x37d/0x840 [ 478.605545][T24242] ? __kernfs_new_node+0xd2/0x990 [ 478.605570][T24242] ? __kernfs_new_node+0xd2/0x990 [ 478.605589][T24242] __kernfs_new_node+0xd2/0x990 [ 478.605610][T24242] ? kernfs_add_one+0x14e/0x840 [ 478.605649][T24242] ? __pfx___kernfs_new_node+0x10/0x10 [ 478.605677][T24242] ? find_held_lock+0x2b/0x80 [ 478.605703][T24242] ? kernfs_root+0xee/0x2a0 [ 478.605728][T24242] kernfs_new_node+0x13c/0x1e0 [ 478.605757][T24242] kernfs_create_link+0xcc/0x240 [ 478.605777][T24242] sysfs_do_create_link_sd+0x90/0x140 [ 478.605799][T24242] sysfs_create_link+0x61/0xc0 [ 478.605819][T24242] device_add+0x530/0x1980 [ 478.605849][T24242] ? __pfx_device_add+0x10/0x10 [ 478.605879][T24242] ? kfree_const+0x55/0x60 [ 478.605899][T24242] device_create_groups_vargs+0x1f8/0x270 [ 478.605934][T24242] device_create+0xed/0x130 [ 478.605961][T24242] ? __pfx_device_create+0x10/0x10 [ 478.605989][T24242] ? do_init_timer+0xc9/0x110 [ 478.606012][T24242] ? ieee80211_roc_setup+0x136/0x270 [ 478.606038][T24242] ? ieee80211_alloc_hw_nm+0x231/0x22b0 [ 478.606064][T24242] mac80211_hwsim_new_radio+0x36a/0x5150 [ 478.606099][T24242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 478.606123][T24242] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 478.606155][T24242] hwsim_new_radio_nl+0xba2/0x1330 [ 478.606180][T24242] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 478.606212][T24242] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 478.606234][T24242] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 478.606260][T24242] genl_family_rcv_msg_doit+0x209/0x2f0 [ 478.606282][T24242] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 478.606311][T24242] ? bpf_lsm_capable+0x9/0x10 [ 478.606328][T24242] ? security_capable+0x7e/0x260 [ 478.606353][T24242] ? ns_capable+0xd7/0x110 [ 478.606378][T24242] genl_rcv_msg+0x55c/0x800 [ 478.606402][T24242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.606422][T24242] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 478.606454][T24242] netlink_rcv_skb+0x158/0x420 [ 478.606472][T24242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.606493][T24242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.606522][T24242] ? netlink_deliver_tap+0x1ae/0xd30 [ 478.606553][T24242] genl_rcv+0x28/0x40 [ 478.606570][T24242] netlink_unicast+0x5aa/0x870 [ 478.606591][T24242] ? __pfx_netlink_unicast+0x10/0x10 [ 478.606619][T24242] netlink_sendmsg+0x8c8/0xdd0 [ 478.606641][T24242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.606669][T24242] ____sys_sendmsg+0xa5d/0xc30 [ 478.606689][T24242] ? copy_msghdr_from_user+0x10a/0x160 [ 478.606713][T24242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.606745][T24242] ___sys_sendmsg+0x134/0x1d0 [ 478.606771][T24242] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.606830][T24242] __sys_sendmsg+0x16d/0x220 [ 478.606855][T24242] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.606896][T24242] do_syscall_64+0xcd/0xf80 [ 478.606917][T24242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.606938][T24242] RIP: 0033:0x7fb30398f7c9 [ 478.606953][T24242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.606969][T24242] RSP: 002b:00007fb304884038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.606986][T24242] RAX: ffffffffffffffda RBX: 00007fb303be5fa0 RCX: 00007fb30398f7c9 [ 478.606998][T24242] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 478.607008][T24242] RBP: 00007fb304884090 R08: 0000000000000000 R09: 0000000000000000 [ 478.607018][T24242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.607029][T24242] R13: 00007fb303be6038 R14: 00007fb303be5fa0 R15: 00007fffd39cfc18 [ 478.607054][T24242] [ 478.731617][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5879'. [ 478.803958][T10817] hsr_slave_0: left promiscuous mode [ 478.807930][T10817] hsr_slave_1: left promiscuous mode [ 478.815617][T10817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.815637][T10817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.819736][T10817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.819754][T10817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.855662][T10817] veth1_macvtap: left promiscuous mode [ 478.855733][T10817] veth0_macvtap: left promiscuous mode [ 478.970405][T24258] netlink: 'syz.0.5881': attribute type 21 has an invalid length. [ 478.982838][T24258] binder: 24254:24258 ioctl c0306201 200000000080 returned -14 [ 478.987503][T24258] binder: 24254:24258 ioctl c0306201 200000000300 returned -14 [ 479.180337][T24273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5887'. [ 479.274786][T24277] netlink: 'syz.4.5888': attribute type 1 has an invalid length. [ 479.403298][T10817] team0 (unregistering): Port device team_slave_1 removed [ 479.446538][T10817] team0 (unregistering): Port device team_slave_0 removed [ 479.941519][T24277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.951338][T24278] bond1: (slave erspan1): making interface the new active one [ 479.956769][T24278] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 480.000020][ T46] bond1: (slave lo): failed to get link speed/duplex [ 480.043604][T24288] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5892'. [ 480.085249][T24283] kvm: kvm [24282]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 480.090443][T24283] kvm: kvm [24282]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 480.115065][T19713] bond1: (slave lo): failed to get link speed/duplex [ 480.232769][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5898'. [ 480.242760][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 480.296938][T10959] bond1: (slave lo): failed to get link speed/duplex [ 480.425062][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 480.429104][T10097] bond1: (slave lo): failed to get link speed/duplex [ 480.429301][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.436929][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.442115][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.445994][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.456947][ T10] usb 5-1: config 0 descriptor?? [ 480.465387][T24327] netlink: 'syz.8.5901': attribute type 7 has an invalid length. [ 480.532481][T24330] SET target dimension over the limit! [ 480.543298][ T9994] bond1: (slave lo): failed to get link speed/duplex [ 480.660798][ T8181] bond1: (slave lo): failed to get link speed/duplex [ 480.826057][T24354] netlink: 'syz.8.5911': attribute type 1 has an invalid length. [ 480.854082][T24354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.906747][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 480.910088][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 480.915719][ T10] usb 5-1: USB disconnect, device number 12 [ 481.035439][T24364] Cannot find set identified by id 0 to match [ 481.256542][T21106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.262115][T21106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.265352][T21106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.268375][T21106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.273264][T21106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.490980][T10802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.612806][T10802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.719741][T10802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.737984][T24375] chnl_net:caif_netlink_parms(): no params data found [ 481.819672][T24375] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.822816][T24375] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.826443][T24375] bridge_slave_0: entered allmulticast mode [ 481.829249][T24375] bridge_slave_0: entered promiscuous mode [ 481.852296][T10802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.860211][T24375] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.862552][T24375] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.865002][T24375] bridge_slave_1: entered allmulticast mode [ 481.878265][T24375] bridge_slave_1: entered promiscuous mode [ 481.907402][T24375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.915483][T24375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.941088][T24375] team0: Port device team_slave_0 added [ 481.944940][T24375] team0: Port device team_slave_1 added [ 481.967712][T24375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.970679][T24375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.983643][ T6021] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 481.987136][T24375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.995791][T24375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.000154][T24375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.013287][T24375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.046812][T24394] No control pipe specified [ 482.069271][T24375] hsr_slave_0: entered promiscuous mode [ 482.079358][T24375] hsr_slave_1: entered promiscuous mode [ 482.081743][T24375] debugfs: 'hsr0' already exists in 'hsr' [ 482.083721][T24375] Cannot create hsr debugfs directory [ 482.108780][T24400] FAULT_INJECTION: forcing a failure. [ 482.108780][T24400] name failslab, interval 1, probability 0, space 0, times 0 [ 482.114216][T24400] CPU: 1 UID: 0 PID: 24400 Comm: syz.8.5925 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.114241][T24400] Tainted: [L]=SOFTLOCKUP [ 482.114247][T24400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 482.114258][T24400] Call Trace: [ 482.114265][T24400] [ 482.114273][T24400] dump_stack_lvl+0x16c/0x1f0 [ 482.114296][T24400] should_fail_ex+0x512/0x640 [ 482.114316][T24400] ? __kmalloc_cache_noprof+0x5f/0x800 [ 482.114346][T24400] should_failslab+0xc2/0x120 [ 482.114368][T24400] __kmalloc_cache_noprof+0x80/0x800 [ 482.114393][T24400] ? do_raw_spin_lock+0x12c/0x2b0 [ 482.114415][T24400] ? kobject_uevent_env+0x265/0x1920 [ 482.114456][T24400] ? kobject_uevent_env+0x265/0x1920 [ 482.114479][T24400] kobject_uevent_env+0x265/0x1920 [ 482.114500][T24400] ? __pfx_dev_uevent_name+0x10/0x10 [ 482.114525][T24400] ? bus_to_subsys+0x131/0x160 [ 482.114545][T24400] device_add+0x1103/0x1980 [ 482.114573][T24400] ? __pfx_device_add+0x10/0x10 [ 482.114603][T24400] ? kfree_const+0x55/0x60 [ 482.114623][T24400] device_create_groups_vargs+0x1f8/0x270 [ 482.114651][T24400] device_create+0xed/0x130 [ 482.114678][T24400] ? __pfx_device_create+0x10/0x10 [ 482.114705][T24400] ? do_init_timer+0xc9/0x110 [ 482.114742][T24400] ? ieee80211_roc_setup+0x136/0x270 [ 482.114768][T24400] ? ieee80211_alloc_hw_nm+0x231/0x22b0 [ 482.114792][T24400] mac80211_hwsim_new_radio+0x36a/0x5150 [ 482.114824][T24400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 482.114847][T24400] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 482.114877][T24400] hwsim_new_radio_nl+0xba2/0x1330 [ 482.114907][T24400] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 482.114937][T24400] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 482.114958][T24400] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 482.114985][T24400] genl_family_rcv_msg_doit+0x209/0x2f0 [ 482.115007][T24400] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 482.115036][T24400] ? bpf_lsm_capable+0x9/0x10 [ 482.115056][T24400] ? security_capable+0x7e/0x260 [ 482.115083][T24400] ? ns_capable+0xd7/0x110 [ 482.115109][T24400] genl_rcv_msg+0x55c/0x800 [ 482.115132][T24400] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.115152][T24400] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 482.115183][T24400] netlink_rcv_skb+0x158/0x420 [ 482.115200][T24400] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.115221][T24400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.115248][T24400] ? netlink_deliver_tap+0x1ae/0xd30 [ 482.115276][T24400] genl_rcv+0x28/0x40 [ 482.115292][T24400] netlink_unicast+0x5aa/0x870 [ 482.115311][T24400] ? __pfx_netlink_unicast+0x10/0x10 [ 482.115337][T24400] netlink_sendmsg+0x8c8/0xdd0 [ 482.115358][T24400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.115381][T24400] ____sys_sendmsg+0xa5d/0xc30 [ 482.115400][T24400] ? copy_msghdr_from_user+0x10a/0x160 [ 482.115422][T24400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.115450][T24400] ___sys_sendmsg+0x134/0x1d0 [ 482.115475][T24400] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.115526][T24400] __sys_sendmsg+0x16d/0x220 [ 482.115550][T24400] ? __pfx___sys_sendmsg+0x10/0x10 [ 482.115584][T24400] do_syscall_64+0xcd/0xf80 [ 482.115598][T24400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.115609][T24400] RIP: 0033:0x7ff4d538f7c9 [ 482.115619][T24400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.115630][T24400] RSP: 002b:00007ff4d61ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.115642][T24400] RAX: ffffffffffffffda RBX: 00007ff4d55e5fa0 RCX: 00007ff4d538f7c9 [ 482.115649][T24400] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 482.115655][T24400] RBP: 00007ff4d61ce090 R08: 0000000000000000 R09: 0000000000000000 [ 482.115661][T24400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.115667][T24400] R13: 00007ff4d55e6038 R14: 00007ff4d55e5fa0 R15: 00007ffcc4b365c8 [ 482.115681][T24400] [ 482.163848][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.186352][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.207620][T10802] bridge_slave_1: left allmulticast mode [ 482.209118][ T6021] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 482.209998][T10802] bridge_slave_1: left promiscuous mode [ 482.212497][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.214382][T10802] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.218400][ T6021] usb 5-1: config 0 descriptor?? [ 482.291479][T10802] bridge_slave_0: left allmulticast mode [ 482.293422][T10802] bridge_slave_0: left promiscuous mode [ 482.296355][T10802] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.494031][T10802] bond1 (unregistering): (slave erspan1): Releasing active interface [ 482.670655][T10802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.716358][T10802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.723464][ T6021] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 482.732346][ T6021] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0016/input/input40 [ 482.758459][T10802] bond0 (unregistering): Released all slaves [ 482.800014][ T5943] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 482.805805][ T5943] Bluetooth: hci0: Injecting HCI hardware error event [ 482.808981][ T5943] Bluetooth: hci0: hardware error 0x00 [ 482.906301][T10802] bond1 (unregistering): Released all slaves [ 482.934373][ T40] kauditd_printk_skb: 260 callbacks suppressed [ 482.934390][ T40] audit: type=1400 audit(2001048641.682:3728): avc: denied { prog_load } for pid=24384 comm="syz.0.5919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 482.947084][ T40] audit: type=1400 audit(2001048641.700:3729): avc: denied { bpf } for pid=24384 comm="syz.0.5919" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 482.965333][ T40] audit: type=1400 audit(2001048641.710:3730): avc: denied { read } for pid=5328 comm="acpid" name="event3" dev="devtmpfs" ino=3751 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.987703][ T40] audit: type=1400 audit(2001048641.728:3731): avc: denied { open } for pid=5328 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3751 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 482.998573][ T6021] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 483.002135][T24404] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5926'. [ 483.003242][ T40] audit: type=1400 audit(2001048641.728:3732): avc: denied { ioctl } for pid=5328 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3751 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 483.003289][ T40] audit: type=1400 audit(2001048641.738:3733): avc: denied { create } for pid=24403 comm="syz.8.5926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 483.003326][ T40] audit: type=1400 audit(2001048641.747:3734): avc: denied { write } for pid=24403 comm="syz.8.5926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 483.022662][ T6021] usb 5-1: USB disconnect, device number 13 [ 483.039133][T24398] tipc: Started in network mode [ 483.053580][T24398] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 483.055342][T24405] fido_id[24405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 483.059169][T24398] tipc: Enabled bearer , priority 10 [ 483.102614][ T40] audit: type=1400 audit(2001048641.841:3735): avc: denied { read write } for pid=23606 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.134964][ T40] audit: type=1400 audit(2001048641.841:3736): avc: denied { open } for pid=23606 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.157456][ T40] audit: type=1400 audit(2001048641.841:3737): avc: denied { ioctl } for pid=23606 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 483.163455][T24410] netlink: 'syz.3.5928': attribute type 3 has an invalid length. [ 483.283541][T24415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5930'. [ 483.287306][T24415] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5930'. [ 483.291215][T24415] netlink: 'syz.8.5930': attribute type 6 has an invalid length. [ 483.310524][T24375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.437550][T24375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.484649][T21106] Bluetooth: hci3: command tx timeout [ 483.545800][T24420] xt_hashlimit: size too large, truncated to 1048576 [ 483.573483][T24375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.658918][T10802] hsr_slave_0: left promiscuous mode [ 483.662254][T10802] hsr_slave_1: left promiscuous mode [ 483.665330][T10802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.668590][T10802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.672985][T10802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.676160][T10802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.728162][T10802] veth1_macvtap: left promiscuous mode [ 483.730755][T10802] veth0_macvtap: left promiscuous mode [ 483.733191][T10802] veth1_vlan: left promiscuous mode [ 483.737373][T10802] veth0_vlan: left promiscuous mode [ 483.839555][T24428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5934'. [ 483.839577][T24428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5934'. [ 483.839604][T24428] netlink: 'syz.8.5934': attribute type 11 has an invalid length. [ 483.839616][T24428] netlink: 'syz.8.5934': attribute type 7 has an invalid length. [ 484.141348][T24438] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 484.313460][T24441] sctp: [Deprecated]: syz.3.5938 (pid 24441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.313460][T24441] Use struct sctp_sack_info instead [ 484.321281][T24441] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5938'. [ 484.355953][T10802] team0 (unregistering): Port device team_slave_1 removed [ 484.388683][T10802] team0 (unregistering): Port device team_slave_0 removed [ 484.857732][T24375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.868511][T13512] tipc: Node number set to 4269801488 [ 484.885646][T22555] net_ratelimit: 8 callbacks suppressed [ 484.885662][T22555] bond1: (slave lo): failed to get link speed/duplex [ 485.002708][T22555] bond1: (slave lo): failed to get link speed/duplex [ 485.122097][ T5943] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 485.154234][T10863] bond1: (slave lo): failed to get link speed/duplex [ 485.162054][T24375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 485.177993][T24375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 485.187372][T24375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 485.207504][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5943'. [ 485.249567][T24375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 485.266403][T24458] netlink: 'syz.3.5944': attribute type 1 has an invalid length. [ 485.337045][T24469] xt_hashlimit: size too large, truncated to 1048576 [ 485.349130][T24375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.354895][T24375] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.409233][T24472] ufs: You didn't specify the type of your ufs filesystem [ 485.409233][T24472] [ 485.409233][T24472] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 485.409233][T24472] [ 485.409233][T24472] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 485.411483][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.418797][T24472] ufs: failed to set blocksize [ 485.421205][T10863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.433995][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.436297][T10863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.456687][T24375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 485.460255][T24375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.495444][T10863] bond1: (slave lo): failed to get link speed/duplex [ 485.562808][T24481] netlink: 'syz.8.5948': attribute type 1 has an invalid length. [ 485.579545][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5949'. [ 485.582564][T24479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5949'. [ 485.586717][T24481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.637602][T24479] geneve2: entered promiscuous mode [ 485.641549][T24479] geneve2: entered allmulticast mode [ 485.684980][T24375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.711252][ T5943] Bluetooth: hci3: command tx timeout [ 485.743510][T24489] xt_hashlimit: size too large, truncated to 1048576 [ 485.796443][T24492] FAULT_INJECTION: forcing a failure. [ 485.796443][T24492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.796793][T13491] bond1: (slave lo): failed to get link speed/duplex [ 485.801739][T24492] CPU: 1 UID: 0 PID: 24492 Comm: syz.8.5952 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.801767][T24492] Tainted: [L]=SOFTLOCKUP [ 485.801773][T24492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 485.801783][T24492] Call Trace: [ 485.801789][T24492] [ 485.801797][T24492] dump_stack_lvl+0x16c/0x1f0 [ 485.801820][T24492] should_fail_ex+0x512/0x640 [ 485.801846][T24492] _copy_from_user+0x2e/0xd0 [ 485.801874][T24492] kstrtouint_from_user+0xd6/0x1d0 [ 485.801900][T24492] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 485.801924][T24492] ? __lock_acquire+0x436/0x2890 [ 485.801949][T24492] ? lock_acquire+0x179/0x330 [ 485.801973][T24492] proc_fail_nth_write+0x83/0x220 [ 485.801992][T24492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 485.802017][T24492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 485.802033][T24492] vfs_write+0x2a0/0x11d0 [ 485.802056][T24492] ? __pfx___mutex_lock+0x10/0x10 [ 485.802077][T24492] ? __pfx_vfs_write+0x10/0x10 [ 485.802105][T24492] ? __fget_files+0x20e/0x3c0 [ 485.802136][T24492] ksys_write+0x12a/0x250 [ 485.802157][T24492] ? __pfx_ksys_write+0x10/0x10 [ 485.802186][T24492] do_syscall_64+0xcd/0xf80 [ 485.802206][T24492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.802223][T24492] RIP: 0033:0x7ff4d538e27f [ 485.802238][T24492] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 485.802254][T24492] RSP: 002b:00007ff4d61ad030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 485.802271][T24492] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff4d538e27f [ 485.802282][T24492] RDX: 0000000000000001 RSI: 00007ff4d61ad0a0 RDI: 0000000000000004 [ 485.802292][T24492] RBP: 00007ff4d61ad090 R08: 0000000000000000 R09: 0000000000000000 [ 485.802303][T24492] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 485.802313][T24492] R13: 00007ff4d55e6128 R14: 00007ff4d55e6090 R15: 00007ffcc4b365c8 [ 485.802338][T24492] [ 485.892314][T24375] veth0_vlan: entered promiscuous mode [ 485.898198][T24375] veth1_vlan: entered promiscuous mode [ 485.906131][T24495] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5953'. [ 485.936433][T24375] veth0_macvtap: entered promiscuous mode [ 485.942742][T24375] veth1_macvtap: entered promiscuous mode [ 485.958048][T24375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.964216][T24375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.972760][T10097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.975818][T10097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.981639][T10097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.984997][T10097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.082017][T24504] xt_hashlimit: size too large, truncated to 1048576 [ 486.082661][ T9994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.095444][ T9994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.107976][T24507] netlink: 'syz.3.5958': attribute type 1 has an invalid length. [ 486.129598][T24507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.139970][T24509] ufs: You didn't specify the type of your ufs filesystem [ 486.139970][T24509] [ 486.139970][T24509] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 486.139970][T24509] [ 486.139970][T24509] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 486.147556][T24507] bond2: (slave erspan1): making interface the new active one [ 486.152245][T24509] ufs: failed to set blocksize [ 486.153680][T24507] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 486.162573][T10817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.165164][T10817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.200792][T10088] bond1: (slave lo): failed to get link speed/duplex [ 486.330247][T10817] bond1: (slave lo): failed to get link speed/duplex [ 486.341303][T24529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=511 sclass=netlink_route_socket pid=24529 comm=syz.3.5963 [ 486.424563][T24535] input: syz1 as /devices/virtual/input/input41 [ 486.457899][T10925] bond1: (slave lo): failed to get link speed/duplex [ 486.576467][T10092] bond1: (slave lo): failed to get link speed/duplex [ 486.692985][T10088] bond1: (slave lo): failed to get link speed/duplex [ 486.835339][T13491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.839192][T13491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.875404][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.133254][T24574] kvm: user requested TSC rate below hardware speed [ 487.164086][T18952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.217403][T24577] Unknown options in mask b7f2 [ 487.591466][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 487.594860][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.618331][T24595] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 487.753682][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.758210][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.762597][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.767898][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.773786][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.779481][ T10] usb 6-1: config 0 descriptor?? [ 487.934191][ T5943] Bluetooth: hci3: command tx timeout [ 488.002395][T24585] binder: 24584:24585 ioctl c0306201 2000000005c0 returned -22 [ 488.098120][T24595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.110798][T24595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.233517][ T10] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 488.637777][T10802] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.642715][T10802] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.646585][T10802] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.652741][T10802] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.654015][ T40] kauditd_printk_skb: 251 callbacks suppressed [ 488.654030][ T40] audit: type=1400 audit(2001048647.038:3989): avc: denied { recv } for pid=10802 comm="kworker/u32:29" saddr=10.0.2.2 src=39786 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 488.674769][ T40] audit: type=1400 audit(2001048647.057:3990): avc: denied { create } for pid=24609 comm="syz.3.5991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.679459][T24611] tmpfs: Bad value for 'mpol' [ 488.684954][ T40] audit: type=1400 audit(2001048647.057:3991): avc: denied { write } for pid=24609 comm="syz.3.5991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.694133][ T40] audit: type=1400 audit(2001048647.057:3992): avc: denied { read } for pid=24609 comm="syz.3.5991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.702229][ T40] audit: type=1400 audit(2001048647.057:3993): avc: denied { ioctl } for pid=24609 comm="syz.3.5991" path="socket:[128464]" dev="sockfs" ino=128464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.727251][ T40] audit: type=1400 audit(2001048647.104:3994): avc: denied { mounton } for pid=24614 comm="syz.3.5992" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 488.744251][ T40] audit: type=1400 audit(2001048647.113:3995): avc: denied { name_bind } for pid=24614 comm="syz.3.5992" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 488.755185][ T40] audit: type=1400 audit(2001048647.113:3996): avc: denied { node_bind } for pid=24614 comm="syz.3.5992" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 488.771788][ T40] audit: type=1400 audit(2001048647.123:3997): avc: denied { accept } for pid=24614 comm="syz.3.5992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 488.781176][ T40] audit: type=1400 audit(2001048647.123:3998): avc: denied { read } for pid=24614 comm="syz.3.5992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 489.138781][T24632] rtc_cmos 00:05: Alarms can be up to one day in the future [ 489.311466][T24640] program syz.3.6001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.375810][T24649] __nla_validate_parse: 4 callbacks suppressed [ 489.375826][T24649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6004'. [ 489.456958][T24651] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6005'. [ 489.555940][T24653] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.6006'. [ 489.570063][T24653] tmpfs: Bad value for 'mpol' [ 489.670368][T24656] delete_channel: no stack [ 490.159724][T21106] Bluetooth: hci3: command tx timeout [ 490.169683][T24670] netlink: 'syz.1.6013': attribute type 10 has an invalid length. [ 490.176220][T24670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.181084][T24670] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 490.245728][T10855] net_ratelimit: 20 callbacks suppressed [ 490.245747][T10855] bond1: (slave lo): failed to get link speed/duplex [ 490.361921][T22555] bond1: (slave lo): failed to get link speed/duplex [ 490.363193][ T6021] usb 6-1: USB disconnect, device number 22 [ 490.429647][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6018'. [ 490.435326][T24683] hsr_slave_0: left promiscuous mode [ 490.439480][T24683] hsr_slave_1: left promiscuous mode [ 490.501761][ T1207] bond1: (slave lo): failed to get link speed/duplex [ 490.562913][T24685] FAULT_INJECTION: forcing a failure. [ 490.562913][T24685] name failslab, interval 1, probability 0, space 0, times 0 [ 490.570091][T24685] CPU: 1 UID: 0 PID: 24685 Comm: syz.1.6019 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.570119][T24685] Tainted: [L]=SOFTLOCKUP [ 490.570125][T24685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 490.570136][T24685] Call Trace: [ 490.570143][T24685] [ 490.570150][T24685] dump_stack_lvl+0x16c/0x1f0 [ 490.570173][T24685] should_fail_ex+0x512/0x640 [ 490.570194][T24685] ? __kmalloc_noprof+0xca/0x910 [ 490.570222][T24685] should_failslab+0xc2/0x120 [ 490.570245][T24685] __kmalloc_noprof+0xeb/0x910 [ 490.570270][T24685] ? ieee80211_register_hw+0x15c9/0x4160 [ 490.570294][T24685] ? ieee80211_register_hw+0x15c9/0x4160 [ 490.570311][T24685] ieee80211_register_hw+0x15c9/0x4160 [ 490.570334][T24685] ? lockdep_hardirqs_on+0x11/0x110 [ 490.570351][T24685] ? _raw_spin_unlock+0x41/0x50 [ 490.570377][T24685] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 490.570396][T24685] ? __pfx___debug_object_init+0x10/0x10 [ 490.570418][T24685] ? find_held_lock+0x2b/0x80 [ 490.570445][T24685] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.570466][T24685] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 490.570482][T24685] ? __hrtimer_setup+0x176/0x280 [ 490.570508][T24685] mac80211_hwsim_new_radio+0x3323/0x5150 [ 490.570545][T24685] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 490.570574][T24685] hwsim_new_radio_nl+0xba2/0x1330 [ 490.570605][T24685] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 490.570634][T24685] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 490.570657][T24685] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 490.570681][T24685] genl_family_rcv_msg_doit+0x209/0x2f0 [ 490.570701][T24685] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 490.570729][T24685] ? bpf_lsm_capable+0x9/0x10 [ 490.570748][T24685] ? security_capable+0x7e/0x260 [ 490.570773][T24685] ? ns_capable+0xd7/0x110 [ 490.570796][T24685] genl_rcv_msg+0x55c/0x800 [ 490.570819][T24685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.570838][T24685] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 490.570866][T24685] netlink_rcv_skb+0x158/0x420 [ 490.570883][T24685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.570903][T24685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.570931][T24685] ? netlink_deliver_tap+0x1ae/0xd30 [ 490.570962][T24685] genl_rcv+0x28/0x40 [ 490.570998][T24685] netlink_unicast+0x5aa/0x870 [ 490.571018][T24685] ? __pfx_netlink_unicast+0x10/0x10 [ 490.571044][T24685] netlink_sendmsg+0x8c8/0xdd0 [ 490.571066][T24685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.571093][T24685] ____sys_sendmsg+0xa5d/0xc30 [ 490.571113][T24685] ? copy_msghdr_from_user+0x10a/0x160 [ 490.571137][T24685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.571166][T24685] ___sys_sendmsg+0x134/0x1d0 [ 490.571193][T24685] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.571249][T24685] __sys_sendmsg+0x16d/0x220 [ 490.571274][T24685] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.571315][T24685] do_syscall_64+0xcd/0xf80 [ 490.571334][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.571352][T24685] RIP: 0033:0x7fc22538f7c9 [ 490.571367][T24685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.571383][T24685] RSP: 002b:00007fc22630e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.571400][T24685] RAX: ffffffffffffffda RBX: 00007fc2255e5fa0 RCX: 00007fc22538f7c9 [ 490.571410][T24685] RDX: 0000000020000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 490.571420][T24685] RBP: 00007fc22630e090 R08: 0000000000000000 R09: 0000000000000000 [ 490.571430][T24685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.571439][T24685] R13: 00007fc2255e6038 R14: 00007fc2255e5fa0 R15: 00007ffc09648488 [ 490.571463][T24685] [ 490.719496][T10937] bond1: (slave lo): failed to get link speed/duplex [ 490.720904][T24665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 490.724511][T24665] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 490.732394][T24665] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 490.737178][T24665] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 490.739421][T24665] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 490.769000][T24665] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 490.774353][T24665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 490.777090][T24665] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 490.783150][T24687] program syz.3.6020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.811987][T24665] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 490.816890][T24665] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 490.820358][T24665] CPU: 0 UID: 0 PID: 24665 Comm: syz.8.6011 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.824955][T24665] Tainted: [L]=SOFTLOCKUP [ 490.826708][T24665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 490.830948][T24665] RIP: 0010:klist_put+0x4d/0x1b0 [ 490.832932][T24665] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c 27 0d [ 490.840899][T24665] RSP: 0018:ffffc9000416f2f0 EFLAGS: 00010202 [ 490.842632][T24690] xt_hashlimit: size too large, truncated to 1048576 [ 490.843193][T24665] RAX: dffffc0000000000 RBX: ffff888035f53c60 RCX: ffffc90030b45000 [ 490.843208][T24665] RDX: 000000000000000b RSI: ffffffff8b6d0a65 RDI: 0000000000000058 [ 490.843217][T24665] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20d78ac [ 490.843226][T24665] R10: ffffffff906bc563 R11: 0000000000000001 R12: 0000000000000000 [ 490.843236][T24665] R13: 0000000000000001 R14: 1ffff9200082de66 R15: ffffffff906bc520 [ 490.843245][T24665] FS: 00007ff4d61ce6c0(0000) GS:ffff8880d68fd000(0000) knlGS:0000000000000000 [ 490.843276][T24665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.843298][T24665] CR2: 000000110c2bca99 CR3: 0000000046945000 CR4: 0000000000352ef0 [ 490.843310][T24665] Call Trace: [ 490.843317][T24665] [ 490.843326][T24665] klist_remove+0x13f/0x2e0 [ 490.843352][T24665] ? __pfx_klist_remove+0x10/0x10 [ 490.843370][T24665] ? kobject_move+0x15d/0x260 [ 490.843392][T24665] ? get_device_parent+0x1ed/0x4e0 [ 490.843416][T24665] device_move+0x12d/0x1160 [ 490.843441][T24665] hci_conn_del_sysfs+0xaa/0x1a0 [ 490.843459][T24665] hci_conn_del+0x680/0x11d0 [ 490.843479][T24665] hci_abort_conn_sync+0x76a/0xb20 [ 490.843498][T24665] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 490.843517][T24665] ? find_held_lock+0x2b/0x80 [ 490.843540][T24665] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 490.843560][T24665] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 490.843580][T24665] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 490.843601][T24665] hci_suspend_sync+0x821/0xb40 [ 490.843621][T24665] ? __pfx_enable_work+0x10/0x10 [ 490.843642][T24665] ? __pfx_hci_suspend_sync+0x10/0x10 [ 490.843661][T24665] ? mgmt_pending_find+0x13e/0x1a0 [ 490.843687][T24665] hci_suspend_dev+0x331/0x560 [ 490.843711][T24665] ? __pfx_hci_suspend_dev+0x10/0x10 [ 490.843733][T24665] ? rcu_barrier+0x341/0x6e0 [ 490.843753][T24665] ? kobject_get+0xbb/0x150 [ 490.843770][T24665] hci_suspend_notifier+0x2e0/0x340 [ 490.843795][T24665] notifier_call_chain+0xbc/0x3e0 [ 490.843821][T24665] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 490.843848][T24665] blocking_notifier_call_chain_robust+0xc8/0x160 [ 490.843869][T24665] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 490.843891][T24665] ? do_raw_spin_unlock+0x172/0x230 [ 490.843915][T24665] pm_notifier_call_chain_robust+0x27/0x60 [ 490.843935][T24665] snapshot_open+0x189/0x2b0 [ 490.843951][T24665] ? __pfx_snapshot_open+0x10/0x10 [ 490.843968][T24665] misc_open+0x26d/0x450 [ 490.843987][T24665] ? __pfx_misc_open+0x10/0x10 [ 490.844006][T24665] chrdev_open+0x234/0x6a0 [ 490.844028][T24665] ? __pfx_chrdev_open+0x10/0x10 [ 490.844050][T24665] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 490.844076][T24665] do_dentry_open+0x748/0x1590 [ 490.844095][T24665] ? __pfx_chrdev_open+0x10/0x10 [ 490.844117][T24665] vfs_open+0x82/0x3f0 [ 490.844141][T24665] path_openat+0x2078/0x3140 [ 490.844165][T24665] ? __pfx_path_openat+0x10/0x10 [ 490.844189][T24665] do_filp_open+0x20b/0x470 [ 490.844210][T24665] ? __pfx_do_filp_open+0x10/0x10 [ 490.844236][T24665] ? alloc_fd+0x471/0x7d0 [ 490.844258][T24665] do_sys_openat2+0x11f/0x280 [ 490.844273][T24665] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.844288][T24665] ? __sys_sendmsg+0x18c/0x220 [ 490.844312][T24665] __x64_sys_openat+0x174/0x210 [ 490.844326][T24665] ? __pfx___x64_sys_openat+0x10/0x10 [ 490.844345][T24665] do_syscall_64+0xcd/0xf80 [ 490.844363][T24665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.844379][T24665] RIP: 0033:0x7ff4d538f7c9 [ 490.844393][T24665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.844410][T24665] RSP: 002b:00007ff4d61ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.844427][T24665] RAX: ffffffffffffffda RBX: 00007ff4d55e5fa0 RCX: 00007ff4d538f7c9 [ 490.844438][T24665] RDX: 0000000000020000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 490.844450][T24665] RBP: 00007ff4d5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 490.844462][T24665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.844475][T24665] R13: 00007ff4d55e6038 R14: 00007ff4d55e5fa0 R15: 00007ffcc4b365c8 [ 490.844532][T24665] [ 490.844539][T24665] Modules linked in: [ 490.846384][T24665] ---[ end trace 0000000000000000 ]--- [ 490.988000][T24665] RIP: 0010:klist_put+0x4d/0x1b0 [ 490.989634][T24665] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c 27 0d [ 490.995910][T24665] RSP: 0018:ffffc9000416f2f0 EFLAGS: 00010202 [ 490.997870][T24665] RAX: dffffc0000000000 RBX: ffff888035f53c60 RCX: ffffc90030b45000 [ 491.000565][T24665] RDX: 000000000000000b RSI: ffffffff8b6d0a65 RDI: 0000000000000058 [ 491.003396][T24665] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20d78ac [ 491.007562][T24665] R10: ffffffff906bc563 R11: 0000000000000001 R12: 0000000000000000 [ 491.010520][T24665] R13: 0000000000000001 R14: 1ffff9200082de66 R15: ffffffff906bc520 [ 491.013449][T24665] FS: 00007ff4d61ce6c0(0000) GS:ffff8880d68fd000(0000) knlGS:0000000000000000 [ 491.017122][T24665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.020089][T24665] CR2: 000000110c2bca99 CR3: 0000000046945000 CR4: 0000000000352ef0 [ 491.023329][T24665] Kernel panic - not syncing: Fatal exception [ 491.026540][T24665] Kernel Offset: disabled [ 491.028356][T24665] Rebooting in 86400 seconds..