last executing test programs: 3m20.83526011s ago: executing program 3 (id=1187): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0x0']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f00000000c0)=[{r8, 0x88a0}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 3m19.875545418s ago: executing program 3 (id=1198): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x8, [@typedef={0xb}, @enum={0x5, 0x8, 0x0, 0x6, 0x4, [{0xe, 0x9}, {0xe, 0x9}, {0xc, 0xffffff72}, {0x1, 0x1}, {0x7, 0x3}, {0x0, 0x7d}, {0x4, 0x7fff}, {0x6, 0x1}]}, @struct={0x7, 0x3, 0x0, 0x4, 0x1, 0xd7b, [{0xa, 0x0, 0xf}, {0xd, 0x4, 0xfffffffc}, {0x5, 0x1, 0x9}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x10, 0x3}, @ptr={0xc}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x5}]}, {0x0, [0x30, 0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000000580)=""/163, 0xe0, 0xa3, 0x0, 0xa}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000003c0)='syzkaller\x00', 0x494b, 0x6b, &(0x7f0000000400)=""/107, 0x40f00, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000680)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x10}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r0, r0, r0, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f0000000740)=[{0x5, 0x4, 0x6}, {0x2, 0x5, 0x1, 0x4}], 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m19.87527048s ago: executing program 3 (id=1199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x7, 0x4, &(0x7f0000000000)={0x1d, "67d60edc3620031d451e5aa44d3cdb5637321451672f37163f5c64b821c4b14563"}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r4, 0x0, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x5, 0x4) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x70bd2a, 0x4, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4000004) 3m19.721174014s ago: executing program 3 (id=1202): mlockall(0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') pread64(r0, &(0x7f0000000480)=""/198, 0xc6, 0x8002) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x3, 0xfffffffe, 0x8, 0x4, 0x0, "bcb7179ab0297370d39de82ef56400", 0x3, 0xd70}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) close(0x3) syz_usb_connect$uac1(0x0, 0xb0, &(0x7f0000000040)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x115, 0x17, 0x100, &(0x7f00000000c0)="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"}) 3m18.150722306s ago: executing program 3 (id=1227): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) keyctl$session_to_parent(0x12) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) 3m17.85273644s ago: executing program 3 (id=1237): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="020000000000000000", @ANYRES32, @ANYRES32], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91", 0x23}], 0x3}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m17.731313298s ago: executing program 32 (id=1237): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="020000000000000000", @ANYRES32, @ANYRES32], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91", 0x23}], 0x3}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m0.484623201s ago: executing program 1 (id=2742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="000000000000000028001200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x91e8d5c924b6df0f}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x27, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 2m0.483402571s ago: executing program 1 (id=2744): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e000005000000002000", @ANYRES32, @ANYBLOB="02000000000000000000", @ANYRES32, @ANYRES32], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91", 0x23}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x3}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fc", 0xf8a}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m0.231935552s ago: executing program 1 (id=2748): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e000005000000002000", @ANYRES32, @ANYBLOB="02000000000000000000", @ANYRES32, @ANYRES32], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x14, 0x0, 0x200, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91", 0x23}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e23, 0x3ff, @local, 0x30000000}}, 0x1, 0x9, 0xf, 0x2, 0xc1, 0x400, 0x9}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000940)={r3, @in6={{0xa, 0x4e20, 0xd1, @remote, 0x8}}, 0x9, 0x9, 0xc, 0x80, 0x42, 0x3, 0x3}, &(0x7f0000000580)=0x9c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m59.87598845s ago: executing program 1 (id=2756): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 1m59.806198951s ago: executing program 1 (id=2758): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m59.722885465s ago: executing program 1 (id=2762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, [@IFLA_MTU={0x8, 0x4, 0x42}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m44.675241094s ago: executing program 33 (id=2762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, [@IFLA_MTU={0x8, 0x4, 0x42}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 27.553288913s ago: executing program 2 (id=4147): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x50b5}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 26.703819665s ago: executing program 2 (id=4173): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8008885}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="bc000000010903000000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 26.637959832s ago: executing program 2 (id=4177): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @local, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 26.553043592s ago: executing program 2 (id=4180): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 26.504665234s ago: executing program 2 (id=4182): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 25.991156127s ago: executing program 2 (id=4195): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 25.949871628s ago: executing program 34 (id=4195): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 1.614077463s ago: executing program 5 (id=4606): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000", 0x17}], 0x1}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 1.180376372s ago: executing program 4 (id=4607): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x4, 0x3, 0x6360, 0x1, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0xe0}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x14, r2, 0xd}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.178362687s ago: executing program 5 (id=4609): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.038908484s ago: executing program 6 (id=4613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 1.038573664s ago: executing program 5 (id=4614): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r0], 0x40}}, 0x0) close(0x4) 1.038393596s ago: executing program 6 (id=4615): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffff88, &(0x7f0000000180)={&(0x7f0000000440)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x803]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x14}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x54}, 0x8010) 972.513711ms ago: executing program 4 (id=4616): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 972.146256ms ago: executing program 6 (id=4617): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008ca) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000580)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x1}}, 0x80, 0x0}, 0x48811) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000780), &(0x7f0000000740)=r2}, 0x22) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r7, 0x0, 0x6, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r8, 0x0, 0x6, 0x7) vmsplice(r7, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) write$RDMA_USER_CM_CMD_SET_OPTION(r7, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000008c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x2011ef80, {"ad44d5d7183451414203b192d7ef300d"}, 0x3, 0x8, 0xff}}}, 0x90) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17, 0x955}}, &(0x7f0000000480)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 918.709827ms ago: executing program 4 (id=4618): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a", 0x23}], 0x1}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 917.572052ms ago: executing program 5 (id=4619): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x78, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xffffffffffffffd5, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 913.723289ms ago: executing program 5 (id=4620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 854.120582ms ago: executing program 4 (id=4621): socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x4000000) 853.614775ms ago: executing program 5 (id=4622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/199, 0xc7}], 0x2}, 0x6}], 0x1, 0x10022, 0x0) 853.383133ms ago: executing program 4 (id=4623): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 683.2741ms ago: executing program 4 (id=4624): setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0), &(0x7f0000000600)) 434.454256ms ago: executing program 0 (id=4630): r0 = mq_open(&(0x7f0000000080)='system.sockprotoname\x00', 0x840, 0x20, 0x0) read(r0, 0x0, 0x0) 373.423555ms ago: executing program 0 (id=4631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 372.895632ms ago: executing program 0 (id=4632): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 233.916881ms ago: executing program 0 (id=4633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 98.348286ms ago: executing program 0 (id=4634): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 98.151804ms ago: executing program 6 (id=4635): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="070a2cbd7000ffdbdf251500000008000300", @ANYRES32=r1, @ANYBLOB=' \x00+'], 0x3c}, 0x1, 0x0, 0x0, 0x48090}, 0x20008840) 97.879574ms ago: executing program 0 (id=4636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r3, 0x19}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="10c0c2ff2d6681873b5475652480d7879d491299b32f8deb080aad516a91a893e417c986fb2e7f016637", 0x2a}], 0x1}, 0x0) 296.465µs ago: executing program 6 (id=4637): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 0s ago: executing program 6 (id=4638): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) kernel console output (not intermixed with test programs): tr(low-speed) [ 248.391676][T15249] vhci_hcd vhci_hcd.0: Device attached [ 248.403436][T15249] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 248.406233][T15249] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.410845][T15249] vhci_hcd vhci_hcd.0: Device attached [ 248.417921][T15249] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 248.420598][T15249] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 248.423259][T15249] vhci_hcd vhci_hcd.0: Device attached [ 248.428645][T15249] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 248.431398][T15249] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.435034][T15249] vhci_hcd vhci_hcd.0: Device attached [ 248.441214][T15249] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 248.448159][T15249] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 248.451001][T15249] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.455114][T15249] vhci_hcd vhci_hcd.0: Device attached [ 248.460547][T15254] vhci_hcd: connection closed [ 248.460628][T15256] vhci_hcd: connection closed [ 248.463377][T15252] vhci_hcd: connection closed [ 248.463972][T15260] vhci_hcd: connection closed [ 248.465902][T15250] vhci_hcd: connection closed [ 248.469388][ T60] vhci_hcd vhci_hcd.0: stop threads [ 248.473202][ T60] vhci_hcd vhci_hcd.0: release socket [ 248.475383][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 248.479562][ T60] vhci_hcd vhci_hcd.0: stop threads [ 248.481548][ T60] vhci_hcd vhci_hcd.0: release socket [ 248.483617][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 248.486037][ T60] vhci_hcd vhci_hcd.0: stop threads [ 248.487696][ T60] vhci_hcd vhci_hcd.0: release socket [ 248.489451][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 248.491387][ T60] vhci_hcd vhci_hcd.0: stop threads [ 248.493052][ T60] vhci_hcd vhci_hcd.0: release socket [ 248.494763][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 248.497562][ T60] vhci_hcd vhci_hcd.0: stop threads [ 248.499254][ T60] vhci_hcd vhci_hcd.0: release socket [ 248.500974][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 248.755243][T15283] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 248.768334][T15283] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 248.785126][T15283] bridge_slave_0: left allmulticast mode [ 248.787524][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.791660][T15283] bridge_slave_0: left promiscuous mode [ 248.793524][T15283] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.800691][T15283] bridge_slave_1: left allmulticast mode [ 248.802998][T15283] bridge_slave_1: left promiscuous mode [ 248.805429][T15283] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.811479][T15283] bond0: (slave bond_slave_0): Releasing backup interface [ 248.816425][T15283] bond0: (slave bond_slave_1): Releasing backup interface [ 248.824237][T15283] team0: Port device team_slave_0 removed [ 248.826956][T15286] netlink: 'syz.5.3197': attribute type 10 has an invalid length. [ 248.831430][T15283] team0: Port device team_slave_1 removed [ 248.834022][T15283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.837088][T15283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.842055][T15283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.845423][T15283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.849607][T15283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.856779][ T5952] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.856820][ T5288] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.857440][T15286] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 248.860372][T15286] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 249.101598][T15300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3203'. [ 249.482914][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 249.482932][ T40] audit: type=1400 audit(2000000039.800:2887): avc: denied { ioctl } for pid=15313 comm="syz.0.3207" path="socket:[141510]" dev="sockfs" ino=141510 ioctlcmd=0x5600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.542081][T15319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.545541][T15321] bridge0: port 1(syz_tun) entered blocking state [ 249.551265][T15321] bridge0: port 1(syz_tun) entered disabled state [ 249.553575][T15321] syz_tun: entered allmulticast mode [ 249.558447][T15321] syz_tun: entered promiscuous mode [ 249.599382][T15319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.603606][T15319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.652735][ T40] audit: type=1400 audit(2000000039.970:2888): avc: denied { create } for pid=15327 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.660682][ T40] audit: type=1400 audit(2000000039.980:2889): avc: denied { write } for pid=15327 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.667991][ T40] audit: type=1400 audit(2000000039.980:2890): avc: denied { create } for pid=15327 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.674018][ T40] audit: type=1400 audit(2000000039.980:2891): avc: denied { write } for pid=15327 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.701743][ T40] audit: type=1400 audit(2000000040.020:2892): avc: denied { name_bind } for pid=15329 comm="syz.4.3214" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 249.710392][ T40] audit: type=1400 audit(2000000040.020:2893): avc: denied { node_bind } for pid=15329 comm="syz.4.3214" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 249.747792][T15334] fuse: Bad value for 'fd' [ 249.775121][T15337] netlink: 'syz.5.3216': attribute type 10 has an invalid length. [ 249.782001][T15337] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 249.882634][ T40] audit: type=1400 audit(2000000040.200:2894): avc: denied { create } for pid=15344 comm="syz.2.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.891536][ T40] audit: type=1400 audit(2000000040.200:2895): avc: denied { setopt } for pid=15344 comm="syz.2.3220" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.898879][ T40] audit: type=1400 audit(2000000040.200:2896): avc: denied { connect } for pid=15344 comm="syz.2.3220" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.054479][T15357] netlink: 'syz.2.3226': attribute type 10 has an invalid length. [ 250.093721][T15361] netlink: 'syz.2.3228': attribute type 10 has an invalid length. [ 250.308611][T15374] 9pnet_fd: p9_fd_create_unix (15374): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 250.651469][T15387] 9p: Bad value for 'wfdno' [ 251.007528][T15401] netlink: 'syz.5.3246': attribute type 10 has an invalid length. [ 251.031757][T15403] fuse: Bad value for 'group_id' [ 251.033534][T15403] fuse: Bad value for 'group_id' [ 251.272386][T15417] bond0: (slave bridge0): Releasing backup interface [ 251.283121][T15417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.293596][T15417] netlink: 'syz.5.3254': attribute type 10 has an invalid length. [ 251.304482][T15419] syzkaller0: entered promiscuous mode [ 251.308005][T15419] syzkaller0: entered allmulticast mode [ 251.364470][T15422] syzkaller0: entered promiscuous mode [ 251.367005][T15422] syzkaller0: entered allmulticast mode [ 251.450568][T15424] netlink: 'syz.0.3256': attribute type 10 has an invalid length. [ 251.510135][T15426] binder: BINDER_SET_CONTEXT_MGR already set [ 251.513620][T15426] binder: 15425:15426 ioctl 4018620d 200000004a80 returned -16 [ 251.610418][T15426] syz.0.3257 (15426): drop_caches: 2 [ 251.614812][T15426] syz.0.3257 (15426): drop_caches: 2 [ 251.655176][T15434] fuse: Bad value for 'group_id' [ 251.657398][T15434] fuse: Bad value for 'group_id' [ 252.070914][T15453] syz_tun: left allmulticast mode [ 252.073693][T15453] syz_tun: left promiscuous mode [ 252.080950][T15453] bridge0: port 1(syz_tun) entered disabled state [ 252.095441][T15453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.106591][T15453] netlink: 'syz.2.3267': attribute type 10 has an invalid length. [ 252.110758][T15455] syzkaller1: entered promiscuous mode [ 252.113130][T15455] syzkaller1: entered allmulticast mode [ 252.190244][T15457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.203669][T15457] netlink: 'syz.2.3269': attribute type 10 has an invalid length. [ 252.280082][T15461] syzkaller0: entered promiscuous mode [ 252.282262][T15461] syzkaller0: entered allmulticast mode [ 252.532091][T15475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.540667][T15475] netlink: 'syz.4.3278': attribute type 10 has an invalid length. [ 252.565566][T15477] syzkaller1: entered promiscuous mode [ 252.567935][T15477] syzkaller1: entered allmulticast mode [ 252.651399][T15483] netlink: 'syz.4.3283': attribute type 10 has an invalid length. [ 252.749384][T15496] syzkaller0: entered promiscuous mode [ 252.751300][T15496] syzkaller0: entered allmulticast mode [ 252.874992][T15510] syzkaller1: entered promiscuous mode [ 252.877051][T15510] syzkaller1: entered allmulticast mode [ 252.910284][T15512] Bluetooth: hci0: invalid length 4, exp 2 for type 0 [ 253.096972][T15518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.153166][T15518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.250529][T15520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.263299][T15520] netlink: 'syz.2.3298': attribute type 10 has an invalid length. [ 253.319296][T15522] netlink: 'syz.2.3299': attribute type 10 has an invalid length. [ 253.809995][T15541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3308'. [ 253.876584][T15547] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 254.048989][T15562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.104381][T15562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.141714][T15568] syzkaller1: entered promiscuous mode [ 254.143936][T15568] syzkaller1: entered allmulticast mode [ 254.487241][T15578] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 254.500800][T15578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.511660][T15578] netlink: 'syz.2.3320': attribute type 10 has an invalid length. [ 254.514458][T15578] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 254.679973][T15587] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 254.681689][ T40] kauditd_printk_skb: 134 callbacks suppressed [ 254.681700][ T40] audit: type=1400 audit(2000000045.000:3031): avc: denied { read } for pid=15588 comm="syz.2.3325" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.682076][T15587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.684289][ T40] audit: type=1400 audit(2000000045.000:3032): avc: denied { open } for pid=15588 comm="syz.2.3325" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.691132][T15587] vhci_hcd vhci_hcd.0: Device attached [ 254.697770][T15590] binder: BINDER_SET_CONTEXT_MGR already set [ 254.709193][T15590] binder: 15588:15590 ioctl 4018620d 200000004a80 returned -16 [ 254.710465][T15587] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 254.712707][ T40] audit: type=1400 audit(2000000045.010:3033): avc: denied { ioctl } for pid=15588 comm="syz.2.3325" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.715422][T15587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.729517][T15587] vhci_hcd vhci_hcd.0: Device attached [ 254.734176][T15592] vhci_hcd: connection closed [ 254.734360][T12624] vhci_hcd vhci_hcd.4: stop threads [ 254.739073][T15590] syz.2.3325 (15590): drop_caches: 2 [ 254.739940][T12624] vhci_hcd vhci_hcd.4: release socket [ 254.742096][T15590] syz.2.3325 (15590): drop_caches: 2 [ 254.743188][T12624] vhci_hcd vhci_hcd.4: disconnect device [ 254.746545][T15589] vhci_hcd: connection closed [ 254.748816][T12624] vhci_hcd vhci_hcd.4: stop threads [ 254.752872][T12624] vhci_hcd vhci_hcd.4: release socket [ 254.754950][T12624] vhci_hcd vhci_hcd.4: disconnect device [ 254.755963][ T40] audit: type=1400 audit(2000000045.020:3034): avc: denied { set_context_mgr } for pid=15588 comm="syz.2.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 254.770578][ T40] audit: type=1400 audit(2000000045.020:3035): avc: denied { map } for pid=15588 comm="syz.2.3325" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.783623][ T40] audit: type=1400 audit(2000000045.080:3036): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=33056 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 254.838658][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3326'. [ 254.952949][T15604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.963049][T15604] netlink: 'syz.2.3329': attribute type 10 has an invalid length. [ 254.998538][ T40] audit: type=1400 audit(2000000045.210:3037): avc: denied { execmem } for pid=15600 comm="syz.0.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 255.072430][ T40] audit: type=1400 audit(2000000045.390:3038): avc: denied { write } for pid=15606 comm="syz.2.3330" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.102101][ T40] audit: type=1400 audit(2000000045.420:3039): avc: denied { read } for pid=15606 comm="syz.2.3330" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.337175][ T40] audit: type=1400 audit(2000000045.660:3040): avc: denied { read write } for pid=15611 comm="syz.4.3333" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.545460][T15624] fuse: Bad value for 'group_id' [ 255.548387][T15624] fuse: Bad value for 'group_id' [ 255.624886][T15630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.680879][T15630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.786684][T15637] fuse: Unknown parameter 'group_i00000000000000000000' [ 255.859761][T15643] bridge0: port 1(syz_tun) entered blocking state [ 255.862007][T15643] bridge0: port 1(syz_tun) entered disabled state [ 255.864282][T15643] syz_tun: entered allmulticast mode [ 255.867074][T15643] syz_tun: entered promiscuous mode [ 255.899371][T15645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3346'. [ 256.080278][T15660] fuse: Unknown parameter 'group_i00000000000000000000' [ 256.136612][T15662] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.185709][T15664] syz.5.3354 (15664): drop_caches: 2 [ 256.188925][T15664] syz.5.3354 (15664): drop_caches: 2 [ 256.302716][T15679] fuse: Unknown parameter 'group_i00000000000000000000' [ 256.317939][T15681] syzkaller0: entered promiscuous mode [ 256.320345][T15681] syzkaller0: entered allmulticast mode [ 256.333415][T15683] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 256.336055][T15683] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.339192][T15683] vhci_hcd vhci_hcd.0: Device attached [ 256.345011][T15683] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 256.347494][T15683] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 256.350463][T15683] vhci_hcd vhci_hcd.0: Device attached [ 256.352963][T15686] vhci_hcd: connection closed [ 256.352975][T15684] vhci_hcd: connection closed [ 256.353315][ T1145] vhci_hcd vhci_hcd.5: stop threads [ 256.360925][ T1145] vhci_hcd vhci_hcd.5: release socket [ 256.362860][ T1145] vhci_hcd vhci_hcd.5: disconnect device [ 256.365240][ T1145] vhci_hcd vhci_hcd.5: stop threads [ 256.367386][ T1145] vhci_hcd vhci_hcd.5: release socket [ 256.369472][ T1145] vhci_hcd vhci_hcd.5: disconnect device [ 256.477443][T15689] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.487380][T15689] validate_nla: 2 callbacks suppressed [ 256.487393][T15689] netlink: 'syz.2.3364': attribute type 10 has an invalid length. [ 256.524130][T15693] syz.4.3366 (15693): drop_caches: 2 [ 256.527513][T15693] syz.4.3366 (15693): drop_caches: 2 [ 256.536483][T15695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.541502][T15695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.545491][T15695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.975117][T15719] syz_tun: left allmulticast mode [ 256.977968][T15719] syz_tun: left promiscuous mode [ 256.980023][T15719] bridge0: port 1(syz_tun) entered disabled state [ 256.992748][T15719] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.001981][T15719] netlink: 'syz.4.3376': attribute type 10 has an invalid length. [ 257.085790][T15731] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 257.087745][T15731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.096292][T15731] vhci_hcd vhci_hcd.0: Device attached [ 257.107902][T15731] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 257.109976][T15731] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 257.124938][T15731] vhci_hcd vhci_hcd.0: Device attached [ 257.127222][T15737] vhci_hcd: connection closed [ 257.127332][T15733] vhci_hcd: connection closed [ 257.127507][T12624] vhci_hcd vhci_hcd.2: stop threads [ 257.128345][T15735] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 257.135870][T12624] vhci_hcd vhci_hcd.2: release socket [ 257.138185][T12624] vhci_hcd vhci_hcd.2: disconnect device [ 257.140224][T12624] vhci_hcd vhci_hcd.2: stop threads [ 257.142379][T12624] vhci_hcd vhci_hcd.2: release socket [ 257.144693][T12624] vhci_hcd vhci_hcd.2: disconnect device [ 257.311271][T15752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.321232][T15752] netlink: 'syz.0.3388': attribute type 10 has an invalid length. [ 257.367344][T15754] syzkaller0: entered promiscuous mode [ 257.369676][T15754] syzkaller0: entered allmulticast mode [ 257.434742][T15756] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3390'. [ 257.636949][T15773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.650079][T15773] netlink: 'syz.5.3397': attribute type 10 has an invalid length. [ 257.686321][T15777] bridge0: port 1(syz_tun) entered blocking state [ 257.688605][T15777] bridge0: port 1(syz_tun) entered disabled state [ 257.692000][T15777] syz_tun: entered allmulticast mode [ 257.696037][T15777] syz_tun: entered promiscuous mode [ 257.744299][T15782] syzkaller0: entered promiscuous mode [ 257.747358][T15782] syzkaller0: entered allmulticast mode [ 257.997644][T15799] syzkaller0: entered promiscuous mode [ 257.999991][T15799] syzkaller0: entered allmulticast mode [ 259.291056][T15819] netlink: 'syz.4.3413': attribute type 10 has an invalid length. [ 259.330734][T15823] syzkaller0: entered promiscuous mode [ 259.333049][T15823] syzkaller0: entered allmulticast mode [ 259.445103][T15834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.454952][T15834] netlink: 'syz.5.3421': attribute type 10 has an invalid length. [ 259.513018][T15839] syzkaller0: entered promiscuous mode [ 259.517964][T15839] syzkaller0: entered allmulticast mode [ 259.574559][T15848] syzkaller1: entered promiscuous mode [ 259.576535][T15848] syzkaller1: entered allmulticast mode [ 259.676869][T15862] syzkaller0: entered promiscuous mode [ 259.679266][T15862] syzkaller0: entered allmulticast mode [ 259.719011][T15867] syz_tun: left allmulticast mode [ 259.720962][T15867] syz_tun: left promiscuous mode [ 259.722989][T15867] bridge0: port 1(syz_tun) entered disabled state [ 259.732951][T15867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.758052][T15867] netlink: 'syz.2.3434': attribute type 10 has an invalid length. [ 259.771328][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 259.771342][ T40] audit: type=1400 audit(2000000050.090:3143): avc: denied { module_request } for pid=15869 comm="syz.0.3435" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 259.818066][ T40] audit: type=1400 audit(2000000050.140:3144): avc: denied { mounton } for pid=15873 comm="syz.2.3437" path="/232/file0" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 259.832637][ T40] audit: type=1400 audit(2000000050.140:3145): avc: denied { mount } for pid=15873 comm="syz.2.3437" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 259.856987][ T40] audit: type=1400 audit(2000000050.180:3146): avc: denied { create } for pid=15885 comm="syz.4.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.863433][ T40] audit: type=1400 audit(2000000050.180:3147): avc: denied { read } for pid=15885 comm="syz.4.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.863966][T15884] syzkaller0: entered promiscuous mode [ 259.874256][T15884] syzkaller0: entered allmulticast mode [ 259.909696][ T40] audit: type=1400 audit(2000000050.230:3148): avc: denied { bind } for pid=15885 comm="syz.4.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.916601][ T40] audit: type=1400 audit(2000000050.230:3149): avc: denied { write } for pid=15889 comm="syz.0.3442" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 259.924224][ T40] audit: type=1400 audit(2000000050.230:3150): avc: denied { open } for pid=15889 comm="syz.0.3442" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 259.933720][ T40] audit: type=1400 audit(2000000050.240:3151): avc: denied { mounton } for pid=15873 comm="syz.2.3437" path="/232/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 259.954803][ T40] audit: type=1400 audit(2000000050.270:3152): avc: denied { create } for pid=15892 comm="syz.0.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.957576][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 259.967104][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 260.030693][T15901] syzkaller1: entered promiscuous mode [ 260.033756][T15901] syzkaller1: entered allmulticast mode [ 260.079214][T15904] syzkaller0: entered promiscuous mode [ 260.081157][T15904] syzkaller0: entered allmulticast mode [ 260.332156][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3452'. [ 260.335349][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3452'. [ 260.508458][T15935] syzkaller0: entered promiscuous mode [ 260.510037][T15935] syzkaller0: entered allmulticast mode [ 260.623000][T15937] fuse: Bad value for 'fd' [ 260.657612][T15939] syzkaller0: entered promiscuous mode [ 260.659543][T15939] syzkaller0: entered allmulticast mode [ 260.699814][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.702535][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.777412][T15943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.783411][T15943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.796584][T15948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.805862][T15948] netlink: 'syz.0.3463': attribute type 10 has an invalid length. [ 260.989348][T15961] fuse: Bad value for 'fd' [ 261.373492][T15977] netlink: 'syz.5.3474': attribute type 10 has an invalid length. [ 261.383343][ T5952] Bluetooth: hci5: sending frame failed (-49) [ 261.387291][ T5288] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 261.429251][T15980] bridge0: port 1(syz_tun) entered blocking state [ 261.432396][T15980] bridge0: port 1(syz_tun) entered disabled state [ 261.435450][T15980] syz_tun: entered allmulticast mode [ 261.443005][T15980] syz_tun: entered promiscuous mode [ 261.608382][T15988] syz.5.3480 (15988): drop_caches: 2 [ 261.613343][T15988] syz.5.3480 (15988): drop_caches: 2 [ 261.731567][T15996] netlink: 'syz.0.3484': attribute type 10 has an invalid length. [ 261.751805][T15999] fuse: Bad value for 'fd' [ 261.770271][T16002] bridge0: port 1(syz_tun) entered blocking state [ 261.773027][T16002] bridge0: port 1(syz_tun) entered disabled state [ 261.775833][T16002] syz_tun: entered allmulticast mode [ 261.779151][T16002] syz_tun: entered promiscuous mode [ 261.819357][T16009] syz.4.3490 (16009): drop_caches: 2 [ 261.821594][T16009] syz.4.3490 (16009): drop_caches: 2 [ 261.835145][T16011] syz_tun: left allmulticast mode [ 261.838877][T16011] syz_tun: left promiscuous mode [ 261.840681][T16011] bridge0: port 1(syz_tun) entered disabled state [ 261.849914][T16011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 261.858698][T16011] netlink: 'syz.5.3491': attribute type 10 has an invalid length. [ 262.124596][T16029] bridge0: port 1(syz_tun) entered blocking state [ 262.126929][T16029] bridge0: port 1(syz_tun) entered disabled state [ 262.129196][T16029] syz_tun: entered allmulticast mode [ 262.132186][T16029] syz_tun: entered promiscuous mode [ 262.210509][T16035] syz.2.3501 (16035): drop_caches: 2 [ 262.213421][T16035] syz.2.3501 (16035): drop_caches: 2 [ 262.954366][T16081] fuse: Unknown parameter 'group_id00000000000000000000' [ 262.981353][T16083] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 262.985154][T16083] syz_tun: left allmulticast mode [ 262.987051][T16083] syz_tun: left promiscuous mode [ 262.988746][T16083] bridge0: port 1(syz_tun) entered disabled state [ 262.992857][T16083] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 262.999730][T16083] netlink: 'syz.4.3524': attribute type 10 has an invalid length. [ 263.002201][T16083] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 263.076170][ T5996] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 263.135372][T16087] bridge0: port 1(syz_tun) entered blocking state [ 263.138087][T16087] bridge0: port 1(syz_tun) entered disabled state [ 263.140196][T16087] syz_tun: entered allmulticast mode [ 263.142737][T16087] syz_tun: entered promiscuous mode [ 263.209824][ T5996] usb 5-1: device descriptor read/64, error -71 [ 263.225053][T16093] fuse: Invalid rootmode [ 263.266145][T16095] netlink: 'syz.5.3530': attribute type 10 has an invalid length. [ 263.324528][T16099] fuse: Unknown parameter 'group_id00000000000000000000' [ 263.353783][T16101] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 263.363363][T16101] syz_tun: left allmulticast mode [ 263.365846][T16101] syz_tun: left promiscuous mode [ 263.368461][T16101] bridge0: port 1(syz_tun) entered disabled state [ 263.382975][T16101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.398150][T16101] netlink: 'syz.5.3533': attribute type 10 has an invalid length. [ 263.401548][T16101] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 263.445872][ T5996] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 263.670421][ T5996] usb 5-1: device descriptor read/64, error -71 [ 263.788639][ T5996] usb usb5-port1: attempt power cycle [ 263.914616][T16116] syzkaller0: entered promiscuous mode [ 263.921958][T16116] syzkaller0: entered allmulticast mode [ 264.000207][T16120] fuse: Unknown parameter 'group_id00000000000000000000' [ 264.116308][T16128] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 264.121375][T16128] syz_tun: left allmulticast mode [ 264.123449][T16128] syz_tun: left promiscuous mode [ 264.125183][T16128] bridge0: port 1(syz_tun) entered disabled state [ 264.131581][T16130] SET target dimension over the limit! [ 264.141931][T16128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 264.163875][T16128] netlink: 'syz.2.3545': attribute type 10 has an invalid length. [ 264.168573][T16128] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 264.225859][ T5996] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 264.238525][T16136] fuse: Bad value for 'rootmode' [ 264.247395][ T5996] usb 5-1: device descriptor read/8, error -71 [ 264.380380][T16142] syzkaller0: entered promiscuous mode [ 264.382159][T16142] syzkaller0: entered allmulticast mode [ 264.495824][ T5996] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 264.516190][ T5996] usb 5-1: device descriptor read/8, error -71 [ 264.628483][ T5996] usb usb5-port1: unable to enumerate USB device [ 264.763985][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.784152][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 264.784164][ T40] audit: type=1400 audit(2000000055.100:3253): avc: denied { read write } for pid=16154 comm="syz.5.3558" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 264.784931][T16155] fuse: Bad value for 'user_id' [ 264.786723][ T40] audit: type=1400 audit(2000000055.100:3254): avc: denied { open } for pid=16154 comm="syz.5.3558" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 264.795747][T16155] fuse: Bad value for 'user_id' [ 264.820254][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.823267][ T40] audit: type=1400 audit(2000000055.140:3255): avc: denied { read write } for pid=16156 comm="syz.5.3559" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.824249][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.845477][ T40] audit: type=1400 audit(2000000055.140:3256): avc: denied { open } for pid=16156 comm="syz.5.3559" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.887551][ T40] audit: type=1400 audit(2000000055.210:3257): avc: denied { set_context_mgr } for pid=16161 comm="syz.5.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 264.888246][T16162] binder: 16161:16162 ioctl c0306201 0 returned -14 [ 264.904751][T16162] syz.5.3560 (16162): drop_caches: 2 [ 264.908480][T16162] syz.5.3560 (16162): drop_caches: 2 [ 264.939436][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3561'. [ 264.984178][ T40] audit: type=1400 audit(2000000055.300:3258): avc: denied { connect } for pid=16165 comm="syz.5.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.990588][ T40] audit: type=1400 audit(2000000055.300:3259): avc: denied { getopt } for pid=16165 comm="syz.5.3562" lport=40962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.020321][T16168] fuse: Bad value for 'fd' [ 265.056711][ T40] audit: type=1400 audit(2000000055.380:3260): avc: denied { create } for pid=16169 comm="syz.5.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.063442][ T40] audit: type=1400 audit(2000000055.380:3261): avc: denied { write } for pid=16169 comm="syz.5.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.069983][ T40] audit: type=1400 audit(2000000055.380:3262): avc: denied { nlmsg_write } for pid=16169 comm="syz.5.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.977906][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.002789][T16209] fuse: Bad value for 'fd' [ 266.042471][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.048159][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.101142][T16215] netlink: 'syz.2.3582': attribute type 10 has an invalid length. [ 266.246869][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3586'. [ 266.292394][T16231] fuse: Bad value for 'fd' [ 266.482367][T16242] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 266.488669][T16242] netlink: 'syz.4.3590': attribute type 10 has an invalid length. [ 266.491192][T16242] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 266.596046][ T5952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.596810][T16246] fuse: Unknown parameter 'user_i00000000000000000000' [ 266.601924][ T5952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.606670][ T5952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.612775][ T5952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.616329][ T5952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.640769][T16249] ptrace attach of "/syz-executor exec"[16250] was attempted by "/syz-executor exec"[16249] [ 266.794169][T16245] chnl_net:caif_netlink_parms(): no params data found [ 266.875145][ T60] smc: removing ib device syz1 [ 266.881827][T16245] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.884147][T16245] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.887404][T16245] bridge_slave_0: entered allmulticast mode [ 266.890118][T16245] bridge_slave_0: entered promiscuous mode [ 266.897125][T16245] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.899675][T16245] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.902115][T16245] bridge_slave_1: entered allmulticast mode [ 266.905957][T16245] bridge_slave_1: entered promiscuous mode [ 266.932309][T16261] syzkaller0: entered promiscuous mode [ 266.934680][T16261] syzkaller0: entered allmulticast mode [ 266.969026][T16245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.983768][T16245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.029675][T16245] team0: Port device team_slave_0 added [ 267.039005][T16245] team0: Port device team_slave_1 added [ 267.080353][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 267.100173][T16245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.102398][T16245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.127462][T16245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.142753][T16245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.145242][T16245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.154451][T16245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.181521][T16270] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 267.190837][T16270] netlink: 'syz.5.3598': attribute type 10 has an invalid length. [ 267.199790][T16270] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 267.204620][T16272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.225515][T16274] fuse: Unknown parameter 'user_id00000000000000000000' [ 267.237507][T16245] hsr_slave_0: entered promiscuous mode [ 267.241337][T16245] hsr_slave_1: entered promiscuous mode [ 267.261073][T16272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.269750][T16272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.364501][T16280] syz.5.3603 (16280): drop_caches: 2 [ 267.373205][T16280] syz.5.3603 (16280): drop_caches: 2 [ 267.392764][T16282] fuse: Bad value for 'fd' [ 267.537333][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3609'. [ 267.874763][T16308] fuse: Bad value for 'fd' [ 267.993250][ T70] dvmrp6 (unregistering): left allmulticast mode [ 268.072395][ T70] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 268.075400][ T70] bond0 (unregistering): Released all slaves [ 268.082805][ T70] bond1 (unregistering): Released all slaves [ 268.106461][T16245] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.110879][T16245] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.115350][T16245] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.122351][T16245] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.133123][T16319] syzkaller0: entered promiscuous mode [ 268.135007][T16319] syzkaller0: entered allmulticast mode [ 268.189019][ T70] : left promiscuous mode [ 268.204777][T16245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.218709][T16245] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.223727][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.226678][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.235064][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.238150][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.434412][T16352] syzkaller0: entered promiscuous mode [ 268.436603][T16352] syzkaller0: entered allmulticast mode [ 268.469563][T16245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.532458][T16363] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 268.551416][ T70] hsr_slave_0: left promiscuous mode [ 268.554778][ T70] hsr_slave_1: left promiscuous mode [ 268.606726][T16369] netlink: 'syz.5.3628': attribute type 10 has an invalid length. [ 268.649704][T16371] fuse: Invalid rootmode [ 268.705776][ T5952] Bluetooth: hci5: command tx timeout [ 268.769996][T16369] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 268.833334][T16245] veth0_vlan: entered promiscuous mode [ 268.842649][T16245] veth1_vlan: entered promiscuous mode [ 268.873597][T16245] veth0_macvtap: entered promiscuous mode [ 268.878372][T16386] bridge0: port 1(syz_tun) entered blocking state [ 268.881178][T16386] bridge0: port 1(syz_tun) entered disabled state [ 268.882574][T16385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3635'. [ 268.887121][T16386] syz_tun: entered allmulticast mode [ 268.890062][T16386] syz_tun: entered promiscuous mode [ 268.896893][T16245] veth1_macvtap: entered promiscuous mode [ 268.914625][T16245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.925898][T16245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.937887][ T1145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.943223][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.983211][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.992922][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.998456][T16388] syzkaller0: entered promiscuous mode [ 269.001603][T16388] syzkaller0: entered allmulticast mode [ 269.091834][T12623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.094426][T12623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.124241][T12625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.129206][T12625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.202718][T16403] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 269.207561][T16403] netlink: 'syz.2.3641': attribute type 10 has an invalid length. [ 269.210152][T16403] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 269.267673][ T70] IPVS: stop unused estimator thread 0... [ 269.461739][T16419] fuse: Unknown parameter '0x0000000000000003' [ 269.466195][T16421] binder: 16420:16421 ioctl c0306201 0 returned -14 [ 269.527796][T16421] syz.2.3647 (16421): drop_caches: 2 [ 269.534902][T16421] syz.2.3647 (16421): drop_caches: 2 [ 269.551583][T16427] syzkaller0: entered promiscuous mode [ 269.555084][T16427] syzkaller0: entered allmulticast mode [ 269.610772][T16431] syzkaller0: entered promiscuous mode [ 269.612591][T16431] syzkaller0: entered allmulticast mode [ 269.700986][T16439] syzkaller0: entered promiscuous mode [ 269.702836][T16439] syzkaller0: entered allmulticast mode [ 269.957911][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 269.957922][ T40] audit: type=1400 audit(2000000060.280:3434): avc: denied { ioctl } for pid=16452 comm="syz.0.3658" path="socket:[144951]" dev="sockfs" ino=144951 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 270.173732][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3660'. [ 270.227118][T16484] netlink: 'syz.4.3660': attribute type 10 has an invalid length. [ 270.775830][ T5952] Bluetooth: hci5: command tx timeout [ 271.029903][T16458] tipc: Enabling of bearer rejected, failed to enable media [ 271.040916][T16470] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 271.048198][T16484] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 271.094125][ T40] audit: type=1400 audit(2000000061.410:3435): avc: denied { create } for pid=16489 comm="syz.4.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 271.106233][ T40] audit: type=1400 audit(2000000061.420:3436): avc: denied { bind } for pid=16489 comm="syz.4.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 271.134281][ T40] audit: type=1400 audit(2000000061.440:3437): avc: denied { execmem } for pid=16491 comm="syz.5.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 271.145714][ T40] audit: type=1400 audit(2000000061.460:3438): avc: denied { append } for pid=16491 comm="syz.5.3663" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 271.153454][ T40] audit: type=1400 audit(2000000061.460:3439): avc: denied { read } for pid=16491 comm="syz.5.3663" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 271.163272][ T40] audit: type=1400 audit(2000000061.460:3440): avc: denied { open } for pid=16491 comm="syz.5.3663" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 271.173681][ T40] audit: type=1400 audit(2000000061.470:3441): avc: denied { ioctl } for pid=16491 comm="syz.5.3663" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 271.191562][ T40] audit: type=1400 audit(2000000061.480:3442): avc: denied { write } for pid=16489 comm="syz.4.3662" path="socket:[145952]" dev="sockfs" ino=145952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 271.200075][ T40] audit: type=1400 audit(2000000061.510:3443): avc: denied { write } for pid=16495 comm="syz.2.3665" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 271.212146][T16500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.267801][T16500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.273221][T16500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.810147][T16504] blktrace: Concurrent blktraces are not allowed on sg0 [ 271.840432][T16506] syzkaller0: entered promiscuous mode [ 271.842878][T16506] syzkaller0: entered allmulticast mode [ 272.152396][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3675'. [ 272.215911][T16527] netlink: 'syz.5.3675': attribute type 10 has an invalid length. [ 272.301387][T16534] netlink: 'syz.2.3676': attribute type 10 has an invalid length. [ 272.865767][ T5952] Bluetooth: hci5: command tx timeout [ 272.976400][T16518] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 272.980041][T16521] tipc: Enabling of bearer rejected, failed to enable media [ 272.983059][T16527] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 273.029194][T16543] sit1: entered allmulticast mode [ 273.076155][T16545] syz.0.3679 (16545): drop_caches: 2 [ 273.078939][T16545] syz.0.3679 (16545): drop_caches: 2 [ 273.120463][T16551] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3681'. [ 273.250712][T16568] netlink: 'syz.2.3688': attribute type 10 has an invalid length. [ 273.283685][T16570] binder: 16569:16570 ioctl c0306201 0 returned -14 [ 273.289604][T16570] syz.0.3689 (16570): drop_caches: 2 [ 273.293748][T16570] syz.0.3689 (16570): drop_caches: 2 [ 273.429472][T16580] syzkaller0: entered promiscuous mode [ 273.431737][T16580] syzkaller0: entered allmulticast mode [ 274.664572][T16611] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 274.670339][T16611] netlink: 'syz.2.3701': attribute type 10 has an invalid length. [ 274.673020][T16611] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 274.936120][ T5952] Bluetooth: hci5: command tx timeout [ 274.978970][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 274.978988][ T40] audit: type=1400 audit(2000000065.300:3509): avc: denied { recv } for pid=16245 comm="syz-executor" saddr=127.0.0.1 src=33056 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 274.991159][ T40] audit: type=1400 audit(2000000065.300:3510): avc: denied { bpf } for pid=16623 comm="syz.0.3707" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.998218][ T40] audit: type=1400 audit(2000000065.300:3511): avc: denied { write } for pid=16623 comm="syz.0.3707" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 275.006204][ T40] audit: type=1400 audit(2000000065.300:3512): avc: denied { open } for pid=16623 comm="syz.0.3707" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 275.014231][ T40] audit: type=1400 audit(2000000065.310:3513): avc: denied { ioctl } for pid=16623 comm="syz.0.3707" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 275.035434][ T40] audit: type=1400 audit(2000000065.320:3514): avc: denied { read } for pid=16638 comm="syz.4.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 275.043211][ T40] audit: type=1400 audit(2000000065.340:3515): avc: denied { name_bind } for pid=16640 comm="syz.2.3712" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 275.048228][T16643] netlink: 'syz.4.3713': attribute type 10 has an invalid length. [ 275.094193][T16645] syzkaller0: entered promiscuous mode [ 275.097840][T16645] syzkaller0: entered allmulticast mode [ 275.189524][ T40] audit: type=1400 audit(2000000065.510:3516): avc: denied { perfmon } for pid=16646 comm="syz.4.3715" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 275.281949][ T40] audit: type=1400 audit(2000000065.600:3517): avc: denied { read write } for pid=16652 comm="syz.4.3718" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 275.289406][ T40] audit: type=1400 audit(2000000065.600:3518): avc: denied { open } for pid=16652 comm="syz.4.3718" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 275.383682][T16657] syz.4.3720 (16657): drop_caches: 2 [ 275.386169][T16657] syz.4.3720 (16657): drop_caches: 2 [ 275.655409][T16661] netlink: 'syz.5.3722': attribute type 10 has an invalid length. [ 275.720022][T16665] syzkaller0: entered promiscuous mode [ 275.722372][T16665] syzkaller0: entered allmulticast mode [ 275.878917][T16675] syz.0.3729 (16675): drop_caches: 2 [ 275.882678][T16675] syz.0.3729 (16675): drop_caches: 2 [ 275.959841][T16683] syzkaller0: entered promiscuous mode [ 275.961603][T16683] syzkaller0: entered allmulticast mode [ 276.168949][T16698] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 276.285715][ T3244] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 276.415744][ T3244] usb 10-1: device descriptor read/64, error -71 [ 276.666159][ T3244] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 276.795849][ T3244] usb 10-1: device descriptor read/64, error -71 [ 276.906209][ T3244] usb usb10-port1: attempt power cycle [ 277.100892][T16708] syzkaller0: entered promiscuous mode [ 277.102725][T16708] syzkaller0: entered allmulticast mode [ 277.139359][T16710] fuse: Unknown parameter '0x0000000000000003' [ 277.245833][ T3244] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 277.264209][T16724] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 277.267868][ T3244] usb 10-1: device descriptor read/8, error -71 [ 277.272001][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 277.275246][T16724] netlink: 'syz.2.3750': attribute type 10 has an invalid length. [ 277.278406][T16723] syz.4.3749 (16723): drop_caches: 2 [ 277.278840][T16723] syz.4.3749 (16723): drop_caches: 2 [ 277.285989][T16724] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 277.358718][T16732] fuse: Unknown parameter '0x0000000000000003' [ 277.453483][T16739] syzkaller0: entered promiscuous mode [ 277.455252][T16739] syzkaller0: entered allmulticast mode [ 277.505076][T16741] syzkaller0: entered promiscuous mode [ 277.505739][ T3244] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 277.506986][T16741] syzkaller0: entered allmulticast mode [ 277.536903][ T3244] usb 10-1: device descriptor read/8, error -71 [ 277.611876][T16747] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 277.618232][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3761'. [ 277.621948][T16747] netlink: 'syz.0.3761': attribute type 10 has an invalid length. [ 277.624800][T16747] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 277.645989][ T3244] usb usb10-port1: unable to enumerate USB device [ 277.675408][T16753] tipc: Started in network mode [ 277.679177][T16753] tipc: Node identity 86fe267e0ea1, cluster identity 4711 [ 277.681547][T16753] tipc: Enabled bearer , priority 0 [ 277.686683][T16753] syzkaller0: entered promiscuous mode [ 277.688501][T16753] syzkaller0: entered allmulticast mode [ 277.694287][T16753] tipc: Resetting bearer [ 277.697168][T16752] tipc: Resetting bearer [ 277.707472][T16752] tipc: Disabling bearer [ 277.988881][T16767] netlink: 'syz.2.3771': attribute type 10 has an invalid length. [ 278.291190][T16776] syzkaller0: entered promiscuous mode [ 278.293430][T16776] syzkaller0: entered allmulticast mode [ 278.353660][T16778] sit1: entered allmulticast mode [ 278.481375][T16787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 278.739890][T16801] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 278.744854][T16801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3784'. [ 278.748602][T16801] netlink: 'syz.0.3784': attribute type 10 has an invalid length. [ 278.751212][T16801] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 278.785531][T16803] netlink: 'syz.0.3785': attribute type 10 has an invalid length. [ 278.850304][T16809] syzkaller0: entered promiscuous mode [ 278.853152][T16809] syzkaller0: entered allmulticast mode [ 279.073812][T16826] netlink: 'syz.5.3795': attribute type 10 has an invalid length. [ 279.217718][T16831] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 279.223428][T16831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3797'. [ 279.228316][T16831] netlink: 'syz.5.3797': attribute type 10 has an invalid length. [ 279.231608][T16831] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 279.301176][T16835] syzkaller0: entered promiscuous mode [ 279.303078][T16835] syzkaller0: entered allmulticast mode [ 279.627570][T16852] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 279.632659][T16852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3806'. [ 279.637281][T16852] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 279.639936][T16852] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 279.979104][T16857] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 280.037793][T16859] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3809'. [ 280.146738][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 280.146756][ T40] audit: type=1400 audit(2000000070.470:3677): avc: denied { name_bind } for pid=16862 comm="syz.0.3811" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 280.157980][ T40] audit: type=1400 audit(2000000070.470:3678): avc: denied { node_bind } for pid=16862 comm="syz.0.3811" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 280.191520][T16865] syzkaller0: entered promiscuous mode [ 280.194102][T16865] syzkaller0: entered allmulticast mode [ 280.374328][ T40] audit: type=1400 audit(2000000070.690:3679): avc: denied { allowed } for pid=16870 comm="syz.4.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 280.389306][ T40] audit: type=1400 audit(2000000070.690:3680): avc: denied { sqpoll } for pid=16870 comm="syz.4.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 280.400076][ T40] audit: type=1400 audit(2000000070.720:3681): avc: denied { mount } for pid=16873 comm="syz.5.3815" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 280.408072][ T40] audit: type=1400 audit(2000000070.720:3682): avc: denied { recv } for pid=5922 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33056 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 280.464415][ T40] audit: type=1400 audit(2000000070.780:3683): avc: denied { read append } for pid=16878 comm="syz.4.3817" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 280.472784][ T40] audit: type=1400 audit(2000000070.780:3684): avc: denied { open } for pid=16878 comm="syz.4.3817" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 280.482890][ T40] audit: type=1400 audit(2000000070.790:3685): avc: denied { ioctl } for pid=16878 comm="syz.4.3817" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 280.504018][ T40] audit: type=1400 audit(2000000070.820:3686): avc: denied { execute } for pid=16880 comm="syz.4.3818" path="/39/cpu.stat" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 280.570300][T16885] tipc: Enabled bearer , priority 0 [ 280.574181][T16885] syzkaller0: entered promiscuous mode [ 280.576848][T16885] syzkaller0: entered allmulticast mode [ 280.582919][T16885] tipc: Resetting bearer [ 280.586710][T16884] tipc: Resetting bearer [ 280.597374][T16884] tipc: Disabling bearer [ 280.654779][T16887] tipc: Started in network mode [ 280.656905][T16887] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 280.660800][T16887] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 280.664660][T16887] tipc: Enabled bearer , priority 10 [ 280.709866][T16889] netlink: 'syz.4.3823': attribute type 1 has an invalid length. [ 280.722757][T16889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.736426][T16889] bond1: (slave gretap1): making interface the new active one [ 280.739811][T16889] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 280.745441][T16889] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16889 comm=syz.4.3823 [ 280.868977][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 280.906077][T16906] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16906 comm=syz.2.3830 [ 280.917110][T16908] tipc: Enabled bearer , priority 0 [ 280.920534][T16908] syzkaller0: entered promiscuous mode [ 280.922866][T16908] syzkaller0: entered allmulticast mode [ 280.929584][T16908] tipc: Resetting bearer [ 280.936219][T16907] tipc: Resetting bearer [ 280.947259][T16907] tipc: Disabling bearer [ 280.963088][T16910] syz.2.3832 (16910): drop_caches: 2 [ 280.967913][T16910] syz.2.3832 (16910): drop_caches: 2 [ 281.351083][T16934] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 281.359612][T16934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3842'. [ 281.365256][T16934] netlink: 'syz.2.3842': attribute type 10 has an invalid length. [ 281.371868][T16934] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 281.436692][T16936] tipc: Started in network mode [ 281.438330][T16936] tipc: Node identity aa83c7b7911c, cluster identity 4711 [ 281.441021][T16936] tipc: Enabled bearer , priority 0 [ 281.443884][T16936] syzkaller0: entered promiscuous mode [ 281.445738][T16936] syzkaller0: entered allmulticast mode [ 281.450774][T16936] tipc: Resetting bearer [ 281.453606][T16935] tipc: Resetting bearer [ 281.463466][T16935] tipc: Disabling bearer [ 281.958769][ T6012] tipc: Node number set to 1 [ 282.498503][T16961] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 282.504167][T16961] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3851'. [ 282.509782][T16961] netlink: 'syz.5.3851': attribute type 10 has an invalid length. [ 282.513128][T16961] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 282.566695][T16963] syzkaller0: entered promiscuous mode [ 282.568855][T16963] syzkaller0: entered allmulticast mode [ 282.822390][T16968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.879888][T16968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.884448][T16968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.177391][T16982] fuse: Unknown parameter 'group_id00000000000000000000' [ 283.424375][T16988] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 283.432939][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 283.438484][T16988] netlink: 'syz.4.3862': attribute type 10 has an invalid length. [ 283.441220][T16988] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 284.179197][T17009] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 284.183650][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3871'. [ 284.188705][T17009] netlink: 'syz.2.3871': attribute type 10 has an invalid length. [ 284.191966][T17009] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 284.230360][T17011] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 284.234600][T17011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3872'. [ 284.238646][T17011] netlink: 'syz.2.3872': attribute type 10 has an invalid length. [ 284.241265][T17011] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 284.414809][T17018] netlink: 'syz.4.3875': attribute type 15 has an invalid length. [ 284.468132][T17018] syzkaller0: entered promiscuous mode [ 284.470021][T17018] syzkaller0: entered allmulticast mode [ 285.263603][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3880'. [ 285.317524][T17039] netlink: 'syz.2.3880': attribute type 10 has an invalid length. [ 285.528491][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 285.528508][ T40] audit: type=1400 audit(2000000075.850:3768): avc: denied { relabelfrom } for pid=17030 comm="syz.0.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 285.536440][T17036] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 285.536876][ T40] audit: type=1400 audit(2000000075.850:3769): avc: denied { relabelto } for pid=17030 comm="syz.0.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 285.541839][T17039] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 285.611861][T17043] fuse: Bad value for 'user_id' [ 285.613579][T17043] fuse: Bad value for 'user_id' [ 285.663496][ T40] audit: type=1400 audit(2000000075.980:3770): avc: denied { sys_module } for pid=17044 comm="syz.0.3882" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 285.706089][ T40] audit: type=1400 audit(2000000076.020:3771): avc: denied { read write } for pid=13440 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.713969][ T40] audit: type=1400 audit(2000000076.030:3772): avc: denied { open } for pid=13440 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.721736][ T40] audit: type=1400 audit(2000000076.030:3773): avc: denied { ioctl } for pid=13440 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.729833][ T40] audit: type=1400 audit(2000000076.040:3774): avc: denied { create } for pid=17052 comm="syz.0.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 285.736455][ T40] audit: type=1400 audit(2000000076.040:3775): avc: denied { connect } for pid=17052 comm="syz.0.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 285.742620][ T40] audit: type=1400 audit(2000000076.040:3776): avc: denied { write } for pid=17052 comm="syz.0.3884" laddr=172.20.20.170 lport=61105 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 285.750702][ T40] audit: type=1400 audit(2000000076.040:3777): avc: denied { read } for pid=17052 comm="syz.0.3884" laddr=172.20.20.170 lport=61105 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 286.611749][T17057] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 286.616599][T17057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3886'. [ 286.620097][T17057] netlink: 'syz.0.3886': attribute type 10 has an invalid length. [ 286.622662][T17057] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 287.522811][T17025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.592137][T17064] netlink: 'syz.2.3888': attribute type 10 has an invalid length. [ 287.642691][T17068] fuse: Bad value for 'fd' [ 287.711597][T17078] sctp: [Deprecated]: syz.2.3894 (pid 17078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.711597][T17078] Use struct sctp_sack_info instead [ 287.717444][T17077] syz_tun: entered allmulticast mode [ 287.726335][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'. [ 287.738123][T17077] syz_tun (unregistering): left allmulticast mode [ 287.755514][T17082] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 287.760519][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 287.764562][T17082] netlink: 'syz.2.3898': attribute type 10 has an invalid length. [ 287.767556][T17082] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 288.074490][T17118] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 288.078373][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3916'. [ 288.081884][T17118] netlink: 'syz.5.3916': attribute type 10 has an invalid length. [ 288.084501][T17118] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 288.305852][ T3244] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 288.477163][ T3244] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 288.479811][ T3244] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 288.482973][ T3244] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.487940][ T3244] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 288.490965][ T3244] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 288.493650][ T3244] usb 5-1: Product: syz [ 288.495070][ T3244] usb 5-1: Manufacturer: syz [ 288.496882][ T3244] usb 5-1: SerialNumber: syz [ 288.500831][ T3244] usb 5-1: config 0 descriptor?? [ 288.504287][ T3244] hub 5-1:0.0: bad descriptor, ignoring hub [ 288.506438][ T3244] hub 5-1:0.0: probe with driver hub failed with error -5 [ 288.510030][ T3244] usb 5-1: selecting invalid altsetting 0 [ 288.535812][T17143] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 288.546127][T17143] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3926'. [ 288.556607][T17143] netlink: 'syz.5.3926': attribute type 10 has an invalid length. [ 288.559652][T17143] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 288.645915][T17151] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 288.650313][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 288.654554][T17151] netlink: 'syz.4.3930': attribute type 10 has an invalid length. [ 288.657682][T17151] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 288.816394][ T6027] usb 5-1: USB disconnect, device number 16 [ 289.810645][T17161] xt_hashlimit: size too large, truncated to 1048576 [ 291.099711][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 291.099727][ T40] audit: type=1400 audit(2000000081.420:3831): avc: denied { recv } for pid=0 comm="swapper/1" saddr=172.20.20.11 src=20000 daddr=172.20.20.11 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 291.131505][T17124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.171196][ T40] audit: type=1400 audit(2000000081.490:3832): avc: denied { read } for pid=17168 comm="syz.0.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.187077][ T40] audit: type=1400 audit(2000000081.500:3833): avc: denied { create } for pid=17169 comm="syz.4.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 291.193273][ T40] audit: type=1400 audit(2000000081.500:3834): avc: denied { shutdown } for pid=17169 comm="syz.4.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 291.214748][ T40] audit: type=1400 audit(2000000081.500:3835): avc: denied { getopt } for pid=17169 comm="syz.4.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 291.225371][ T40] audit: type=1400 audit(2000000081.500:3836): avc: denied { connect } for pid=17169 comm="syz.4.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 291.232064][ T40] audit: type=1400 audit(2000000081.500:3837): avc: denied { name_connect } for pid=17169 comm="syz.4.3936" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 291.239838][ T40] audit: type=1400 audit(2000000081.510:3838): avc: denied { getopt } for pid=17169 comm="syz.4.3936" lport=40991 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 291.249673][ T6027] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 291.253520][ T40] audit: type=1400 audit(2000000081.510:3839): avc: denied { create } for pid=17172 comm="syz.5.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 291.264317][ T6027] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 291.266015][ T40] audit: type=1400 audit(2000000081.510:3840): avc: denied { read write } for pid=16245 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.308489][T17189] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.312635][T17189] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.352109][T17195] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 291.361675][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 291.365140][T17195] netlink: 'syz.4.3947': attribute type 10 has an invalid length. [ 291.370652][T17195] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 291.376917][T17198] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 291.383077][T17198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3948'. [ 291.388663][T17198] netlink: 'syz.0.3948': attribute type 10 has an invalid length. [ 291.391899][T17198] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 292.614988][T17229] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 292.620344][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'. [ 292.623939][T17229] netlink: 'syz.4.3960': attribute type 10 has an invalid length. [ 292.626519][T17229] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 294.397178][T17200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.447054][T17237] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 294.451114][T17237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3961'. [ 294.456359][T17237] netlink: 'syz.0.3961': attribute type 10 has an invalid length. [ 294.461501][T17237] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 294.480084][ T6024] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 294.496145][ T6024] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 294.618365][T17259] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 294.623595][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3971'. [ 294.629363][T17259] netlink: 'syz.4.3971': attribute type 10 has an invalid length. [ 294.632428][T17259] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 294.750957][T17274] netlink: 'syz.4.3977': attribute type 39 has an invalid length. [ 294.829099][T17279] syzkaller0: entered promiscuous mode [ 294.831609][T17279] syzkaller0: entered allmulticast mode [ 295.001272][T17287] syzkaller0: entered promiscuous mode [ 295.003854][T17287] syzkaller0: entered allmulticast mode [ 295.139287][ T6012] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 295.156394][ T6012] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 295.452740][T17300] fuse: Unknown parameter 'user_i00000000000000000000' [ 295.510700][T17306] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 295.516203][T17305] syzkaller0: entered promiscuous mode [ 295.517670][T17306] netlink: 'syz.0.3988': attribute type 10 has an invalid length. [ 295.518872][T17305] syzkaller0: entered allmulticast mode [ 295.525818][T17306] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 295.739595][T17315] syzkaller0: entered promiscuous mode [ 295.741886][T17315] syzkaller0: entered allmulticast mode [ 295.909091][T17332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3999'. [ 296.109933][T17356] syzkaller0: entered promiscuous mode [ 296.112093][T17356] syzkaller0: entered allmulticast mode [ 296.133040][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 296.133055][ T40] audit: type=1400 audit(2000000086.450:3946): avc: denied { setopt } for pid=17355 comm="syz.0.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 296.213269][ T40] audit: type=1400 audit(2000000086.530:3947): avc: denied { name_bind } for pid=17361 comm="syz.5.4012" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 296.226954][ T40] audit: type=1400 audit(2000000086.530:3948): avc: denied { node_bind } for pid=17361 comm="syz.5.4012" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 296.354018][T17376] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 296.357343][ T40] audit: type=1400 audit(2000000086.670:3949): avc: denied { ioctl } for pid=17374 comm="syz.0.4018" path="socket:[150924]" dev="sockfs" ino=150924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.357400][ T40] audit: type=1400 audit(2000000086.670:3950): avc: denied { create } for pid=17374 comm="syz.0.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.357432][ T40] audit: type=1400 audit(2000000086.670:3951): avc: denied { getopt } for pid=17374 comm="syz.0.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.357467][ T40] audit: type=1400 audit(2000000086.670:3952): avc: denied { connect } for pid=17374 comm="syz.0.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.357501][ T40] audit: type=1400 audit(2000000086.670:3953): avc: denied { name_connect } for pid=17374 comm="syz.0.4018" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 296.429062][ T40] audit: type=1400 audit(2000000086.750:3954): avc: denied { setopt } for pid=17374 comm="syz.0.4018" laddr=::ffff:172.20.20.32 lport=40941 faddr=::ffff:172.20.20.32 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.454850][T17383] syzkaller0: entered promiscuous mode [ 296.457216][T17383] syzkaller0: entered allmulticast mode [ 296.489013][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 296.555214][ T40] audit: type=1400 audit(2000000086.870:3955): avc: denied { create } for pid=17392 comm="syz.2.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 296.583244][T17390] tipc: Enabled bearer , priority 0 [ 296.588824][T17390] syzkaller0: entered promiscuous mode [ 296.591786][T17390] syzkaller0: entered allmulticast mode [ 296.638943][T17390] tipc: Resetting bearer [ 296.644567][T17388] tipc: Resetting bearer [ 296.651679][T17400] fuse: Unknown parameter 'user_id00000000000000000000' [ 296.671152][T17388] tipc: Disabling bearer [ 296.850512][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4037'. [ 296.922442][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'. [ 296.932362][T17429] ip6gre1: entered promiscuous mode [ 296.934175][T17429] ip6gre1: entered allmulticast mode [ 297.780911][T17457] xt_hashlimit: size too large, truncated to 1048576 [ 297.792864][T17452] md: could not open device unknown-block(0,0). [ 297.793427][T17459] syzkaller0: entered promiscuous mode [ 297.795561][T17452] md: md_import_device returned -6 [ 297.806204][T17459] syzkaller0: entered allmulticast mode [ 298.022444][T17477] netlink: 'syz.0.4062': attribute type 10 has an invalid length. [ 298.026206][T17477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4062'. [ 298.029288][T17477] batadv0: entered promiscuous mode [ 298.030939][T17477] batadv0: entered allmulticast mode [ 298.033098][T17477] bridge0: port 1(batadv0) entered blocking state [ 298.035230][T17477] bridge0: port 1(batadv0) entered disabled state [ 298.046896][T17479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.090369][T17483] xt_hashlimit: size too large, truncated to 1048576 [ 298.115852][ T1145] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 298.120227][ T1145] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 298.136680][T17479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.164087][T17479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.212387][T17495] syzkaller0: entered promiscuous mode [ 298.214681][T17495] syzkaller0: entered allmulticast mode [ 298.473110][T17519] xt_hashlimit: size too large, truncated to 1048576 [ 298.495798][ T6027] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 298.645815][ T6027] usb 9-1: Using ep0 maxpacket: 8 [ 298.649987][T17528] fuse: Unknown parameter '0x0000000000000003' [ 298.654322][ T6027] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.658945][ T6027] usb 9-1: config 0 has no interfaces? [ 298.661305][ T6027] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 298.665493][ T6027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.676313][ T6027] usb 9-1: config 0 descriptor?? [ 298.721131][T17532] syzkaller0: entered promiscuous mode [ 298.722923][T17532] syzkaller0: entered allmulticast mode [ 299.160721][T17556] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 299.274442][T17562] tipc: Enabled bearer , priority 0 [ 299.277416][T17562] syzkaller0: entered promiscuous mode [ 299.279366][T17562] syzkaller0: entered allmulticast mode [ 299.295320][T17562] tipc: Resetting bearer [ 299.302282][T17561] tipc: Resetting bearer [ 299.318709][T17561] tipc: Disabling bearer [ 299.401460][ T6024] usb 9-1: USB disconnect, device number 5 [ 299.526148][T17571] md: could not open device unknown-block(0,0). [ 299.528925][T17571] md: md_import_device returned -6 [ 299.636799][T17593] xt_hashlimit: size too large, truncated to 1048576 [ 299.724519][T17597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4112'. [ 299.837640][T17608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.893609][T17608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.899865][T17608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.975721][ T1335] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 300.127555][ T1335] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 300.130982][ T1335] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 300.135091][ T1335] usb 10-1: config 0 interface 0 has no altsetting 0 [ 300.139961][ T1335] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 300.143680][ T1335] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 300.147248][ T1335] usb 10-1: Product: syz [ 300.149034][ T1335] usb 10-1: Manufacturer: syz [ 300.150968][ T1335] usb 10-1: SerialNumber: syz [ 300.154813][ T1335] usb 10-1: config 0 descriptor?? [ 300.159065][ T1335] hub 10-1:0.0: bad descriptor, ignoring hub [ 300.161106][ T1335] hub 10-1:0.0: probe with driver hub failed with error -5 [ 300.166272][ T1335] usb 10-1: selecting invalid altsetting 0 [ 300.441732][T17621] xt_hashlimit: size too large, truncated to 1048576 [ 300.641948][T17635] netlink: 'syz.0.4128': attribute type 10 has an invalid length. [ 300.645336][T17635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4128'. [ 300.678085][T17599] usb 10-1: reset high-speed USB device number 6 using dummy_hcd [ 300.685235][T17599] usb 10-1: device reset changed ep0 maxpacket size! [ 300.691075][ T6008] usb 10-1: USB disconnect, device number 6 [ 300.714674][T17641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.720920][T17643] xt_hashlimit: size too large, truncated to 1048576 [ 300.773783][T17641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.779864][T17641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.836106][ T6008] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 300.996544][ T6008] usb 10-1: Using ep0 maxpacket: 8 [ 301.000549][ T6008] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.005031][ T6008] usb 10-1: config 0 has no interfaces? [ 301.007725][ T6008] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 301.011984][ T6008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.024441][ T6008] usb 10-1: config 0 descriptor?? [ 301.341020][T17658] netlink: 'syz.2.4139': attribute type 10 has an invalid length. [ 301.344305][T17658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4139'. [ 301.347322][T17658] batadv0: entered promiscuous mode [ 301.349099][T17658] batadv0: entered allmulticast mode [ 301.351259][T17658] bridge0: port 1(batadv0) entered blocking state [ 301.353671][T17658] bridge0: port 1(batadv0) entered disabled state [ 301.371397][T17660] syzkaller0: entered promiscuous mode [ 301.373451][T17660] syzkaller0: entered allmulticast mode [ 301.377107][ T40] kauditd_printk_skb: 146 callbacks suppressed [ 301.377120][ T40] audit: type=1400 audit(2000000091.700:4102): avc: denied { write } for pid=17659 comm="syz.4.4140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.428873][T17664] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 301.432998][ T40] audit: type=1400 audit(2000000091.750:4103): avc: denied { create } for pid=17663 comm="syz.2.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.433491][T17664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4142'. [ 301.439656][ T40] audit: type=1400 audit(2000000091.750:4104): avc: denied { ioctl } for pid=17663 comm="syz.2.4142" path="socket:[151227]" dev="sockfs" ino=151227 ioctlcmd=0x8b06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.446972][T17664] netlink: 'syz.2.4142': attribute type 10 has an invalid length. [ 301.454431][T17664] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 301.484133][ T40] audit: type=1400 audit(2000000091.800:4105): avc: denied { read write } for pid=17665 comm="syz.4.4143" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 301.494899][ T40] audit: type=1400 audit(2000000091.800:4106): avc: denied { open } for pid=17665 comm="syz.4.4143" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 301.502848][ T40] audit: type=1400 audit(2000000091.800:4107): avc: denied { mounton } for pid=17665 comm="syz.4.4143" path="/109/file0" dev="tmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 301.510785][ T40] audit: type=1400 audit(2000000091.800:4108): avc: denied { mount } for pid=17665 comm="syz.4.4143" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 301.523080][ T40] audit: type=1400 audit(2000000091.800:4109): avc: denied { bpf } for pid=17667 comm="syz.2.4144" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.529887][T12623] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 301.532827][T12623] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 301.536532][ T40] audit: type=1400 audit(2000000091.800:4110): avc: denied { perfmon } for pid=17667 comm="syz.2.4144" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.597195][ T40] audit: type=1400 audit(2000000091.920:4111): avc: denied { mounton } for pid=17665 comm="syz.4.4143" path="/109/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 301.757226][ T6024] usb 10-1: USB disconnect, device number 7 [ 301.885620][T17686] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4150'. [ 302.050374][T17699] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 302.055102][T17699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4155'. [ 302.059883][T17699] netlink: 'syz.0.4155': attribute type 10 has an invalid length. [ 302.063035][T17699] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 302.151970][T17711] netlink: 'syz.0.4159': attribute type 10 has an invalid length. [ 302.154591][T17711] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4159'. [ 302.409351][T17730] netlink: 'syz.5.4168': attribute type 10 has an invalid length. [ 302.411964][T17730] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4168'. [ 302.414791][T17730] batadv0: entered promiscuous mode [ 302.416941][T17730] batadv0: entered allmulticast mode [ 302.419015][T17730] bridge0: port 2(batadv0) entered blocking state [ 302.421243][T17730] bridge0: port 2(batadv0) entered disabled state [ 302.545152][T17742] sg_write: data in/out 466900/56 bytes for SCSI command 0x0-- guessing data in; [ 302.545152][T17742] program syz.5.4174 not setting count and/or reply_len properly [ 302.551014][T17740] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4173'. [ 302.600117][T17746] syzkaller0: entered promiscuous mode [ 302.602475][T17746] syzkaller0: entered allmulticast mode [ 302.687777][ T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 302.690394][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 302.848133][T17766] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4187'. [ 303.298582][T17789] sit1: entered allmulticast mode [ 303.333728][ T5288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.338794][ T5288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.341821][ T5288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.345552][ T5288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.348668][T17793] tipc: Enabled bearer , priority 0 [ 303.350733][ T5288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.351220][T17793] syzkaller0: entered promiscuous mode [ 303.354849][T17793] syzkaller0: entered allmulticast mode [ 303.360302][T17793] tipc: Resetting bearer [ 303.363216][T17792] tipc: Resetting bearer [ 303.373534][T17792] tipc: Disabling bearer [ 303.502450][T17790] chnl_net:caif_netlink_parms(): no params data found [ 303.551921][T17790] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.554295][T17790] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.557078][T17790] bridge_slave_0: entered allmulticast mode [ 303.559817][T17790] bridge_slave_0: entered promiscuous mode [ 303.564220][T17790] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.567777][T17790] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.570236][T17790] bridge_slave_1: entered allmulticast mode [ 303.572960][T17790] bridge_slave_1: entered promiscuous mode [ 303.590769][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.595343][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.612329][T17790] team0: Port device team_slave_0 added [ 303.616074][T17790] team0: Port device team_slave_1 added [ 303.629376][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.631775][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.640367][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.644729][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.647021][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.655024][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.679990][T17790] hsr_slave_0: entered promiscuous mode [ 303.682415][T17790] hsr_slave_1: entered promiscuous mode [ 303.684849][T17790] debugfs: 'hsr0' already exists in 'hsr' [ 303.687090][T17790] Cannot create hsr debugfs directory [ 303.786084][ T6008] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 303.808357][T17790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.814469][T17790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.828729][T17790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.834468][T17790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.858716][T17790] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.861544][T17790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.864121][T17790] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.866396][T17790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.903777][T17790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.913083][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.916889][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.932789][T17790] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.935769][ T6008] usb 10-1: Using ep0 maxpacket: 8 [ 303.938739][ T6008] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.942552][ T6008] usb 10-1: config 0 has no interfaces? [ 303.943840][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.944625][ T6008] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 303.944641][ T6008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.947094][ T6008] usb 10-1: config 0 descriptor?? [ 303.947863][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.965375][T12623] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.968531][T12623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.095122][T17790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.240538][T17790] veth0_vlan: entered promiscuous mode [ 304.245440][T17790] veth1_vlan: entered promiscuous mode [ 304.260731][T17790] veth0_macvtap: entered promiscuous mode [ 304.265928][T17790] veth1_macvtap: entered promiscuous mode [ 304.276659][T17790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.290461][T17790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.297513][ T1145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.300623][ T1145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.308181][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.311285][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.380116][T17835] syzkaller0: entered promiscuous mode [ 304.382043][T17835] syzkaller0: entered allmulticast mode [ 304.385097][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.389452][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.424123][T12623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.426969][T12623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.619716][T17840] netlink: 'syz.6.4209': attribute type 32 has an invalid length. [ 304.690003][ T5996] usb 10-1: USB disconnect, device number 8 [ 304.732827][T17852] tipc: Started in network mode [ 304.734679][T17852] tipc: Node identity e2115c28c059, cluster identity 4711 [ 304.738111][T17852] tipc: Enabled bearer , priority 0 [ 304.757154][T17852] tipc: Resetting bearer [ 304.772232][T17855] netlink: 'syz.4.4216': attribute type 10 has an invalid length. [ 304.774736][T17855] __nla_validate_parse: 1 callbacks suppressed [ 304.774745][T17855] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4216'. [ 304.784862][T17849] tipc: Disabling bearer [ 304.795548][T17855] batadv0: entered promiscuous mode [ 304.800199][T17855] batadv0: entered allmulticast mode [ 304.803088][T17855] bridge0: port 3(batadv0) entered blocking state [ 304.805722][T17855] bridge0: port 3(batadv0) entered disabled state [ 304.841383][T17862] syzkaller0: entered promiscuous mode [ 304.843808][T17862] syzkaller0: entered allmulticast mode [ 304.898077][T17865] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4221'. [ 305.124060][T17878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.179876][T17878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.184060][T17878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.215115][T17882] netlink: 'syz.6.4229': attribute type 10 has an invalid length. [ 305.217994][T17882] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4229'. [ 305.221078][T17882] batadv0: entered promiscuous mode [ 305.222978][T17882] batadv0: entered allmulticast mode [ 305.225265][T17882] bridge0: port 3(batadv0) entered blocking state [ 305.228555][T17882] bridge0: port 3(batadv0) entered disabled state [ 305.232108][T17882] bridge0: port 3(batadv0) entered blocking state [ 305.234300][T17882] bridge0: port 3(batadv0) entered forwarding state [ 305.260968][ T1145] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 305.264141][ T1145] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 305.416429][ T5952] Bluetooth: hci1: command tx timeout [ 305.558451][T12623] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 305.561325][T12623] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 305.649449][T17897] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4236'. [ 305.748609][T17909] syzkaller0: entered promiscuous mode [ 305.750373][T17909] syzkaller0: entered allmulticast mode [ 305.758320][T17912] netlink: 'syz.6.4243': attribute type 10 has an invalid length. [ 305.763291][T17912] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4243'. [ 305.823972][T17920] netlink: 'syz.5.4248': attribute type 10 has an invalid length. [ 305.830363][T17920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.834043][T17920] team0: Port device bond0 added [ 305.933685][T17936] netlink: 'syz.0.4254': attribute type 10 has an invalid length. [ 305.936342][T17936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4254'. [ 306.286242][T17953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=17953 comm=syz.0.4262 [ 306.386076][ T40] kauditd_printk_skb: 140 callbacks suppressed [ 306.386092][ T40] audit: type=1400 audit(2000000096.710:4252): avc: denied { read } for pid=17956 comm="syz.0.4263" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 306.399051][ T40] audit: type=1400 audit(2000000096.710:4253): avc: denied { open } for pid=17956 comm="syz.0.4263" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 306.416899][ T40] audit: type=1400 audit(2000000096.740:4254): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33056 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 306.484787][ T40] audit: type=1400 audit(2000000096.800:4255): avc: denied { append } for pid=17959 comm="syz.0.4264" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 306.494108][ T40] audit: type=1400 audit(2000000096.800:4256): avc: denied { read } for pid=17959 comm="syz.0.4264" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 306.503607][ T40] audit: type=1400 audit(2000000096.800:4257): avc: denied { open } for pid=17959 comm="syz.0.4264" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 306.642314][ T40] audit: type=1400 audit(2000000096.960:4258): avc: denied { unmount } for pid=17790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 306.674925][T17962] netlink: 'syz.6.4265': attribute type 10 has an invalid length. [ 306.678457][T17962] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4265'. [ 306.733540][ T40] audit: type=1400 audit(2000000097.050:4259): avc: denied { read write } for pid=17967 comm="syz.6.4268" name="qrtr-tun" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.744066][ T40] audit: type=1400 audit(2000000097.050:4260): avc: denied { open } for pid=17967 comm="syz.6.4268" path="/dev/qrtr-tun" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.759518][ T40] audit: type=1400 audit(2000000097.080:4261): avc: denied { ioctl } for pid=17969 comm="syz.5.4269" path="/dev/virtual_nci" dev="devtmpfs" ino=709 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.215673][T18004] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4283'. [ 307.495944][ T5952] Bluetooth: hci1: command tx timeout [ 308.717313][T18089] tipc: Enabling of bearer rejected, failed to enable media [ 308.967285][T18107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4329'. [ 308.982146][T18106] syzkaller0: entered promiscuous mode [ 308.984111][T18106] syzkaller0: entered allmulticast mode [ 309.576759][ T5952] Bluetooth: hci1: command tx timeout [ 310.360072][T18120] tipc: Enabling of bearer rejected, failed to enable media [ 310.436490][T18144] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4339'. [ 310.663513][T18166] tipc: Enabling of bearer rejected, failed to enable media [ 310.856896][T18175] syzkaller0: entered promiscuous mode [ 310.858896][T18175] syzkaller0: entered allmulticast mode [ 311.465771][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 311.465788][ T40] audit: type=1400 audit(2000000101.780:4366): avc: denied { create } for pid=18185 comm="syz.5.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 311.477363][ T40] audit: type=1400 audit(2000000101.790:4367): avc: denied { write } for pid=18185 comm="syz.5.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 311.485545][ T40] audit: type=1400 audit(2000000101.790:4368): avc: denied { nlmsg_write } for pid=18185 comm="syz.5.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 311.522025][ T40] audit: type=1400 audit(2000000101.840:4369): avc: denied { execmem } for pid=18190 comm="syz.5.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 311.655832][ T5952] Bluetooth: hci1: command tx timeout [ 312.223997][T18179] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 312.261704][ T40] audit: type=1400 audit(2000000102.580:4370): avc: denied { name_bind } for pid=18193 comm="syz.6.4357" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 312.271685][ T40] audit: type=1400 audit(2000000102.580:4371): avc: denied { node_bind } for pid=18193 comm="syz.6.4357" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 312.281908][ T40] audit: type=1400 audit(2000000102.600:4372): avc: denied { write } for pid=18195 comm="syz.0.4358" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.324963][ T40] audit: type=1400 audit(2000000102.640:4373): avc: denied { create } for pid=18200 comm="syz.4.4360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.332141][ T40] audit: type=1400 audit(2000000102.650:4374): avc: denied { write } for pid=18200 comm="syz.4.4360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.350364][ T40] audit: type=1400 audit(2000000102.670:4375): avc: denied { read write } for pid=18203 comm="syz.0.4362" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 312.431247][T18209] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 312.565114][T18219] syzkaller0: entered promiscuous mode [ 312.567656][T18219] syzkaller0: entered allmulticast mode [ 313.912582][T18250] netlink: 23 bytes leftover after parsing attributes in process `syz.6.4378'. [ 313.998995][T18264] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 314.452689][T18274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.508012][T18274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.513090][T18274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.937029][T18284] syzkaller0: entered promiscuous mode [ 314.938800][T18284] syzkaller0: entered allmulticast mode [ 314.948374][T18286] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 316.193683][T18289] bridge0: port 3(batadv0) entered disabled state [ 316.201542][T18289] bridge_slave_0: left allmulticast mode [ 316.204102][T18289] bridge_slave_0: left promiscuous mode [ 316.207085][T18289] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.213544][T18289] bridge_slave_1: left allmulticast mode [ 316.216407][T18289] bridge_slave_1: left promiscuous mode [ 316.218957][T18289] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.226801][T18289] bond0: (slave bond_slave_0): Releasing backup interface [ 316.235027][T18289] bond0: (slave bond_slave_1): Releasing backup interface [ 316.258142][T18289] team0: Port device team_slave_0 removed [ 316.262810][T18289] team0: Port device team_slave_1 removed [ 316.266218][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.269287][T18289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.273941][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.278437][T18289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.282314][T18289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.356024][T18320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.411421][T18320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.415893][T18320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.453775][T18324] syzkaller0: entered promiscuous mode [ 316.455621][T18324] syzkaller0: entered allmulticast mode [ 316.574603][T18326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4407'. [ 316.612019][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 316.612037][ T40] audit: type=1400 audit(2000000106.930:4416): avc: denied { create } for pid=18328 comm="syz.5.4408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.625130][ T40] audit: type=1400 audit(2000000106.930:4417): avc: denied { bind } for pid=18328 comm="syz.5.4408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.697883][ T40] audit: type=1400 audit(2000000107.020:4418): avc: denied { name_bind } for pid=18334 comm="syz.4.4411" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 316.707751][ T40] audit: type=1400 audit(2000000107.020:4419): avc: denied { node_bind } for pid=18334 comm="syz.4.4411" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 316.719240][ T40] audit: type=1400 audit(2000000107.030:4420): avc: denied { create } for pid=18336 comm="syz.5.4412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.729001][ T40] audit: type=1400 audit(2000000107.030:4421): avc: denied { write } for pid=18336 comm="syz.5.4412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.739205][ T40] audit: type=1400 audit(2000000107.060:4422): avc: denied { read write } for pid=18338 comm="syz.5.4414" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.751700][ T40] audit: type=1400 audit(2000000107.060:4423): avc: denied { open } for pid=18338 comm="syz.5.4414" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.764874][ T40] audit: type=1400 audit(2000000107.060:4424): avc: denied { create } for pid=18340 comm="syz.4.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 316.776760][ T40] audit: type=1400 audit(2000000107.060:4425): avc: denied { setopt } for pid=18340 comm="syz.4.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 316.782407][T18342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 316.838439][T18348] sctp: [Deprecated]: syz.4.4416 (pid 18348) Use of int in maxseg socket option. [ 316.838439][T18348] Use struct sctp_assoc_value instead [ 316.930259][T18360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4421'. [ 316.960236][T18364] tipc: Enabled bearer , priority 0 [ 316.962999][T18364] syzkaller0: entered promiscuous mode [ 316.964881][T18364] syzkaller0: entered allmulticast mode [ 316.981294][T18363] tipc: Resetting bearer [ 316.994784][T18363] tipc: Disabling bearer [ 317.109062][T18379] netlink: 'syz.6.4427': attribute type 10 has an invalid length. [ 317.115754][T18379] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4427'. [ 317.131558][T18379] bridge0: port 1(batadv0) entered blocking state [ 317.135370][T18379] bridge0: port 1(batadv0) entered disabled state [ 317.140626][T18379] bridge0: port 1(batadv0) entered blocking state [ 317.143412][T18379] bridge0: port 1(batadv0) entered forwarding state [ 317.200637][T18385] syzkaller0: entered promiscuous mode [ 317.203025][T18385] syzkaller0: entered allmulticast mode [ 317.297947][T18387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.359217][T12623] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 317.363062][T12623] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 317.367178][T18387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.376823][T18387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.935803][T18415] syzkaller0: entered promiscuous mode [ 317.937645][T18415] syzkaller0: entered allmulticast mode [ 317.959468][T18417] tipc: Enabling of bearer rejected, failed to enable media [ 318.171672][T18435] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 318.186289][T18435] bridge0: port 3(batadv0) entered disabled state [ 318.195525][T18435] bridge_slave_0: left allmulticast mode [ 318.198900][T18435] bridge_slave_0: left promiscuous mode [ 318.201234][T18435] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.209449][T18435] bridge_slave_1: left allmulticast mode [ 318.215150][T18435] bridge_slave_1: left promiscuous mode [ 318.219985][T18435] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.228004][T18435] bond0: (slave bond_slave_0): Releasing backup interface [ 318.233189][T18435] bond0: (slave bond_slave_1): Releasing backup interface [ 318.242826][T18435] team0: Port device team_slave_0 removed [ 318.251753][T18435] team0: Port device team_slave_1 removed [ 318.254902][T18435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.258144][T18435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.284260][T18435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.287723][T18435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.297942][T18435] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 318.438608][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4464'. [ 318.723362][ T46] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.726796][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.730210][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.739523][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.407329][T18513] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 319.414476][T18513] syz_tun: left allmulticast mode [ 319.417405][T18513] syz_tun: left promiscuous mode [ 319.419731][T18513] bridge0: port 1(syz_tun) entered disabled state [ 319.428346][T18513] team0: Port device bond0 removed [ 319.430653][T18513] batadv0: left allmulticast mode [ 319.432479][T18513] batadv0: left promiscuous mode [ 319.434774][T18513] bridge0: port 2(batadv0) entered disabled state [ 319.440269][T18513] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.217846][T18517] syzkaller0: entered promiscuous mode [ 320.219758][T18517] syzkaller0: entered allmulticast mode [ 321.870518][T18499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.957785][T18527] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 321.968535][T18527] bridge0: port 1(batadv0) entered disabled state [ 321.975700][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 321.975720][ T40] audit: type=1400 audit(2000000112.290:4465): avc: denied { read write } for pid=18528 comm="syz.5.4487" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 321.987906][T18527] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 321.988139][ T40] audit: type=1400 audit(2000000112.290:4466): avc: denied { open } for pid=18528 comm="syz.5.4487" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 322.008276][ T40] audit: type=1400 audit(2000000112.320:4467): avc: denied { create } for pid=18525 comm="syz.0.4488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.017349][ T40] audit: type=1400 audit(2000000112.320:4468): avc: denied { write } for pid=18525 comm="syz.0.4488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.024329][ T40] audit: type=1400 audit(2000000112.320:4469): avc: denied { read } for pid=18525 comm="syz.0.4488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.032773][ T40] audit: type=1400 audit(2000000112.320:4470): avc: denied { ioctl } for pid=18525 comm="syz.0.4488" path="socket:[156903]" dev="sockfs" ino=156903 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.064221][ T40] audit: type=1400 audit(2000000112.380:4471): avc: denied { create } for pid=18539 comm="syz.6.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.071583][ T40] audit: type=1400 audit(2000000112.390:4472): avc: denied { ioctl } for pid=18539 comm="syz.6.4492" path="socket:[156910]" dev="sockfs" ino=156910 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.074776][T18538] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 322.079864][ T40] audit: type=1400 audit(2000000112.390:4473): avc: denied { create } for pid=18541 comm="syz.4.4494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.079894][ T40] audit: type=1400 audit(2000000112.390:4474): avc: denied { write } for pid=18541 comm="syz.4.4494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.137856][T18544] syzkaller0: entered promiscuous mode [ 322.139784][T18544] syzkaller0: entered allmulticast mode [ 322.149716][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.152005][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.258450][T18558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 322.342030][T18567] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 322.748710][T18589] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4515'. [ 322.860908][T18600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 322.963324][T18604] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 323.734239][T18632] syzkaller0: entered allmulticast mode [ 323.780577][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4531'. [ 323.789288][T18634] sit2: entered allmulticast mode [ 324.155897][T18665] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 324.433543][T18674] syzkaller0: entered promiscuous mode [ 324.435963][T18674] syzkaller0: entered allmulticast mode [ 325.091885][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4560'. [ 325.097590][T18701] sit1: entered allmulticast mode [ 325.274226][T18717] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.334055][T18721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.393244][T18723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.399481][T18721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.938633][T18731] tipc: Enabled bearer , priority 0 [ 325.945174][T18731] tipc: Resetting bearer [ 325.963218][T18730] tipc: Disabling bearer [ 326.121591][T18748] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.157697][T18751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.214001][T18751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.218152][T18751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.221169][T18757] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4584'. [ 326.290424][T18761] tipc: Enabled bearer , priority 0 [ 326.296513][T18761] tipc: Resetting bearer [ 326.307656][T18760] tipc: Disabling bearer [ 326.933851][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4593'. [ 327.089919][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 327.089937][ T40] audit: type=1400 audit(2000000117.410:4541): avc: denied { name_connect } for pid=18784 comm="syz.0.4597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 327.102376][ T40] audit: type=1400 audit(2000000117.410:4542): avc: denied { listen } for pid=18784 comm="syz.0.4597" lport=47966 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.112344][ T40] audit: type=1400 audit(2000000117.410:4543): avc: denied { accept } for pid=18784 comm="syz.0.4597" lport=47966 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.123581][ T40] audit: type=1400 audit(2000000117.410:4544): avc: denied { write } for pid=18784 comm="syz.0.4597" lport=47966 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 327.135876][ T40] audit: type=1400 audit(2000000117.410:4545): avc: denied { setopt } for pid=18784 comm="syz.0.4597" lport=47966 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 327.144605][ T40] audit: type=1400 audit(2000000117.430:4546): avc: denied { read write } for pid=18786 comm="syz.4.4598" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 327.152532][ T40] audit: type=1400 audit(2000000117.430:4547): avc: denied { open } for pid=18786 comm="syz.4.4598" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 327.160520][ T40] audit: type=1400 audit(2000000117.440:4548): avc: denied { create } for pid=18786 comm="syz.4.4598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.167076][ T40] audit: type=1400 audit(2000000117.440:4549): avc: denied { write } for pid=18786 comm="syz.4.4598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.174060][ T40] audit: type=1400 audit(2000000117.440:4550): avc: denied { read } for pid=18786 comm="syz.4.4598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.465854][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4604'. [ 327.615451][T18812] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 327.951433][T18787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.958258][T18796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.966705][T18797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.172148][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4614'. [ 328.282383][T18847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.660197][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'. [ 328.961347][T18885] tipc: Enabled bearer , priority 0 [ 328.966926][T18885] syzkaller0: MTU too low for tipc bearer [ 328.969226][T18885] tipc: Disabling bearer [ 329.136680][T18889] syzkaller0: entered promiscuous mode [ 329.139001][T18889] syzkaller0: entered allmulticast mode [ 329.314344][T18894] ------------[ cut here ]------------ [ 329.314906][T18894] [ 329.314913][T18894] ====================================================== [ 329.314920][T18894] WARNING: possible circular locking dependency detected [ 329.314928][T18894] syzkaller #0 Not tainted [ 329.314937][T18894] ------------------------------------------------------ [ 329.314943][T18894] syz.6.4638/18894 is trying to acquire lock: [ 329.314953][T18894] ffffffff8e6f3a80 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 329.315046][T18894] [ 329.315046][T18894] but task is already holding lock: [ 329.315052][T18894] ffff88801bec3018 (&pool->lock){-.-.}-{2:2}, at: destroy_workqueue+0x1e1/0xa30 [ 329.315099][T18894] [ 329.315099][T18894] which lock already depends on the new lock. [ 329.315099][T18894] [ 329.315105][T18894] [ 329.315105][T18894] the existing dependency chain (in reverse order) is: [ 329.315111][T18894] [ 329.315111][T18894] -> #3 (&pool->lock){-.-.}-{2:2}: [ 329.315134][T18894] _raw_spin_lock+0x2e/0x40 [ 329.315156][T18894] __queue_work+0x270/0x1150 [ 329.315174][T18894] queue_work_on+0x1a9/0x1e0 [ 329.315193][T18894] rpm_suspend+0xee1/0x11c0 [ 329.315219][T18894] rpm_idle+0x637/0x7c0 [ 329.315269][T18894] __pm_runtime_idle+0xba/0x1a0 [ 329.315295][T18894] __device_attach+0x37e/0x4d0 [ 329.315322][T18894] device_initial_probe+0xaf/0xd0 [ 329.315349][T18894] bus_probe_device+0x64/0x160 [ 329.315371][T18894] device_add+0x11d9/0x1950 [ 329.315388][T18894] serial_base_port_add+0x227/0x2b0 [ 329.315414][T18894] serial_core_register_port+0x13c/0x17a0 [ 329.315439][T18894] serial8250_register_8250_port+0x155a/0x2260 [ 329.315459][T18894] serial_pnp_probe+0x436/0x930 [ 329.315476][T18894] pnp_device_probe+0x2b3/0x4a0 [ 329.315500][T18894] really_probe+0x241/0xa60 [ 329.315525][T18894] __driver_probe_device+0x1de/0x400 [ 329.315552][T18894] driver_probe_device+0x4c/0x1b0 [ 329.315579][T18894] __driver_attach+0x21f/0x5d0 [ 329.315604][T18894] bus_for_each_dev+0x13e/0x1d0 [ 329.315625][T18894] bus_add_driver+0x305/0x5b0 [ 329.315648][T18894] driver_register+0x1e2/0x360 [ 329.315712][T18894] serial8250_init+0xcc/0x1b0 [ 329.315764][T18894] do_one_initcall+0x11d/0x760 [ 329.315785][T18894] kernel_init_freeable+0x6e5/0x7a0 [ 329.315805][T18894] kernel_init+0x1f/0x1e0 [ 329.315825][T18894] ret_from_fork+0x754/0xd80 [ 329.315842][T18894] ret_from_fork_asm+0x1a/0x30 [ 329.315863][T18894] [ 329.315863][T18894] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 329.315890][T18894] _raw_spin_lock_irqsave+0x3a/0x60 [ 329.315912][T18894] __pm_runtime_resume+0xa9/0x170 [ 329.315942][T18894] __uart_start+0x1b0/0x510 [ 329.315960][T18894] uart_write+0x211/0xb20 [ 329.315982][T18894] n_tty_write+0x44f/0x12d0 [ 329.316009][T18894] file_tty_write.isra.0+0x4d2/0x890 [ 329.316031][T18894] redirected_tty_write+0xd4/0x120 [ 329.316053][T18894] vfs_write+0x6ac/0x1070 [ 329.316069][T18894] ksys_write+0x12a/0x250 [ 329.316084][T18894] do_syscall_64+0x106/0xf80 [ 329.316108][T18894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.316127][T18894] [ 329.316127][T18894] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 329.316150][T18894] _raw_spin_lock_irqsave+0x3a/0x60 [ 329.316171][T18894] serial8250_console_write+0x17e/0x1900 [ 329.316200][T18894] console_flush_one_record+0x790/0xe50 [ 329.316222][T18894] console_unlock+0x103/0x260 [ 329.316242][T18894] vprintk_emit+0x407/0x6b0 [ 329.316264][T18894] _printk+0xcf/0x110 [ 329.316280][T18894] register_console.cold+0xc0/0x248 [ 329.316297][T18894] univ8250_console_init+0x6f/0x80 [ 329.316321][T18894] console_init+0x423/0x620 [ 329.316344][T18894] start_kernel+0x305/0x480 [ 329.316359][T18894] x86_64_start_reservations+0x24/0x30 [ 329.316379][T18894] x86_64_start_kernel+0x12b/0x130 [ 329.316397][T18894] common_startup_64+0x13e/0x148 [ 329.316416][T18894] [ 329.316416][T18894] -> #0 (console_owner){-.-.}-{0:0}: [ 329.316438][T18894] __lock_acquire+0x14b8/0x2630 [ 329.316453][T18894] lock_acquire+0x1cf/0x380 [ 329.316467][T18894] console_lock_spinning_enable+0x72/0x80 [ 329.316493][T18894] console_flush_one_record+0x739/0xe50 [ 329.316513][T18894] console_unlock+0x103/0x260 [ 329.316532][T18894] vprintk_emit+0x407/0x6b0 [ 329.316552][T18894] _printk+0xcf/0x110 [ 329.316565][T18894] __report_bug.cold+0x15/0x137 [ 329.316588][T18894] report_bug+0xb2/0x220 [ 329.316607][T18894] handle_bug+0x16a/0x2a0 [ 329.316629][T18894] exc_invalid_op+0x17/0x50 [ 329.316651][T18894] asm_exc_invalid_op+0x1a/0x20 [ 329.316666][T18894] destroy_workqueue+0x329/0xa30 [ 329.316688][T18894] nci_unregister_device+0x87/0x330 [ 329.316707][T18894] virtual_ncidev_close+0x4b/0xa0 [ 329.316726][T18894] __fput+0x3ff/0xb40 [ 329.316744][T18894] task_work_run+0x150/0x240 [ 329.316761][T18894] exit_to_user_mode_loop+0x100/0x4a0 [ 329.316778][T18894] do_syscall_64+0x67c/0xf80 [ 329.316799][T18894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.316815][T18894] [ 329.316815][T18894] other info that might help us debug this: [ 329.316815][T18894] [ 329.316820][T18894] Chain exists of: [ 329.316820][T18894] console_owner --> &dev->power.lock --> &pool->lock [ 329.316820][T18894] [ 329.316845][T18894] Possible unsafe locking scenario: [ 329.316845][T18894] [ 329.316849][T18894] CPU0 CPU1 [ 329.316854][T18894] ---- ---- [ 329.316858][T18894] lock(&pool->lock); [ 329.316868][T18894] lock(&dev->power.lock); [ 329.316879][T18894] lock(&pool->lock); [ 329.316891][T18894] lock(console_owner); [ 329.316901][T18894] [ 329.316901][T18894] *** DEADLOCK *** [ 329.316901][T18894] [ 329.316904][T18894] 5 locks held by syz.6.4638/18894: [ 329.316915][T18894] #0: ffffffff8e6950e8 (wq_pool_mutex){+.+.}-{4:4}, at: destroy_workqueue+0x177/0xa30 [ 329.316960][T18894] #1: ffff8880413e6088 (&wq->mutex){+.+.}-{4:4}, at: destroy_workqueue+0x182/0xa30 [ 329.317006][T18894] #2: ffff88801bec3018 (&pool->lock){-.-.}-{2:2}, at: destroy_workqueue+0x1e1/0xa30 [ 329.317050][T18894] #3: ffffffff8e7d3ec0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 329.317086][T18894] #4: ffffffff8e7d3f38 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 329.317131][T18894] [ 329.317131][T18894] stack backtrace: [ 329.317140][T18894] CPU: 1 UID: 0 PID: 18894 Comm: syz.6.4638 Not tainted syzkaller #0 PREEMPT(full) [ 329.317159][T18894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.317169][T18894] Call Trace: [ 329.317176][T18894] [ 329.317183][T18894] dump_stack_lvl+0x100/0x190 [ 329.317210][T18894] print_circular_bug.cold+0x178/0x1c7 [ 329.317238][T18894] check_noncircular+0x146/0x160 [ 329.317267][T18894] __lock_acquire+0x14b8/0x2630 [ 329.317286][T18894] lock_acquire+0x1cf/0x380 [ 329.317300][T18894] ? console_lock_spinning_enable+0x61/0x80 [ 329.317320][T18894] ? console_lock_spinning_enable+0x4a/0x80 [ 329.317344][T18894] console_lock_spinning_enable+0x72/0x80 [ 329.317432][T18894] ? console_lock_spinning_enable+0x61/0x80 [ 329.317453][T18894] console_flush_one_record+0x739/0xe50 [ 329.317476][T18894] ? __pfx_console_flush_one_record+0x10/0x10 [ 329.317507][T18894] ? is_printk_cpu_sync_owner+0x32/0x40 [ 329.317531][T18894] console_unlock+0x103/0x260 [ 329.317550][T18894] ? __pfx_console_unlock+0x10/0x10 [ 329.317570][T18894] ? do_raw_spin_unlock+0x145/0x1e0 [ 329.317589][T18894] ? _printk+0xcf/0x110 [ 329.317606][T18894] vprintk_emit+0x407/0x6b0 [ 329.317626][T18894] ? __pfx_vprintk_emit+0x10/0x10 [ 329.317647][T18894] ? destroy_workqueue+0x13e/0xa30 [ 329.317670][T18894] ? stack_trace_save+0x8e/0xc0 [ 329.317694][T18894] _printk+0xcf/0x110 [ 329.317708][T18894] ? __pfx__printk+0x10/0x10 [ 329.317725][T18894] ? kasan_save_stack+0x3f/0x50 [ 329.317748][T18894] ? kasan_save_stack+0x30/0x50 [ 329.317772][T18894] ? kasan_save_track+0x14/0x30 [ 329.317795][T18894] ? kasan_save_free_info+0x3b/0x70 [ 329.317815][T18894] ? __kasan_slab_free+0x5f/0x80 [ 329.317840][T18894] ? kfree+0x1f6/0x6b0 [ 329.317859][T18894] ? destroy_workqueue+0x13e/0xa30 [ 329.317883][T18894] ? nci_unregister_device+0x87/0x330 [ 329.317900][T18894] ? __report_bug.cold+0x5/0x137 [ 329.317924][T18894] ? __report_bug+0x377/0x3d0 [ 329.317944][T18894] __report_bug.cold+0x15/0x137 [ 329.317967][T18894] ? destroy_workqueue+0x329/0xa30 [ 329.317991][T18894] ? __pfx___report_bug+0x10/0x10 [ 329.318011][T18894] ? rcu_is_watching+0x12/0xc0 [ 329.318031][T18894] ? trace_contention_end.constprop.0+0x15b/0x1b0 [ 329.318052][T18894] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 329.318079][T18894] ? destroy_workqueue+0x329/0xa30 [ 329.318102][T18894] report_bug+0xb2/0x220 [ 329.318122][T18894] ? destroy_workqueue+0x329/0xa30 [ 329.318145][T18894] handle_bug+0x16a/0x2a0 [ 329.318169][T18894] exc_invalid_op+0x17/0x50 [ 329.318194][T18894] asm_exc_invalid_op+0x1a/0x20 [ 329.318210][T18894] RIP: 0010:destroy_workqueue+0x329/0xa30 [ 329.318235][T18894] Code: 8d 5c 24 68 48 89 d8 48 c1 e8 03 42 80 3c 28 00 0f 85 80 06 00 00 49 8b 44 24 68 48 39 c3 0f 84 84 00 00 00 e8 d8 41 38 00 90 <0f> 0b 90 48 c7 c6 c0 02 ae 8b 49 8d 96 78 01 00 00 48 c7 c7 20 f5 [ 329.318252][T18894] RSP: 0018:ffffc90007fcfd20 EFLAGS: 00010093 [ 329.318266][T18894] RAX: 0000000000000000 RBX: ffff888037311824 RCX: ffffffff81d09e61 [ 329.318276][T18894] RDX: ffff88802770a4c0 RSI: ffffffff81d09f68 RDI: ffff88802770a4c0 [ 329.318287][T18894] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 329.318297][T18894] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888037311800 [ 329.318306][T18894] R13: dffffc0000000000 R14: ffff8880413e6000 R15: 0000000000000001 [ 329.318320][T18894] ? destroy_workqueue+0x221/0xa30 [ 329.318415][T18894] ? destroy_workqueue+0x328/0xa30 [ 329.318443][T18894] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 329.318465][T18894] nci_unregister_device+0x87/0x330 [ 329.318482][T18894] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 329.318502][T18894] virtual_ncidev_close+0x4b/0xa0 [ 329.318652][T18894] __fput+0x3ff/0xb40 [ 329.318678][T18894] task_work_run+0x150/0x240 [ 329.318697][T18894] ? __pfx_task_work_run+0x10/0x10 [ 329.318718][T18894] exit_to_user_mode_loop+0x100/0x4a0 [ 329.318736][T18894] do_syscall_64+0x67c/0xf80 [ 329.318758][T18894] ? clear_bhb_loop+0x40/0x90 [ 329.318776][T18894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.318794][T18894] RIP: 0033:0x7f316ad9c799 [ 329.318808][T18894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.318824][T18894] RSP: 002b:00007ffe1232f798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 329.318840][T18894] RAX: 0000000000000000 RBX: 00007f316b017da0 RCX: 00007f316ad9c799 [ 329.318851][T18894] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 329.318860][T18894] RBP: 00007f316b017da0 R08: 0000000000000006 R09: 0000000000000000 [ 329.318870][T18894] R10: 00000000003ff558 R11: 0000000000000246 R12: 00000000000508cf [ 329.318880][T18894] R13: 00007f316b01609c R14: 0000000000050610 R15: 00007f316b016090 [ 329.318896][T18894] [ 329.697513][T18894] pwq_busy(pwq) [ 329.697522][T18894] WARNING: kernel/workqueue.c:5985 at destroy_workqueue+0x329/0xa30, CPU#1: syz.6.4638/18894 [ 329.701861][T18894] Modules linked in: [ 329.703149][T18894] CPU: 1 UID: 0 PID: 18894 Comm: syz.6.4638 Not tainted syzkaller #0 PREEMPT(full) [ 329.706040][T18894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.709122][T18894] RIP: 0010:destroy_workqueue+0x329/0xa30 [ 329.711018][T18894] Code: 8d 5c 24 68 48 89 d8 48 c1 e8 03 42 80 3c 28 00 0f 85 80 06 00 00 49 8b 44 24 68 48 39 c3 0f 84 84 00 00 00 e8 d8 41 38 00 90 <0f> 0b 90 48 c7 c6 c0 02 ae 8b 49 8d 96 78 01 00 00 48 c7 c7 20 f5 [ 329.717147][T18894] RSP: 0018:ffffc90007fcfd20 EFLAGS: 00010093 [ 329.719068][T18894] RAX: 0000000000000000 RBX: ffff888037311824 RCX: ffffffff81d09e61 [ 329.721487][T18894] RDX: ffff88802770a4c0 RSI: ffffffff81d09f68 RDI: ffff88802770a4c0 [ 329.724227][T18894] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 329.726706][T18894] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888037311800 [ 329.729197][T18894] R13: dffffc0000000000 R14: ffff8880413e6000 R15: 0000000000000001 [ 329.731807][T18894] FS: 000055556e87d500(0000) GS:ffff8880d643f000(0000) knlGS:0000000000000000 [ 329.734635][T18894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.736798][T18894] CR2: 00007f316bbd7ff8 CR3: 00000000269e7000 CR4: 0000000000352ef0 [ 329.739379][T18894] Call Trace: [ 329.740516][T18894] [ 329.741498][T18894] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 329.743373][T18894] nci_unregister_device+0x87/0x330 [ 329.745047][T18894] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 329.746978][T18894] virtual_ncidev_close+0x4b/0xa0 [ 329.748671][T18894] __fput+0x3ff/0xb40 [ 329.750005][T18894] task_work_run+0x150/0x240 [ 329.751601][T18894] ? __pfx_task_work_run+0x10/0x10 [ 329.753357][T18894] exit_to_user_mode_loop+0x100/0x4a0 [ 329.755120][T18894] do_syscall_64+0x67c/0xf80 [ 329.756645][T18894] ? clear_bhb_loop+0x40/0x90 [ 329.758151][T18894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.760129][T18894] RIP: 0033:0x7f316ad9c799 [ 329.761639][T18894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.767881][T18894] RSP: 002b:00007ffe1232f798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 329.770609][T18894] RAX: 0000000000000000 RBX: 00007f316b017da0 RCX: 00007f316ad9c799 [ 329.773277][T18894] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 329.775855][T18894] RBP: 00007f316b017da0 R08: 0000000000000006 R09: 0000000000000000 [ 329.778457][T18894] R10: 00000000003ff558 R11: 0000000000000246 R12: 00000000000508cf [ 329.781035][T18894] R13: 00007f316b01609c R14: 0000000000050610 R15: 00007f316b016090 [ 329.783778][T18894] [ 329.784816][T18894] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 329.787161][T18894] CPU: 1 UID: 0 PID: 18894 Comm: syz.6.4638 Not tainted syzkaller #0 PREEMPT(full) [ 329.790109][T18894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.793531][T18894] Call Trace: [ 329.794655][T18894] [ 329.795683][T18894] dump_stack_lvl+0x100/0x190 [ 329.797285][T18894] vpanic+0x552/0x970 [ 329.798609][T18894] ? __pfx_vpanic+0x10/0x10 [ 329.800122][T18894] ? lock_release+0x263/0x320 [ 329.801732][T18894] panic+0xd1/0xe0 [ 329.803048][T18894] ? __pfx_panic+0x10/0x10 [ 329.804628][T18894] ? check_panic_on_warn+0x1f/0x90 [ 329.806347][T18894] check_panic_on_warn.cold+0x19/0x34 [ 329.808104][T18894] ? destroy_workqueue+0x329/0xa30 [ 329.809838][T18894] __warn.cold+0x191/0x348 [ 329.811343][T18894] __report_bug+0x296/0x3d0 [ 329.812935][T18894] ? destroy_workqueue+0x329/0xa30 [ 329.814625][T18894] ? __pfx___report_bug+0x10/0x10 [ 329.816404][T18894] ? rcu_is_watching+0x12/0xc0 [ 329.817999][T18894] ? trace_contention_end.constprop.0+0x15b/0x1b0 [ 329.820149][T18894] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 329.822267][T18894] ? destroy_workqueue+0x329/0xa30 [ 329.824093][T18894] report_bug+0xb2/0x220 [ 329.825512][T18894] ? destroy_workqueue+0x329/0xa30 [ 329.827262][T18894] handle_bug+0x16a/0x2a0 [ 329.828698][T18894] exc_invalid_op+0x17/0x50 [ 329.830389][T18894] asm_exc_invalid_op+0x1a/0x20 [ 329.832012][T18894] RIP: 0010:destroy_workqueue+0x329/0xa30 [ 329.834016][T18894] Code: 8d 5c 24 68 48 89 d8 48 c1 e8 03 42 80 3c 28 00 0f 85 80 06 00 00 49 8b 44 24 68 48 39 c3 0f 84 84 00 00 00 e8 d8 41 38 00 90 <0f> 0b 90 48 c7 c6 c0 02 ae 8b 49 8d 96 78 01 00 00 48 c7 c7 20 f5 [ 329.840122][T18894] RSP: 0018:ffffc90007fcfd20 EFLAGS: 00010093 [ 329.842125][T18894] RAX: 0000000000000000 RBX: ffff888037311824 RCX: ffffffff81d09e61 [ 329.844772][T18894] RDX: ffff88802770a4c0 RSI: ffffffff81d09f68 RDI: ffff88802770a4c0 [ 329.847325][T18894] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 329.849976][T18894] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888037311800 [ 329.852627][T18894] R13: dffffc0000000000 R14: ffff8880413e6000 R15: 0000000000000001 [ 329.855230][T18894] ? destroy_workqueue+0x221/0xa30 [ 329.856957][T18894] ? destroy_workqueue+0x328/0xa30 [ 329.858624][T18894] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 329.860502][T18894] nci_unregister_device+0x87/0x330 [ 329.862217][T18894] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 329.864138][T18894] virtual_ncidev_close+0x4b/0xa0 [ 329.865786][T18894] __fput+0x3ff/0xb40 [ 329.867078][T18894] task_work_run+0x150/0x240 [ 329.868594][T18894] ? __pfx_task_work_run+0x10/0x10 [ 329.870260][T18894] exit_to_user_mode_loop+0x100/0x4a0 [ 329.872048][T18894] do_syscall_64+0x67c/0xf80 [ 329.873663][T18894] ? clear_bhb_loop+0x40/0x90 [ 329.875181][T18894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.877220][T18894] RIP: 0033:0x7f316ad9c799 [ 329.878882][T18894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.886308][T18894] RSP: 002b:00007ffe1232f798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 329.889201][T18894] RAX: 0000000000000000 RBX: 00007f316b017da0 RCX: 00007f316ad9c799 [ 329.892243][T18894] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 329.894757][T18894] RBP: 00007f316b017da0 R08: 0000000000000006 R09: 0000000000000000 [ 329.897336][T18894] R10: 00000000003ff558 R11: 0000000000000246 R12: 00000000000508cf [ 329.899915][T18894] R13: 00007f316b01609c R14: 0000000000050610 R15: 00007f316b016090 [ 329.902442][T18894] [ 330.972619][T18894] Shutting down cpus with NMI [ 330.975056][T18894] Kernel Offset: disabled [ 330.976518][T18894] Rebooting in 86400 seconds..