last executing test programs: 2m21.54721273s ago: executing program 32 (id=613): unshare(0x22020600) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d00000000020000000400000000008847c67298fb57db05e42382904ef76d211d7b"], 0x0, 0x2e, 0x0, 0x1, 0x400}, 0x28) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f0000000280)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r2, 0x1, 0x3, 0x0, &(0x7f0000000140)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000500)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000005c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x0, 0x242, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7b9, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1092, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 2m21.493506821s ago: executing program 33 (id=615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000029"], 0x30}, 0x4004004) (async) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = fsopen(&(0x7f00000008c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000900)='fd', 0x0, r1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a00)={'macvtap0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000a40)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r6, @broadcast}, 0x10) (async) fchdir(r3) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) (async) setpgid(0x0, r7) (async) rename(&(0x7f0000000940)='./file2\x00', &(0x7f0000000980)='./file0/file0\x00') (async) mount$overlay(0x0, &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) (async) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffff272, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x403, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1003, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0xffffffff, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x3, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0x4, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x7a, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0x94, 0x66}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1m52.061842026s ago: executing program 4 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000640)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000680)={0xa, 0x4e22, 0x0, @remote}, 0x1c) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000480)=ANY=[], 0x34}}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3e}}}]}, 0x38}}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x54, 0x2c, 0x527, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x9}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8849}, 0x408c4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x1, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4045080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00 ', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250e00000005002a000000000008000600", @ANYRES32=r6, @ANYBLOB="050033000200000008003100040000000800310002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) 1m51.474038116s ago: executing program 4 (id=687): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf110f4e, 0x9a64, 0x8000, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x103}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf110f4e, 0x9a64, 0x8000, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x103}}, 0x50) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 1m49.695770266s ago: executing program 1 (id=690): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000840), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000880)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000008c0)={0x2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_ENABLE={{0xfc}, 0x3}}}, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000900)={0x0, 0x10, &(0x7f0000000940)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000980)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000ac0)='14', 0x2) open_tree(r5, 0x0, 0x81801) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000b00)={r4, @in6={{0xa, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}}}, &(0x7f0000000bc0)=0x49) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="30000000000000000000000000a7754ab172e744d5a7e067000000deffffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004002000008001b0000000000"], 0x30}}, 0x0) unshare(0x2040400) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@can_delroute={0x44, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "8391fdff0b4d3981"}, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "6bc59c6297fad977"}, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bind$inet6(r7, &(0x7f0000001480)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10001}, 0x1c) 1m49.242798123s ago: executing program 4 (id=691): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r0) r2 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030a4308083767010080910102030109022400018e0510070904fb0b0280d2d20009059f0240000700070905010240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000200)) r5 = socket$l2tp(0x2, 0x2, 0x73) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x6004, 0x1) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000640)={0x0, 0x5, 0x2, 0x200b, 0x2, 0x100000}, 0x0) (async) r6 = creat(&(0x7f0000000680)='./file0\x00', 0x13e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$BLKPG(r6, 0xc0c0128e, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0}) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e1c, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000003c0)=0x34) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_MARK={0x8, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x300000f, 0x12, r3, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10) (async) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f00000005c0), 0x4) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000080)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="000e050000aa0c9917e701"], 0x0, 0x0, 0x0, 0x0}) (async) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CDROMVOLCTRL(r8, 0x309, &(0x7f0000000140)={0x22, 0xfe, 0xdc}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r9, 0x1, 0x3}, 0x48) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r9, @ANYRES16=r1, @ANYRES16=r7, @ANYRESHEX=0x0, @ANYRESOCT=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40801) 1m47.36615402s ago: executing program 5 (id=696): syz_emit_ethernet(0x133, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x2e, 0x4, 0x3, 0x3e, 0x125, 0x66, 0x0, 0x1, 0x5c, 0x0, @remote, @remote, {[@ssrr={0x89, 0x1f, 0xb9, [@local, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @end, @end, @timestamp_addr={0x44, 0x2c, 0xb2, 0x1, 0x4, [{@multicast2, 0x6}, {@remote, 0x6}, {@local, 0x7}, {@multicast1, 0x6}, {@local, 0xa1b}]}, @ssrr={0x89, 0xfffffffffffffed4, 0x9, [@broadcast, @empty]}, @rr={0x7, 0x7, 0x4e, [@local]}, @generic={0x0, 0x11, "c8eb97852b56acf8b9d2812455581d"}, @timestamp_prespec={0x44, 0x34, 0x44, 0x3, 0xe, [{@empty, 0x80000000}, {@multicast2, 0x10}, {@multicast2, 0x80000001}, {@multicast2, 0x6}, {@remote, 0xbfea}, {@loopback, 0x9}]}]}}, "190d9915ecdd2663e671597b3d9ab37596f3aeef695b416c5bfd98d232e5b472b91eba749293d52b86a93d852bc996f79ee84e4eb21a00a6fccb2444f01aca8f364c3b58e1d82b4b0a9ea0535597522067d71ac04c21d75267ac40e0478b26aa13ff6f9269a922ed52538d6417"}}}}, 0x0) 1m47.340940789s ago: executing program 5 (id=697): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) shmctl$SHM_LOCK(r0, 0xb) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 1m47.21083203s ago: executing program 1 (id=699): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000480)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x20}, 0x1c) r1 = openat$kvm(0x0, &(0x7f0000000680), 0x81000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x7) r3 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x9100, 0x3) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x60000000}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000900)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x147) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/console\x00', 0x1, 0x0) r12 = socket(0x1d, 0x2, 0x7) getsockname$unix(r12, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x545c, &(0x7f0000000240)) r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r14, 0x8080aea1, &(0x7f00000000c0)) r15 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r15, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) 1m47.075776374s ago: executing program 5 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/events/sched/sched_switch/trigger\x00', 0x0, 0x13e) lseek(r0, 0x4, 0x0) 1m47.07504672s ago: executing program 5 (id=701): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m46.785235691s ago: executing program 5 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000300)) 1m46.264986973s ago: executing program 3 (id=704): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000240)={r3, 0x800}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000280)={r3, 0x3804, 0x20, 0x1, 0x8000000000000001}, &(0x7f00000002c0)=0x18) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000007c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000840)={0x38, 0x8, 0x1}) 1m46.164209754s ago: executing program 3 (id=705): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000003040), 0x57, 0x10, &(0x7f0000003080), 0xffffffffffffffc9}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000030c0)=r0, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000003100)=ANY=[], 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) mount(&(0x7f0000002680), &(0x7f00000026c0)='.\x00', &(0x7f0000002700)='devtmpfs\x00', 0x2200892, 0x0) lseek(r2, 0x7fffffff, 0x1) io_setup(0x2, &(0x7f0000000080)=0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)='\\!\x00', 0x40, &(0x7f0000000140)={@align=0x2, {0x6, 0x8, 0x2e23, 0x9}}, 0xda, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000500)={{0xe, 0x5}, 'port0\x00', 0x2, 0x31, 0x0, 0x95e, 0x4, 0x40, 0x2, 0x0, 0x2, 0x5}) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000380)={0x8000, 0x3}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$CDROMVOLCTRL(r7, 0x309, &(0x7f0000002740)={0x22, 0xfe, 0xdc}) io_submit(r4, 0x2, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0xc, r5, &(0x7f0000000280)="c08887e73f9a62ba28f5b0667335f671713e9aa8c8ff65869dcd8dfd49a2c1d1ee3c10641978a1404a9143387d124a34dcfe7d5c69c4cf307fbafdc4690c4404f8f0bba14a60c3baa45ac98fc3d0e785c68f6f709877be67a4ff4d7a0fc61d7aaae085e2c29d9d0998e47b43dfc6f35a012c02f7f928ecff96b5331b477194bc71bba457b836bd3cf7f0fa1bf7b484dd8767a9ec4eface39f07914148417e49e27f98b5bd46ae5c4a54e0dc39294ba64", 0xb0, 0x400, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7, r6, &(0x7f00000003c0)="7d5ca4a0151108175ebf082397937c2497acf4e3fc4ece9f8373d73cf588c6782a429d8ed3e21ac889063c688b3212f003bcef38f8e1d9f9645bdbc09f3d2d862e854b6bb9518f3945025a7888ef15dece77dd51a03c496e8bb87b15677e3ae42a60fa5f7cb136b315040fba21255171a5167de119c95490238b786a283abc6a362027d6e5e3d2c0eac27506776866284ddf8afa146be516215e1561afa635d39653c8181aabe136c18c68b1157a8494e92522c808e42b879bc0d109", 0xbc, 0x0, 0x0, 0x1}]) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 1m46.035606479s ago: executing program 4 (id=706): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000040)={0x9, 0x204, 0x4, 0x18000}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x9, 0x2, [{0xb, 0x4}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)='[', 0x1, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde100a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045634453412073656c662d74657374696e67206b65793020170d3234303231333232313632365a180f32313234303332301132313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e8100000053412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403160780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c1202b409760c9af28c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24f0700149d7969", 0x1d4, 0xfffffffffffffffc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000480), 0xd) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="18130000140001002dbd7000fcdbdf2508134e800d122d8008004400e000000220cf052f219092ea16a6a4e3a5b9b7ada81892731b3bdf158342116db2c860d960e4e95b94d0364b1553b4d1f09f0da0f9517a52844aae3634b21f046373b99f77b14930fea81a8e631bbce4bbf6d4dd1c8b4c6772d8087a008d2d12528bdab04b35a0ce5f06a21f907e04479e679b5699bb3533db241c5b9b65b54cf1d2ec3246208ea9a346291a67234d705e35c0637925882a6e9acac343322fe970ca10cc80a15bd5bdeaeb11e8436486afc1cd87ca8f3456e68b92102f6df67339f0af60f4edb0e358d8f52089e4c8b6f0f73021ab699fc2b8dc2ac8ca2c9dbf038e9212324e454c9e277840bc39c8c05f32eb4117acbdba6912358dcb91ab8ba45d59a178962aab2c04c526fbd69259cebe9fa70016dad2de503aba03cc80ec544e9e7f4449a652d104000980930193f00edbdfbc79f8808a255d4653284a743c61bf8d61979f7c36e134eb0615b3441f53287d28b69713b40ed28d850cf10400da8091948dfb6581d054d740743523d47c21fdf46386ca462db919bb3a5f4def47416b68ab06c7a8ea886d1902b7a5a171ce2b6bab0324903f89508932d720bb8a9f1dcae6c0b17142882c7979e4c176f7039cb622dd170961d53af6e32be57abbd15a9bd2bf4da229adc2f53f3d19477a0fdc922d56f8b383cf62cb12b96bb499ac4ca6ee4c53d79461d9167c213409bc53b6f11591e8be92f8bc11b4beaed2b01de6ebb661417021cf714807ce0b247bb5b1796f7b1d4e0547c8552b1a1a46abd10e0161b44ee55977889735dd6162aa837e5bda63e5af205ce8212267abc930b1bee8940c66eeaef22a8a92dc861790c0cc61ed38e69b986395ac96f61f403f4d6ccb01267276d4806fcf0e340aea2d3c0d318ddf75b7061a030e7526552737f0da9c6b15d0fa44d5d3a71f561c31ab3d15488536532f1ac391e7198fe4b8f4fda9dbb6e1a3f2f0462b701ab1dc6759f13a7363a2f5e54c67a48714df9a0d67caf0cffd426bc1ada8ff555d067856d8f092be14f7477711c3778539726d02b7d6f6ad58321afddc361ee66d6e8e299f84be35e952d2029862e8a3a5b0771b944f63e65e0b0521af4258b0ff64a206aaa53d6fcf7e18326752f01cb2a790c300a57e7ca60d3a21dd9859fba47066b86d2311ca3a2975ae1745b99f44f298ca75df1049ed86ef8a0c7afd61b74c12d8cef5d8b9bf266635ad4d992aa16caf6468cb7acf2d6d253aea37e2daf63d49f0de0e3891270ee499d6bbda6d20a77c3c7d2ecffe3f68be3131ff9b8d34d36da84f826417fe2ba23192e4510989534122475e82359caeb37be6b1d645f6ec1d69c4e69eeb65d221532a753e0cc532ed7968ea86c86fc823c63924a718bd37b3162f65be5456c789987ac6633ab5abf6bf9744593dc5dc9f32007fdc793cdf13ded1e342a1b07cc359862dc051be8d2919c8bc4ea5f59bc3158ac4db628867266e1e310585c3761567f7ea383bdce5df5dd80540102f1c2141df2948305accee0bd3dd38abd29ec1bdf03f646cb410250064b9caff178d010a0ff15c35c078fc541e2bd126dbd5458182c88bb21f661ec2f5b4e18e1b019687041f95a1f8ac902b1a1945ea4b4bbc2b81b28d0ef41083f4c2ec0f994676f33e105e52104b810a27bffc8aaa612417df8d1920bdf4e09c9d5a0e6af823651a5123bc6fe4e60f6bd2e313bf6f6d824a4cdf7c5e6d3c162c5cb731b2a012d848f6d399444c41cf1d1bb5761c13a7e4802ae03d321d3f125feb070a022a6926c2ce6e4e6d8290d1dda1fdad8cdf74190bbaf59167f509209708dc7bbef982546fb4a0b29dda029af5820b0330b247ea80107c2f4cf04223758e390f0002c82f38c20ff63f9642543bb84d6ac455077793330457ae82a2c7cea6e2ca8a91deec9b9df30f25d2db4339c48422efb452ea909a6cf89502e5389391a382113031e0f7f5c4da798a17c16cc8683324b00d3333fdd9f43c4848887091d09895ebf7856c99c4dbad327f5bc8f118d4b749c3bb240b84c9fd9603e34c8007d045773050ae24598b7ad80906b86b9332c72a1f899ac89ebde710509573d39d5de3ecdc92bc3484c15655aa85070a6af0c2d9aef6711eb2ae0665f4bd0c9a4984745c7c6616b2297ccb67f0acbaaf6d6c2200560c5755b3c057f6d6d2f424ff7fe2288d2895f26ccbd65ee2268a5cee7a6624cba4a89a29debe630df0145e6d91cb9f7b6bb1ba3524470928f53aa5f4f76356ca52c8b3887331f5413814d3fca7a88a31a7a994b2e1d0ea61b5a6a089246b3b0ea24622cbb360e460045c0281d3c8e44f16ff1b5f475a1e690ca7b2c3a908d5a74747eedffd16556ff61e45cea94454cd2e751327222496143793436f09446789b8425cd928486242a45b2dabe2d4cfd7c5c534fde0febe0f00386aabd8f6204c76d230ece43e9a3f27c9ae2074c0e32bb6119ee7345edfbce1c18dede2472e3898bd3ee612d04b652d7acaf77a8a0850a235827d05bf51e7ffe5cc97d32fd5819445a4cc4a39bf478d4a14bdd8654565705e7b1122a53d0642a4d737bfef4fabd775746ecb3812750e83428da01a79fc149b7b346e2bff332a0bcad489a47384fc9591f86841861c87e141aff721cd7d8d213601f6f6c2c61ed9118089861ca33d619e251ad7da0bf9bd821b481dee907d56e6d4688e627e55876705b2860fcfd0277c4aac389c41df9be0c1c4abd104df0956e51f9359aaabaf6caf92fe4bcb61627a6ad5a4c65ee3dd750dfa9a22542556366cfefb23a57c68e0509a9726b9685f322c92e2e4f6a392dcedbd092801446b970b656f555babf031e24525ce175eb4eb93237ca7682c73912583ce3fb3a432811994444fa62e1e939eafc44ec474adb94b7a9bc235347fec9ddc4b5f2630b89f2f462343c6fff8de46850284cf0038fc38f932f6d3791642351baccbe1680bfa36c520e3987c19ed324f7ac96f6e334d2a3bd420bd40c5554f48e621d99aaebf0ec3cf3133d6364fadd1f778d9d4e2d4f759edcc94bb42d99162b21444382fcd6afb78b9009555acfd826ce993381780c493cb9b5293b4f4f8d152017b808b5ca092b660927b848fd7241b7623cc9392ca1614d591be7eab13581c30f274f5145b3bc0057c0583669a7935a8c49a4722eacce35b27017eeab4187ee63db983be7987b04cf09d555585f593b06f48324a9422bbdf4c7af0bedb2699f2fd8c72db0db7ba91defc70e29a6aeb57f7f6010baa61f687f3025bc976727e9b1389a8ab9a4a39abc36d9e2bc594fd98d6f961a5846ee1626b90ad195207682d3be19e203197d8eed7940603257c49e4649fa6f20c0610851012461068bd58ca6ba5f0b052e98dbb1fa20c5c297e1e67b51f3e7a09478316be7deaf42812175de83750f4f69c96f30f39927a9980b25debbaad9e98a30deec883d8e34c18fb69fd2eb44ceef092ffc55e5d887e9d45d6fd101283c4e118d2e774bd3487f9f1980344039489c0d9daf36bd0ff359a74c06d54131a2f3215cbfe3a889faeb868c6251b801b8a782e62b1ae69849c3a284eb76435ce6bb223f22c8c7e171931c69790799f1869287b658afbe7a051d97164545f06dcb1b17e1974bc727edc358c3f7d4e2d6d0aa5859b035ce2ac630d99370372bbd53da02e304e554a8ce9cebcfedc41906c0bf4c33d0d5bc28f5e78d5808cefcc3244ae3e411b4b262c86f4bbfd889621bf865156b7b42fa6e4c02c0b1c3e195e3c2aeeacc2ef9e8faa3974dd44976ebf6ec12c8b4915b75b31792a97e75e213489ed29926a6d257cc895454c94c5f7b4e363b986a66ae1710a32c6e16bd7307cde87c310503f8ab4acd164be1f71abcf204693134ca81ec36a067e71cb6ce519fbed778d6d9636456262e7aeb9f89d227e16a8ec156154e686211ba1fcfe3d9c45ae561381f565a36156ee3ba3ce42c1d6602112b66db01c553c34a7e964230c692e7efd0d2409a7fbf86e0a64d94974621771b7fb1ff7220df712dd51d9c4701739ed01ac9d824796c5e2f4d6f18731355ceec91fcea4aacf817c7e2c470f8c258ec6d30fb7fe1a9db6f76bd20cffcbd9eaff3f1d3d8b2ec196714bb3f38aa1cb217dd84ab910f81c573ec81ea6e7c4f88764996f308eca543e360cb33ef81344dca28ef6dac3d1ae38e258d2c8fd416620c6176aff7329a244df2ab1336beac0ea743f97b9b1f2d9c88b904c10c8e0cec7147e30f34ce6dd2aefcb733eaf26d968caaad2c99312eb7d1edc5a03bdda1097846a9ca728b1dee314459a73a53bbb212496b4993937339e1d849f2ab3898b354155d8e053ee21ff9cc538b4e1c685b879f3fa2a2ae5a34f2dccab2e68b8952a0759f178f408dd956d2f77b9ed64a3952d3cb536a796d1c560d9026d5ae0fb90684fb25b0607e3d0ed30ab3b27559ce780e0f5ab4cbbc30147140fa6e727f64d0a2c5d0b9e9f6c77275cbf3213db7c8b6818b4d9b0090bf623b1c80220f7ac71a618dca79cbc5c2af076cc9162bc0175b594e8c47a1ab322fa35e9f5ce651f38a0df9c519c532f270e62e5c1952f86145f0733b525a0af9600dcb348552b7111402bf3c65f96b206d3a7cf656f050bbc73d76ecf82f61f52083462e2fe1ee706f313bf8a25c48c1614053a7b3846c7392aefd8c223f1462430a90a9127899f74a8ca01950a446afa7f885ccfa791114e4692946394ffbf86bdbb36e484010d19cbc59b18ee95eb21c0f939914863a60cb875ef28be576ac444262714db6b7a4c81429d0a1c2eb8ed675cd840099f8f52a3ea4418fe685dd20c90ffedfcfdb5bdfa374da6c7a2f7f8a8317933b25056744b175067b39998db818c3508a676f3ed426437acfcbd011dd3758a8d733831997253b55eee33813f1ec66753c29819f03fd5638c6f4a9b2fa1277df881f3f3e50bb0979b6c3a092792e16fe48d6e1985547c45bfe4e73721e1b4cf3dea204ceeea8ae503bf7cedf0cef14eb729688c6f56e307fd99d634565ebc725bf542fa8a94e9ee835bd4fd6f6fe6cd37bd9e678e5194ee4cebc536254ee1dd767ce87314b33f83b288e40cf58bcb9925b0755925cd7685e149722aae5131fae60b5d69d7c39e8f2f2bda1209fe1bfdf66b58fb2a77541d18d99d3a7f09de9acd50978d9ee235dbd74250ccd57106878bca95d5d0a77cca97062067f9974545e0b481b52eb1f462788b6af125c45460e1eb487b5dcd3d90456f902f050af946226d490b202af89adf42cd8362f7d6e3e56d6fc899e825aebc66d2046f6fc9018ea95f7f99d03580af48334be344b0cd641f7741fe1169bb363bd8b13183511382c009fa829d0856f6c9efdd5bd3aab7f0359691f306c63282c01ca6dd669b82b0742bdd42043fa882174cf92f8c47b241c0147a9b6a313a8ad68bfb0bd155a8626743b3c696844a14ec9b5b3602022932a2edfab440a706e2493aeadf9d5a30082abb32cdfc3b4508d769c433e2b413f804f2635ceb8328b5f3b8f0260f3997363d3391251a4f17400920c16a281470c256f00b3668e4cae61bac4a4b5eced62e1cdbe31c633ce05f97c5a725b5ce2ac9e2c19b81f34d0d500d778cb21ffee5a845915533d3bc654e9cda54732c320d228de7958c63c803b70dfbbaeabfcf17ed85fcc16c832d3ead25c3a410006fb7fd8c5e1d7ad11edc4851402bf415bde47fb475eb8d1562d06ecfd3b332beb85ab9f9b4f73de6d5b452b3ca0db0d15e382b29662f0446bc2520b5425bc4a4ceee45488d1b1d1767cb17ccb37c9a56093f3335b4fa864b01cda6c4e0b28ded403935d180c90743dc432efb24bd3debd13f1352efdbe43f25aac65e362bb9d1eb115a70b62b89b00438dede0bc022f0550f093bff7df846d9068389f127600ddd7154d4a4c1e2ba089b02063f46104c068becabca05bf75eb9652ca28a2d516f7f386a47601b092e81d29d1c274f957afb435274c985e1f837c392a1f808bcd1df4500140bccc88f0d43febd75a5e52c7ff5eb91b8578c13e9f4508dad12cf0465ae1825bcd69e94ec544ce8dbd3c5545506b7f418dce6e339667b24366f048759ecfc830d3b8caa5a740feffd9bd2b04dbc70304d4213581b5f720362d0487b443a59af2ff1829f5798bf2bab2cb8da55d97a4c827ec539817144b1897c04b236d5faa76b20cf00638087f761135df00c3fa3fcc02671099d20c1ed97f90e8a3c274a9e4e2e2ab71a86be205149254549c86864ef930c85886502bd83b4c6aa296d01eb59ae72a8063dd0e85fcf8b5b640d898886b5866051d889e6276481204008e8004008880000087001b80e148386ff11b468fc4645331849266d61c9f31de60ad428373c389564fc551ed5c8c25bbf152252ffac67577bd657730a6c9ae5d0a75b2730a7f0e322c1ac3811b7c83a3df3ef586ee2e1ee4611d63a67530f4441b537306f0392668af999038ea3939c3f3da21ecd39ea1c8a25b5e834567a29e4f96cab23a44a3e9f6c142f80a2fe0000c00230009000000000000000400110000000014000100000000000000000000000000000000002a725624d55e18f54ca5798d3fe7955ef9860c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce97803ddd1bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d6c9b91825cd6f77be8203cbe17d83dbb0590b1ef5d3211edef00ead1ebbe1b58e5b323435a9128209a24aaff403a2e5ce557c4ecf41b80e3541dc694102308a8fb6114ab4d007089b6a2816f689a565d4e700c00e900d000000000000000"], 0x1318}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 1m45.949483821s ago: executing program 4 (id=707): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @random="0b475173ddd4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x6c, 0x0, 0x9}]}}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1000, 0xf) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1459, &(0x7f0000000180)={@remote, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0xf, 0x6, "6a9e46", 0x141f, 0x6, 0x0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x6c, 0x20, '\x00', [@pad1, @generic={0x3, 0xf8, "a779c1a933a76714dde5da8a62d36e98db0c584f03c4f9bb0d3949488e027254c7a8ec36d321add5af54fc59ec829838635b003ba1c448171f3192007433dd8f588b098d3b788cb16fcc2e10d463bcbd463f50d5f717eb7a57bc8a0a5529ad969d58f87f554d7dceca493337834280e10e777e1f7d168cdb4bd4e7457538dedb38f64602e1a01fa6ca15ee271c1fdb68d41de22f361572b2b8661a47c27735d92ad0e04baf74ead18dfff9da8b20605749e070207d54039dc65a9359715ad7b4cb1bd596ad4bc8846bd237f1323f2b332d6f184c97edd95a2f92e776c04ef8328cc5648a916eabc482d4cce748a661be61c662d48e263628"}, @pad1]}, @fragment={0x6c, 0x0, 0x10, 0x0, 0x0, 0x3, 0x68}, @dstopts={0x32, 0x220, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x7}, @generic={0x2, 0xdc, "f623ecb41d623c7f7686c8891e13e11ffc87f24f281350fcf71c53d59f2ee1a452f125c342c3f9705e70b737d3539455479d6d2973ab5b35589fc990efe71c593b91d574f6af06022eab0895de4fcd7fbea40340584392cb07f58d9325d705604b63862d95d27be023e13378ff7ea911478b44aa9e65f3d37fd7ed18508b75b54906061a73c9693d322b6d983f1a712da3f2dd516a439af2a8a3b2f712489aadfaa4430a8ee01a8d2bdec5e7b0287cf98745cf342fb86b802c119d77e8e6624dcb50a2f0d6ab09643bd43e2cce53eee0e9cacc6f1234924966ade13b"}, @ra, @generic={0xe, 0x1000, "42ac2d17ed772f9ef4548979ad52a580ddc97e11e8c6f7d35bcee7569e5fc91d276f9fff0d0775411aa310ca179fce5e8abbf2d535964d37c1fe686ebcc88013a7f7ef98d55b65fc25cc2b56a0de4ae8d38ba56b2ea1ad97a131222eb8947ea02dcb0343afc4467264f722cb5f5bfe88988b2d16b22980f946c7897062c35d0869c171b42f906ad89fffba4742480f34b69635bcc5e8611d825c9618bdaf5d8a2d16c6e628cdadc95c54974293b3706aaeb0192028e9abc370f3de468e6fdaee19ebd6ee8190f3fc85e32935ab2f7c53fae5c318fd9adbb77be4a6e270d29a74d314acc110332e170016dba738095d165f5e8d259dce5109482173affaecddbf1f3c127f68d93dab966de06523b93a738082d761455c8f7b36e22de4a93f3a1c402bc2b19ead2a8264c979abd8722cb165ced05e60d3694ad041da3994df6c94f9a9913d7f3f5432e5ff7c56dd544bd4392e6858ee52351b722bb759c641e9c939195fb4f9c6165555cdf5ff446b1ca77113ed4520a5e83226815a5e4bd5e1c711b69f0e35aeb073486edad96c5ae0b0dd09ef52598282909ce1c2b3b7a1b9c76b8aeaca110c86ce46f607f14d154e271a1cfee23f645e833d52039e44c25f79ff8d00e7a0e68eaf04c8367011966468823ec3db4fccf47a2a1bb6a515cf11afcbf9636c2945252061194a99b5f0a9888c23a021765a39353173df44e56b34cbae9f79fe5241c12e5ab3650da2a39090b63285ac2d627d81b5244efbf24f98ff5b31aa545acda15fb0659a9864d550d893291225ff69fecc723a75830f14476add3421bf3e4a9e35bae2766c82fa8d4ecfc4454fa69528764ac6b7635860a28d80664655cf1df1296ffca565ac6cc2c793b72b487af09971243c23945e0e8844161112fa4c96e702d6364c71fe1a346c83038cd4a482e67271b1dc97a2ed6e87a8cda1c5aebf7ea75cc7386292028a8c5211f6186bbea427006924bf85cbb67cf21d60ada786d6c37a601e62f9434af7052ca3b31021e0d4768d3999346e9ecd29f3f3f26bbaa49379e462f9ed2503c84601b628548b62a87df8310849137ad69e520ac8ef24249689c9b573f856d5e37cc7bfa1e7fe04312139f9f37c7d92a97c8d21063c215e0364df5af92a6ea392e41e49a7ee36841d4457470b6aff4924ed40eb22582d81fee24de2ad8c6d2aa7c96a59be8d9054e7572d92715960baac8ae244ad28e440bee42b2cdb1d92d3230f58c88bb25f99270b9ce04ea4e68803f25668c9f5a472fe3b9ee8fc068abfee12e77073ceb5e0b744b16fe0506aae2e1514410c14f9b5cc71ee07baebedc1a7b510258f18e3daf1d31421ffa47bcbc3a6b2c5efdf8214f9f4f568692ba273278fe06281538fb8fd45d4be6938da0a5baea43bd962c19428435167a5f4141e7cd719464c74ed4a41743b981a9aa7ec6e5230ccc735db59a99e84e97f1d983a94f39d35492d4ea862e88c68fa3557cfd4707cae608875ad08fa58a90a8ae1e514e73f6870d2319b881f1b8470c93c1e6e8c478a73ec1457e6378ef1fdfb1487d6488d62627d9262b271c192c719c138d9464369acff4fbeaf9abc3b3414e9f071df108e720fa665f5e333261e2bb5922e54baad225853be4a8da5344524f5bf1c2d047b6833f371e538b021f8114ef59d2233a6afbd6deb9a9aba1ef2dbddb97ef35b64e7a13d70009229515f1b8e7b420efc66f4ad090c4aed7979ce6b67425f7ad2fa3fe079f338351889c678b4e68939a2dbae173a928f349145bc836d468d5f3b78e05c483306da1fe90993629cc74978def40bf394a709ac9e2a1d24333f7f48493886d9025a12c3446e4ad4142db1544bdccf031122c207ef613d7f4ed5011430bf81694a249633f1dd7829af0e08da32d32b77c4146d82147295cc0564704270dffe4fbcd4de68963a1175eb262952565187a129eb7c27358a1eeea4b4a106e451aa0481e0e894b0b8b2a7926cfe0016cb936ea9cad53d2c518dce48764c9e629b59dc7102a1d5b19f446e19ac5c1827d495b4f253331b5eae653bf5bf087cf2343f115542c82c2b7752958a446137088ccce2fc552bbe056ef2eeb18b9bd6871853463118e6cdc81eb5f46a35b5e39cf0e353772fd71e15905137a2f871a916a964f8f2d741a4729627329b5ca2a1478dd91214a5f4e1dad4f7550952d76f07f6d8e6e468bc2aab42a6e9e7daf1443828ba9ad2f7507b2c6f11befba40d14d59e6c880156f78071283c47dbfd793cee928016928d76fdd9e5f297a586274e27a7c175b83850069cae19823a58953d0aa5ba58f95a59c7e8b4d34b09dfc35e9c839f2f031178e5216ae1edc315314f676dc7580c7b38919e3a9997bb7aac6671e8fc2ef7c9e559aef58eab3dd4bed7114fb0b0c3a89192d3acb4cb456139be7ba567f8676315c5e3776f9e143c027228f283fdc1f0ff0461406143076954f0a9183331d7df8852dd3024841d064648f9e06c1291bfbe1b12ec137410973a304ccfe35438b0e0f81626df46d5c52c1858d31750938c915f964e73e0b18fb70689e9ca4a12a7cf4541f5627398184e3e63b5ffe530d1e135f917a9e94862acec8318a1aed30810da42a423f7483547e8c3edd8ff1835e83d3df49683d53b38f21d4adbb41c6cad5f076d488e5eeffe0643339a551dc2e5ee31bad34dc1baa1de75907fbdb20c1d9d363388e879bb330e3b6c87b151c51967465eea30c3c429610fe8d6117da2af2a6f176448a6c454de3a9c60c143644bf9cc43c29310ae172eb6109f6c85a11127cde4229ff16eb48f10024790e4e48b4a5001661353b643e7c3d3f605dda984afbc13e7f4b0056a6abb3d87dcfbac1db4a36bff6cfb6aa4a8e453bddd1432946fbb565b2d206cb06205e284d6a86ccb3ea67c62d505de411e4c97e56d935cb9bdd7e9e3fe2412c6c09355cbc69f3e66d4b434e414ff33eed656b7fc31fd179fa954ae0b141efd4648dc676c19deaa26266b93dcc6efb9df5d9227e6cbd659d95bd3652732df78dd807ff75df05a114d8834ffc252e0365e06fc1b197fbed9ec9131d7a3bb28b2ffd907302b52b503874a0d47f1848c86d008aca7f5880749468a9083a6c62d3c0117f490ff699ef4a0881061af09cfce127b85fb1118fa946ae8a8e6c6fdeba6eb21d4716898c7de68f9dca1302c7eb4cc5013af314ba25cc9acb531ef2a288405aa548a2c0380163a22e956aba36e5c6bdb53b86c7ea6e106cbaa32163c41b941b5f794038085a5c5671c6f22a08f5a2b2b086cdaec39bd31aeb6151a771107506910d095a65d92601bfd382ceb68780270d8c686a3a627904404d9b9021a467ce8b7c3ca8df0bb32b29668221cab592e9318c0bca5c9bea33d4c4ad9b28c1bd13731aa78795767b970a94746d9c1967f666a4a416f9829578f7e96735a6a2f74c2bbfc004a509f0fe5a8dbc1ec1ed49f83f2a9dfff5bc5ddc9ef313e39bad46f93f685a60dbef086847f26067c02662f1e62d0441cd54c53a7f658f00ef8ced455ae20502fdadf829ca27c3487b78c8461b2542e1ba4e57b9f2c6489a9e7b2c307bc9a608310bbc4100ba062b2ee52e615932b9ba9a62f40aa3a4d9f5267c33aa577b37aafe2f1dbd30f6dc527ea58e8f8c69601882197cd934c3e0f130e43ea3b2d4ffdbfd1c50881af1d296d2d54ee133c07d5734fe1411d2fe52ddcf0d2e3beae5fa38250c4dc34af0345b46dbeee603b74a0dec0852bee09f19543885cbb34759d96651195fd4ab9af1fde90cd3a1ecf16170bd5112490598d466aeb885713bb3511e1adfffd0bc362ab728e5905cb7ab72dfe61f0496394b4efe0ea651d7beb5ec2bdaa82ec485cccf72ef3993101bbdc507d67974b5aeaa758e6f5dfe7af15c0c09f2d23d487a7b8aad04557d4d071c89f0f08c771b47446375c3ab6668b92dda7e31f2c2f89e61de91630b8ba70afb12368cc57465493b26690eff06adaa592943a9d46b8510bea576e207a3fc0a088cc74444dd984b9d56ab1cdd679bd692f2fc8678a90a9347c6a8ec8db93fdeb5f9a9f1c9a72bdb39f4752f233ff439e690b56898a042b73da889b395cad36771add496457908766c640866eae74e6f53ff5268485ed475d2b91249db487c4a1508ad0234343b45fd32631e6e0374bee65bd749d362c22c88678aee3eef92fd942d9b7083e4302e47d65c5b90a41bc8e44451eba94a2dfccb6d09b3918f8363ba7038b7b4dbf3993367e844ac4d162ac3355a8e42007f4a13080197d744551f9572f59c884b2521e1a131500b91a90cd7112f0ae17ad1a8f35325631d939583471dd02a9fcf51fba2557a3ea9f4bb0f656bfe15853dcc57b9a2f69f61e0ecdabeaae6a86f1eeaea9fbf8503cf4d0ede0f1b8a754c6e97b00ee5d213e52372b11974bd3ade329bc0ebd2652408ce250984ce2ab5be0ab7e5e165136a4d848926f3a12b185ca343f79122cf05f730124e9f1cac03a3f2aa0f42ced2bde57a73a7df6c816bd521939856c3fa06887f0b5139e0f5b952bc5f3d189415486d4f47452c4d80d56de535c07f6636880c6ada78f7dc52a7ce573f2062a31d283a86b7d312f2305a3e582abd161fa59f7f54d6dd4d10d1520799879e8b2150e5185e3a079c33e2bba09b16181e79a6ba2d48701870b38dd58c69076b4ca8da26e05859448fa6f74e0f77b42ce7e151cbb4f5425b7f72e8784954552ebb2544a3c1ca1068c47d32779a3adc66cd3802448ddcd248d6b89dc8d5a79966754cc3da711c541b67f00c06fc57a5ec2384a98d8a5deca09b87b6a00dd6c10daf8d3570afafc9201bcb5af03a1353f31c4a640260eb3ed250474b0f83e1c4029d0814d6b9e34a2adb5660e0e14c3e4765edebb015814116aadbe2fa14efb4db6f0fa087bfb84dc14ae3e2bf607e9799218db3387851893dd5e1a62975a09c73790919cc42dfd24c16dc729810c6cd9b946b0a081f88e60bc2656a78b902de0d76286970d7eb9eebd5ea13058642df74c0fe4fbef89d0d2063638db62e72b7ae8f9957e5a9b03614460c2411c9bc975f31a8f46acb0c214d88d19290883d747f99e194f35b38590ccbb83aad544ced88969369f0f0d7e4d39e2efb84781974ef6ededfd988e2fc77cbcc4526040ac98b07b6accf7c2a292b2c970afd81cdf0993f48e7c7212fe133be6bb2567f6fc2636319bbef655abf3e9c09d0d02df67b0d9602e9d5e35db5ed8d46efba2e7ecc63c2121be423b8c1494655dbad4f890c3d3d3801d0e398426a9b5816c12cb0b0a0bdc423a955e4b1d29f759990ca186478fe44f7f0ccf1887cdf00fa02dcc9982d96481f010c651e6168b2e0268acac6006a7728ff728330c56843d13faa4cab34d1703ee1efe34cd8dccba375b1d58fe808e636ad0e3fd2396df438ebab54333704c621645074293de0a8b3f268f8ecf9f25ec13ee172df343fc92bd0f8b2fa8a9f3f7104482215a61d9d0a3246dbdb78b9e788824f2aef811780eaac1f9e3193691598fd12090b6d2b59a1d18f0b761623d1dd8d27c56ea8d223d51a7545fae88a8114acbc737b50a6a6e40baac49e8d98a7cd8da985c383abce717b1afa5d4845a85767b2c5a69ca61b0fc561b7d541a085fc9d0087c42949525cc804f5652fc1d6c58c2ec038edf241f81497edbe502de334d3592f04dd9dea65c3b41e1b70c3524758ebfbd3d8c42a008df490cc3535bb1ec8e4569fe9c7d993c162c9122bfe46274e80b399db915b4de62f6f280a347207eeaa3da497bcbf8b03f4596eb175cc1eaf0e8"}, @hao={0xc9, 0x10, @mcast1}]}, @fragment={0x3a, 0x0, 0x9, 0x0, 0x0, 0x1, 0x65}, @hopopts={0x29, 0x27, '\x00', [@jumbo={0xc2, 0x4, 0x83}, @generic={0x1, 0xde, "b9030a280851650ac670996711f4c4b52e49547091ed73cb13cc0fb32bd581d41695f6b6b8e166ab7cf184c98994902f78a74c46d47f9b584da1f747fe515704708d1543848985d252102a8be559e6961b2a752f9849fe9cc172581e04aaf4d6258fb3113c02b42ecf85d5568b729a2f0b0445fee96059e9478b99de6bc0ff3f749a49867746a512179e9d2aa3e185da0e77eca93ca3f2ba173ad283aa6a1e9611fa3d43f0cc0f48e4741af3271a59fd63f9376e34a6f064f63f0270ad6d31e2523a81c6a96d00fd5ce682b5dc36c10340d4650452c58d26cf66dbcdba08"}, @generic={0xb, 0x46, "56de45f2faed9428438f2fa79cb9f8f46fef88e0bc963e89ce6f57ad9ec218efb81e0e1ea904c3cbfeab733a66466050e5982adb694b0f185b9472d80e26d521e31775e255ba"}, @calipso={0x7, 0x8, {0x2, 0x0, 0x5, 0xb}}]}], {{0x4e23, 0x4e23, r1, r2, 0x1, 0x0, 0x6, 0x80, 0x4, 0x0, 0xfff8, {[@sack_perm={0x4, 0x2}]}}, {"d3e15d28514956ed52480ee19258d565a5a2760aa9e2da0433c02e7f9c937677c3ff19bf96f58e9d58e17777159cb14db005d3e8f7c1f6935f6d202a51443eeafca45dee9389c5b8be8bf9ec826298c45db1fb110771bcca45855303dc9033b847cd839ae2e731a046337c9a5bf3dc6a8d7845fd866c9a31b9b4469ab29031813f5693c5c0286bbec84b1bb35452fcc8c8d0db43e324350f94b49893003e8d094cdf0c46caa324"}}}}}}}, 0x0) 1m45.949259516s ago: executing program 4 (id=708): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000003db6f85b000000000061197800000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xb) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r5 = request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='fscrypt:', r2) keyctl$reject(0x13, r2, 0xfffffffffffffffb, 0x6, r5) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="cf0401000000fc8014ef9230000008000300", @ANYRES32=r4, @ANYBLOB="040013000a000600"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x40000) 1m45.285707922s ago: executing program 1 (id=709): r0 = socket(0xf, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="7800000018002507b9409b14ffff00000204be04020b06052e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f50903fb0187b1bce89bd18c2ed5058ba86c902000000004a32000400160009000a0000000000e000", 0x78, 0x0, 0x0, 0x0) 1m45.163973999s ago: executing program 1 (id=710): pause() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e7d229bd7000bdc77d250bffdbdf25190000000800030075e88c980ef687dc5084689c2f12581e25edd7b68b388692442c295e14068fab4e410e15674c51635d1408dae956e6fe70", @ANYRES32=r3, @ANYBLOB="05001e0086000000"], 0x24}, 0x1, 0x0, 0x0, 0x44814}, 0x4000) 1m45.123858944s ago: executing program 5 (id=711): r0 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xe12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='iocharset', &(0x7f0000000180)='iocharset', 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xe12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) (async) 1m44.655606894s ago: executing program 3 (id=712): listen(0xffffffffffffffff, 0x99) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x90) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003bc0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/13, 0xd}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/18, 0x12}], 0x6, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000700), 0x6e, &(0x7f00000028c0)=[{&(0x7f0000000780)=""/50, 0x32}, {&(0x7f00000007c0)=""/35, 0x23}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/166, 0xa6}, {&(0x7f0000002b80)=""/124, 0x7c}, {&(0x7f0000002c00)=""/255, 0xff}, {&(0x7f0000002d00)=""/250, 0xfa}, {&(0x7f0000002e00)=""/171, 0xab}], 0x6, &(0x7f0000002f40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002f80), 0x6e, &(0x7f0000003100)=[{&(0x7f0000003000)=""/64, 0x40}, {&(0x7f0000003040)=""/91, 0x5b}, {&(0x7f00000030c0)=""/64, 0x40}], 0x3, &(0x7f0000003140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000003280), 0x6e, &(0x7f0000003880)=[{&(0x7f0000003300)=""/129, 0x81}, {&(0x7f00000033c0)=""/144, 0x90}, {&(0x7f0000003480)=""/243, 0xf3}, {&(0x7f0000003580)=""/111, 0x6f}, {&(0x7f0000003600)=""/1, 0x1}, {&(0x7f0000003640)=""/18, 0x12}, {&(0x7f0000003680)=""/234, 0xea}, {&(0x7f0000003780)=""/67, 0x43}, {&(0x7f0000003800)=""/86, 0x56}], 0x9, &(0x7f0000003940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000003980)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/191, 0xbf}], 0x1, &(0x7f0000003b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x6, 0x1040, &(0x7f0000003d40)) (async) write(r0, &(0x7f00000002c0)='p:-est/event1 ./file0:0x0 @', 0x1b) 1m44.512731496s ago: executing program 3 (id=713): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r2, 0x4, 0x0, 0xfffffffe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) mkdir(&(0x7f0000000340)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./my_configfs\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='.', 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x40002) ioctl$USBDEVFS_IOCTL(r6, 0xc00c5512, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x7, &(0x7f0000000640)=0xfffffff7, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r8, 0x28, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x10}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x880) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x4}) 1m44.295610188s ago: executing program 1 (id=714): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f00000000c0)='auth.unix.ip/channel\x00', 0x2, 0x0) r2 = syz_clone(0x4040000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) get_robust_list(r2, 0x0, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x2) write(r3, 0x0, 0x20000) write(r1, &(0x7f0000000000)=' \\ 127.0.0.1 2000000000 \\xalhost\n', 0x24) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240008d1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)="81", 0x1}], 0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', r7, 0x7800, 0x10, 0x2b2, 0x3, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x64, 0x0, 0xe9, 0x2f, 0x0, @private=0xa010102, @loopback}}}}) 1m44.295175683s ago: executing program 3 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33fafdfffffffbdbdf8f9708000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000670000021400040070696d3672656730000000000000000008000500060000000800178004000600"], 0x54}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33fafdfffffffbdbdf8f9708000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000670000021400040070696d3672656730000000000000000008000500060000000800178004000600"], 0x54}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010) 1m44.195271969s ago: executing program 3 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000040)="0a000300010000", 0x7) 1m44.135116401s ago: executing program 1 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b90f"], 0xb4}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x1b00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000440)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) r4 = socket(0x1f, 0x5, 0x8) setsockopt(r4, 0x112, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000540)={r5, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r1, 0x84, 0x7f, &(0x7f0000000580)={r5, 0x8006}, &(0x7f00000005c0)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x8) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x400001) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x4, 0x2014, 0x1, 0x8, 0x6, 0x2, 0x6}}) 1m30.696603022s ago: executing program 34 (id=708): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000003db6f85b000000000061197800000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xb) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r5 = request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='fscrypt:', r2) keyctl$reject(0x13, r2, 0xfffffffffffffffb, 0x6, r5) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="cf0401000000fc8014ef9230000008000300", @ANYRES32=r4, @ANYBLOB="040013000a000600"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x40000) 1m29.649735794s ago: executing program 35 (id=711): r0 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xe12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='iocharset', &(0x7f0000000180)='iocharset', 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xe12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) (async) 1m28.62787538s ago: executing program 36 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b90f"], 0xb4}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x1b00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000440)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) r4 = socket(0x1f, 0x5, 0x8) setsockopt(r4, 0x112, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000540)={r5, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_EVENT(r1, 0x84, 0x7f, &(0x7f0000000580)={r5, 0x8006}, &(0x7f00000005c0)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x8) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x400001) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x4, 0x2014, 0x1, 0x8, 0x6, 0x2, 0x6}}) 1m28.572108684s ago: executing program 37 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000040)="0a000300010000", 0x7) 39.811895898s ago: executing program 8 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ca) (async, rerun: 64) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 39.450943405s ago: executing program 8 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000300)) 37.746731519s ago: executing program 8 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8000000000000}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0x5c}}, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x14b442, 0x82) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) (async, rerun: 32) umount2(&(0x7f00000007c0)='.\x00', 0x2) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'vlan0\x00', {}, 0x8}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfc, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (async) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000a80)="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"/370, 0x172) (async) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r3) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) 37.335445306s ago: executing program 8 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=@filename='mtd0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000740)='jffs2\x00', 0x800000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f00000000c0)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "49ce2c", 0x0, 0x32, 0x0, @private2, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}, 0x3a) chdir(&(0x7f0000000780)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 36.989329418s ago: executing program 8 (id=752): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @multicast}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)='GPL\x00', 0x4, 0x436, &(0x7f0000001040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0xfffffffffffffc95}, 0x48) unshare(0x36040800) (async) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000001140)=r3) (async) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001180)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000011c0), 0x56) (async) sendmsg$kcm(r4, &(0x7f0000001200)={&(0x7f0000001240)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001300)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="305c0605e182d12fd8326183700398d1c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b93d502b0cd490e35d53ddf6fd0461690982b2369490100b06df5aa58a09a000000808ce41d86b9b949004fd8fe7b80000000", 0x5e, 0xfffffffffffffffe) 36.874204563s ago: executing program 38 (id=752): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @multicast}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)='GPL\x00', 0x4, 0x436, &(0x7f0000001040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0xfffffffffffffc95}, 0x48) unshare(0x36040800) (async) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000001140)=r3) (async) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001180)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000011c0), 0x56) (async) sendmsg$kcm(r4, &(0x7f0000001200)={&(0x7f0000001240)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001300)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="305c0605e182d12fd8326183700398d1c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b93d502b0cd490e35d53ddf6fd0461690982b2369490100b06df5aa58a09a000000808ce41d86b9b949004fd8fe7b80000000", 0x5e, 0xfffffffffffffffe) 29.952945857s ago: executing program 0 (id=799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000e00), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000e40)={0x1, 0x84, 0x1, &(0x7f0000000e80)={0xb, "8105d6c721100f00000000400000a8267d87000200"}}) (async) r3 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000bc0)=r3) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000c00)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000c40)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000c80)=""/61, 0x58000}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000cc0)=0x1) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x84, 0x0, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c3040, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x58) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x444, &(0x7f0000000200)="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", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'}) r5 = creat(&(0x7f0000000680)='./file0\x00', 0x104) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0xc402, 0x47) recvfrom(r0, &(0x7f0000000b00)=""/132, 0x84, 0x10031, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x4000010, r5, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000ec0)=0x7f, 0x4) (async) bind$inet(r6, &(0x7f0000000f00)={0x2, 0x4e20, @multicast2}, 0x10) (async) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000f40)=0x7f, 0x4) (async) bind$inet(r7, &(0x7f0000000f80)={0x2, 0x4e20, @multicast2}, 0x10) (async) listen(r6, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000000980)=""/116, &(0x7f0000000a00)=0x74) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r5, 0xfffffffffffffea4, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000800)='GPL\x00', 0x6, 0x0, 0x0, 0x100, 0x50, '\x00', r8, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff41, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 29.335212903s ago: executing program 0 (id=805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="a2251cf829580d7c0b", @ANYRES64=0x0], 0x20) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) 29.083439687s ago: executing program 0 (id=809): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32, @ANYBLOB="0000000002000000140012800b00010062726964676500207200028008000a00", @ANYRESHEX=r2], 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x440b0) 29.082889493s ago: executing program 0 (id=810): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x24, 0x10, &(0x7f0000000480), 0x1dd}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x40000000, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="021800001900000002000000fedbdf25050006006c8000000a000600000000000000001000000000000000000000000000000000000000000800120000000000feffff7f0000000030000000000000000000000000000000020000020000000000000000000000000200000200000000000000000000000005000500002000000a00000000000000fe80000000000000000000000000068bfc1d0004000000000500"], 0xc8}}, 0x0) 28.991065279s ago: executing program 0 (id=811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x81c0, 0x80000001) mount$overlay(0x0, &(0x7f0000000680)='./bus\x00', &(0x7f00000006c0), 0x8, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', 0x400) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000800)={0x8}) chdir(&(0x7f0000000840)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x8042, 0x34) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000003c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@rdmsr={0x66, 0x18, {0x40000094}}], 0x18}) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f00000008c0)) preadv2(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000300)=""/99, 0x63}], 0x4, 0x3, 0x9, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) 28.69307252s ago: executing program 0 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x22}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc0}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8}]}, 0x44}}, 0x40040000) mount(&(0x7f0000000180)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='binfmt_misc\x00', 0x118202a, &(0x7f0000000240)='nl80211\x00') sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x39, 0xa8, @random="acbac111a9b9fbab488bc0dd6cb500080bb3b4697af7a6db2676dd9230f7a1eab8adb09d72e3eceb1e72c0b4977f129ade6555f35b"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8329}, @DEVLINK_ATTR_RATE_NODE_NAME={0x58, 0xa8, @random="cb8f7118a1236e78bca4b2551bea0f0a6beb81a1ef2d40a16f2584729e564108c4881d567dcf873fbeb65429c95d66c995342ef97a239bf450c4a350474a2f8bde1d1a1b55d9244d63cb156bb051c442efd98b17"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0xd0}, 0x50) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000891) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000580)='bond0\x00', 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, r3, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x9c}}, 0x40010) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000780)) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000800)={@private1, 0x0}, &(0x7f0000000840)=0x14) sendmsg$nl_route(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@ipv4_getaddr={0x44, 0x16, 0x4, 0x70bd2b, 0x25dfdbff, {0x2, 0x10, 0x1, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x116}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0xbd, 0x6, 0x9}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000001280)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000009c0)={0x834, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x538, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xf87}, @from_mac=@device_b, @device_b, @random="f2be747a0e86", {0x4, 0x7f}}, @a_msdu=[{@device_b, @device_b, 0x93, "edc2fb96353646ba60c79400cf4967bd18f981da8aa96ce95fbb0d40a292400741c25ad79515729dfae987fc6923297625bd4f7090955bd59220ab9c9c6078130c42e5d2c538ec00bfcf4087b04765bd5fe6601ae628ee408bd25865b900f53a258b3a58aedf139a75a6778ca10995b306303a9f527cea1d3edd64cbfeed057847a5955e4baf4bc6565c22eb8c5a548d66d41a"}, {@device_b, @device_a, 0x41, "d4cd0e659eef5dac00a19f4ef3b05fd15f1e106ae1699dd822177199563ad01d004e431688fdd76529369918c05bca59fb6a4ec3b92779031938e74f42bd972f91"}, {@device_a, @device_b, 0x18, "b2174d82354d28cad21659139fb62a8e706ff9f8bf950a9d"}, {@device_b, @device_b, 0xf7, "026ede6a7e01eefcdbb5eb525d455002e248a5af37f1323eb57b0f1c560c207b58feb54fa3142486a892547c73447e85b973d9cec5f493c98401998829c31e5ae68688bb8a51a72d2148f123e870439d122deda6f2d5efca2cbbc825fa393dce5df1d647ad3f0780a86def44f145f73e558a9baf24b02636bf5148966a8177c6991f1e9fabdf341b07d222e08ccff9453838c931a61034c2b583481827e1a937de61d369179b867365df0a2ead899e04d22018cc1382c230e0f0864907b6a6f855679bc0ce5b091057b4ff4695d988f183294e2e92ed7ae84e662d3375fe72644b3325fb851873e4af5da11909b81e0b058bce7b1f8e2b"}, {@broadcast, @device_b, 0xef, "b4eca8831b62de5b0b500285dbc85377b0db2e8196a5ea8c0a27ba4a15d17c190cf467697dfcc0c741df89d261867f2935fca197b3395cf9d637c170b1e6b0a242b24e07f9ef9faa8b9f4ebaae58f38c479d3d2ce18b801eb2394e019d0cd3564b49c42c4abb70f2471268dc8c2851fd5c40f39e96f1f1a69015fc1f7a2a487aed5e2e56f962cb3d4264b767f81929deacdd1e72af201b87c2d45559d95743b276e7a48c66e4d465921f2441049a560d5114e168061ee884b07d58e659c6f9f0569cc929d62a86d1cd08bce7bc1b4935291a511c9fcdf33dc9640f1040925452c37ff7c7cfe8f54d1b9765c18ee3c4"}, {@broadcast, @device_a, 0xc9, "c16d1fb156daa6dab8caabed824a8deb196b2abdd9cb8ecc727607284f854bc694854447f8e47319f6751e8d48cedb7dc4ad2ee7647050f0e32e91d7e365efd2b741b6e84144f9c2b9b1c83cc0658d238f4f510e1124b9f7bdd9b082b89bc5edbd237e0f1a84970e4fb8f5c2d77794409bc0f6ff1fa13529b6895f319b9c4ba774f06ba7e379501d589c45a7097cbc4c9d4b4194bbb49ba5b2cea6bbbe6be3e8cad2319131d62e3c6991a253a1ca3704f838dca5d96a0276a2ca7a2c23b985b7ba548ac63b81e951fc"}, {@device_a, @device_b, 0x47, "8fe23f59dd6596c3b7fd0153490aeb364eda1fb471daaa82f33e7c3904b2b3b6a0e1ea3bbd6c9f1cfe8017e26372e121bdc430ff99199c5e505a1b45d6fcec5a8cf8a42a95d637"}, {@broadcast, @device_a, 0xb9, "c3f95977204f5f0c31373d3f9bfc6fbdf8c00fdef67da12e2f4613a302f4cbcef6bcb367d1bf5fa613dcc0d5de589e57116107d656ca3b06dd3d3b00b528a81f5acbd1f4de7093ae5dca709c3cf6e20b35c9656f611ee14f9c7e8a5f1c0a72d7a32fa69e05f82be6854c0026d9eb4bfb32a26b260305c9a435b7ac876d4bb2a4d7c57ba4ab147085f94417cb7c244c8c6370e96e0c72dcd86a7dbc308091dc945d1de9f1dff7189079568edf276b9f837621c575e7e5d0732a"}]}}, @NL80211_ATTR_FRAME={0x2db, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @random="5e90d413910b", @broadcast, @broadcast, {0x3, 0x5}}, @random="bb83915eb69ce44d003cf5ffc2131986b4a5c2a7d2b3b44ff5414a268a92030445fc82b88b062eea292f121d6e216c0f77b312355d23487f325e988f479c60f8583aa0e6821c8a45c89c208ba8268e9316a690e172cb484d1c82ca89fed81ba33c2b096959125d18ebbb28b26794e4776ed33601e8f53077747982bdd9146cb17177cacf798c0a86d015d5bd0b5a1df8f1802f05636d1386e031cea3bfd607563c8573e2263ce5298434fa300057799741c78fe1948a1ff561862092d98679753014512128e3a8bc61c18f5ac0dfd1294a29c2b613bff6d3984d87cac471df3eab47658a46d25781632d4d70a6b312e0f33d76c4c838b68329c8d90cc9e7fc1f9976e8fa24e85239a24e7e037f9e9b3a2da5d48e2b76ed2bdde37b4fdc28aadd3eb2a615f0dd9eea9ecf60ff97643d85f88378bbbd3dbae48b0a1a4ddbdbc1880df8caf598cf046a3cf78e98286038bf48b256e6bd7e08e4d1c1404a217e5ddb7064b24aa46b25bf6d6ce1d6bb35155b3f399bc66219213c0e695c56e2ada7877a639e05f7a4a9984834d829d0b5d54290ca1621e0db93e1dc9a50db9a49961eae1a294f5f2e3f086450c57c018a46a39233677e17efa2548ba3154acc7fe1d9b44b3a6684c430bdfa5ab1061825879f4f1b604c54cb4ecec0678b3390788c599796dc668dd83a9a7eacbe0cc30989abbbcf94f2edb7bbc58ed60926da236f4261851a0a22e621a76320e169852076db4705156b7145aec720871ff12dc66f74de8b1c4eddf5937e660a5cac99601f569d152ad1b1b4d5e84e43a3e27f46814cbf53ba0e1e9f9c4bb99e9c25a4210b34f96552391baeb8cd308623a26c270cf442da110c82a2cc0921c6c1035e3a051280320b85fd58bb1a01b8926b69be3a5b58c1f126cd90034b6c2086cb784fbd1e3b8c98fc284023dcf7e1c31fc631ad2d7c30b0983d6a205c7dfd26f90128dcacc53efc9c1ba87c5c8a2fdac3551d2e"}}]}, 0x834}, 0x1, 0x0, 0x0, 0x40}, 0x90) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r6) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x5c, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004840) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r8, 0x906, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r9 = syz_genetlink_get_family_id$team(&(0x7f00000015c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001680)={'syztnl2\x00', &(0x7f0000001600)={'syztnl2\x00', r5, 0x2f, 0x1, 0x7, 0x3, 0x10, @local, @empty, 0x7, 0x7, 0x9, 0x291e}}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000001bc0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b80)={&(0x7f00000016c0)={0x490, r9, 0x132, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x1f8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r5}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r5}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0xa7, 0x1b, 0xb}, {0x4, 0x3, 0xfd, 0x9}, {0x8, 0x44, 0xb, 0xca}, {0x4, 0xc, 0x7, 0x2}, {0x5, 0x6, 0xf0, 0x5}, {0x1000, 0x72, 0x6, 0x3d5e}, {0x9, 0x79, 0xf, 0xa8}, {0x800, 0x4, 0x0, 0x80000000}, {0x9, 0x7, 0x7f, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x4008045}, 0x20040004) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80160200}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x50, r11, 0x504, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000051) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0xfe6c5000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001e40)={'ip6gre0\x00', &(0x7f0000001dc0)={'ip6_vti0\x00', r5, 0x4, 0x9, 0x9, 0x22ee, 0x48, @dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x2, 0xec}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001f00)={'ip6tnl0\x00', &(0x7f0000001e80)={'ip6tnl0\x00', r5, 0x29, 0xb4, 0x2, 0xb5a, 0x38, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8047, 0x180, 0x0, 0x8}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x80, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000002100)={&(0x7f0000002040), 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) 13.724313384s ago: executing program 39 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x22}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc0}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8}]}, 0x44}}, 0x40040000) mount(&(0x7f0000000180)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='binfmt_misc\x00', 0x118202a, &(0x7f0000000240)='nl80211\x00') sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x39, 0xa8, @random="acbac111a9b9fbab488bc0dd6cb500080bb3b4697af7a6db2676dd9230f7a1eab8adb09d72e3eceb1e72c0b4977f129ade6555f35b"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8329}, @DEVLINK_ATTR_RATE_NODE_NAME={0x58, 0xa8, @random="cb8f7118a1236e78bca4b2551bea0f0a6beb81a1ef2d40a16f2584729e564108c4881d567dcf873fbeb65429c95d66c995342ef97a239bf450c4a350474a2f8bde1d1a1b55d9244d63cb156bb051c442efd98b17"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0xd0}, 0x50) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000891) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000580)='bond0\x00', 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, r3, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x9c}}, 0x40010) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000780)) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000800)={@private1, 0x0}, &(0x7f0000000840)=0x14) sendmsg$nl_route(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@ipv4_getaddr={0x44, 0x16, 0x4, 0x70bd2b, 0x25dfdbff, {0x2, 0x10, 0x1, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x116}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0xbd, 0x6, 0x9}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000001280)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000009c0)={0x834, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x538, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xf87}, @from_mac=@device_b, @device_b, @random="f2be747a0e86", {0x4, 0x7f}}, @a_msdu=[{@device_b, @device_b, 0x93, "edc2fb96353646ba60c79400cf4967bd18f981da8aa96ce95fbb0d40a292400741c25ad79515729dfae987fc6923297625bd4f7090955bd59220ab9c9c6078130c42e5d2c538ec00bfcf4087b04765bd5fe6601ae628ee408bd25865b900f53a258b3a58aedf139a75a6778ca10995b306303a9f527cea1d3edd64cbfeed057847a5955e4baf4bc6565c22eb8c5a548d66d41a"}, {@device_b, @device_a, 0x41, "d4cd0e659eef5dac00a19f4ef3b05fd15f1e106ae1699dd822177199563ad01d004e431688fdd76529369918c05bca59fb6a4ec3b92779031938e74f42bd972f91"}, {@device_a, @device_b, 0x18, "b2174d82354d28cad21659139fb62a8e706ff9f8bf950a9d"}, {@device_b, @device_b, 0xf7, "026ede6a7e01eefcdbb5eb525d455002e248a5af37f1323eb57b0f1c560c207b58feb54fa3142486a892547c73447e85b973d9cec5f493c98401998829c31e5ae68688bb8a51a72d2148f123e870439d122deda6f2d5efca2cbbc825fa393dce5df1d647ad3f0780a86def44f145f73e558a9baf24b02636bf5148966a8177c6991f1e9fabdf341b07d222e08ccff9453838c931a61034c2b583481827e1a937de61d369179b867365df0a2ead899e04d22018cc1382c230e0f0864907b6a6f855679bc0ce5b091057b4ff4695d988f183294e2e92ed7ae84e662d3375fe72644b3325fb851873e4af5da11909b81e0b058bce7b1f8e2b"}, {@broadcast, @device_b, 0xef, "b4eca8831b62de5b0b500285dbc85377b0db2e8196a5ea8c0a27ba4a15d17c190cf467697dfcc0c741df89d261867f2935fca197b3395cf9d637c170b1e6b0a242b24e07f9ef9faa8b9f4ebaae58f38c479d3d2ce18b801eb2394e019d0cd3564b49c42c4abb70f2471268dc8c2851fd5c40f39e96f1f1a69015fc1f7a2a487aed5e2e56f962cb3d4264b767f81929deacdd1e72af201b87c2d45559d95743b276e7a48c66e4d465921f2441049a560d5114e168061ee884b07d58e659c6f9f0569cc929d62a86d1cd08bce7bc1b4935291a511c9fcdf33dc9640f1040925452c37ff7c7cfe8f54d1b9765c18ee3c4"}, {@broadcast, @device_a, 0xc9, "c16d1fb156daa6dab8caabed824a8deb196b2abdd9cb8ecc727607284f854bc694854447f8e47319f6751e8d48cedb7dc4ad2ee7647050f0e32e91d7e365efd2b741b6e84144f9c2b9b1c83cc0658d238f4f510e1124b9f7bdd9b082b89bc5edbd237e0f1a84970e4fb8f5c2d77794409bc0f6ff1fa13529b6895f319b9c4ba774f06ba7e379501d589c45a7097cbc4c9d4b4194bbb49ba5b2cea6bbbe6be3e8cad2319131d62e3c6991a253a1ca3704f838dca5d96a0276a2ca7a2c23b985b7ba548ac63b81e951fc"}, {@device_a, @device_b, 0x47, "8fe23f59dd6596c3b7fd0153490aeb364eda1fb471daaa82f33e7c3904b2b3b6a0e1ea3bbd6c9f1cfe8017e26372e121bdc430ff99199c5e505a1b45d6fcec5a8cf8a42a95d637"}, {@broadcast, @device_a, 0xb9, "c3f95977204f5f0c31373d3f9bfc6fbdf8c00fdef67da12e2f4613a302f4cbcef6bcb367d1bf5fa613dcc0d5de589e57116107d656ca3b06dd3d3b00b528a81f5acbd1f4de7093ae5dca709c3cf6e20b35c9656f611ee14f9c7e8a5f1c0a72d7a32fa69e05f82be6854c0026d9eb4bfb32a26b260305c9a435b7ac876d4bb2a4d7c57ba4ab147085f94417cb7c244c8c6370e96e0c72dcd86a7dbc308091dc945d1de9f1dff7189079568edf276b9f837621c575e7e5d0732a"}]}}, @NL80211_ATTR_FRAME={0x2db, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @random="5e90d413910b", @broadcast, @broadcast, {0x3, 0x5}}, @random="bb83915eb69ce44d003cf5ffc2131986b4a5c2a7d2b3b44ff5414a268a92030445fc82b88b062eea292f121d6e216c0f77b312355d23487f325e988f479c60f8583aa0e6821c8a45c89c208ba8268e9316a690e172cb484d1c82ca89fed81ba33c2b096959125d18ebbb28b26794e4776ed33601e8f53077747982bdd9146cb17177cacf798c0a86d015d5bd0b5a1df8f1802f05636d1386e031cea3bfd607563c8573e2263ce5298434fa300057799741c78fe1948a1ff561862092d98679753014512128e3a8bc61c18f5ac0dfd1294a29c2b613bff6d3984d87cac471df3eab47658a46d25781632d4d70a6b312e0f33d76c4c838b68329c8d90cc9e7fc1f9976e8fa24e85239a24e7e037f9e9b3a2da5d48e2b76ed2bdde37b4fdc28aadd3eb2a615f0dd9eea9ecf60ff97643d85f88378bbbd3dbae48b0a1a4ddbdbc1880df8caf598cf046a3cf78e98286038bf48b256e6bd7e08e4d1c1404a217e5ddb7064b24aa46b25bf6d6ce1d6bb35155b3f399bc66219213c0e695c56e2ada7877a639e05f7a4a9984834d829d0b5d54290ca1621e0db93e1dc9a50db9a49961eae1a294f5f2e3f086450c57c018a46a39233677e17efa2548ba3154acc7fe1d9b44b3a6684c430bdfa5ab1061825879f4f1b604c54cb4ecec0678b3390788c599796dc668dd83a9a7eacbe0cc30989abbbcf94f2edb7bbc58ed60926da236f4261851a0a22e621a76320e169852076db4705156b7145aec720871ff12dc66f74de8b1c4eddf5937e660a5cac99601f569d152ad1b1b4d5e84e43a3e27f46814cbf53ba0e1e9f9c4bb99e9c25a4210b34f96552391baeb8cd308623a26c270cf442da110c82a2cc0921c6c1035e3a051280320b85fd58bb1a01b8926b69be3a5b58c1f126cd90034b6c2086cb784fbd1e3b8c98fc284023dcf7e1c31fc631ad2d7c30b0983d6a205c7dfd26f90128dcacc53efc9c1ba87c5c8a2fdac3551d2e"}}]}, 0x834}, 0x1, 0x0, 0x0, 0x40}, 0x90) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r6) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x5c, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004840) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r8, 0x906, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r9 = syz_genetlink_get_family_id$team(&(0x7f00000015c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001680)={'syztnl2\x00', &(0x7f0000001600)={'syztnl2\x00', r5, 0x2f, 0x1, 0x7, 0x3, 0x10, @local, @empty, 0x7, 0x7, 0x9, 0x291e}}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000001bc0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b80)={&(0x7f00000016c0)={0x490, r9, 0x132, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x1f8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r5}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r5}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0xa7, 0x1b, 0xb}, {0x4, 0x3, 0xfd, 0x9}, {0x8, 0x44, 0xb, 0xca}, {0x4, 0xc, 0x7, 0x2}, {0x5, 0x6, 0xf0, 0x5}, {0x1000, 0x72, 0x6, 0x3d5e}, {0x9, 0x79, 0xf, 0xa8}, {0x800, 0x4, 0x0, 0x80000000}, {0x9, 0x7, 0x7f, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x4008045}, 0x20040004) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80160200}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x50, r11, 0x504, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000051) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0xfe6c5000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001e40)={'ip6gre0\x00', &(0x7f0000001dc0)={'ip6_vti0\x00', r5, 0x4, 0x9, 0x9, 0x22ee, 0x48, @dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0x2, 0xec}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001f00)={'ip6tnl0\x00', &(0x7f0000001e80)={'ip6tnl0\x00', r5, 0x29, 0xb4, 0x2, 0xb5a, 0x38, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8047, 0x180, 0x0, 0x8}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x80, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000002100)={&(0x7f0000002040), 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) 4.63046432s ago: executing program 7 (id=1071): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @loopback}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="fd"], 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="fd"], 0x8) 4.624871438s ago: executing program 7 (id=1073): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000500)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000540)={0x18, r4, 0x44, 0x0, &(0x7f0000000580)=[{0x5, 0x200}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r5, &(0x7f00000004c0)=ANY=[], 0xfdef) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad000000b43da3978d06000000000000", 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000005c0)={0x1, 0x3ff, 0x6, 0x8}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000640)={r10, 0x4f, "0fff9f6d0c986b52a21a89ced7f4ecb02cad4fa970ed1bf7268a8ed47e45d199d2ae427cb6418df19cd44213c9d9c635258767e5b0d8655abc0bce04c3b9de449209b8b75c6851a3a1f37df533c98a"}, &(0x7f00000006c0)=0x57) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff7681}, [@IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7029dd24d70b2cb4a7a47d40"}]}, 0x30}}, 0x0) 4.563663101s ago: executing program 2 (id=1074): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000180)=""/141) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x0, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0xff000000, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@udp={{0x30}, {[0x4e24, 0x4e21], [0x4e24, 0x4e23]}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x5, 0x1}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x2, 0x1, 0x6, 0x5, 0x2], 0x1, 0x4}}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x1, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'lo\x00', 0x1}) (async) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000024000104000000000000000000000000010000000000fffff1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="640000002c0001040000000000000000000000000100000001000000f3ffffff000301000a000100626173696300000034000280300002800800010001000000240002802000010000000400000000000c0001001a100000001000000800030000000000"], 0x64}}, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a80), 0x80400, 0x0) preadv(r5, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/172, 0xac}], 0x1, 0x9d, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000c40)={'tunl0\x00', &(0x7f0000000bc0)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x6, 0x2, {{0xa, 0x4, 0x0, 0x3b, 0x28, 0x65, 0x0, 0x32, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x10, 0x18, 0x0, 0x5, [0x6e, 0xb, 0xfff]}]}}}}}) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) (rerun: 64) write(r7, &(0x7f0000000cc0)='never', 0x5) (async) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x48041) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r8, &(0x7f00000007c0)="01020304", 0x4, 0x0, &(0x7f0000000800)={0x2, 0x3012, @loopback}, 0x10) (async, rerun: 64) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208000, 0x0) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000880)=[@text32={0x20, &(0x7f00000008c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) (rerun: 32) bind$inet6(r7, &(0x7f0000000e00)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000900)={0x2, 0xffffffffffffffff, 0x80000}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000980)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0x200, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xffff, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r12, 0xc00464b4, &(0x7f00000000c0)) 3.684372402s ago: executing program 6 (id=1080): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x8015) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x1, 0x4070bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x68}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000e020}, 0x18) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}}, 0x0) 3.595130883s ago: executing program 6 (id=1081): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) (async) 3.594703405s ago: executing program 7 (id=1082): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x135) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/ttyUSB0\x00', 0x2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x26000000) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x11) write$tun(r2, &(0x7f00000004c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x8, 0x1, "5f01fc8ed222182ad6145b98cd069e6824d03368bcde1148aa7c69d6839cecd6d5b9a6a3b762819c0b6028efd084b7203833ad49cf3f65792fc534d78084167812368c621dab241065b4591a88783a491936e210430024d8203dc8eb785f"}}}}}, 0x7b) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) 3.364957998s ago: executing program 6 (id=1083): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x24, 0x10, &(0x7f0000000480), 0x1dd}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x40000000, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="021800001900000002000000fedbdf25050006006c8000000a000600000000000000000000000000100000000000000000000000000000000800120000000000feffff7f0000000030000000000000000000000000000000020000020000000000000000000000000200000200000000000000000000000005000500002000000a00000000000000fe80000000000000000000000000068bfc1d0004000000000500"], 0xc8}}, 0x0) 3.364345392s ago: executing program 6 (id=1084): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000001200)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xb3000) 3.275283661s ago: executing program 6 (id=1085): r0 = userfaultfd(0x80801) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r1}, 0x20) sendto(r1, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810240000007050202"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) write$char_usb(r4, &(0x7f0000000340)="620482", 0x3) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) close_range(r0, 0xffffffffffffffff, 0x0) 2.175209657s ago: executing program 2 (id=1086): syz_emit_ethernet(0x76, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x7, '\x00', {0x6, 0x6, '\tkS', 0x9, 0x89, 0xff, @empty, @loopback, [@fragment={0x29, 0x0, 0x6, 0x0, 0x0, 0x5, 0x68}], "93f79649efef1d8c"}}}}}}}, 0x0) (async) socket$inet(0x2, 0x6, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}], 0x10) (async) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) (async) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000) (async, rerun: 64) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x8, "ff7480", "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"}}, 0x110) (rerun: 64) 1.841450243s ago: executing program 9 (id=1090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) read$usbfs(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) rmdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/hid.usb0\x00') sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) r3 = epoll_create(0x7) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x210480, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000002c0)={0x60000000}) socket$nl_route(0x10, 0x3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.715254198s ago: executing program 9 (id=1091): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0x1, 0xfff3}, {0x9, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x81, 0x81, 0xa, [@datasec={0xe, 0x3, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x1}, {0x5, 0x7, 0x101}, {0x1, 0x9, 0x9}], 'd'}, @ptr={0x9, 0x0, 0x0, 0x2, 0x5}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x7, 0xe}, {0x10, 0xb}, {0xf, 0x4}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x4}]}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x30, 0x5f, 0x2e, 0x41]}}, &(0x7f00000000c0)=""/1, 0xa6, 0x1, 0x1, 0x7}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x32}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.715103939s ago: executing program 9 (id=1092): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x141b42, 0x1c) splice(r0, 0x0, r2, 0x0, 0x402000784853bb, 0x0) fcntl$setpipe(r1, 0x407, 0x800004) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x40, &(0x7f00000001c0)) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x1, 0x3, 0x7}, 0xe}}, 0x18) 1.615346972s ago: executing program 9 (id=1093): socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0xc, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0xdd6e2e3f461ee510}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 1.535264536s ago: executing program 9 (id=1094): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010127ad7000fddbdf256200000006f328ea9e08b400251000000600b400120b00000600b300030000000600b30000000000e29c33ec6d"], 0x34}}, 0x48002) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 1.534858965s ago: executing program 9 (id=1095): setuid(0xee00) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = userfaultfd(0x801) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100b}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x52) renameat2(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22304000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) userfaultfd(0x801) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100b}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x52) (async) renameat2(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) getpid() (async) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) (async) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x22304000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1.304903679s ago: executing program 2 (id=1096): r0 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000012c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000dc0)={{0x5, 0x0, 0x0, 0x6, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r3 = socket(0x11, 0x3, 0xfffffffd) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000400)={@broadcast, @broadcast}, &(0x7f0000000440)=0xc) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x11, 0x0, 0x7}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) setsockopt(r3, 0x107, 0xf, &(0x7f0000000480)="00008634", 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000180)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000cc0)={0xafb, 0x7f, 0x3, {0x0, @meta={0x50314b52, 0x5970658e, 0x70e8, 0x9095, 0x1aeb52bf}}, 0x3ff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x2a020480) unshare(0x2c000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'pim6reg\x00', 0x0}) sendmsg(r3, &(0x7f0000000500)={&(0x7f0000000540)=@ll={0x11, 0x3, r7, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="540102ffc3000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000640)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6f", 0x35}, {&(0x7f0000000680)="f76e14895b4c948e303e1fe34234a0a92ecd", 0xfebf}], 0x3}, 0x44000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_trace', 0x1c1800, 0x0) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fremovexattr(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="00001b00000000000000007ddeb4e959a03b934566270000000000"]) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r8, r7, 0x25, 0x10, @val=@iter={&(0x7f0000000300)=@cgroup={0x0, r9, 0x7}, 0x10}}, 0x20) 1.213315345s ago: executing program 2 (id=1097): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000180)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0xb1}}, &(0x7f00000001c0)='GPL\x00'}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.144841392s ago: executing program 2 (id=1098): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2210088, &(0x7f0000000440)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) (async, rerun: 32) chdir(&(0x7f00000004c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000600)) (async) r3 = dup(r1) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0xf0f044}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460505000000ffffffffffffff0200030009000000ca02000038000050d00200000614bcd439ff2000010003"], 0x58) close(r4) (async) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000200), 0x88000, 0x0) (async, rerun: 32) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000280)={0x0, 0x1, [0x5, 0x8, 0x94f, 0x1, 0x10000, 0x5, 0x7, 0x4]}) (async, rerun: 32) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @dev, @local}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) r5 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x1, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x54000000, 0x3ff, 0xc0, 0x4, 0xef, 0x2996}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1000}]}}}]}, 0x58}}, 0x4c840) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f00000006c0)={0x7, [[0x9, 0x4, 0x1, 0x6, 0x8a56, 0x4, 0x8, 0x7], [0x0, 0x3, 0x7, 0xff, 0x6, 0x5e8d, 0x2000000, 0x7d9], [0x6, 0x40, 0x15, 0x80, 0x2, 0x0, 0x9]], '\x00', [{0xc, 0xffff, 0x0, 0x0, 0x1}, {0x80000001, 0xc26d, 0x1, 0x0, 0x1, 0x1}, {0xfd, 0x77, 0x0, 0x1}, {0x17b, 0x8d, 0x1, 0x1, 0x1}, {0x3, 0x2, 0x0, 0x1, 0x1}, {0xf, 0x210f, 0x1}, {0x580000, 0x9, 0x0, 0x1, 0x1}, {0x2, 0x56, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1}, {0x9, 0x48af80, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x1}, {0x7fffffff, 0xa, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x9}) ftruncate(r0, 0x4a8e) (async, rerun: 32) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) (rerun: 32) umount2(&(0x7f0000000680)='./file0\x00', 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.144306796s ago: executing program 2 (id=1099): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_usb_connect(0x3, 0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102", @ANYRESHEX], 0x0) mount(0x0, &(0x7f0000000500)='mnt\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='mnt/ttyUSB0\x00', 0x181102, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000180)={0x10005, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000005c0)={0x3, 0x5, 0x6, 0x800, 0xa, "020000006800006dce8d052b7ff20000f5ff00", 0x10010, 0xfff}) r2 = fspick(r1, &(0x7f00000000c0)='./mnt\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='*\'\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0) 514.66535ms ago: executing program 7 (id=1100): syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x2, 0x3, &(0x7f0000000080)="f714a9", 0x0, 0x1}]}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 394.622932ms ago: executing program 7 (id=1101): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup3(r1, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000003240)={0x2020}, 0x2020) 390.289987ms ago: executing program 7 (id=1102): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./cifs\x00', 0x1ff) mount(&(0x7f0000000740)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000780)='./cifs\x00', &(0x7f00000007c0)='cifs\x00', 0x0, &(0x7f0000000800)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r3 = accept(r2, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000880)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000000000800000000000", 0x84, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000940)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x26e8}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000140)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='addr\x00', &(0x7f0000000300)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='vers\x00', &(0x7f00000003c0)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x711042, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, 0x0, 0x10000000) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x38, 0x7, 0x1, 0x0, "985febe3369d4acad3c6d5319d0408fa76e9d68788e36d8465c3259c6ec7220ad721a8a3deef3dd01697d69e7da51e297d888565"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) 0s ago: executing program 6 (id=1103): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000040)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x4, 0xfffffffc, 0x10, 0xf, 0x100, &(0x7f0000001c80)="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"}) kernel console output (not intermixed with test programs): 13][ T7918] hsr_slave_0: left promiscuous mode [ 378.129149][ T7918] hsr_slave_1: left promiscuous mode [ 378.129529][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.129540][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.129998][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.130007][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.133481][ T7918] hsr_slave_0: left promiscuous mode [ 378.133926][ T7918] hsr_slave_1: left promiscuous mode [ 378.134265][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.134276][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.134737][ T7918] batman_adv: batadv0: Interface deactivated: dummy0 [ 378.134746][ T7918] batman_adv: batadv0: Removing interface: dummy0 [ 378.150708][ T7918] hsr_slave_0: left promiscuous mode [ 378.152446][ T7918] hsr_slave_1: left promiscuous mode [ 378.152978][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.152991][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.155795][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.155808][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.167322][ T7918] hsr_slave_0: left promiscuous mode [ 378.171109][ T7918] hsr_slave_1: left promiscuous mode [ 378.171627][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.171639][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.175958][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.175972][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.190228][ T7918] hsr_slave_0: left promiscuous mode [ 378.193714][ T7918] hsr_slave_1: left promiscuous mode [ 378.194361][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.223083][ T7918] veth1_macvtap: left promiscuous mode [ 378.223116][ T7918] veth0_macvtap: left promiscuous mode [ 378.223192][ T7918] veth1_vlan: left promiscuous mode [ 378.223284][ T7918] veth0_vlan: left promiscuous mode [ 378.227071][ T7918] veth1_macvtap: left promiscuous mode [ 378.227099][ T7918] veth0_macvtap: left promiscuous mode [ 378.227173][ T7918] veth1_vlan: left promiscuous mode [ 378.227230][ T7918] veth0_vlan: left promiscuous mode [ 378.234223][ T7918] veth1_macvtap: left promiscuous mode [ 378.234249][ T7918] veth0_macvtap: left promiscuous mode [ 378.234380][ T7918] veth1_vlan: left promiscuous mode [ 378.234528][ T7918] veth0_vlan: left promiscuous mode [ 378.242763][ T7918] veth1_macvtap: left promiscuous mode [ 378.242790][ T7918] veth0_macvtap: left promiscuous mode [ 378.242870][ T7918] veth1_vlan: left promiscuous mode [ 378.242921][ T7918] veth0_vlan: left promiscuous mode [ 378.446844][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.498536][ T7918] team_slave_1 (unregistering): left allmulticast mode [ 378.499274][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 378.510385][ T7918] team_slave_0 (unregistering): left allmulticast mode [ 378.511639][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 378.619024][ T607] smc: removing ib device sz1 [ 378.639726][ T9470] netlink: 'syz.7.774': attribute type 39 has an invalid length. [ 378.660447][ T607] smbdirect: ib_dev[sz1] removed [ 379.141050][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 379.159245][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 379.169536][ T5771] Bluetooth: hci0: command tx timeout [ 379.398480][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 379.403348][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 379.493541][ T1535] usb 11-1: USB disconnect, device number 2 [ 379.530256][ T9473] random: crng reseeded on system resumption [ 379.538389][ T9473] FAULT_INJECTION: forcing a failure. [ 379.538389][ T9473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.538412][ T9473] CPU: 2 UID: 0 PID: 9473 Comm: syz.6.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.538427][ T9473] Tainted: [L]=SOFTLOCKUP [ 379.538432][ T9473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.538439][ T9473] Call Trace: [ 379.538443][ T9473] [ 379.538448][ T9473] dump_stack_lvl+0x100/0x190 [ 379.538470][ T9473] should_fail_ex.cold+0x5/0xa [ 379.538485][ T9473] ? prepare_alloc_pages+0x16d/0x5b0 [ 379.538504][ T9473] should_fail_alloc_page+0xeb/0x140 [ 379.538525][ T9473] prepare_alloc_pages+0x1f0/0x5b0 [ 379.538542][ T9473] ? unwind_get_return_address+0x59/0xa0 [ 379.538561][ T9473] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 379.538580][ T9473] ? stack_trace_save+0x8e/0xc0 [ 379.538594][ T9473] ? __pfx_stack_trace_save+0x10/0x10 [ 379.538606][ T9473] ? stack_depot_save_flags+0x27/0x9f0 [ 379.538621][ T9473] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 379.538635][ T9473] ? kasan_save_stack+0x3f/0x50 [ 379.538649][ T9473] ? kasan_save_track+0x14/0x30 [ 379.538663][ T9473] ? __kasan_kmalloc+0xaa/0xb0 [ 379.538677][ T9473] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 379.538689][ T9473] ? memory_bm_create+0x12c/0xcf0 [ 379.538705][ T9473] ? create_basic_memory_bitmaps+0x10b/0x350 [ 379.538722][ T9473] ? snapshot_open+0x23b/0x2b0 [ 379.538733][ T9473] ? misc_open+0x26d/0x450 [ 379.538748][ T9473] ? chrdev_open+0x234/0x6a0 [ 379.538763][ T9473] ? do_dentry_open+0x6ab/0x14d0 [ 379.538776][ T9473] ? vfs_open+0x82/0x3f0 [ 379.538792][ T9473] ? path_openat+0x1a23/0x2450 [ 379.538807][ T9473] ? do_file_open+0x20e/0x430 [ 379.538822][ T9473] ? do_sys_openat2+0x10f/0x1e0 [ 379.538832][ T9473] ? __x64_sys_openat+0x12d/0x210 [ 379.538841][ T9473] ? do_syscall_64+0x123/0x790 [ 379.538857][ T9473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.538878][ T9473] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.538894][ T9473] ? policy_nodemask+0xed/0x4f0 [ 379.538912][ T9473] alloc_pages_mpol+0x201/0x550 [ 379.538930][ T9473] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 379.538948][ T9473] ? kasan_save_track+0x14/0x30 [ 379.538963][ T9473] ? __kasan_kmalloc+0xaa/0xb0 [ 379.538981][ T9473] alloc_pages_noprof+0x1a/0x160 [ 379.539013][ T9473] get_zeroed_page_noprof+0x18/0xb0 [ 379.539031][ T9473] get_image_page+0x18/0x1a0 [ 379.539049][ T9473] memory_bm_create+0x66a/0xcf0 [ 379.539074][ T9473] create_basic_memory_bitmaps+0x10b/0x350 [ 379.539097][ T9473] snapshot_open+0x23b/0x2b0 [ 379.539109][ T9473] ? __pfx_snapshot_open+0x10/0x10 [ 379.539123][ T9473] misc_open+0x26d/0x450 [ 379.539140][ T9473] ? __pfx_misc_open+0x10/0x10 [ 379.539155][ T9473] chrdev_open+0x234/0x6a0 [ 379.539172][ T9473] ? __pfx_chrdev_open+0x10/0x10 [ 379.539189][ T9473] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 379.539206][ T9473] do_dentry_open+0x6ab/0x14d0 [ 379.539235][ T9473] ? __pfx_chrdev_open+0x10/0x10 [ 379.539254][ T9473] vfs_open+0x82/0x3f0 [ 379.539273][ T9473] path_openat+0x1a23/0x2450 [ 379.539292][ T9473] ? __pfx_path_openat+0x10/0x10 [ 379.539314][ T9473] do_file_open+0x20e/0x430 [ 379.539336][ T9473] ? __pfx_do_file_open+0x10/0x10 [ 379.539364][ T9473] ? _raw_spin_unlock+0x28/0x50 [ 379.539380][ T9473] ? alloc_fd+0x471/0x7a0 [ 379.539403][ T9473] do_sys_openat2+0x10f/0x1e0 [ 379.539415][ T9473] ? __pfx_do_sys_openat2+0x10/0x10 [ 379.539428][ T9473] ? fput+0x7c/0x100 [ 379.539449][ T9473] __x64_sys_openat+0x12d/0x210 [ 379.539460][ T9473] ? __pfx___x64_sys_openat+0x10/0x10 [ 379.539478][ T9473] do_syscall_64+0x123/0x790 [ 379.539496][ T9473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.539509][ T9473] RIP: 0033:0x7f2d1d19e559 [ 379.539519][ T9473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.539531][ T9473] RSP: 002b:00007f2d1dfa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 379.539543][ T9473] RAX: ffffffffffffffda RBX: 00007f2d1d425fa0 RCX: 00007f2d1d19e559 [ 379.539550][ T9473] RDX: 0000000000000081 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 379.539557][ T9473] RBP: 00007f2d1d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 379.539564][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.539571][ T9473] R13: 00007f2d1d426038 R14: 00007f2d1d425fa0 R15: 00007ffde5b17188 [ 379.539588][ T9473] [ 379.587817][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 379.606207][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 379.628407][ T42] kauditd_printk_skb: 4165 callbacks suppressed [ 379.628424][ T42] audit: type=1800 audit(2000000157.374:18840): pid=9475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.776" name="wakeup_count" dev="sysfs" ino=866 res=0 errno=0 [ 379.728872][ T5870] infiniband sz1: ib_query_port failed (-19) [ 379.729888][ T5438] 8021q: adding VLAN 0 to HW filter on device eth22 [ 379.743044][ T9481] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 379.750859][ T42] audit: type=1400 audit(2000000157.494:18841): avc: denied { search } for pid=9482 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 379.750888][ T42] audit: type=1400 audit(2000000157.494:18842): avc: denied { search } for pid=9482 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 379.750910][ T42] audit: type=1400 audit(2000000157.494:18843): avc: denied { search } for pid=9482 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 379.750930][ T42] audit: type=1400 audit(2000000157.494:18844): avc: denied { search } for pid=9482 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 379.750989][ T42] audit: type=1400 audit(2000000157.494:18845): avc: denied { search } for pid=9482 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 379.758317][ T42] audit: type=1400 audit(2000000157.494:18846): avc: denied { search } for pid=9482 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 379.758347][ T42] audit: type=1400 audit(2000000157.494:18847): avc: denied { search } for pid=9482 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 379.758368][ T42] audit: type=1400 audit(2000000157.494:18848): avc: denied { search } for pid=9482 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 379.758390][ T42] audit: type=1400 audit(2000000157.494:18849): avc: denied { search } for pid=9482 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 380.010295][ T9500] jffs2: notice: (9500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 3 orphan) found. [ 380.020208][ T9500] FAULT_INJECTION: forcing a failure. [ 380.020208][ T9500] name failslab, interval 1, probability 0, space 0, times 0 [ 380.020236][ T9500] CPU: 3 UID: 0 PID: 9500 Comm: syz.7.780 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.020252][ T9500] Tainted: [L]=SOFTLOCKUP [ 380.020256][ T9500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.020262][ T9500] Call Trace: [ 380.020266][ T9500] [ 380.020271][ T9500] dump_stack_lvl+0x100/0x190 [ 380.020307][ T9500] should_fail_ex.cold+0x5/0xa [ 380.020326][ T9500] should_failslab+0xc2/0x120 [ 380.020343][ T9500] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 380.020357][ T9500] ? register_lock_class+0x3f/0x7b0 [ 380.020371][ T9500] ? __d_alloc+0x35/0xa50 [ 380.020384][ T9500] __d_alloc+0x35/0xa50 [ 380.020393][ T9500] ? __lock_acquire+0x5c0/0x1f40 [ 380.020408][ T9500] d_alloc_parallel+0x105/0x14c0 [ 380.020425][ T9500] ? lock_acquire+0x1d1/0x380 [ 380.020437][ T9500] ? lookup_slow+0x42/0x70 [ 380.020449][ T9500] ? __pfx_d_alloc_parallel+0x10/0x10 [ 380.020463][ T9500] ? __pfx___might_resched+0x10/0x10 [ 380.020474][ T9500] ? try_to_unlazy+0x296/0x910 [ 380.020490][ T9500] ? down_read+0x13b/0x4c0 [ 380.020501][ T9500] ? __pfx_down_read+0x10/0x10 [ 380.020513][ T9500] __lookup_slow+0x98/0x320 [ 380.020526][ T9500] lookup_slow+0x50/0x70 [ 380.020538][ T9500] path_lookupat+0x5e8/0xc40 [ 380.020555][ T9500] filename_lookup+0x202/0x590 [ 380.020571][ T9500] ? __pfx_filename_lookup+0x10/0x10 [ 380.020598][ T9500] ? __asan_memcpy+0x3c/0x60 [ 380.020611][ T9500] ? do_getname_kernel+0x1be/0x250 [ 380.020624][ T9500] kern_path+0x37/0x50 [ 380.020638][ T9500] ovl_mount_dir+0x142/0x1c0 [ 380.020655][ T9500] ovl_parse_param+0x1136/0x1580 [ 380.020671][ T9500] ? selinux_fs_context_parse_param+0xd8/0x130 [ 380.020689][ T9500] ? __pfx_ovl_parse_param+0x10/0x10 [ 380.020706][ T9500] ? static_key_count+0x5a/0x70 [ 380.020720][ T9500] ? __pfx_ovl_parse_param+0x10/0x10 [ 380.020734][ T9500] vfs_parse_fs_param+0x200/0x3b0 [ 380.020748][ T9500] vfs_parse_fs_qstr+0x138/0x1c0 [ 380.020760][ T9500] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 380.020777][ T9500] ? ovl_next_opt+0x143/0x1c0 [ 380.020792][ T9500] ? __pfx_ovl_next_opt+0x10/0x10 [ 380.020806][ T9500] vfs_parse_monolithic_sep+0x195/0x210 [ 380.020820][ T9500] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 380.020833][ T9500] ? alloc_fs_context+0x65a/0xf40 [ 380.020848][ T9500] path_mount+0x77f/0x2850 [ 380.020862][ T9500] ? __pfx_path_mount+0x10/0x10 [ 380.020873][ T9500] ? lockdep_hardirqs_on+0x7d/0x110 [ 380.020891][ T9500] ? putname+0xb1/0x110 [ 380.020899][ T9500] ? kmem_cache_free+0x127/0x6c0 [ 380.020916][ T9500] ? __x64_sys_mount+0x293/0x310 [ 380.020927][ T9500] __x64_sys_mount+0x293/0x310 [ 380.020939][ T9500] ? __pfx___x64_sys_mount+0x10/0x10 [ 380.020955][ T9500] do_syscall_64+0x123/0x790 [ 380.020973][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.020984][ T9500] RIP: 0033:0x7f8aa099e559 [ 380.020994][ T9500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.021004][ T9500] RSP: 002b:00007f8aa193e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 380.021016][ T9500] RAX: ffffffffffffffda RBX: 00007f8aa0c25fa0 RCX: 00007f8aa099e559 [ 380.021023][ T9500] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 380.021029][ T9500] RBP: 00007f8aa193e090 R08: 00002000000001c0 R09: 0000000000000000 [ 380.021035][ T9500] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 380.021041][ T9500] R13: 00007f8aa0c26038 R14: 00007f8aa0c25fa0 R15: 00007ffee07f0f88 [ 380.021056][ T9500] [ 380.021620][ T9500] overlayfs: failed to resolve './bus': -12 [ 380.113292][ T9343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.133871][ T9343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.137289][ T9343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.150529][ T9343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.150939][ T9343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.173308][ T9343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.183083][ T9343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.185946][ T9343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.221588][ T9527] syzkaller1: entered promiscuous mode [ 380.221603][ T9527] syzkaller1: entered allmulticast mode [ 380.283864][ T9343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.295303][ T9530] rxe_eth0 speed is unknown, defaulting to 1000 [ 380.308938][ T9343] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.323619][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.323664][ T8755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.331080][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.331127][ T8755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.377168][ T5438] 8021q: adding VLAN 0 to HW filter on device eth23 [ 380.475126][ T9538] dvmrp6: entered allmulticast mode [ 380.478562][ T9538] dvmrp6: left allmulticast mode [ 380.508065][ T9530] lo speed is unknown, defaulting to 1000 [ 380.721892][ T9343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.767688][ T9343] veth0_vlan: entered promiscuous mode [ 380.790181][ T9343] veth1_vlan: entered promiscuous mode [ 380.812335][ T9343] veth0_macvtap: entered promiscuous mode [ 380.816060][ T9343] veth1_macvtap: entered promiscuous mode [ 380.842649][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.850028][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.865555][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.865796][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.865829][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.865858][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.954019][ T607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.954033][ T607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.993940][ T5438] 8021q: adding VLAN 0 to HW filter on device eth24 [ 381.007429][ T8757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.007443][ T8757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.091530][ T7918] IPVS: stop unused estimator thread 0... syzkaller syzkaller login: [ 381.241808][ T7918] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.245291][ T5771] Bluetooth: hci0: command tx timeout [ 381.259171][ T5438] 8021q: adding VLAN 0 to HW filter on device eth25 [ 381.332271][ T7918] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.385392][ T10] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 381.418376][ T7918] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.431080][ T9598] Bluetooth: MGMT ver 1.23 [ 381.504434][ T7918] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.535485][ T10] usb 11-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 381.537194][ T10] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.537216][ T10] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 381.537228][ T10] usb 11-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.537238][ T10] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 381.542471][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.542484][ T10] usb 11-1: Product: syz [ 381.542492][ T10] usb 11-1: Manufacturer: syz [ 381.542499][ T10] usb 11-1: SerialNumber: syz [ 381.544377][ T9584] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 381.574772][ T10] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 381.578604][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 87 [ 381.578635][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 7 [ 381.579883][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 82 [ 381.580892][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 381.580925][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 381.580956][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 85 [ 381.580988][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 5 [ 381.595316][ T10] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 381.596051][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 83 [ 381.596084][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 381.596119][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 3 [ 381.596149][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 4 [ 381.596179][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 86 [ 381.596209][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 381.613559][ T6734] nvmet: connect request for invalid subsystem testsubsys! [ 381.614326][ T9607] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 381.629039][ T10] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 381.776162][ T9088] usb 11-1: USB disconnect, device number 3 [ 381.793525][ T7918] bridge_slave_1: left allmulticast mode [ 381.793543][ T7918] bridge_slave_1: left promiscuous mode [ 381.793651][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.801966][ T9088] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 381.802587][ T7918] bridge_slave_0: left allmulticast mode [ 381.802602][ T7918] bridge_slave_0: left promiscuous mode [ 381.802707][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.822228][ T9088] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 381.822809][ T9088] keyspan 11-1:1.0: device disconnected [ 381.861578][ T9623] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.861593][ T9623] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 381.871597][ T9623] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.871613][ T9623] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 381.903860][ T9621] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.903876][ T9621] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 381.903886][ T9621] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.903895][ T9621] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 381.953959][ T9631] FAULT_INJECTION: forcing a failure. [ 381.953959][ T9631] name failslab, interval 1, probability 0, space 0, times 0 [ 381.953981][ T9631] CPU: 2 UID: 0 PID: 9631 Comm: syz.9.800 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.954010][ T9631] Tainted: [L]=SOFTLOCKUP [ 381.954014][ T9631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.954021][ T9631] Call Trace: [ 381.954025][ T9631] [ 381.954030][ T9631] dump_stack_lvl+0x100/0x190 [ 381.954050][ T9631] should_fail_ex.cold+0x5/0xa [ 381.954066][ T9631] should_failslab+0xc2/0x120 [ 381.954084][ T9631] __kmalloc_noprof+0xfc/0x840 [ 381.954098][ T9631] ? rcu_is_watching+0x13/0xc0 [ 381.954114][ T9631] ? tomoyo_realpath_from_path+0xb6/0x690 [ 381.954128][ T9631] tomoyo_realpath_from_path+0xb6/0x690 [ 381.954143][ T9631] tomoyo_check_open_permission+0x2af/0x3c0 [ 381.954159][ T9631] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 381.954179][ T9631] ? hook_file_open+0x248/0x8e0 [ 381.954202][ T9631] ? path_get+0x61/0x80 [ 381.954215][ T9631] tomoyo_file_open+0x6b/0x90 [ 381.954228][ T9631] security_file_open+0xb5/0x1e0 [ 381.954239][ T9631] do_dentry_open+0x588/0x14d0 [ 381.954257][ T9631] vfs_open+0x82/0x3f0 [ 381.954276][ T9631] path_openat+0x1a23/0x2450 [ 381.954296][ T9631] ? __pfx_path_openat+0x10/0x10 [ 381.954317][ T9631] do_file_open+0x20e/0x430 [ 381.954334][ T9631] ? __pfx_do_file_open+0x10/0x10 [ 381.954361][ T9631] ? _raw_spin_unlock+0x28/0x50 [ 381.954375][ T9631] ? alloc_fd+0x471/0x7a0 [ 381.954395][ T9631] do_sys_openat2+0x10f/0x1e0 [ 381.954411][ T9631] ? __pfx_do_sys_openat2+0x10/0x10 [ 381.954422][ T9631] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 381.954443][ T9631] __x64_sys_openat+0x12d/0x210 [ 381.954455][ T9631] ? __pfx___x64_sys_openat+0x10/0x10 [ 381.954471][ T9631] do_syscall_64+0x123/0x790 [ 381.954489][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.954501][ T9631] RIP: 0033:0x7f41d999e559 [ 381.954510][ T9631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.954522][ T9631] RSP: 002b:00007f41da92d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 381.954533][ T9631] RAX: ffffffffffffffda RBX: 00007f41d9c25fa0 RCX: 00007f41d999e559 [ 381.954539][ T9631] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 381.954546][ T9631] RBP: 00007f41d9a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 381.954552][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.954559][ T9631] R13: 00007f41d9c26038 R14: 00007f41d9c25fa0 R15: 00007ffccca26858 [ 381.954574][ T9631] [ 381.955067][ T9631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.007519][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.018465][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.026723][ T7918] bond0 (unregistering): Released all slaves [ 382.474144][ T7918] hsr_slave_0: left promiscuous mode [ 382.474599][ T7918] hsr_slave_1: left promiscuous mode [ 382.476652][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.476864][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.480666][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.480706][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.489787][ T7918] veth1_macvtap: left promiscuous mode [ 382.489808][ T7918] veth0_macvtap: left promiscuous mode [ 382.489851][ T7918] veth1_vlan: left promiscuous mode [ 382.489883][ T7918] veth0_vlan: left promiscuous mode [ 382.596558][ T9683] netlink: 60 bytes leftover after parsing attributes in process `syz.6.808'. [ 382.628603][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 382.633077][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 382.721756][ T9688] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 382.723812][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 383.069026][ T9647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.154550][ T9704] ALSA: mixer_oss: invalid OSS volume 'V' [ 383.154563][ T9704] ALSA: mixer_oss: invalid OSS volume 'VOLUMµ²I' [ 383.154568][ T9704] ALSA: mixer_oss: invalid OSS volume 'ƒÊb7E' [ 383.154573][ T9704] ALSA: mixer_oss: invalid OSS volume '' [ 383.268854][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.814'. [ 383.271319][ T9709] netlink: 80 bytes leftover after parsing attributes in process `syz.7.814'. [ 383.305152][ T9713] netlink: 40 bytes leftover after parsing attributes in process `syz.9.815'. [ 383.324915][ T5771] Bluetooth: hci0: command tx timeout [ 383.585584][ T5850] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 383.708657][ T9730] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 383.715057][ T5850] usb 12-1: device descriptor read/64, error -71 [ 383.816782][ T9713] Process accounting resumed [ 383.867761][ T9741] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 383.879084][ T9741] bond1 (unregistering): Released all slaves [ 383.965261][ T5850] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 384.115213][ T5850] usb 12-1: device descriptor read/64, error -71 [ 384.238678][ T5850] usb usb12-port1: attempt power cycle [ 384.244312][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 384.489027][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 384.594916][ T5850] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 384.615390][ T5850] usb 12-1: device descriptor read/8, error -71 [ 384.637132][ T42] kauditd_printk_skb: 9041 callbacks suppressed [ 384.637148][ T42] audit: type=1400 audit(2000000002.429:27891): avc: denied { search } for pid=9799 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 384.637181][ T42] audit: type=1400 audit(2000000002.429:27892): avc: denied { search } for pid=9799 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 384.637231][ T42] audit: type=1400 audit(2000000002.429:27893): avc: denied { search } for pid=9799 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 384.637262][ T42] audit: type=1400 audit(2000000002.429:27894): avc: denied { search } for pid=9799 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 384.637426][ T42] audit: type=1400 audit(2000000002.429:27895): avc: denied { search } for pid=9799 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 384.637576][ T42] audit: type=1400 audit(2000000002.429:27896): avc: denied { search } for pid=9799 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 384.637820][ T42] audit: type=1400 audit(2000000002.429:27897): avc: denied { write } for pid=9799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.638510][ T42] audit: type=1400 audit(2000000002.429:27898): avc: denied { search } for pid=9799 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 384.638676][ T42] audit: type=1400 audit(2000000002.429:27899): avc: denied { search } for pid=9799 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 384.638854][ T42] audit: type=1400 audit(2000000002.429:27900): avc: denied { search } for pid=9799 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 384.747324][ T9809] Could not find key with description: [syz0] [ 384.747343][ T9809] process_request_key_err: No key [ 384.747351][ T9809] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 384.747359][ T9809] One or more global auth toks could not properly register; rc = [-2] [ 384.747376][ T9809] Error validating options; rc = [-2] [ 384.764467][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4 [ 384.864956][ T5850] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 384.885341][ T5850] usb 12-1: device descriptor read/8, error -71 [ 384.986806][ T5438] 8021q: adding VLAN 0 to HW filter on device eth5 [ 384.996017][ T5850] usb usb12-port1: unable to enumerate USB device [ 385.410682][ T9850] uhci_hcd 0000:00:1d.0: remove, state 1 [ 385.410780][ T9850] usb usb2: USB disconnect, device number 1 [ 385.457212][ T9850] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 385.668446][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.668598][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.668886][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.669072][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.669276][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.669492][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.669726][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.669915][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.670116][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.670313][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.670493][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.670721][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.670906][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.671086][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.671298][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.671509][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.671736][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.671876][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672050][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672246][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672327][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672386][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672444][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672503][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672562][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672623][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672685][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672746][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672807][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672866][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.672929][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.682459][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.682778][ T9871] trusted_key: encrypted_key: insufficient parameters specified [ 385.685478][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.9.837'. [ 386.020450][ T8757] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 386.036131][ T8756] Bluetooth: hci1: Frame reassembly failed (-84) [ 386.256189][ T9893] netlink: 24 bytes leftover after parsing attributes in process `syz.6.840'. [ 386.644999][ T8425] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 386.805405][ T8425] usb 11-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 386.806731][ T8425] usb 11-1: config 0 has no interfaces? [ 386.806757][ T8425] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.808729][ T8425] usb 11-1: config 0 descriptor?? [ 387.016380][ T9910] net_ratelimit: 49820 callbacks suppressed [ 387.016397][ T9910] netlink: ct family unspecified [ 387.016415][ T9910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.078063][ T50] usb 11-1: USB disconnect, device number 4 [ 387.514991][ T29] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 387.646595][ T8757] wlan1: Trigger new scan to find an IBSS to join [ 387.655279][ T29] usb 12-1: device descriptor read/64, error -71 [ 387.714087][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.854'. [ 387.803111][ T9971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=9971 comm=syz.6.855 [ 387.895360][ T29] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 387.916571][ T9977] netlink: 'syz.6.858': attribute type 1 has an invalid length. [ 387.936180][ T9977] macvlan2: entered promiscuous mode [ 387.936196][ T9977] macvlan2: entered allmulticast mode [ 387.936478][ T9977] bond1: entered promiscuous mode [ 387.939377][ T9977] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.940779][ T9977] bond1: left promiscuous mode [ 388.024962][ T29] usb 12-1: device descriptor read/64, error -71 [ 388.044954][ T5771] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 388.102654][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.862'. [ 388.102816][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.862'. [ 388.135126][ T29] usb usb12-port1: attempt power cycle [ 388.475125][ T29] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 388.495644][ T29] usb 12-1: device descriptor read/8, error -71 [ 388.734922][ T29] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 388.755610][ T29] usb 12-1: device descriptor read/8, error -71 [ 388.865259][ T29] usb usb12-port1: unable to enumerate USB device [ 389.282182][T10016] FAULT_INJECTION: forcing a failure. [ 389.282182][T10016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.282205][T10016] CPU: 1 UID: 0 PID: 10016 Comm: syz.9.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.282221][T10016] Tainted: [L]=SOFTLOCKUP [ 389.282225][T10016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.282233][T10016] Call Trace: [ 389.282236][T10016] [ 389.282241][T10016] dump_stack_lvl+0x100/0x190 [ 389.282261][T10016] should_fail_ex.cold+0x5/0xa [ 389.282278][T10016] _copy_from_user+0x2e/0xd0 [ 389.282297][T10016] __sys_bpf+0x2f5/0x4a30 [ 389.282314][T10016] ? __pfx___sys_bpf+0x10/0x10 [ 389.282326][T10016] ? find_held_lock+0x2b/0x80 [ 389.282350][T10016] ? futex_wake+0x4ea/0x5e0 [ 389.282374][T10016] ? rcu_read_lock_any_held+0x6a/0x90 [ 389.282385][T10016] ? find_held_lock+0x2b/0x80 [ 389.282402][T10016] ? ksys_write+0x190/0x250 [ 389.282418][T10016] ? ksys_write+0x190/0x250 [ 389.282442][T10016] ? __x64_sys_futex+0x34f/0x4d0 [ 389.282459][T10016] ? __x64_sys_futex+0x358/0x4d0 [ 389.282477][T10016] ? xfd_validate_state+0x129/0x190 [ 389.282492][T10016] ? __x64_sys_bpf+0xce/0x140 [ 389.282504][T10016] __x64_sys_bpf+0xce/0x140 [ 389.282517][T10016] ? do_syscall_64+0xae/0x790 [ 389.282534][T10016] do_syscall_64+0x123/0x790 [ 389.282552][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.282564][T10016] RIP: 0033:0x7f41d999e559 [ 389.282574][T10016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.282585][T10016] RSP: 002b:00007f41da92d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.282597][T10016] RAX: ffffffffffffffda RBX: 00007f41d9c25fa0 RCX: 00007f41d999e559 [ 389.282604][T10016] RDX: 0000000000000048 RSI: 0000200000002100 RDI: 0000000000000005 [ 389.282611][T10016] RBP: 00007f41d9a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 389.282617][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.282624][T10016] R13: 00007f41d9c26038 R14: 00007f41d9c25fa0 R15: 00007ffccca26858 [ 389.282639][T10016] [ 389.361000][T10022] netlink: 28 bytes leftover after parsing attributes in process `syz.9.874'. [ 390.037386][ T42] kauditd_printk_skb: 3489 callbacks suppressed [ 390.037400][ T42] audit: type=1400 audit(2000000007.829:31210): avc: denied { accept } for pid=10036 comm="syz.6.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 390.254479][ T42] audit: type=1800 audit(2000000008.039:31211): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300131 res=0 errno=0 [ 390.273715][ T42] audit: type=1400 audit(2000000008.059:31212): avc: denied { append } for pid=10055 comm="syz.6.882" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 390.274265][ T42] audit: type=1800 audit(2000000008.059:31213): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.882" name="file1" dev="tmpfs" ino=295 res=0 errno=0 [ 390.281518][T10056] comedi comedi4: comedi_config --init_data is deprecated [ 390.354580][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.9.883'. [ 390.354625][T10059] netlink: 3 bytes leftover after parsing attributes in process `syz.9.883'. [ 390.418624][ T42] audit: type=1400 audit(2000000008.209:31214): avc: denied { shutdown } for pid=10060 comm="syz.7.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.594986][ T5850] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 390.598605][ T42] audit: type=1400 audit(2000000008.389:31215): avc: denied { search } for pid=10066 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 390.598767][ T42] audit: type=1400 audit(2000000008.389:31216): avc: denied { search } for pid=10066 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 390.604370][ T42] audit: type=1400 audit(2000000008.389:31217): avc: denied { search } for pid=10067 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 390.604654][ T42] audit: type=1400 audit(2000000008.389:31218): avc: denied { search } for pid=10067 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 390.744993][ T5850] usb 14-1: Using ep0 maxpacket: 8 [ 390.745570][ T5850] usb 14-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 390.746742][ T5850] usb 14-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 390.746760][ T5850] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.746777][ T5850] usb 14-1: config 1 has no interface number 0 [ 390.746822][ T5850] usb 14-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 390.746842][ T5850] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 390.746869][ T5850] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 390.748816][ T5850] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.748834][ T5850] usb 14-1: Product: syz [ 390.748846][ T5850] usb 14-1: Manufacturer: syz [ 390.748858][ T5850] usb 14-1: SerialNumber: syz [ 390.754486][ T42] audit: type=1800 audit(2000000008.539:31219): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300158 res=0 errno=0 [ 390.768369][ T8756] wlan1: Trigger new scan to find an IBSS to join [ 390.859147][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.885'. [ 390.913495][T10075] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 391.054667][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.055272][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.063463][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.6.888'. [ 391.065919][T10080] 9pnet_virtio: no channels available for device syz [ 391.304889][ T50] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 391.423008][ T5851] usb 14-1: USB disconnect, device number 3 [ 391.455338][ T50] usb 11-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 391.457237][ T50] usb 11-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 391.457250][ T50] usb 11-1: Product: syz [ 391.457257][ T50] usb 11-1: SerialNumber: syz [ 391.461422][ T50] usb 11-1: config 0 descriptor?? [ 391.673060][ T50] usb 11-1: USB disconnect, device number 5 [ 391.718120][ T607] wlan1: Creating new IBSS network, BSSID fe:ac:c7:1c:11:89 [ 392.434931][ T50] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 392.567011][T10115] kernel read not supported for file bus/pci/00/00.0 (pid: 10115 comm: syz.6.896) [ 392.575429][ T50] usb 14-1: device descriptor read/64, error -71 [ 392.633156][T10119] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 392.814905][ T50] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 392.855394][T10129] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 54a3, magic 54 != 6b] [ 392.919492][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.6.900'. [ 392.938622][T10139] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 392.954914][ T50] usb 14-1: device descriptor read/64, error -71 [ 393.077294][ T50] usb usb14-port1: attempt power cycle [ 393.425144][ T50] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 393.433517][T10144] netlink: 17 bytes leftover after parsing attributes in process `syz.7.901'. [ 393.446873][ T50] usb 14-1: device descriptor read/8, error -71 [ 393.461005][T10146] tipc: Enabling of bearer rejected, failed to enable media [ 393.462593][T10149] tipc: Enabling of bearer rejected, failed to enable media [ 393.486085][T10152] netlink: 56 bytes leftover after parsing attributes in process `syz.7.903'. [ 393.486102][T10152] netlink: 56 bytes leftover after parsing attributes in process `syz.7.903'. [ 393.486564][T10152] netlink: 9 bytes leftover after parsing attributes in process `syz.7.903'. [ 393.489983][T10152] netlink: 9 bytes leftover after parsing attributes in process `syz.7.903'. [ 393.694934][ T50] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 393.726167][ T50] usb 14-1: device descriptor read/8, error -71 [ 393.847850][ T50] usb usb14-port1: unable to enumerate USB device [ 394.675640][T10194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3868054314 (247555476096 ns) > initial count (68318912320 ns). Using initial count to start timer. [ 394.763543][T10202] xt_ecn: cannot match TCP bits for non-tcp packets [ 394.763943][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.6.913'. [ 394.895105][ T5683] libceph: connect (1)[c::]:6789 error -101 [ 394.895208][ T5683] libceph: mon0 (1)[c::]:6789 connect error [ 394.895404][ T5683] libceph: connect (1)[c::]:6789 error -101 [ 394.895475][ T5683] libceph: mon0 (1)[c::]:6789 connect error [ 395.158560][ T6746] libceph: connect (1)[c::]:6789 error -101 [ 395.159566][ T6746] libceph: mon0 (1)[c::]:6789 connect error [ 395.354500][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.9.921'. [ 395.399356][ T42] kauditd_printk_skb: 920 callbacks suppressed [ 395.399370][ T42] audit: type=1400 audit(2000000013.189:32140): avc: denied { write } for pid=10228 comm="syz.9.922" laddr=::ffff:172.20.20.170 lport=59886 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 395.399705][ T42] audit: type=1400 audit(2000000013.189:32141): avc: denied { setopt } for pid=10228 comm="syz.9.922" laddr=::ffff:172.20.20.170 lport=59886 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 395.551552][ T42] audit: type=1400 audit(2000000013.339:32142): avc: denied { search } for pid=10230 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 395.551583][ T42] audit: type=1400 audit(2000000013.339:32143): avc: denied { search } for pid=10230 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 395.551629][ T42] audit: type=1400 audit(2000000013.339:32144): avc: denied { search } for pid=10230 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 395.551651][ T42] audit: type=1400 audit(2000000013.339:32145): avc: denied { search } for pid=10230 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 395.551671][ T42] audit: type=1400 audit(2000000013.339:32146): avc: denied { search } for pid=10230 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 395.553190][ T42] audit: type=1400 audit(2000000013.339:32147): avc: denied { search } for pid=10230 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 395.553325][ T42] audit: type=1400 audit(2000000013.339:32148): avc: denied { search } for pid=10230 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 395.553442][ T42] audit: type=1400 audit(2000000013.339:32149): avc: denied { search } for pid=10230 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 395.676968][ T5683] libceph: connect (1)[c::]:6789 error -101 [ 395.677067][ T5683] libceph: mon0 (1)[c::]:6789 connect error [ 395.728376][T10216] ceph: No mds server is up or the cluster is laggy [ 395.830150][T10240] TC_ACT_REPEAT abuse ? [ 395.865179][T10248] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 395.865205][T10248] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 395.865214][T10248] overlayfs: missing 'lowerdir' [ 396.043556][T10277] bond0: entered promiscuous mode [ 396.043572][T10277] bond_slave_0: entered promiscuous mode [ 396.043695][T10277] bond_slave_1: entered promiscuous mode [ 396.044672][T10277] batadv0: entered promiscuous mode [ 396.050175][T10277] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 396.053946][T10277] bond0: left promiscuous mode [ 396.053960][T10277] bond_slave_0: left promiscuous mode [ 396.054063][T10277] bond_slave_1: left promiscuous mode [ 396.054666][T10277] batadv0: left promiscuous mode [ 396.059130][T10279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 396.171663][T10285] binder: 10284:10285 ioctl 40046210 0 returned -14 [ 396.198871][ T5771] Bluetooth: hci5: unexpected cc 0x2029 length: 100 > 1 [ 396.678663][T10306] fuse: Unknown parameter '0x000000000000000800000000000000000000fd' [ 396.830100][T10320] FAULT_INJECTION: forcing a failure. [ 396.830100][T10320] name failslab, interval 1, probability 0, space 0, times 0 [ 396.830122][T10320] CPU: 2 UID: 0 PID: 10320 Comm: syz.9.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.830137][T10320] Tainted: [L]=SOFTLOCKUP [ 396.830141][T10320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.830148][T10320] Call Trace: [ 396.830152][T10320] [ 396.830156][T10320] dump_stack_lvl+0x100/0x190 [ 396.830187][T10320] should_fail_ex.cold+0x5/0xa [ 396.830204][T10320] should_failslab+0xc2/0x120 [ 396.830224][T10320] __kvmalloc_node_noprof+0x113/0x9b0 [ 396.830240][T10320] ? __pfx_net_ctl_permissions+0x10/0x10 [ 396.830257][T10320] ? proc_sys_call_handler+0x2c7/0x5a0 [ 396.830274][T10320] proc_sys_call_handler+0x2c7/0x5a0 [ 396.830288][T10320] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 396.830306][T10320] vfs_write+0x6af/0x1050 [ 396.830321][T10320] ? __pfx_proc_sys_write+0x10/0x10 [ 396.830335][T10320] ? __pfx_vfs_write+0x10/0x10 [ 396.830348][T10320] ? find_held_lock+0x2b/0x80 [ 396.830375][T10320] ksys_write+0x12a/0x250 [ 396.830388][T10320] ? __pfx_ksys_write+0x10/0x10 [ 396.830406][T10320] do_syscall_64+0x123/0x790 [ 396.830424][T10320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.830436][T10320] RIP: 0033:0x7f41d999e559 [ 396.830445][T10320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.830456][T10320] RSP: 002b:00007f41da92d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 396.830467][T10320] RAX: ffffffffffffffda RBX: 00007f41d9c25fa0 RCX: 00007f41d999e559 [ 396.830474][T10320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 396.830480][T10320] RBP: 00007f41da92d090 R08: 0000000000000000 R09: 0000000000000000 [ 396.830486][T10320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.830492][T10320] R13: 00007f41d9c26038 R14: 00007f41d9c25fa0 R15: 00007ffccca26858 [ 396.830508][T10320] [ 397.394988][ T6746] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 397.568539][ T6746] usb 14-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 397.568576][ T6746] usb 14-1: too many configurations: 102, using maximum allowed: 8 [ 397.570050][ T6746] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.570070][ T6746] usb 14-1: config 1 has no interface number 0 [ 397.571012][ T6746] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.571030][ T6746] usb 14-1: config 1 has no interface number 0 [ 397.571954][ T6746] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.571971][ T6746] usb 14-1: config 1 has no interface number 0 [ 397.572897][ T6746] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.572914][ T6746] usb 14-1: config 1 has no interface number 0 [ 397.573876][ T6746] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.573893][ T6746] usb 14-1: config 1 has no interface number 0 [ 397.577285][ T6746] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.577302][ T6746] usb 14-1: config 1 has no interface number 0 [ 397.579754][ T6746] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.579771][ T6746] usb 14-1: config 1 has no interface number 0 [ 397.583324][ T6746] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.583342][ T6746] usb 14-1: config 1 has no interface number 0 [ 397.590008][ T6746] usb 14-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 397.590028][ T6746] usb 14-1: Product: syz [ 397.590040][ T6746] usb 14-1: Manufacturer: syz [ 397.590051][ T6746] usb 14-1: SerialNumber: syz [ 397.615532][ T6746] usb 14-1: 3:44 : does not exist [ 397.615553][ T6746] usb 14-1: 3:0 : does not exist [ 397.798746][ T6746] usb 14-1: USB disconnect, device number 8 [ 398.162431][T10384] FAULT_INJECTION: forcing a failure. [ 398.162431][T10384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.162463][T10384] CPU: 0 UID: 0 PID: 10384 Comm: syz.6.950 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.162486][T10384] Tainted: [L]=SOFTLOCKUP [ 398.162492][T10384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 398.162503][T10384] Call Trace: [ 398.162509][T10384] [ 398.162516][T10384] dump_stack_lvl+0x100/0x190 [ 398.162548][T10384] should_fail_ex.cold+0x5/0xa [ 398.162575][T10384] _copy_to_user+0x32/0xd0 [ 398.162606][T10384] simple_read_from_buffer+0xcb/0x170 [ 398.162636][T10384] proc_fail_nth_read+0x1af/0x230 [ 398.162665][T10384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.162701][T10384] ? rw_verify_area+0xce/0x6d0 [ 398.162721][T10384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.162748][T10384] vfs_read+0x1e4/0xb40 [ 398.162771][T10384] ? lock_acquire+0x1d1/0x380 [ 398.162789][T10384] ? __fget_files+0x34/0x3d0 [ 398.162815][T10384] ? __pfx_vfs_read+0x10/0x10 [ 398.162833][T10384] ? find_held_lock+0x2b/0x80 [ 398.162859][T10384] ? __fget_files+0x215/0x3d0 [ 398.162890][T10384] ? __fget_files+0x21f/0x3d0 [ 398.162924][T10384] ksys_read+0x12a/0x250 [ 398.162946][T10384] ? __pfx_ksys_read+0x10/0x10 [ 398.162977][T10384] do_syscall_64+0x123/0x790 [ 398.163007][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.163027][T10384] RIP: 0033:0x7f2d1d15ed8e [ 398.163043][T10384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 398.163077][T10384] RSP: 002b:00007f2d1dfa4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.163096][T10384] RAX: ffffffffffffffda RBX: 00007f2d1dfa56c0 RCX: 00007f2d1d15ed8e [ 398.163109][T10384] RDX: 000000000000000f RSI: 00007f2d1dfa50a0 RDI: 0000000000000004 [ 398.163121][T10384] RBP: 00007f2d1dfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 398.163132][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.163143][T10384] R13: 00007f2d1d426038 R14: 00007f2d1d425fa0 R15: 00007ffde5b17188 [ 398.163170][T10384] [ 398.177520][T10385] fuse: Unknown parameter 'fB' [ 398.210467][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.211215][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.212688][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.213462][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.213977][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.276440][T10393] bond1: Unable to set up delay as MII monitoring is disabled [ 398.279413][T10393] bond1 (unregistering): Released all slaves [ 398.296017][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.951'. [ 398.296032][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.951'. [ 398.296038][T10395] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 398.384859][T10408] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 398.393666][T10403] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 398.477745][T10387] rxe_eth0 speed is unknown, defaulting to 1000 [ 398.579360][T10432] ip_tables: iptables: counters copy to user failed while replacing table [ 398.579477][ T7918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.579953][T10432] tmpfs: Bad value for 'mpol' [ 398.581566][T10432] ip_tables: iptables: counters copy to user failed while replacing table [ 398.604718][T10387] lo speed is unknown, defaulting to 1000 [ 398.712387][ T7918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.773768][ T7918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.853515][ T7918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.855450][T10459] netlink: 'syz.7.965': attribute type 2 has an invalid length. [ 398.855464][T10459] netlink: 48 bytes leftover after parsing attributes in process `syz.7.965'. [ 398.864972][ T9244] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 398.887163][T10459] : entered promiscuous mode [ 398.902539][T10387] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.902615][T10387] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.902670][T10387] bridge_slave_0: entered allmulticast mode [ 398.903381][T10387] bridge_slave_0: entered promiscuous mode [ 398.905620][T10387] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.905687][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.905739][T10387] bridge_slave_1: entered allmulticast mode [ 398.906434][T10387] bridge_slave_1: entered promiscuous mode [ 398.925662][T10387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.927297][T10387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.936697][T10459] cdrom: dropping to single frame dma [ 398.945722][T10387] team0: Port device team_slave_0 added [ 398.946975][T10387] team0: Port device team_slave_1 added [ 398.960682][T10387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.960692][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.960704][T10387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.961510][T10387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.961517][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.961529][T10387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.996472][T10387] hsr_slave_0: entered promiscuous mode [ 398.996929][T10387] hsr_slave_1: entered promiscuous mode [ 398.997221][T10387] debugfs: 'hsr0' already exists in 'hsr' [ 398.997233][T10387] Cannot create hsr debugfs directory [ 399.015347][ T9244] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 399.016134][ T9244] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 399.016147][ T9244] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 399.016157][ T9244] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 399.016176][ T9244] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 399.016188][ T9244] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 399.018381][ T9244] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 399.018393][ T9244] usb 14-1: Product: syz [ 399.018401][ T9244] usb 14-1: Manufacturer: syz [ 399.028375][ T9244] cdc_wdm 14-1:1.0: skipping garbage [ 399.028386][ T9244] cdc_wdm 14-1:1.0: skipping garbage [ 399.030766][ T9244] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 399.030776][ T9244] cdc_wdm 14-1:1.0: Unknown control protocol [ 399.116313][T10474] netlink: 36 bytes leftover after parsing attributes in process `syz.7.967'. [ 399.121962][ T7918] bridge_slave_1: left allmulticast mode [ 399.121978][ T7918] bridge_slave_1: left promiscuous mode [ 399.123835][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.129716][ T7918] bridge_slave_0: left allmulticast mode [ 399.129731][ T7918] bridge_slave_0: left promiscuous mode [ 399.130469][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.242899][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.248675][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.253049][ T7918] bond0 (unregistering): Released all slaves [ 399.270663][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.968'. [ 399.336983][T10479] team0: Port device team_slave_0 removed [ 399.494519][ C2] cdc_wdm 14-1:1.0: Unexpected error -71 [ 399.495025][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.495098][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.495286][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.495296][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.495480][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.495490][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.495672][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.495681][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.495857][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.495867][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.496051][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.496060][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.496232][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.496245][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.496420][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.496430][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.496603][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.496613][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.496786][ C2] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 399.496795][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 399.501195][ T61] usb 14-1: USB disconnect, device number 9 [ 399.501312][ C2] cdc_wdm 14-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 399.611736][T10509] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 399.693656][ T7918] hsr_slave_0: left promiscuous mode [ 399.694045][ T7918] hsr_slave_1: left promiscuous mode [ 399.694386][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.694397][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.695327][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.695337][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.703046][ T7918] veth1_macvtap: left promiscuous mode [ 399.703065][ T7918] veth0_macvtap: left promiscuous mode [ 399.703119][ T7918] veth1_vlan: left promiscuous mode [ 399.703148][ T7918] veth0_vlan: left promiscuous mode [ 399.828189][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 399.832682][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 399.893546][ T5438] 8021q: adding VLAN 0 to HW filter on device eth26 [ 400.097131][ T5438] 8021q: adding VLAN 0 to HW filter on device eth27 [ 400.294989][ T5771] Bluetooth: hci1: command tx timeout [ 400.342713][ T5438] 8021q: adding VLAN 0 to HW filter on device eth28 [ 400.405727][ T42] kauditd_printk_skb: 9370 callbacks suppressed [ 400.405744][ T42] audit: type=1400 audit(2000000018.199:41496): avc: denied { search } for pid=10541 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.406086][ T42] audit: type=1400 audit(2000000018.199:41497): avc: denied { search } for pid=10541 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.406412][ T42] audit: type=1400 audit(2000000018.199:41498): avc: denied { search } for pid=10541 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.406668][ T42] audit: type=1400 audit(2000000018.199:41499): avc: denied { search } for pid=10541 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.406747][ T42] audit: type=1400 audit(2000000018.199:41500): avc: denied { search } for pid=10541 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.408578][ T42] audit: type=1400 audit(2000000018.199:41501): avc: denied { search } for pid=10541 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.408685][ T42] audit: type=1400 audit(2000000018.199:41502): avc: denied { search } for pid=10541 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.408909][ T42] audit: type=1400 audit(2000000018.199:41503): avc: denied { search } for pid=10541 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.408977][ T42] audit: type=1400 audit(2000000018.199:41504): avc: denied { search } for pid=10541 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.409110][ T42] audit: type=1400 audit(2000000018.199:41505): avc: denied { search } for pid=10541 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 400.577910][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.979'. [ 400.577933][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.979'. [ 400.581657][T10554] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 400.596188][T10554] ifb1: entered promiscuous mode [ 400.596518][T10554] debugfs: 'hsr0' already exists in 'hsr' [ 400.596530][T10554] Cannot create hsr debugfs directory [ 400.610091][ T5438] 8021q: adding VLAN 0 to HW filter on device eth29 [ 400.729014][T10564] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.981'. [ 400.730131][T10564] jffs2: notice: (10564) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 400.803598][T10571] zero sized request [ 400.807192][T10571] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 400.882057][T10583] netlink: 'syz.6.986': attribute type 3 has an invalid length. [ 401.096812][T10387] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.099746][T10387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.100308][T10387] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.101929][T10387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.102759][T10387] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.114026][T10387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.114450][T10387] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.118940][T10387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.160529][T10387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.167335][T10387] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.170473][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.170551][ T8757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.178966][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.179012][ T8757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.377004][T10387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.399311][T10387] veth0_vlan: entered promiscuous mode [ 401.402274][T10387] veth1_vlan: entered promiscuous mode [ 401.420615][T10387] veth0_macvtap: entered promiscuous mode [ 401.422725][T10387] veth1_macvtap: entered promiscuous mode [ 401.431698][T10387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.436871][T10387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.466959][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.466988][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.467162][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.467181][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.499695][ T607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.499709][ T607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.519480][ T6734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.519495][ T6734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.644508][T10626] FAULT_INJECTION: forcing a failure. [ 401.644508][T10626] name failslab, interval 1, probability 0, space 0, times 0 [ 401.644530][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.7.989 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.644545][T10626] Tainted: [L]=SOFTLOCKUP [ 401.644549][T10626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.644556][T10626] Call Trace: [ 401.644560][T10626] [ 401.644565][T10626] dump_stack_lvl+0x100/0x190 [ 401.644586][T10626] should_fail_ex.cold+0x5/0xa [ 401.644604][T10626] should_failslab+0xc2/0x120 [ 401.644622][T10626] kmem_cache_alloc_noprof+0x92/0x6a0 [ 401.644638][T10626] ? do_getname+0x35/0x390 [ 401.644652][T10626] do_getname+0x35/0x390 [ 401.644665][T10626] __x64_sys_mkdirat+0x78/0xc0 [ 401.644683][T10626] do_syscall_64+0x123/0x790 [ 401.644701][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.644712][T10626] RIP: 0033:0x7f8aa099e559 [ 401.644722][T10626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.644733][T10626] RSP: 002b:00007f8aa193e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 401.644744][T10626] RAX: ffffffffffffffda RBX: 00007f8aa0c25fa0 RCX: 00007f8aa099e559 [ 401.644751][T10626] RDX: 00000000000001ff RSI: 0000200000000580 RDI: ffffffffffffff9c [ 401.644758][T10626] RBP: 00007f8aa0a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 401.644765][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.644771][T10626] R13: 00007f8aa0c26038 R14: 00007f8aa0c25fa0 R15: 00007ffee07f0f88 [ 401.644786][T10626] [ 401.722767][T10641] jffs2: notice: (10641) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 401.744643][T10638] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 401.797922][T10648] syzkaller0: entered promiscuous mode [ 401.797936][T10648] syzkaller0: entered allmulticast mode [ 401.805393][T10648] tipc: Started in network mode [ 401.805920][T10648] tipc: Node identity 861b7316d08e, cluster identity 4711 [ 401.806128][T10648] tipc: Enabled bearer , priority 0 [ 401.817144][T10646] tipc: Resetting bearer [ 401.839803][T10646] tipc: Disabling bearer [ 401.924654][T10657] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.925080][T10657] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.925137][T10657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.938649][T10669] trusted_key: encrypted_key: insufficient parameters specified [ 401.938833][T10668] trusted_key: encrypted_key: insufficient parameters specified [ 401.968074][T10673] netlink: 'syz.6.1000': attribute type 1 has an invalid length. [ 401.986152][T10677] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1001'. [ 401.990777][T10673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.992982][T10677] tipc: Started in network mode [ 401.992992][T10677] tipc: Node identity , cluster identity 4711 [ 401.992999][T10677] tipc: Failed to obtain node identity [ 401.993011][T10677] tipc: Enabling of bearer rejected, failed to enable media [ 402.003074][T10673] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 402.004714][T10677] FAULT_INJECTION: forcing a failure. [ 402.004714][T10677] name failslab, interval 1, probability 0, space 0, times 0 [ 402.004751][T10677] CPU: 0 UID: 0 PID: 10677 Comm: syz.9.1001 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.004769][T10677] Tainted: [L]=SOFTLOCKUP [ 402.004773][T10677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.004780][T10677] Call Trace: [ 402.004784][T10677] [ 402.004789][T10677] dump_stack_lvl+0x100/0x190 [ 402.004821][T10677] should_fail_ex.cold+0x5/0xa [ 402.004839][T10677] should_failslab+0xc2/0x120 [ 402.004858][T10677] __kmalloc_noprof+0xfc/0x840 [ 402.004873][T10677] ? __d_alloc+0x650/0xa50 [ 402.004886][T10677] __d_alloc+0x650/0xa50 [ 402.004899][T10677] d_alloc+0x4a/0x1e0 [ 402.004910][T10677] lookup_one_qstr_excl+0x171/0x250 [ 402.004922][T10677] ? mnt_want_write+0x164/0x420 [ 402.004940][T10677] filename_rmdir+0x26b/0x5c0 [ 402.004959][T10677] ? __pfx_filename_rmdir+0x10/0x10 [ 402.004982][T10677] ? do_getname+0x191/0x390 [ 402.004996][T10677] __x64_sys_unlinkat+0xf5/0x130 [ 402.005007][T10677] do_syscall_64+0x123/0x790 [ 402.005026][T10677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.005037][T10677] RIP: 0033:0x7f41d999e559 [ 402.005047][T10677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.005058][T10677] RSP: 002b:00007f41da92d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 402.005069][T10677] RAX: ffffffffffffffda RBX: 00007f41d9c25fa0 RCX: 00007f41d999e559 [ 402.005076][T10677] RDX: 0000000000000200 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 402.005083][T10677] RBP: 00007f41d9a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 402.005090][T10677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.005098][T10677] R13: 00007f41d9c26038 R14: 00007f41d9c25fa0 R15: 00007ffccca26858 [ 402.005114][T10677] [ 402.106334][T10688] 9pnet_fd: Insufficient options for proto=fd qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 402.246150][ T1629] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 402.327050][ T41] usb 14-1: new full-speed USB device number 10 using dummy_hcd [ 402.374922][ T5771] Bluetooth: hci1: command tx timeout [ 402.395404][ T1629] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 402.395844][ T1629] usb 7-1: config 0 has no interfaces? [ 402.397462][ T1629] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 402.397475][ T1629] usb 7-1: Product: syz [ 402.397483][ T1629] usb 7-1: Manufacturer: syz [ 402.397491][ T1629] usb 7-1: SerialNumber: syz [ 402.401846][ T1629] usb 7-1: config 0 descriptor?? [ 402.486660][ T41] usb 14-1: not running at top speed; connect to a high speed hub [ 402.486688][ T41] usb 14-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 402.487494][ T41] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 402.487514][ T41] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.492315][ T41] cyberjack 14-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 402.512757][ T41] usb 14-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 402.551926][T10724] jffs2: notice: (10724) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 402.568663][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1010'. [ 402.618309][ T34] usb 7-1: USB disconnect, device number 13 [ 402.719474][T10743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.719690][T10743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.739073][ T1629] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 402.885182][ T61] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 402.886088][ T1629] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 402.886885][ T1629] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 402.886897][ T1629] usb 11-1: config 1 has no interface number 0 [ 402.888531][ T1629] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.888543][ T1629] usb 11-1: Product: syz [ 402.888551][ T1629] usb 11-1: Manufacturer: syz [ 402.888558][ T1629] usb 11-1: SerialNumber: syz [ 402.919028][ T1629] usb 11-1: 3:1 : does not exist [ 402.919041][ T1629] usb 11-1: 3:2 : does not exist [ 403.035134][ T61] usb 12-1: Using ep0 maxpacket: 32 [ 403.035570][ T61] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 403.036343][ T61] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 403.036365][ T61] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 403.036378][ T61] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.036391][ T61] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 403.037989][ T61] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.038001][ T61] usb 12-1: Product: syz [ 403.038008][ T61] usb 12-1: Manufacturer: syz [ 403.038015][ T61] usb 12-1: SerialNumber: syz [ 403.046237][ C2] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 403.057808][ T34] usb 14-1: USB disconnect, device number 10 [ 403.079947][ T61] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input16 [ 403.083960][ T34] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 403.084255][ T34] cyberjack 14-1:1.0: device disconnected [ 403.112275][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.117716][T10717] bridge_slave_1 (unregistering): left allmulticast mode [ 403.117729][T10717] bridge_slave_1 (unregistering): left promiscuous mode [ 403.117768][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.166148][ T5683] usb 11-1: USB disconnect, device number 6 [ 403.264899][ T61] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 403.264918][ T61] (id 0x00) [ 403.307418][ T61] rc_core: IR keymap rc-imon-pad not found [ 403.307430][ T61] Registered IR keymap rc-empty [ 403.307462][ T61] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 403.307471][ T61] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 403.469223][ T61] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 403.470669][ T61] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input17 [ 403.474647][ T61] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:11> initialized [ 403.660562][T10812] kAFS: unable to lookup cell '.' [ 403.661579][T10812] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 404.003139][T10836] jffs2: notice: (10836) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 404.217783][T10848] jffs2: notice: (10848) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 404.237140][T10842] LUN: removable file: (no medium) [ 404.253680][T10851] jffs2: notice: (10851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 404.454931][ T5771] Bluetooth: hci1: command tx timeout [ 404.474969][ T61] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 404.572317][T10863] netlink: 'syz.9.1028': attribute type 26 has an invalid length. [ 404.572331][T10863] __nla_validate_parse: 1 callbacks suppressed [ 404.572337][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1028'. [ 404.610790][T10865] ip_tables: iptables: counters copy to user failed while replacing table [ 404.611089][T10865] ip_tables: iptables: counters copy to user failed while replacing table [ 404.625371][ T61] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 404.626187][ T61] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.626211][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 404.626225][ T61] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 404.626245][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.689393][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1029'. [ 404.702432][T10867] team0: Port device team_slave_0 removed [ 405.054502][ T61] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 405.054515][ T61] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 405.066215][ T61] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 405.068377][ T61] usb 7-1: USB disconnect, device number 14 [ 405.415089][ T42] kauditd_printk_skb: 8103 callbacks suppressed [ 405.415103][ T42] audit: type=1400 audit(2000000023.209:49608): avc: denied { search } for pid=10884 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 405.462749][ T42] audit: type=1400 audit(2000000023.249:49609): avc: denied { allowed } for pid=10888 comm="syz.6.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 405.462778][ T42] audit: type=1400 audit(2000000023.249:49610): avc: denied { create } for pid=10888 comm="syz.6.1035" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 405.462800][ T42] audit: type=1400 audit(2000000023.249:49611): avc: denied { mounton } for pid=10887 comm="syz.9.1034" path="/92/file0" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 405.462820][ T42] audit: type=1400 audit(2000000023.249:49612): avc: denied { map } for pid=10888 comm="syz.6.1035" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 405.462841][ T42] audit: type=1400 audit(2000000023.249:49613): avc: denied { read write } for pid=10888 comm="syz.6.1035" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 405.463244][T10890] jffs2: notice: (10890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 405.464146][ T42] audit: type=1400 audit(2000000023.249:49614): avc: denied { mount } for pid=10887 comm="syz.9.1034" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 405.465826][T10890] FAULT_INJECTION: forcing a failure. [ 405.465826][T10890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.465851][T10890] CPU: 1 UID: 0 PID: 10890 Comm: syz.9.1034 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.465871][T10890] Tainted: [L]=SOFTLOCKUP [ 405.465876][T10890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.465886][T10890] Call Trace: [ 405.465892][T10890] [ 405.465899][T10890] dump_stack_lvl+0x100/0x190 [ 405.465929][T10890] should_fail_ex.cold+0x5/0xa [ 405.465953][T10890] _copy_from_user+0x2e/0xd0 [ 405.465975][T10890] kstrtouint_from_user+0xd6/0x1d0 [ 405.465994][T10890] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 405.466018][T10890] ? lock_acquire+0x1d1/0x380 [ 405.466043][T10890] proc_fail_nth_write+0x83/0x220 [ 405.466066][T10890] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.466096][T10890] vfs_write+0x2aa/0x1050 [ 405.466118][T10890] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.466142][T10890] ? lock_acquire+0x1d1/0x380 [ 405.466161][T10890] ? __fget_files+0x34/0x3d0 [ 405.466182][T10890] ? __pfx_vfs_write+0x10/0x10 [ 405.466198][T10890] ? find_held_lock+0x2b/0x80 [ 405.466222][T10890] ? __fget_files+0x215/0x3d0 [ 405.466250][T10890] ? __fget_files+0x21f/0x3d0 [ 405.466280][T10890] ksys_write+0x12a/0x250 [ 405.466295][T10890] ? __pfx_ksys_write+0x10/0x10 [ 405.466323][T10890] do_syscall_64+0x123/0x790 [ 405.466351][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.466369][T10890] RIP: 0033:0x7f41d995ed8e [ 405.466381][T10890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.466395][T10890] RSP: 002b:00007f41da92cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.466411][T10890] RAX: ffffffffffffffda RBX: 00007f41da92d6c0 RCX: 00007f41d995ed8e [ 405.466422][T10890] RDX: 0000000000000001 RSI: 00007f41da92d0a0 RDI: 0000000000000003 [ 405.466432][T10890] RBP: 00007f41da92d090 R08: 0000000000000000 R09: 0000000000000000 [ 405.466442][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.466451][T10890] R13: 00007f41d9c26038 R14: 00007f41d9c25fa0 R15: 00007ffccca26858 [ 405.466476][T10890] [ 405.479800][ T42] audit: type=1400 audit(2000000023.269:49615): avc: denied { unmount } for pid=8940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 405.512786][ T42] audit: type=1400 audit(2000000023.299:49616): avc: denied { read } for pid=10893 comm="syz.9.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.550378][T10898] nfs4: Bad value for 'source' [ 405.552120][ T42] audit: type=1400 audit(2000000023.339:49617): avc: denied { prog_run } for pid=10897 comm="syz.9.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 405.558598][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1037'. [ 405.558663][T10898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.563467][T10898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.630328][T10902] jffs2: notice: (10902) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 405.641539][T10902] jffs2: warning: (10902) jffs2_get_inode_nodes: Eep. No valid nodes for ino #2. [ 405.641656][T10902] jffs2: warning: (10902) jffs2_do_read_inode_internal: no data nodes found for ino #2 [ 405.675507][ T5592] usb 12-1: USB disconnect, device number 11 [ 405.746527][T10916] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 405.748200][T10918] binder: 10915:10918 ioctl 40026f33 200000000f00 returned -22 [ 405.762086][T10916] ceph: Path missing in source [ 405.876107][T10930] FAULT_INJECTION: forcing a failure. [ 405.876107][T10930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.876132][T10930] CPU: 0 UID: 0 PID: 10930 Comm: syz.9.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.876149][T10930] Tainted: [L]=SOFTLOCKUP [ 405.876154][T10930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.876160][T10930] Call Trace: [ 405.876165][T10930] [ 405.876170][T10930] dump_stack_lvl+0x100/0x190 [ 405.876190][T10930] should_fail_ex.cold+0x5/0xa [ 405.876207][T10930] _copy_from_iter+0x1f4/0x1690 [ 405.876226][T10930] ? kmalloc_reserve+0xf9/0x350 [ 405.876252][T10930] ? __asan_memset+0x23/0x50 [ 405.876268][T10930] ? __pfx__copy_from_iter+0x10/0x10 [ 405.876284][T10930] ? __alloc_skb+0x4e9/0x710 [ 405.876296][T10930] ? __pfx___alloc_skb+0x10/0x10 [ 405.876308][T10930] ? __lock_acquire+0x5c0/0x1f40 [ 405.876323][T10930] ? skb_put+0x138/0x180 [ 405.876338][T10930] tipc_msg_build+0x30a/0x1100 [ 405.876356][T10930] ? do_raw_spin_lock+0x128/0x260 [ 405.876371][T10930] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.876387][T10930] ? __pfx_tipc_msg_build+0x10/0x10 [ 405.876405][T10930] ? mark_held_locks+0x40/0x70 [ 405.876418][T10930] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 405.876436][T10930] __tipc_sendstream+0x6a7/0x10e0 [ 405.876456][T10930] ? __pfx___tipc_sendstream+0x10/0x10 [ 405.876471][T10930] ? do_raw_spin_lock+0x128/0x260 [ 405.876487][T10930] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.876503][T10930] ? __pfx_woken_wake_function+0x10/0x10 [ 405.876521][T10930] ? __local_bh_enable_ip+0xa5/0x120 [ 405.876537][T10930] tipc_sendstream+0x4f/0x70 [ 405.876551][T10930] sock_write_iter+0x53a/0x5b0 [ 405.876565][T10930] ? __pfx_tipc_sendstream+0x10/0x10 [ 405.876579][T10930] ? __pfx_sock_write_iter+0x10/0x10 [ 405.876604][T10930] ? bpf_lsm_file_permission+0x9/0x10 [ 405.876622][T10930] ? security_file_permission+0x76/0x210 [ 405.876641][T10930] ? rw_verify_area+0xce/0x6d0 [ 405.876657][T10930] vfs_write+0x6af/0x1050 [ 405.876672][T10930] ? __pfx_sock_write_iter+0x10/0x10 [ 405.876689][T10930] ? __pfx_vfs_write+0x10/0x10 [ 405.876702][T10930] ? find_held_lock+0x2b/0x80 [ 405.876730][T10930] ksys_write+0x1f8/0x250 [ 405.876744][T10930] ? __pfx_ksys_write+0x10/0x10 [ 405.876763][T10930] do_syscall_64+0x123/0x790 [ 405.876781][T10930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.876793][T10930] RIP: 0033:0x7f41d999e559 [ 405.876823][T10930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.876835][T10930] RSP: 002b:00007f41da92d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.876848][T10930] RAX: ffffffffffffffda RBX: 00007f41d9c25fa0 RCX: 00007f41d999e559 [ 405.876855][T10930] RDX: 000000002000011a RSI: 0000200000000440 RDI: 0000000000000007 [ 405.876863][T10930] RBP: 00007f41d9a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 405.876871][T10930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.876878][T10930] R13: 00007f41d9c26038 R14: 00007f41d9c25fa0 R15: 00007ffccca26858 [ 405.876895][T10930] [ 405.880450][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1047'. [ 405.899849][T10930] bond1: (slave bond_slave_0): Device is not our slave [ 405.899868][T10930] bond1: option active_slave: invalid value (bond_slave_0) [ 405.906140][T10930] bond1 (unregistering): Released all slaves [ 405.947629][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1049'. [ 405.962929][T10941] binder: 10939:10941 ioctl c0306201 200000000bc0 returned -14 [ 405.968776][T10941] jffs2: notice: (10941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 3 orphan) found. [ 406.019053][T10944] netlink: 'syz.9.1050': attribute type 1 has an invalid length. [ 406.019826][T10944] veth1_to_bridge: mtu less than device minimum [ 406.024118][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1050'. [ 406.026208][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1050'. [ 406.026225][T10944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.026247][T10944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.235666][T10961] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 406.246867][ T9164] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 406.285712][T10961] md: could not open device unknown-block(1,1). [ 406.324602][T10963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10963 comm=syz.9.1056 [ 406.395880][ T9164] usb 7-1: not running at top speed; connect to a high speed hub [ 406.395910][ T9164] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 406.396850][ T9164] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 406.398705][ T9164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.398725][ T9164] usb 7-1: Product: syz [ 406.398738][ T9164] usb 7-1: Manufacturer: syz [ 406.398751][ T9164] usb 7-1: SerialNumber: syz [ 406.430589][T10947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 406.439963][ T9164] oti6858 7-1:1.0: oti6858 converter detected [ 406.444386][T10982] ip_tables: iptables: counters copy to user failed while replacing table [ 406.444624][ T9164] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 406.525410][ T5771] Bluetooth: hci1: command tx timeout [ 406.599514][T10987] No source specified [ 406.612734][T10989] loop8: detected capacity change from 0 to 16384 [ 406.643739][ T9164] usb 7-1: USB disconnect, device number 15 [ 406.650244][T10987] device-mapper: table: 248:0: : unknown target type [ 406.650256][T10987] device-mapper: ioctl: error adding target to table [ 406.656827][ T9164] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 406.657163][ T9164] oti6858 7-1:1.0: device disconnected [ 406.827162][T10999] loop8: detected capacity change from 16384 to 16383 [ 406.845674][T11007] syz.6.1063 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 406.845706][T11007] CPU: 1 UID: 0 PID: 11007 Comm: syz.6.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.845730][T11007] Tainted: [L]=SOFTLOCKUP [ 406.845737][T11007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.845747][T11007] Call Trace: [ 406.845753][T11007] [ 406.845760][T11007] dump_stack_lvl+0x100/0x190 [ 406.845801][T11007] dump_header+0xfb/0x606 [ 406.845822][T11007] oom_kill_process.cold+0xd/0x380 [ 406.845843][T11007] out_of_memory+0x340/0x14f0 [ 406.845879][T11007] ? __pfx_out_of_memory+0x10/0x10 [ 406.845910][T11007] mem_cgroup_out_of_memory+0xc6/0x130 [ 406.845932][T11007] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 406.845971][T11007] ? find_held_lock+0x2b/0x80 [ 406.846002][T11007] ? do_raw_spin_unlock+0x145/0x1e0 [ 406.846026][T11007] ? _raw_spin_unlock+0x28/0x50 [ 406.846055][T11007] try_charge_memcg+0x783/0xf60 [ 406.846073][T11007] ? __pfx_try_charge_memcg+0x10/0x10 [ 406.846085][T11007] ? find_held_lock+0x2b/0x80 [ 406.846101][T11007] ? rcu_read_unlock+0x17/0x60 [ 406.846112][T11007] ? rcu_read_unlock+0x17/0x60 [ 406.846128][T11007] obj_cgroup_charge_pages+0x2b/0x1f0 [ 406.846141][T11007] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 406.846159][T11007] ? kasan_save_track+0x14/0x30 [ 406.846175][T11007] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 406.846191][T11007] ? proc_alloc_inode+0x25/0x200 [ 406.846204][T11007] ? __pfx_proc_alloc_inode+0x10/0x10 [ 406.846216][T11007] proc_alloc_inode+0x25/0x200 [ 406.846228][T11007] alloc_inode+0x68/0x250 [ 406.846247][T11007] new_inode+0x22/0x1c0 [ 406.846269][T11007] proc_get_inode+0x1d/0x780 [ 406.846294][T11007] proc_lookup_de+0x236/0x360 [ 406.846319][T11007] proc_lookup+0xd8/0x110 [ 406.846340][T11007] __lookup_slow+0x155/0x320 [ 406.846362][T11007] lookup_slow+0x50/0x70 [ 406.846380][T11007] link_path_walk+0x1377/0x1cc0 [ 406.846412][T11007] path_openat+0x1ac/0x2450 [ 406.846440][T11007] ? __pfx_path_openat+0x10/0x10 [ 406.846472][T11007] do_file_open+0x20e/0x430 [ 406.846497][T11007] ? __pfx_do_file_open+0x10/0x10 [ 406.846540][T11007] ? _raw_spin_unlock+0x28/0x50 [ 406.846559][T11007] ? alloc_fd+0x471/0x7a0 [ 406.846591][T11007] do_sys_openat2+0x10f/0x1e0 [ 406.846608][T11007] ? __pfx_do_sys_openat2+0x10/0x10 [ 406.846634][T11007] __x64_sys_openat+0x12d/0x210 [ 406.846650][T11007] ? __pfx___x64_sys_openat+0x10/0x10 [ 406.846677][T11007] do_syscall_64+0x123/0x790 [ 406.846703][T11007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.846721][T11007] RIP: 0033:0x7f2d1d19e559 [ 406.846737][T11007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.846752][T11007] RSP: 002b:00007f2d1dfa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 406.846770][T11007] RAX: ffffffffffffffda RBX: 00007f2d1d425fa0 RCX: 00007f2d1d19e559 [ 406.846782][T11007] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 406.846792][T11007] RBP: 00007f2d1d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 406.846802][T11007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.846812][T11007] R13: 00007f2d1d426038 R14: 00007f2d1d425fa0 R15: 00007ffde5b17188 [ 406.846837][T11007] [ 406.847452][T11007] memory: usage 8kB, limit 8kB, failcnt 21 [ 406.847465][T11007] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 406.847476][T11007] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 406.847485][T11007] Memory cgroup stats for /syz6/test: [ 406.847598][T11007] cache 0 [ 406.847605][T11007] rss 0 [ 406.847611][T11007] rss_huge 0 [ 406.847617][T11007] shmem 0 [ 406.847622][T11007] mapped_file 0 [ 406.847628][T11007] dirty 0 [ 406.847634][T11007] writeback 0 [ 406.847639][T11007] workingset_refault_anon 0 [ 406.847645][T11007] workingset_refault_file 0 [ 406.847652][T11007] swap 0 [ 406.847658][T11007] swapcached 0 [ 406.847663][T11007] pgpgin 0 [ 406.847669][T11007] pgpgout 0 [ 406.847674][T11007] pgfault 0 [ 406.847680][T11007] pgmajfault 0 [ 406.847686][T11007] inactive_anon 0 [ 406.847691][T11007] active_anon 0 [ 406.847697][T11007] inactive_file 0 [ 406.847703][T11007] active_file 0 [ 406.847709][T11007] unevictable 0 [ 406.847715][T11007] hierarchical_memory_limit 8192 [ 406.847721][T11007] hierarchical_memsw_limit 9223372036854771712 [ 406.847729][T11007] total_cache 0 [ 406.847735][T11007] total_rss 0 [ 406.847740][T11007] total_rss_huge 0 [ 406.847746][T11007] total_shmem 0 [ 406.847752][T11007] total_mapped_file 0 [ 406.847758][T11007] total_dirty 0 [ 406.847764][T11007] total_writeback 0 [ 406.847770][T11007] total_workingset_refault_anon 0 [ 406.847776][T11007] total_workingset_refault_file 0 [ 406.847782][T11007] total_swap 0 [ 406.847788][T11007] total_swapcached 0 [ 406.847794][T11007] total_pgpgin 0 [ 406.847800][T11007] total_pgpgout 0 [ 406.847806][T11007] total_pgfault 0 [ 406.847811][T11007] total_pgmajfault 0 [ 406.847818][T11007] total_inactive_anon 0 [ 406.847824][T11007] total_active_anon 0 [ 406.847830][T11007] total_inactive_file 0 [ 406.847836][T11007] total_active_file 0 [ 406.847842][T11007] total_unevictable 0 [ 406.847848][T11007] anon_cost 0 [ 406.847854][T11007] file_cost 0 [ 406.847860][T11007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.1063,pid=11006,uid=0 [ 406.851967][T11007] Memory cgroup out of memory: Killed process 11006 (syz.6.1063) total-vm:98560kB, anon-rss:1380kB, file-rss:21648kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 406.904660][T11010] batadv_slave_1: entered promiscuous mode [ 406.907327][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1064'. [ 406.907620][T11009] batadv_slave_1: left promiscuous mode [ 406.926777][ T41] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 406.999752][T11020] ip_tables: iptables: counters copy to user failed while replacing table [ 407.011853][T11018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1066'. [ 407.075992][ T41] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.076946][ T41] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.076963][ T41] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 407.076981][ T41] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.080498][T11002] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 407.086068][ T41] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.254524][T11044] Cannot find set identified by id 0 to match [ 407.272741][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.272755][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.272761][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.287940][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.287953][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.287961][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.289319][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.289330][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.289337][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.294766][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.294777][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.294785][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.296057][ T5683] usb 14-1: USB disconnect, device number 11 [ 407.296457][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.296468][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.296475][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.324067][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.324076][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.324081][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.335257][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.335267][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.335271][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.361468][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.361479][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.361484][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.371916][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.371924][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.371929][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.372966][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.372973][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.372978][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.381427][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.381435][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.381440][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.382245][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.382251][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.382256][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.384192][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.384199][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.384203][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.388916][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.388923][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.388927][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.407088][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.407098][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.407102][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.416487][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.416495][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.416500][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.417315][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.417322][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.417326][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.422652][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.422659][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.422664][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.430776][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.430785][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.430789][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.432488][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.432495][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.432499][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.439916][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.439925][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.439929][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.453333][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.453345][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.453351][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.477504][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.477514][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.477519][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.480808][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.480819][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.480826][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.481857][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.481866][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.481873][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.483624][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.483631][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.483635][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.484256][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.484262][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.484266][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.485216][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.485225][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.485231][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.486387][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.486395][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.486402][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.487389][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.487397][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.487403][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.489530][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.489557][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.489562][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.492765][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.492774][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.492780][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.493801][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.493810][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.493816][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.495701][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.495716][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.495722][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.496393][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.496400][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.496404][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.497016][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.497022][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.497026][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.497630][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.497636][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.497640][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.498419][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.498428][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.498434][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.499438][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.499447][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.499453][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.500510][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.500519][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.500525][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.501639][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.501648][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.501654][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.503950][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.503957][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.503961][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.504644][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.504653][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.504659][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.505703][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.505718][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.505725][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.506669][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.506677][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.506683][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.507753][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.507761][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.507767][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.508696][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.508703][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.508707][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.509304][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.509310][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.509314][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.510016][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.510022][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.510026][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.510874][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.510882][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.510888][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.512275][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.512284][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.512290][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.513236][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.513245][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.513251][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.514239][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.514247][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.514254][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.517697][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.517706][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.517717][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.520890][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.520897][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.520901][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.529616][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.529626][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.529632][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.530659][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.530666][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.530670][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.531268][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.531274][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.531278][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.532015][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.532021][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.532025][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.532660][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.532669][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.532675][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.533670][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.533679][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.533686][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.535060][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.535068][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.535075][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.537262][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.537268][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.537272][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.540227][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.540235][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.540242][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.543453][T11044] exFAT-fs (nbd2): unable to read boot sector [ 407.543459][T11044] exFAT-fs (nbd2): failed to read boot sector [ 407.543463][T11044] exFAT-fs (nbd2): failed to recognize exfat type [ 407.875449][T11055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=11055 comm=syz.6.1076 [ 408.012076][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1077'. [ 408.028011][T11058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.069358][T11064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11064 comm=syz.6.1078 [ 408.494972][ T61] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 408.645708][ T61] usb 12-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 408.646671][ T61] usb 12-1: config index 0 descriptor too short (expected 50, got 32) [ 408.646692][ T61] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.648549][ T61] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.648568][ T61] usb 12-1: Product: syz [ 408.648582][ T61] usb 12-1: Manufacturer: syz [ 408.648593][ T61] usb 12-1: SerialNumber: syz [ 408.657659][ T61] usb_debug 12-1:1.0: debug converter detected [ 408.664750][ T61] usb 12-1: debug converter now attached to ttyUSB0 [ 408.784937][ T5592] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 408.955641][ T5592] usb 11-1: not running at top speed; connect to a high speed hub [ 408.955660][ T5592] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 408.956401][ T5592] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 408.956420][ T5592] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.959563][ T5592] cyberjack 11-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 408.963464][ T5592] usb 11-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 409.001421][T11091] netlink: 'syz.7.1082': attribute type 10 has an invalid length. [ 409.011834][T11091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.013705][T11091] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 409.219308][ T5592] usb 11-1: USB disconnect, device number 7 [ 409.223970][ T5592] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 409.224249][ T5592] cyberjack 11-1:1.0: device disconnected [ 409.740231][T11105] ±ÿ)”ëfl: renamed from lo (while UP) [ 409.852166][T11109] rxe_eth0 speed is unknown, defaulting to 1000 [ 409.933127][T11109] lo speed is unknown, defaulting to 1000 [ 410.508138][ T42] kauditd_printk_skb: 313 callbacks suppressed [ 410.508152][ T42] audit: type=1400 audit(2000000028.299:49931): avc: denied { create } for pid=11128 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.508636][ T42] audit: type=1400 audit(2000000028.299:49932): avc: denied { getopt } for pid=11128 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.508788][T11129] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 410.509123][ T42] audit: type=1400 audit(2000000028.299:49933): avc: denied { setopt } for pid=11128 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.509884][ T42] audit: type=1400 audit(2000000028.299:49934): avc: denied { execute } for pid=11128 comm="syz.2.1096" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 410.510297][ T42] audit: type=1400 audit(2000000028.299:49935): avc: denied { execute_no_trans } for pid=11128 comm="syz.2.1096" path="/22/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 410.511506][ T42] audit: type=1400 audit(2000000028.299:49936): avc: denied { remount } for pid=11128 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 410.517732][ T42] audit: type=1400 audit(2000000028.309:49937): avc: denied { read write } for pid=11128 comm="syz.2.1096" name="video37" dev="devtmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 410.517779][ T42] audit: type=1400 audit(2000000028.309:49938): avc: denied { open } for pid=11128 comm="syz.2.1096" path="/dev/video37" dev="devtmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 410.517814][ T42] audit: type=1400 audit(2000000028.309:49939): avc: denied { ioctl } for pid=11128 comm="syz.2.1096" path="/dev/video37" dev="devtmpfs" ino=1070 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 410.554895][ T42] audit: type=1400 audit(2000000028.339:49940): avc: denied { write } for pid=11128 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.607082][T11133] netlink: 'syz.2.1097': attribute type 1 has an invalid length. [ 410.616073][T11133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.628143][T11133] bond1: (slave geneve2): making interface the new active one [ 410.631657][T11133] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 411.085728][ T9164] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 411.235496][ T9164] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 411.236307][ T9164] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 411.236330][ T9164] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 411.236343][ T9164] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30768, setting to 1024 [ 411.236361][ T9164] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 411.236372][ T9164] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 411.236391][ T9164] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.238376][T11143] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 411.238429][T11143] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 411.240317][ T9164] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 411.242159][ T9164] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 411.242217][ T9164] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 411.244541][ T9164] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 411.245340][ T9164] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 411.245377][ T9164] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 411.249824][ T9164] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 411.278879][T10476] usb 12-1: USB disconnect, device number 12 [ 411.296225][T10476] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 411.296566][T10476] usb_debug 12-1:1.0: device disconnected [ 411.430010][T11152] CIFS: Attempting to mount //127.0.0.1/share [ 411.430965][T11152] CIFS: VFS: Error connecting to socket. Aborting operation. [ 411.430989][T11152] CIFS: VFS: cifs_mount failed w/return code = -101 [ 411.446848][ T5683] usb 7-1: USB disconnect, device number 16 [ 411.450819][ T5683] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 411.453795][ T5683] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 411.454148][ T5683] keyspan 7-1:1.0: device disconnected [ 411.842953][T11155] ================================================================== [ 411.842969][T11155] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x458/0xa10 [ 411.8429 ** replaying previous printk message ** [ 411.842998][T11155] Read of size 32 at addr ffff888061fafe60 by task syz.6.1103/11155 [ 411.843012][T11155] [ 411.843022][T11155] CPU: 3 UID: 0 PID: 11155 Comm: syz.6.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.843068][T11155] Tainted: [L]=SOFTLOCKUP [ 411.843075][T11155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.843086][T11155] Call Trace: [ 411.843092][T11155] [ 411.843099][T11155] dump_stack_lvl+0x100/0x190 [ 411.843133][T11155] print_report+0x13d/0x4b0 [ 411.843160][T11155] ? __virt_addr_valid+0x239/0x430 [ 411.843180][T11155] ? soft_cursor+0x458/0xa10 [ 411.843200][T11155] kasan_report+0xdf/0x1c0 [ 411.843226][T11155] ? soft_cursor+0x458/0xa10 [ 411.843249][T11155] kasan_check_range+0x10f/0x1e0 [ 411.843267][T11155] __asan_memcpy+0x23/0x60 [ 411.843286][T11155] soft_cursor+0x458/0xa10 [ 411.843310][T11155] ccw_cursor+0xd7f/0x15b0 [ 411.843338][T11155] ? __pfx_ccw_cursor+0x10/0x10 [ 411.843365][T11155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 411.843387][T11155] ? get_color+0x1da/0x450 [ 411.843405][T11155] ? __pfx_ccw_cursor+0x10/0x10 [ 411.843427][T11155] fbcon_cursor+0x43c/0x5e0 [ 411.843447][T11155] hide_cursor+0x87/0x230 [ 411.843470][T11155] redraw_screen+0x5d4/0x760 [ 411.843494][T11155] ? mark_held_locks+0x40/0x70 [ 411.843513][T11155] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 411.843537][T11155] ? __pfx_redraw_screen+0x10/0x10 [ 411.843562][T11155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 411.843590][T11155] vc_do_resize+0xc3d/0xeb0 [ 411.843617][T11155] ? __pfx_vc_do_resize+0x10/0x10 [ 411.843642][T11155] ? __local_bh_enable_ip+0xa5/0x120 [ 411.843661][T11155] ? lockdep_hardirqs_on+0x7d/0x110 [ 411.843685][T11155] ? kernel_fpu_end+0x5f/0x80 [ 411.843706][T11155] ? __local_bh_enable_ip+0xa5/0x120 [ 411.843726][T11155] fbcon_do_set_font+0x443/0x8c0 [ 411.843750][T11155] fbcon_set_font+0x4be/0x730 [ 411.843770][T11155] ? __pfx_fbcon_set_font+0x10/0x10 [ 411.843787][T11155] con_font_op+0x991/0x1020 [ 411.843805][T11155] ? __pfx_con_font_op+0x10/0x10 [ 411.843822][T11155] ? __might_fault+0xc5/0x140 [ 411.843839][T11155] ? __might_fault+0xc5/0x140 [ 411.843860][T11155] vt_ioctl+0xe00/0x3170 [ 411.843882][T11155] ? __pfx_vt_ioctl+0x10/0x10 [ 411.843901][T11155] ? tomoyo_path_number_perm+0x28f/0x580 [ 411.843928][T11155] ? tomoyo_path_number_perm+0x188/0x580 [ 411.843953][T11155] ? __pfx_futex_wait+0x10/0x10 [ 411.843971][T11155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 411.843993][T11155] ? tty_jobctrl_ioctl+0x152/0xce0 [ 411.844014][T11155] ? __pfx_vt_ioctl+0x10/0x10 [ 411.844034][T11155] tty_ioctl+0x26a/0x1800 [ 411.844051][T11155] ? __pfx_tty_ioctl+0x10/0x10 [ 411.844066][T11155] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 411.844093][T11155] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 411.844127][T11155] ? __fget_files+0x34/0x3d0 [ 411.844157][T11155] ? selinux_file_ioctl+0x13b/0x290 [ 411.844181][T11155] ? selinux_file_ioctl+0xb6/0x290 [ 411.844206][T11155] ? __pfx_tty_ioctl+0x10/0x10 [ 411.844222][T11155] __x64_sys_ioctl+0x18e/0x210 [ 411.844244][T11155] do_syscall_64+0x123/0x790 [ 411.844269][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.844287][T11155] RIP: 0033:0x7f2d1d19e559 [ 411.844301][T11155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.844318][T11155] RSP: 002b:00007f2d1dfa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.844336][T11155] RAX: ffffffffffffffda RBX: 00007f2d1d425fa0 RCX: 00007f2d1d19e559 [ 411.844349][T11155] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003 [ 411.844359][T11155] RBP: 00007f2d1d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 411.844371][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.844381][T11155] R13: 00007f2d1d426038 R14: 00007f2d1d425fa0 R15: 00007ffde5b17188 [ 411.844398][T11155] [ 411.844405][T11155] [ 411.844409][T11155] Allocated by task 10624: [ 411.844418][T11155] kasan_save_stack+0x30/0x50 [ 411.844439][T11155] kasan_save_track+0x14/0x30 [ 411.844462][T11155] __kasan_kmalloc+0xaa/0xb0 [ 411.844482][T11155] __kmalloc_noprof+0x32f/0x840 [ 411.844503][T11155] font_data_rotate+0x353/0x3b0 [ 411.844520][T11155] fbcon_rotate_font+0x2bf/0x510 [ 411.844541][T11155] fbcon_modechanged+0x218/0x7f0 [ 411.844557][T11155] fbcon_set_all_vcs+0x39b/0x470 [ 411.844574][T11155] rotate_all_store+0x31e/0x410 [ 411.844589][T11155] dev_attr_store+0x58/0x80 [ 411.844606][T11155] sysfs_kf_write+0xf2/0x150 [ 411.844628][T11155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 411.844648][T11155] vfs_write+0x6af/0x1050 [ 411.844666][T11155] ksys_write+0x12a/0x250 [ 411.844684][T11155] do_syscall_64+0x123/0x790 [ 411.844706][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.844721][T11155] [ 411.844725][T11155] The buggy address belongs to the object at ffff888061fae000 [ 411.844725][T11155] which belongs to the cache kmalloc-4k of size 4096 [ 411.844737][T11155] The buggy address is located 3680 bytes to the right of [ 411.844737][T11155] allocated 4096-byte region [ffff888061fae000, ffff888061faf000) [ 411.844753][T11155] [ 411.844758][T11155] The buggy address belongs to the physical page: [ 411.844765][T11155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61fa8 [ 411.844781][T11155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 411.844794][T11155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 411.844810][T11155] page_type: f5(slab) [ 411.844825][T11155] raw: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122 [ 411.844840][T11155] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 411.844855][T11155] head: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122 [ 411.844870][T11155] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 411.844885][T11155] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 411.844900][T11155] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 411.844909][T11155] page dumped because: kasan: bad access detected [ 411.844917][T11155] page_owner tracks the page as allocated [ 411.844923][T11155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9343, tgid 9343 (syz-executor), ts 386327920628 [ 411.844951][T11155] post_alloc_hook+0xfd/0x120 [ 411.844968][T11155] get_page_from_freelist+0x110d/0x35d0 [ 411.844986][T11155] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 411.845005][T11155] new_slab+0xa9/0x6e0 [ 411.845020][T11155] refill_objects+0xe3/0x410 [ 411.845036][T11155] __pcs_replace_empty_main+0x35e/0x650 [ 411.845053][T11155] __kmalloc_noprof+0x67c/0x840 [ 411.845072][T11155] tomoyo_realpath_from_path+0xb6/0x690 [ 411.845086][T11155] tomoyo_path_number_perm+0x23c/0x580 [ 411.845112][T11155] security_file_ioctl+0xd3/0x230 [ 411.845136][T11155] __x64_sys_ioctl+0xb7/0x210 [ 411.845155][T11155] do_syscall_64+0x123/0x790 [ 411.845178][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.845193][T11155] page last free pid 9343 tgid 9343 ts 386321146376 stack trace: [ 411.845204][T11155] __free_frozen_pages+0x79f/0x10f0 [ 411.845218][T11155] qlist_free_all+0x47/0xf0 [ 411.845236][T11155] kasan_quarantine_reduce+0x1a0/0x1f0 [ 411.845256][T11155] __kasan_slab_alloc+0x69/0x90 [ 411.845277][T11155] kmem_cache_alloc_noprof+0x269/0x6a0 [ 411.845297][T11155] do_getname+0x35/0x390 [ 411.845312][T11155] __x64_sys_unlink+0x36/0x70 [ 411.845326][T11155] do_syscall_64+0x123/0x790 [ 411.845348][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.845363][T11155] [ 411.845367][T11155] Memory state around the buggy address: [ 411.845375][T11155] ffff888061fafd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.845387][T11155] ffff888061fafd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.845398][T11155] >ffff888061fafe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.845406][T11155] ^ [ 411.845416][T11155] ffff888061fafe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.845425][T11155] ffff888061faff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.845434][T11155] ================================================================== [ 411.852935][T11155] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 412.107393][T11155] CPU: 1 UID: 0 PID: 11155 Comm: syz.6.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.110684][T11155] Tainted: [L]=SOFTLOCKUP [ 412.112083][T11155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 412.115237][T11155] Call Trace: [ 412.116302][T11155] [ 412.117245][T11155] dump_stack_lvl+0x100/0x190 [ 412.118750][T11155] vpanic+0x553/0x970 [ 412.120017][T11155] ? __pfx_vpanic+0x10/0x10 [ 412.121455][T11155] ? mark_held_locks+0x40/0x70 [ 412.122984][T11155] ? soft_cursor+0x458/0xa10 [ 412.124457][T11155] panic+0xd1/0xe0 [ 412.125666][T11155] ? __pfx_panic+0x10/0x10 [ 412.127076][T11155] ? soft_cursor+0x458/0xa10 [ 412.128494][T11155] ? preempt_schedule_common+0x3c/0xb0 [ 412.130239][T11155] check_panic_on_warn.cold+0x19/0x34 [ 412.131925][T11155] end_report.part.0+0x3a/0x90 [ 412.133462][T11155] kasan_report.cold+0xe/0x18 [ 412.134964][T11155] ? soft_cursor+0x458/0xa10 [ 412.136434][T11155] kasan_check_range+0x10f/0x1e0 [ 412.138011][T11155] __asan_memcpy+0x23/0x60 [ 412.139434][T11155] soft_cursor+0x458/0xa10 [ 412.140853][T11155] ccw_cursor+0xd7f/0x15b0 [ 412.142287][T11155] ? __pfx_ccw_cursor+0x10/0x10 [ 412.143831][T11155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 412.145701][T11155] ? get_color+0x1da/0x450 [ 412.147117][T11155] ? __pfx_ccw_cursor+0x10/0x10 [ 412.148663][T11155] fbcon_cursor+0x43c/0x5e0 [ 412.150118][T11155] hide_cursor+0x87/0x230 [ 412.151503][T11155] redraw_screen+0x5d4/0x760 [ 412.152973][T11155] ? mark_held_locks+0x40/0x70 [ 412.154492][T11155] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 412.156283][T11155] ? __pfx_redraw_screen+0x10/0x10 [ 412.157906][T11155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 412.159750][T11155] vc_do_resize+0xc3d/0xeb0 [ 412.161198][T11155] ? __pfx_vc_do_resize+0x10/0x10 [ 412.162803][T11155] ? __local_bh_enable_ip+0xa5/0x120 [ 412.164468][T11155] ? lockdep_hardirqs_on+0x7d/0x110 [ 412.166116][T11155] ? kernel_fpu_end+0x5f/0x80 [ 412.167606][T11155] ? __local_bh_enable_ip+0xa5/0x120 [ 412.169268][T11155] fbcon_do_set_font+0x443/0x8c0 [ 412.170846][T11155] fbcon_set_font+0x4be/0x730 [ 412.172338][T11155] ? __pfx_fbcon_set_font+0x10/0x10 [ 412.173990][T11155] con_font_op+0x991/0x1020 [ 412.175436][T11155] ? __pfx_con_font_op+0x10/0x10 [ 412.176985][T11155] ? __might_fault+0xc5/0x140 [ 412.178481][T11155] ? __might_fault+0xc5/0x140 [ 412.179968][T11155] vt_ioctl+0xe00/0x3170 [ 412.181319][T11155] ? __pfx_vt_ioctl+0x10/0x10 [ 412.182811][T11155] ? tomoyo_path_number_perm+0x28f/0x580 [ 412.184581][T11155] ? tomoyo_path_number_perm+0x188/0x580 [ 412.186362][T11155] ? __pfx_futex_wait+0x10/0x10 [ 412.187902][T11155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 412.189772][T11155] ? tty_jobctrl_ioctl+0x152/0xce0 [ 412.191392][T11155] ? __pfx_vt_ioctl+0x10/0x10 [ 412.192883][T11155] tty_ioctl+0x26a/0x1800 [ 412.194266][T11155] ? __pfx_tty_ioctl+0x10/0x10 [ 412.195777][T11155] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 412.197821][T11155] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 412.199957][T11155] ? __fget_files+0x34/0x3d0 [ 412.201450][T11155] ? selinux_file_ioctl+0x13b/0x290 [ 412.203100][T11155] ? selinux_file_ioctl+0xb6/0x290 [ 412.204671][T11155] ? __pfx_tty_ioctl+0x10/0x10 [ 412.206177][T11155] __x64_sys_ioctl+0x18e/0x210 [ 412.207701][T11155] do_syscall_64+0x123/0x790 [ 412.209177][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.211050][T11155] RIP: 0033:0x7f2d1d19e559 [ 412.212465][T11155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.218451][T11155] RSP: 002b:00007f2d1dfa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.221047][T11155] RAX: ffffffffffffffda RBX: 00007f2d1d425fa0 RCX: 00007f2d1d19e559 [ 412.223527][T11155] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003 [ 412.225994][T11155] RBP: 00007f2d1d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 412.228470][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.230938][T11155] R13: 00007f2d1d426038 R14: 00007f2d1d425fa0 R15: 00007ffde5b17188 [ 412.233432][T11155] [ 412.235083][T11155] Kernel Offset: disabled [ 412.236453][T11155] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:04:04 Registers: info registers vcpu 0 CPU#0 RAX=00000000001002e5 RBX=ffffffff958edde8 RCX=ffffffff8bd48769 RDX=0000000000000001 RSI=ffffffff8c625600 RDI=ffffffff8c625640 RBP=0000000000000004 RSP=ffffffff8fa07bd8 R8 =0000000000000001 R9 =ffffed100d4467bd R10=ffff88806a233deb R11=0000000000000001 R12=ffff88806a233de8 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bd47f1b RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2d1df5da08 CR3=000000002fe68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0074726f7078652f 3a312e302e302e37 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee07f1476 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee07f1476 00007ffee07f147c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8aa0a360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8aa0a3611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8aa0a36280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8aa0a3610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6585887d291ea57d 9ed69716d03defde a3a821d70a22c76e 9c25c365846de388 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 005053534d4c544e 0030004800000009 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 0000000000000000 0000000000000000 0010000000100000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000000000000 0000000000000000 0000000000000000 0000021000010041 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0001000000000000 00010040424d53fe ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2d015 RDI=ffffffff9cc7e6a0 RBP=ffffffff9cc7e660 RSP=ffffc900063a6c30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=382e31313420205b R12=0000000000000000 R13=0000000000000074 R14=000000000000000a R15=ffffc900063a6f48 RIP=ffffffff85b2d03f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2d1dfa56c0 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0799bc9e98 CR3=000000002d59c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f079cbf6e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f079cbf6e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574ebfc08 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b61aed8fbd14b829 8ec013c3d1ecc904 4ed6a39521bc472c 64dba5f3e41529c4 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6d18d211f0942c5 314781ce752be3e0 c2ca5271c79a285d 89625934736c84d2 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00006d3511a823eb 17a764db5505ae81 94bf776522f8158a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000000806 06011ef400000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102800402ade408 0001000000080606 011ef40000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006d3511a823eb17 a764db5505ae8194 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf776522f8158ae6 d18d211f0942c531 4781ce752be3e0c2 ca5271c79a285d89 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 625934736c84d2b6 1aed8fbd14b8298e c013c3d1ecc9044e d6a39521bc472c64 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff95b7e048 RBX=ffff8880202cd728 RCX=0000000000000100 RDX=235092528dbde0b5 RSI=000000004b96e218 RDI=00000000013f7b86 RBP=00000000000007da RSP=ffffc900006489b0 R8 =000000000005482f R9 =00000000000007da R10=0000000000000003 R11=0000000000000001 R12=ffff8880202ccb00 R13=0000000000000003 R14=0000000000000002 R15=235092528dbde0b5 RIP=ffffffff81e76c07 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=000000003d231000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000cc160081 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005612fd581e30 00005612fd63ecc0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005612fd588df0 00005612fd588ea0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a6425006469 702e73257325002f 6e75722f7261762f 0036353261687300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a410000414c 550b56005600000a 4b50570a5744530a 00131017444d5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000001 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003e800002710 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6420302020362020 206163620a200036 20365f2031372064 0a2049650a620064 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=4d00baf67d940600 RBX=dffffc0000000000 RCX=0000000000000001 RDX=ffff88801e308000 RSI=0000000000000001 RDI=ffffc900007cfda8 RBP=ffffc900007cfda8 RSP=ffffc900007cf960 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3630383838666652 R12=0000000000000000 R13=ffffc900007cfda8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ea78a4 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000003000 CR3=000000002d59c000 CR4=00352ef0 DR0=000000000000000e DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020c196a4 70160d36dd8ec69e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000501c1545 c0e23111ac18e380 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000b60b607 ed99fc0b039d24ac ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000a0fb3d1 a1b2014543b52ce5 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002af4ffec a9b8b74d669d3a5b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d1d23611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d1d236280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001db710640 b4e5b025f7011641 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d1d3f65f8 00007f2d1d3f65c8 00007f2d1d3f6600 00007f2d1d3f65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000