last executing test programs: 1m47.118168342s ago: executing program 0 (id=1590): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bc25, 0x2, {0x0, 0x0, 0x0, r2, {0xfff3, 0x5}, {}, {0x3, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r3, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x78, 0x7, 0x9}, [{0x6474e551, 0x2, 0x2007, 0x5, 0x7fff, 0x7980, 0x0, 0x3}]}, 0x78) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'macvlan0\x00', @ifru_addrs=@l2={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendto$inet6(r7, &(0x7f0000000080)="29a422", 0x3, 0x4004, 0x0, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/69, 0x45}], 0x1}, 0x200321b1) ioctl$sock_netdev_private(r5, 0x8947, &(0x7f0000000000)) shutdown(r4, 0x1) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r3) (async) close(r3) fspick(r3, &(0x7f0000000000)='./file0\x00', 0x0) (async) fspick(r3, &(0x7f0000000000)='./file0\x00', 0x0) 1m47.038450925s ago: executing program 0 (id=1591): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40160f000000012720dcfe14c639a500ba1716271695"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b14, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, 0x0, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x400, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) r5 = socket(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x113, &(0x7f0000000900)={0x0, 0xcb7a, 0x800, 0x2, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f00000008c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r5}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0xfeffffff, r5, 0x23, {0x3b4, 0xfffffffffffffffe}, 0x6}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m46.486231782s ago: executing program 0 (id=1601): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) recvmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0x5) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) recvmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0x5) (async) 1m46.484707458s ago: executing program 0 (id=1604): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYRESOCT], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40040) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m46.417861588s ago: executing program 0 (id=1606): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_READ_BER(r0, 0x80046f46, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x400017e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x20000000000006) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f00000002c0)='u', 0x1}], 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x3, 0x88980) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$FE_READ_SNR(r6, 0x80026f48, &(0x7f00000000c0)) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$FE_READ_BER(r0, 0x80046f46, &(0x7f0000000000)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) (async) inotify_init() (async) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x400017e) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) ftruncate(r5, 0x2000009) (async) sendfile(r4, r5, 0x0, 0x20000000000006) (async) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f00000002c0)='u', 0x1}], 0x1, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x3, 0x88980) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) ioctl$FE_READ_SNR(r6, 0x80026f48, &(0x7f00000000c0)) (async) 1m46.357700268s ago: executing program 0 (id=1608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x3}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r4 = memfd_secret(0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xb11d, 0xffffffff, 0xfffffff7, 0x1761d, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0xa, @void, @value, @value=r4}, 0x50) 1m30.078313891s ago: executing program 32 (id=1608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x3}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r4 = memfd_secret(0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xb11d, 0xffffffff, 0xfffffff7, 0x1761d, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0xa, @void, @value, @value=r4}, 0x50) 45.410137049s ago: executing program 3 (id=2496): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 64) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x804) syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd60"], 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r8, 0x5, 0x2000000, 0xfffffffd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x8b}]}]}, 0x28}}, 0x40014) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r12, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) sendto$packet(r5, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x6f, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) 45.306785165s ago: executing program 3 (id=2500): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtaction={0xd8, 0x30, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{0xc4, 0x1, [@m_gact={0xc0, 0x11, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xa, 0x6, 0x0, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x0, 0x8, 0x1, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe85, 0xffffff57, 0x10000000, 0x32, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x515a, 0x7, 0x10000000, 0xff, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x617, 0x0, 0x7, 0x10}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1730, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x7d4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc004}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010027bd7004fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="202a06006b80010024001280110001006272696467655f736c617665000000000c000580050028"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000018fedbff32e38812d01f8470ac2ccc37f4251d010000150002a743ea6d60020000f95bd1d17a4c86f71db90316a140a900"], 0x2c}, 0x1, 0x0, 0x0, 0x64044050}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xf}, 0x8) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x5, 0x2, 0xad, 0x6}, {0x5, 0x0, 0x1, 0x2}]}, 0x10) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x2, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x75a5}, {0x9, 0xbd8, 0x0, 0x7, 0x4, 0x2}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'veth0_macvtap\x00', 0x101}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) 45.15287611s ago: executing program 3 (id=2504): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x6840, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010109}]}, &(0x7f0000000280)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0x9}, &(0x7f0000000100)=0x8) 45.099005562s ago: executing program 3 (id=2505): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r3, 0x30d}, 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) mkdir(&(0x7f0000000080)='./file1\x00', 0xac) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = gettid() r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x20, r7, 0x0, 0x0) ptrace$getregs(0xc, r7, 0xcd6, &(0x7f00000002c0)=""/4096) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000600)=0x0) syz_clone3(&(0x7f0000000680)={0x80000, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000400), {0xf}, &(0x7f0000000480)=""/146, 0x92, &(0x7f0000000540)=""/189, &(0x7f0000000640)=[r6, r7, r8], 0x3, {r4}}, 0x58) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000001480)) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r9], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000100)=[0x4], 0x0, 0xffffffffffff4a4b}) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000001300), 0x2040, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001340)={0x0, 0x3ff, 0x1, 0x1}, &(0x7f0000001380)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000013c0)={r11, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0), 0x200040, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a958, 0x3, 0x3, 0x6a1c000, 0x5e96, 0x800000000000001, 0x5c}) 45.025645122s ago: executing program 3 (id=2506): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r2, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080045b4003800000000a3069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000fe10f989d0ec0b91bd3ff7608c16680453a8f2b1a9a9038984ba0d8435a18d54aafd7674c2f7d101c1936af6882681d604edcd421b2c8bdf23fe049f6e14a66b059b8a7fa7cabb57e709a1fb8857ec338d97d207bc46a3642573459c3e688d93a749b26cecb1946ac5ea6d8dc35838790915a349aeae579839644efc0000000000000000"], 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506e500001b0000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYRES8=r9], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x200408c0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB="e432e37c1e9a6fb56ba8824022eb7591b81b8732dce627b51dd5a2d4194c1dbeb7c7b5392eff11f3a65389ff1f1e98e5", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xf) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000240)=@req3={0x3, 0x1, 0x6, 0x3, 0x6, 0xfffffffc, 0x200}, 0x1c) 44.629378125s ago: executing program 3 (id=2513): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0xc0045401, &(0x7f0000001280)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x80, r4, 0x5, 0x3, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {0x1}, @broadcast, @device_a, @from_mac=@device_b}, 0x200000000, @random=0x5, 0x448, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x2, 0xc0}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x53) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) r9 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000000080)={0x4ae, 0x100, 0x80000005, 0x3, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x8c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x41) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x8c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x41) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x0) (async) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074050111e0014000000110001"], 0x5c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074050111e0014000000110001"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 44.552401431s ago: executing program 33 (id=2513): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0xc0045401, &(0x7f0000001280)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x80, r4, 0x5, 0x3, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {0x1}, @broadcast, @device_a, @from_mac=@device_b}, 0x200000000, @random=0x5, 0x448, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x2, 0xc0}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x53) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) r9 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000000080)={0x4ae, 0x100, 0x80000005, 0x3, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x8c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x41) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x8c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x41) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x0) (async) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074050111e0014000000110001"], 0x5c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074050111e0014000000110001"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.058461377s ago: executing program 2 (id=2979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)={0x38, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="130000001900010027bd7000ffdbdf250a141000fc00000100080000080006000100000008000400e124d911d5315d15d4e7e385f21f58b0f82f701cd5709ec6ff03143a16e3c8c9fb8a8072f60a132386d2a4ee15dde8f6c3c954cd963ca8b9b1ffb46a34e42f8796b5fcc65567f9fb441024e367456d87ee6de16150342dd72aaf0123c5d7fd983aa08a19231a5bf9df1a59e68d8905d2288b148f4d0f9c", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x806) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x10bc01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff02000000000000000000000000000100000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="680100001a000100feffffff0001000000000000000000000000ffffe0000002fe8800000000000000000000000001010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000008001f0003"], 0x168}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)={0x35c, r7, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x325, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @random="ead44c7ebdf9", {0x4, 0xffb}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x35c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f00000010c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x30, r11, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {0x0, 0x4107}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x5, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0xffffffff, 0x1, 0xfffffffffffffffe, 0x9, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x142790}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 760.209726ms ago: executing program 5 (id=2988): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r4 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xf}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) (rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async, rerun: 32) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) (rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x1, 0x3}, 0x50) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 32) r11 = socket(0x10, 0x2, 0x0) (rerun: 32) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616e676c720000000000000000000000000afc19760ee00d1f0000000000000500"], &(0x7f0000000100)=0x2d) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000004, 0x0, @mcast1, @empty, 0x90, 0x80, 0xfffffffc, 0xdc67}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) 547.103777ms ago: executing program 5 (id=2992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) setfsgid(0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r2, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0080974f", @ANYRES16=r1, @ANYBLOB="010024bd7000fbdbdf250200000008006100040000000400d1"], 0x20}, 0x1, 0x0, 0x0, 0x64008044}, 0x4000110) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000001000000000027fadcbff000300", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) 472.70949ms ago: executing program 5 (id=2993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x923}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}]}}]}, 0x40}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x1e) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth1_virt_wifi\x00', @broadcast}) 472.11737ms ago: executing program 2 (id=2994): clock_getres(0xfffffffffffffff1, 0x0) socket$kcm(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r1 = socket$inet6(0xa, 0x5, 0x4) fdatasync(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r4 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x100000001, 0x0, 0x0, '\x00', {0x100, 0x5, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0xa, 0x0, {0xfffffffffffffffd}, {0x5}, {0x0, 0x4}, {0x5}, 0x1, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00010028bd70000400000002000000", @ANYRES32=0x0, @ANYBLOB="00000800080001"], 0x24}}, 0x200000d0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x1fffffff}) creat(&(0x7f0000000ac0)='./file0\x00', 0x63) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800a000c609000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 386.435695ms ago: executing program 2 (id=2998): r0 = creat(&(0x7f00000000c0)='./cgroup\x00', 0x1a1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006800010003001000000000800000000000fbffffff0008000100a7aa75cb24578eb0373100"/56], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb4f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x80}}, 0x80) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0) 333.366185ms ago: executing program 1 (id=2999): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="042ffb03"], 0x2fe) r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'veth1_to_batadv\x00', {'veth1_to_hsr\x00'}, 0x5}) (async, rerun: 64) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) (rerun: 64) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x0, 0x3, 0x9}}, 0x28) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000180)=0x7fffffff, 0x8) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x4, &(0x7f0000000240)=""/4, 0x41100, 0xd, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000280)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xd, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000300)=[{0x2, 0x3, 0x7, 0x2}, {0x0, 0x2, 0x4, 0x8}, {0x3, 0x3, 0x0, 0xf}, {0x1, 0x5, 0x4, 0x8}, {0x1, 0x1, 0x0, 0x3}], 0x10, 0xfffffb0b}, 0x94) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x90080, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r0, r2, 0x2c, 0x2000, r0, @value=r3}, 0x20) (async) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000006c0)={r4}) (async) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000016c0), 0x109100, 0x0) ioctl$CDROMSUBCHNL(r5, 0x530b, &(0x7f0000001700)={0x0, 0xfc, 0x0, 0x4, 0x2, 0xc, @msf={0x6, 0x1, 0xa}, @lba=0x74}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000ff1000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001dc0)={0x148, 0x0, &(0x7f0000001c00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001780)={@fda={0x66646185, 0x3, 0x2, 0xc}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f0000001800)={0x0, 0x20, 0x38}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001900)={@fda={0x66646185, 0x5, 0x0, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000001840)=""/139, 0x8b, 0x1, 0x35}, @fda={0x66646185, 0x3, 0x0, 0x38}}, &(0x7f0000001980)={0x0, 0x20, 0x48}}, 0x40}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000019c0)={@flat=@weak_binder={0x77622a85, 0x80, 0x1}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x4, 0x2, 0x7}}, &(0x7f0000001a40)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001b40)={@fda={0x66646185, 0x1, 0x1, 0x32}, @ptr={0x70742a85, 0x1, &(0x7f0000001a80)=""/174, 0xae, 0x0, 0x3}, @fd}, &(0x7f0000001bc0)={0x0, 0x20, 0x48}}}, @dead_binder_done, @enter_looper], 0x30, 0x0, &(0x7f0000001d80)="6e48ab231f788f77047af9c21e22207a82000363bc207ac19700497250988ffda4e3dd77fe33c246aba5b80663f743da"}) (async, rerun: 64) mprotect(&(0x7f0000f75000/0x1000)=nil, 0x1000, 0x1000000) (async, rerun: 64) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ef0000/0x3000)=nil, r6, 0x1000000, 0x810, r1, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e00)={0x0}, &(0x7f0000001e40)=0xc) syz_open_procfs(r7, &(0x7f0000001e80)='net/ipv6_route\x00') (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001f40)={0x34, 0x0, &(0x7f0000001ec0)=[@acquire_done={0x40106309, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @decrefs={0x40046307, 0x2}], 0x3d, 0x0, &(0x7f0000001f00)="55745ba9dc8233355409597f9d3609c113d5f712164510b585dc080d81f8720363f8b3e0ecf6307b9c888f9465871cb230b06bada9d8bb239d450df0c9"}) (async) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000001f80)=0x4, 0x4) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001fc0)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000002100)={0x10, 0x0, &(0x7f0000002000)=[@clear_death={0x400c630f, 0x2}], 0x97, 0x0, &(0x7f0000002040)="ccaf972fe72259debe834e5cbbe2f8ec311a468b66124c7bcaecac382758280646fbed37d81b63cebc360ee4cd878b44585f10146d5da098c18596ecc9291cae806b31819a09e0002b6cc873e0c5f73f7a60029d79e6cda0c36bc31ad93df3e4ca63e5a1e5d3ff419b084fa16810339b5c9864030726be0e232a5f815467174ae919a111effac2816ffa35c8dc00a0d8db2e59878cf7f2"}) (async) connect$vsock_stream(r3, &(0x7f0000002140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 321.491064ms ago: executing program 2 (id=3001): r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x71bd2b, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x8000}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9b0d}, @TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x50}}, 0x2000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'pimreg\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x144, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x91, 0xc, "611d4e0ca52e36f918f2ee85137ad28160af5be656effa808e929d689c18a5d339ddfe8899567691ed5500abcbb1c474bdce7815ea1fdf37b86a307adf42a6b88e6a5ae6827cd97fb46b6e2704b573104202d13118914d8cb6ab28a489d11e6eb68bff5a7b302c2a87b7c2b9240363007aa4a64f38f48c9a0da552cc624ef6240821ccfd69c73fff2def1733c3"}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7e63da48}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b1c27c6}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c12a5ea}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6ce4cb48}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e463e9e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6642913a}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x44194}, 0x1) 318.360271ms ago: executing program 5 (id=3002): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) ppoll(&(0x7f0000000a00)=[{r4, 0x8010}], 0x1, &(0x7f0000000a80)={0x0, 0x3938700}, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x7}, @fda={0x66646185, 0x1, 0x1, 0x26}, @fda={0x66646185, 0x1, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000000000a02000000000000000000000105000000000001000005000000008a87189800fd0000b45e3412d509"], 0x0, 0x4e, 0x0, 0x1}, 0x20) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) dup(r9) 315.263644ms ago: executing program 1 (id=3003): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x5}]}]}}, 0x0, 0x32}, 0x20) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x7, 0x6204, 0x2}) 226.647882ms ago: executing program 4 (id=3004): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x258, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xd, 0x3, 0x5919e514, 0x1}}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x101, 0x4033e375, 0x4bb5, 0x1400b, 0x8000, 0x80, 0x3}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x1, 0x0, 0x0, 0x300], 0x5, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x458) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x4, 0x9, 0x0, 0x0, 0xf, 0x10000}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000143b2000000ffdbdf25000000005972b590956def739d242c3c0f054d11d8c0eed26d8e84b30babb85c8e45428c1019a1ca3d4fe5ca1ad6611b0d361b176e78779ee583cab19ef5c40c728e15cb87f5f9eb59ccb61ae156e7c9f6632924ea52eb0a78a576ad89b279b63b65c073535c7c73d815260cf6f4589fe570563e14841c5418b7fc9b004274883fd0ce675943415c3b2fbcb829223bd1b852a3eb40b3af2f17ddab9271073706571d196b059b839b2f1ad765ed5629a50cc56d7c6c48c0f1b312530d268927", @ANYRES32=0x0, @ANYBLOB="850b010000000000140003006d6163736563300000000000000000000a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) close(r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) 58.999453ms ago: executing program 1 (id=3005): timer_create(0x2, 0x0, &(0x7f0000000940)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='romfs\x00', 0x321004d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) timer_create(0x2, 0x0, &(0x7f0000000940)) (async) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) (async) timer_gettime(0x0, &(0x7f0000000080)) (async) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='romfs\x00', 0x321004d, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) 58.629738ms ago: executing program 4 (id=3006): r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$rfkill(r3, &(0x7f00000000c0), 0x8) r4 = dup(r2) r5 = fanotify_init(0x8, 0x80000) fanotify_mark(r5, 0x200, 0x8001021, r4, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000040)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) ioctl$COMEDI_INSNLIST(r8, 0x8010640b, &(0x7f0000000100)={0x2, 0x0}) acct(&(0x7f0000000000)='./file1\x00') mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x4000) 56.785716ms ago: executing program 2 (id=3007): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$ax25(0x3, 0x0, 0xcc) (async) r1 = syz_init_net_socket$ax25(0x3, 0x0, 0xcc) bind$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) bind$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) (async) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000000cb6f0dc0c9b035be000000100000050200000d0000000005000000000000000019000000000000040000000000000c02000000000000094f00198f0af34a08487f4ac0c8fd3e1579f7964f729ad3b5f9dc4a0ef2d2d244d5a4329d28b2e4119461844680ecc7a369b9004c9a54049be1bc8ad20bd9635e04d5"], &(0x7f00000010c0)=""/217, 0x52, 0xd9, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000000cb6f0dc0c9b035be000000100000050200000d0000000005000000000000000019000000000000040000000000000c02000000000000094f00198f0af34a08487f4ac0c8fd3e1579f7964f729ad3b5f9dc4a0ef2d2d244d5a4329d28b2e4119461844680ecc7a369b9004c9a54049be1bc8ad20bd9635e04d5"], &(0x7f00000010c0)=""/217, 0x52, 0xd9, 0x1}, 0x28) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52040000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="98000000", @ANYRES16=r7, @ANYBLOB="000a28bd7000fcdbdf254c0000000c009900f7ffffff6c0000000c0058004c000000000000000c0058004d000000000000000c00580070000000000000000c0058006e000000000000000c00580036000020000000000c00580009000000000000000c00580032000000000000000c00580033000000000000000c00580046000000000000000c0058000600000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52040000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="98000000", @ANYRES16=r7, @ANYBLOB="000a28bd7000fcdbdf254c0000000c009900f7ffffff6c0000000c0058004c000000000000000c0058004d000000000000000c00580070000000000000000c0058006e000000000000000c00580036000020000000000c00580009000000000000000c00580032000000000000000c00580033000000000000000c00580046000000000000000c0058000600000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x8010, r6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r6, 0x80796c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 56.336984ms ago: executing program 1 (id=3008): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="89000000120081ae08060cdc03000001", 0x10}], 0x1, 0x0, 0x0, 0x7}, 0x24002040) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x13e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000034c0)={0x60, r9, 0x1, 0x2004, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x60}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0xb0, r9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0xd1368868bad5f8c9, 0x7, 0x7f, 0x1000, {{0x16, 0x4, 0x0, 0x14, 0x58, 0x68, 0x400, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0x78, 0x3, 0x0, [{@multicast2, 0x1ff}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x87}, {@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}]}]}}}}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x390, 0xffffffff, 0xd0, 0xd0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0x6}, {0xffffffffffffffff, 0x3, 0x1}, 0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 56.091041ms ago: executing program 4 (id=3009): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x3, 0x8}, @timestamp={0x44, 0x4, 0xee, 0x0, 0x4}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffff, {[@eol, @window={0x3, 0x3, 0x86}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x3, 0x8}, @timestamp={0x44, 0x4, 0xee, 0x0, 0x4}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffff, {[@eol, @window={0x3, 0x3, 0x86}]}}}}}}}, 0x0) 55.055655ms ago: executing program 4 (id=3010): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x6, 0x7, 0xc, 0x3, 0x0, "a7ec4e8cdef9903e043edf41399b15e38c2090", 0x7, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[0x61f4, 0x3, 0x0, 0xb, 0x40, 0xc0b]}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/hibernate_compression_threads', 0x186320, 0x20a) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000180)=0x4, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x8) (async) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil}) (async) close_range(r2, r2, 0x0) (async) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000240)={0x7, 0x298b739, 0x0, 0x2, 0x61cb, 0x0, 0xa393}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r3, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1ac, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfa}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0xef, 0x4, 0x6, 0x9, 0x2, 0x100]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_SRC={0xa4, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x275}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6c8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x67fe}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x1, 0x4, {{0x18, 0x4, 0x2, 0x1d, 0x60, 0x67, 0x0, 0x73, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x17, 0xd9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x1b, 0x40, [@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x18, 0xb, 0x0, 0xe, [0x6b, 0x5, 0x10, 0x1, 0x9]}, @noop]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000780)={@dev, 0x0}, &(0x7f00000007c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x10, 0x80, 0x0, 0xfffffff4, {{0x7, 0x4, 0x0, 0x6, 0x1c, 0x68, 0x0, 0x7, 0x29, 0x0, @remote, @multicast2, {[@noop, @generic={0x88, 0x4, "807e"}]}}}}}) (async) getsockname$packet(r2, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x80, 0x0, 0xdc, 0x7, {{0x2c, 0x4, 0x1, 0x3a, 0xb0, 0x66, 0x0, 0x7, 0x29, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x32, 0x3, 0x7, [{@multicast1, 0x4}, {@broadcast, 0xadf}, {@rand_addr=0x64010100, 0x8}, {@remote, 0x1000}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x9}, {@multicast1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x67, 0x1, 0x0, [{@remote, 0x3}, {@multicast1, 0x8f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc000000}, {@loopback, 0x2}, {@rand_addr=0x64010100, 0xf9d}, {@empty, 0x5}]}, @timestamp_addr={0x44, 0x2c, 0x2f, 0x1, 0x4, [{@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xc}, {@rand_addr=0x64010102, 0xd9}, {@private=0xa010102, 0x3}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x6, [0x7fffffff]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000a80)={0x0, @broadcast, @private}, &(0x7f0000000ac0)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x4, 0x7, {{0xd, 0x4, 0x1, 0x28, 0x34, 0x66, 0x0, 0xd6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, {[@rr={0x7, 0x1f, 0x27, [@empty, @loopback, @rand_addr=0x64010102, @multicast1, @rand_addr=0x64010101, @local, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x700, 0x1, 0xff, 0x1, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x67, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x15, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x4bc9261d}, {@multicast2, 0x8000}, {@broadcast, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x6}]}, @lsrr={0x83, 0x7, 0x10, [@rand_addr=0x64010102]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000d40)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000001040)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x114002}, 0xc, &(0x7f0000001000)={&(0x7f0000000d80)={0x248, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040000) 52.244706ms ago: executing program 2 (id=3011): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_io_uring_setup(0x56d6, &(0x7f0000000440)={0x0, 0xabf4, 0x8, 0x4, 0x24f}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r12) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) accept$unix(r12, &(0x7f0000000080), 0x0) r14 = geteuid() quotactl_fd$Q_GETINFO(r12, 0xffffffff80000502, r14, &(0x7f0000000380)) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x2c, r0, 0x1, 0x70bd2d, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}]}, 0x2c}}, 0x8000040) 51.403317ms ago: executing program 4 (id=3012): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)='\x00', 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308", 0xed}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe87", 0x14}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f", 0xb7}, {&(0x7f0000001300)}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)}}], 0x1, 0x40800) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x9000, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0x1f, 0x2, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0xfe, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0xff, 0x1}, {0x100000, 0x60000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0xa000, 0x30000, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x8224000, 0x0, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x3, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0x1, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xb900, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="67670000fcffffff850000002800000018121300", @ANYRESOCT, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200, 0x0, 0x0, 0x7fff0000}]}) write$cgroup_pressure(r7, &(0x7f0000000080)={'full', 0x20, 0x8, 0x20, 0x8001}, 0x2f) (async) close_range(r8, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) 50.332427ms ago: executing program 5 (id=3013): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x122) (async) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x2, 0x8}, {0x4, 0x4}]}, 0x14, 0x2) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000400)={0x38, &(0x7f0000000500)=[{0x2c, '\x00', @data=0x3, 0x7fffffff}]}) (async) write$rfkill(r1, &(0x7f0000000100)={0x5, 0x3, 0x5, 0xff}, 0x8) 1.64859ms ago: executing program 1 (id=3014): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000040)) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0x404000) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x5, 0x2, 0x40008000}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x93, "cdc513572c8f876c51857f8b1d69ee340db1f1ecd7f708146e3cc61f9fbf773522ff5621e8b97acccf14d6e78e58d2d0c25d996f2b12b652bc14bf7c13fd4d5ce2bd882dca5d15efb14d69f430f7c394dab808594e2f7b405b701d2b891764d8321dbf11c38925db37cf8934e8c3e2de67b68e6d47944e90ed4190ae9a19c03f90a6943f2308fd1c1cc28641837c74228c418a"}, &(0x7f00000001c0)=0x9b) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x8, 0xce16, 0x2, 0x9, 0x4, 0x7fffffff, 0xe, 0xffffff82, r2}, &(0x7f0000000240)=0x20) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000280)={0x10, 0x0, "8ffb5054e11be286eb2aa56c0ef99baf"}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000004c0)={0x1, 0x1, 0x1000, 0xf0, &(0x7f00000002c0)="a480a6f21f72c4e5bc3c52599df509a078e90fcd3bca88665cf80e3261f43a081ca39198b5adad7ef9dacf5144faa34722e22f4c8ab72be44285b67299b7efc1846a784f0bbc41544c0b332bfa42327c00a4a375801337f0d299940e80c0bc440551e6fee8b65057ae8ded50d7f130dc814d815818d4d265fe45d41d68e70ea278237c38590502d5116c93775b8306b45153cf87d254baa77b505044d429e4c3d23244e9bdcb568d454391b2264a102df4a915c6e0ac68ee0da9e9716d127c7f64423028319f0afd89ff78e7acbb531f62244c9c5d74f21a094243e0f4fd04d368fad8055f306f44a1c76d9b3eaefb93", 0xe0, 0x0, &(0x7f00000003c0)="81b7b4d822552884903ee610ffb3a2e8634212200c022bc657f502d50f9a4833d778a28de4dccf7e06d20b38aea561ee318b1a3fc1998b294f189f8ac5e1ce66eecd674bda88e6753c5a7d53c136b06e0110204424ca9b4c77da885529897766ddf826deb25f8e68cf1642bcbeb6a87020ed06596b5d56e9016431392cabf38e0d06f25bf388e9b51838b04336474a21478595c2a87e91129930c0149d29e57502b8e4236bc346794468475bfdbc65c20b4ef1f4791eb1734f9af6119e3e9f0258c0a459ae601605ef4b957623e3466629865cbf663c698ba6f99bddda9554f3"}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000540)={0x9, 0x8, 0x0, 0x200, 0xc4b}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x4, 0x5, 0x20, @private0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8000, 0x80, 0x3, 0x7}}) getpeername$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0}, &(0x7f0000000700)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000840)={r3, 0x80000001, 0x30}, &(0x7f0000000880)=0xc) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x80800, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000002c00)={0x2, 0x3, {0xffffffffffffffff}, {0xee01}, 0xc, 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) stat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000005000)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f0000005100)=0xe8) lstat(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000005500)='./file0\x00', 0x800, 0x1, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000000900)="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", 0x2000, &(0x7f0000005780)={&(0x7f0000002900)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x3, 0x2020004, 0xfffc, 0x0, 0xe, 0x8, 0x0, 0x0, 0x10, 0x6}}, &(0x7f0000002980)={0x18, 0x0, 0x800, {0x9}}, &(0x7f00000029c0)={0x18, 0x0, 0x1, {0x4}}, &(0x7f0000002a00)={0x18, 0x0, 0x3, {0x6}}, &(0x7f0000002a40)={0x18, 0x0, 0x0, {0x11}}, &(0x7f0000002a80)={0x28, 0x0, 0x3, {{0x3, 0x9}}}, &(0x7f0000002ac0)={0x60, 0xfffffffffffffffe, 0x0, {{0x1000000000000, 0x1, 0x0, 0x3, 0x0, 0x2e, 0x3, 0x3}}}, &(0x7f0000002b40)={0x18, 0xffffffffffffffda, 0xff, {0x74}}, &(0x7f0000002b80)={0x13, 0xffffffffffffffda, 0x759e, {'!{\x00'}}, &(0x7f0000002bc0)={0x20, 0x0, 0x5, {0x0, 0x13}}, &(0x7f0000002cc0)={0x78, 0x0, 0xff, {0x10001, 0x8, 0x0, {0x1, 0x2, 0xffffffffffffffff, 0x82, 0x9, 0x6, 0x5, 0x4, 0x1, 0x4000, 0x8, r8, r9, 0x9, 0x3}}}, &(0x7f0000002e00)={0x90, 0x0, 0x5, {0x1, 0x2, 0x9, 0x3fc44039, 0x20000000, 0x0, {0x4, 0x2, 0x92f, 0xa464, 0xb7, 0x3, 0x4d, 0x4, 0x752, 0xa000, 0x9, 0xee00, r10, 0xd, 0x5d36}}}, &(0x7f0000002ec0)={0x50, 0xfffffffffffffffe, 0x7, [{0x5, 0x0, 0x1, 0x1f4c, '{'}, {0x6, 0x4, 0x8, 0x3, 'syztnl0\x00'}]}, &(0x7f0000005200)={0x150, 0x0, 0x7, [{{0x3, 0x2, 0x817, 0xdfe, 0x9, 0x0, {0x1, 0xf, 0x4, 0xf, 0x9, 0xffff, 0x3, 0x1, 0x3, 0x8000, 0xdab7, r11, r12, 0x8, 0x686f}}, {0x0, 0xc9c, 0x8, 0x8, 'ethtool\x00'}}, {{0x0, 0x2, 0x5, 0x4, 0x5, 0x3, {0x1, 0x4, 0x0, 0x613d, 0x7c8, 0x2, 0x3ff, 0x3, 0x80, 0x8000, 0x6, r13, r14, 0x3e2b, 0x6}}, {0x6, 0x9, 0x8, 0x10001, 'syztnl0\x00'}}]}, &(0x7f0000005380)={0xa0, 0x0, 0x8, {{0x1, 0x3, 0x2, 0x8000000000000001, 0x8001, 0x8, {0x0, 0x622, 0x9, 0x100, 0xf9, 0x8, 0x9a4c, 0x1, 0x800, 0x0, 0x5, 0xee01, 0xee01, 0x6, 0x20}}}}, &(0x7f0000005440)={0x20, 0xfffffffffffffff5, 0x5, {0xfffffff1, 0x0, 0xe9d, 0x29}}, &(0x7f0000005640)={0x130, 0x0, 0x2, {0x709, 0x0, 0x0, '\x00', {0x7ff, 0xd3, 0x8, 0x4, r15, r16, 0x8000, '\x00', 0xbe6, 0x3, 0x0, 0x401, {0x2, 0x7fff}, {0x8, 0xffff}, {0x5, 0x2}, {0x8, 0xea0f}, 0x1, 0x401, 0x309, 0x10000}}}}) r17 = syz_genetlink_get_family_id$devlink(&(0x7f0000005880), r7) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000005a00)={&(0x7f0000005840), 0xc, &(0x7f00000059c0)={&(0x7f00000058c0)={0xd0, r17, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) r18 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005a40), 0x2, 0x0) open_by_handle_at(r18, &(0x7f0000005a80)=@fuse={0xc, 0x81, {0x1, 0xc965, 0xffffffff}}, 0xa0100) 159.661µs ago: executing program 1 (id=3015): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x6, 0x2}, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000040), 0x0}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x24044004) 0s ago: executing program 5 (id=3016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc040) kernel console output (not intermixed with test programs): lue for 'max' [ 178.834796][T12893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2125'. [ 179.703935][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2130'. [ 179.741283][T12912] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 179.759999][T12912] veth3: entered promiscuous mode [ 179.820693][T12921] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2131'. [ 179.828965][T12921] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 179.965824][ T40] audit: type=1400 audit(1774479529.169:1344): avc: denied { checkpoint_restore } for pid=12931 comm="syz.2.2134" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.011720][ T40] audit: type=1800 audit(1774479529.216:1345): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.2134" name="/newroot/426/bus/#2298//deleted" dev="tmpfs" ino=2298 res=0 errno=0 [ 180.030501][T12933] team0: No ports can be present during mode change [ 180.040982][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 180.052579][T12933] team0 (unregistering): Port device team_slave_0 removed [ 180.070141][T12933] team0 (unregistering): Port device team_slave_1 removed [ 180.070663][ T40] audit: type=1400 audit(1774479529.263:1346): avc: denied { create } for pid=12940 comm="syz.1.2136" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.083813][ T40] audit: type=1400 audit(1774479529.272:1347): avc: denied { read write } for pid=12940 comm="syz.1.2136" path="/482/file0/bus" dev="9p" ino=76546171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.196173][T12947] lo speed is unknown, defaulting to 1000 [ 180.258259][T12952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2139'. [ 180.796597][ T9207] Bluetooth: hci2: Frame reassembly failed (-84) [ 180.810625][ T40] audit: type=1400 audit(1774479529.955:1348): avc: denied { bind } for pid=12974 comm="syz.4.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 180.934424][ T6000] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 180.979647][T12958] trusted_key: encrypted_key: insufficient parameters specified [ 181.109332][ T34] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 181.220576][T13015] bond9: entered promiscuous mode [ 181.222422][T13015] 8021q: adding VLAN 0 to HW filter on device bond9 [ 181.236964][ T40] audit: type=1400 audit(1774479530.348:1349): avc: denied { read } for pid=13013 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 181.259208][ T34] usb 6-1: device descriptor read/64, error -71 [ 181.516088][ T34] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 181.569881][T13071] new mount options do not match the existing superblock, will be ignored [ 181.654515][ T34] usb 6-1: device descriptor read/64, error -71 [ 181.772503][ T34] usb usb6-port1: attempt power cycle [ 182.076151][ T5934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.079901][ T5934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.083240][ T5934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.087152][ T5934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.090453][ T5934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.113710][T13105] lo speed is unknown, defaulting to 1000 [ 182.135815][ T34] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 182.158682][ T34] usb 6-1: device descriptor read/8, error -71 [ 182.218720][T13105] chnl_net:caif_netlink_parms(): no params data found [ 182.269473][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.271760][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.274160][T13105] bridge_slave_0: entered allmulticast mode [ 182.277424][T13105] bridge_slave_0: entered promiscuous mode [ 182.280513][T13105] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.282818][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.285243][T13105] bridge_slave_1: entered allmulticast mode [ 182.287990][T13105] bridge_slave_1: entered promiscuous mode [ 182.305675][T13105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.310448][T13105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.325721][T13105] team0: Port device team_slave_0 added [ 182.328977][T13105] team0: Port device team_slave_1 added [ 182.341809][T13105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.344079][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.352979][T13105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.357361][T13105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.359566][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.367789][T13105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.391293][T13105] hsr_slave_0: entered promiscuous mode [ 182.394081][T13105] hsr_slave_1: entered promiscuous mode [ 182.396206][T13105] debugfs: 'hsr0' already exists in 'hsr' [ 182.398015][T13105] Cannot create hsr debugfs directory [ 182.415168][ T34] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 182.435844][ T34] usb 6-1: device descriptor read/8, error -71 [ 182.483047][T13105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.486730][T13105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.553748][ T34] usb usb6-port1: unable to enumerate USB device [ 182.592862][T13105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.596130][T13105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.706920][T13105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.710382][T13105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.839472][T13163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18014 sclass=netlink_route_socket pid=13163 comm=syz.2.2194 [ 182.851732][T13160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=13160 comm=syz.4.2193 [ 182.871793][T13105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.875387][T13105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.899669][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 182.899681][ T40] audit: type=1400 audit(1774479531.910:1354): avc: denied { mount } for pid=13166 comm="syz.4.2195" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 182.909867][ T40] audit: type=1400 audit(1774479531.910:1355): avc: denied { unmount } for pid=13166 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 182.917547][ T40] audit: type=1400 audit(1774479531.910:1356): avc: denied { mounton } for pid=13166 comm="syz.4.2195" path="/67/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 182.958870][ T5937] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 182.960225][ T5934] Bluetooth: hci2: command 0xfc11 tx timeout [ 183.042024][T13105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.050197][T13105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.057384][T13105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.062402][T13105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.228587][T13177] rdma_rxe: rxe_newlink: failed to add lo [ 183.242190][T13105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.259827][T13105] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.266052][T13144] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.269075][T13144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.278153][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.281297][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.399110][T13105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.418233][T13105] veth0_vlan: entered promiscuous mode [ 183.424046][T13105] veth1_vlan: entered promiscuous mode [ 183.443741][T13105] veth0_macvtap: entered promiscuous mode [ 183.449855][T13105] veth1_macvtap: entered promiscuous mode [ 183.464610][T13105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.474763][T13105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.480683][ T40] audit: type=1400 audit(1774479532.453:1357): avc: denied { name_bind } for pid=13186 comm="syz.2.2197" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 183.482274][T13188] sctp: [Deprecated]: syz.2.2197 (pid 13188) Use of int in max_burst socket option. [ 183.482274][T13188] Use struct sctp_assoc_value instead [ 183.483575][T13144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.483695][T13144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.483723][T13144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.483741][T13144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.538928][T13146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.542296][T13146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.559109][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.561841][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.622776][T13193] binder: BC_ATTEMPT_ACQUIRE not supported [ 183.624673][T13193] binder: 13192:13193 ioctl c0306201 200000000480 returned -22 [ 183.730406][ T40] audit: type=1400 audit(1774479532.696:1358): avc: denied { bind } for pid=13200 comm="syz.4.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 184.179767][T13213] bridge7: entered promiscuous mode [ 184.182119][T13213] bridge7: entered allmulticast mode [ 184.229348][T13215] __nla_validate_parse: 3 callbacks suppressed [ 184.229366][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 184.316763][ T5937] Bluetooth: hci5: command tx timeout [ 184.478588][T13231] overlayfs: upper fs does not support file handles, falling back to index=off. [ 184.529127][T13234] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.555387][T13234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.571656][T13234] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 184.655379][T13245] program syz.1.2218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.722941][T13249] netlink: 'syz.1.2219': attribute type 11 has an invalid length. [ 184.726303][T13249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2219'. [ 184.782211][ T40] audit: type=1400 audit(1774479533.669:1359): avc: denied { bind } for pid=13251 comm="syz.1.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.954883][ T40] audit: type=1800 audit(1774479533.828:1360): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.2223" name="/newroot/496/file0" dev="tmpfs" ino=2654 res=0 errno=0 [ 185.041760][T13267] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2225'. [ 185.074136][T13270] netlink: 'syz.1.2226': attribute type 30 has an invalid length. [ 185.091912][T13270] bond5: option arp_missed_max: invalid value (0) [ 185.094147][T13270] bond5: option arp_missed_max: allowed values 1 - 255 [ 185.102231][T13270] bond5 (unregistering): Released all slaves [ 185.358561][T13283] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 185.379986][T13283] bond4: entered promiscuous mode [ 185.382581][T13283] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.395170][T13283] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 185.399461][T13283] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 185.402774][T13283] bond4: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 185.428137][T13288] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 185.431437][T13288] UDF-fs: Scanning with blocksize 2048 failed [ 185.434948][T13288] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 185.438033][T13288] UDF-fs: Scanning with blocksize 4096 failed [ 185.457700][T13288] tipc: Started in network mode [ 185.459890][T13288] tipc: Node identity bec1fa18fcf5, cluster identity 4711 [ 185.463619][T13288] tipc: Enabled bearer , priority 0 [ 185.467232][T13288] syzkaller0: entered promiscuous mode [ 185.469714][T13288] syzkaller0: entered allmulticast mode [ 185.479212][T13288] tipc: Resetting bearer [ 185.485516][T13287] tipc: Resetting bearer [ 185.496077][T13287] tipc: Disabling bearer [ 185.604797][T13298] netlink: 'syz.1.2236': attribute type 2 has an invalid length. [ 185.608048][T13298] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2236'. [ 185.766934][T13306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.782726][T13307] 9p: Bad value for 'trans' [ 185.892130][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2240'. [ 185.999775][T13314] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 186.034406][T13314] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 186.042206][T13314] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 186.100064][T13316] bond5: (slave gretap1): making interface the new active one [ 186.106811][T13316] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 186.125778][T13314] macvlan2: entered promiscuous mode [ 186.128184][T13314] macvlan2: entered allmulticast mode [ 186.131322][T13314] bond5: entered promiscuous mode [ 186.133692][T13314] gretap1: entered promiscuous mode [ 186.137983][T13314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.146491][T13314] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 186.152253][T13314] bond5: left promiscuous mode [ 186.154243][T13314] gretap1: left promiscuous mode [ 186.456306][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 186.520870][T13332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2246'. [ 186.540216][ T5937] Bluetooth: hci5: command tx timeout [ 186.640386][T13335] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 186.644153][T13335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13335 comm=syz.1.2247 [ 186.920099][T13354] netlink: 'syz.4.2252': attribute type 1 has an invalid length. [ 186.981023][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'. [ 187.006833][ T40] audit: type=1400 audit(1774479535.754:1361): avc: denied { mounton } for pid=13356 comm="syz.3.2253" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 187.006875][T13357] overlay: filesystem on ./bus is read-only [ 187.083692][T13359] xt_CONNSECMARK: invalid mode: 0 [ 187.205904][T13370] usb usb8: usbfs: process 13370 (syz.4.2257) did not claim interface 0 before use [ 187.308772][T13373] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2258'. [ 187.315918][T13373] openvswitch: netlink: Missing key (keys=40, expected=100) [ 187.390218][T13302] kexec: Could not allocate control_code_buffer [ 187.516404][T13395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13395 comm=syz.2.2264 [ 187.521638][T13395] netlink: 'syz.2.2264': attribute type 1 has an invalid length. [ 187.537335][T13395] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2264'. [ 187.541035][T13395] bond0: entered allmulticast mode [ 187.543237][T13395] bond_slave_0: entered allmulticast mode [ 187.548376][T13395] bond_slave_1: entered allmulticast mode [ 187.550868][T13395] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 187.556365][T13395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13395 comm=syz.2.2264 [ 187.668310][T13408] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 187.781441][ T40] audit: type=1400 audit(1774479536.484:1362): avc: denied { setattr } for pid=13419 comm="syz.3.2271" name="NETLINK" dev="sockfs" ino=45986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.863474][T13418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13418 comm=syz.2.2270 [ 187.868015][T13431] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 188.026650][T13454] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 188.048351][T13454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.058865][T13454] vlan0: entered allmulticast mode [ 188.060809][T13454] macsec0: entered allmulticast mode [ 188.063156][T13454] veth1_macvtap: entered allmulticast mode [ 188.066436][T13454] bond2: (slave vlan0): Error -34 calling dev_set_mtu [ 188.240075][ T1465] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 188.255377][ T5937] Bluetooth: hci4: Malformed Event: 0x02 [ 188.320621][T13465] pim6reg: entered allmulticast mode [ 188.404053][ T1465] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.406177][T13476] syzkaller0: entered promiscuous mode [ 188.411219][T13476] syzkaller0: entered allmulticast mode [ 188.413309][ T1465] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.420225][ T1465] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.428939][ T1465] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.433524][ T1465] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.443957][ T1465] usb 7-1: config 0 descriptor?? [ 188.763794][ T5937] Bluetooth: hci5: command tx timeout [ 188.909618][ T1465] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 188.919246][T13481] comedi comedi3: comedi_config --init_data is deprecated [ 190.071807][T13485] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 190.074375][T13485] pim6reg1: linktype set to 6 [ 190.083076][T13490] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 190.245897][T13509] netlink: 'syz.1.2291': attribute type 11 has an invalid length. [ 190.508911][T13522] tmpfs: Bad value for 'nr_blocks' [ 190.511754][T13523] tmpfs: Bad value for 'nr_blocks' [ 190.559349][T13525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2294'. [ 190.564770][ T40] audit: type=1400 audit(1774479539.085:1363): avc: denied { relabelfrom } for pid=13524 comm="syz.4.2294" name="NETLINK" dev="sockfs" ino=44021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 190.574367][T13525] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 190.579084][ T40] audit: type=1400 audit(1774479539.094:1364): avc: denied { relabelto } for pid=13524 comm="syz.4.2294" name="NETLINK" dev="sockfs" ino=44021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:src_t:s0" [ 190.581358][T13526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2294'. [ 190.706746][T13531] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2296'. [ 190.822103][ T40] audit: type=1400 audit(1774479539.318:1365): avc: denied { ioctl } for pid=13539 comm="syz.2.2300" path="socket:[44989]" dev="sockfs" ino=44989 ioctlcmd=0x5840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 190.835018][ T40] audit: type=1400 audit(1774479539.318:1366): avc: denied { create } for pid=13539 comm="syz.2.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.844841][ T40] audit: type=1400 audit(1774479539.337:1367): avc: denied { ioctl } for pid=13539 comm="syz.2.2300" path="socket:[44992]" dev="sockfs" ino=44992 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.859361][ T40] audit: type=1400 audit(1774479539.365:1368): avc: denied { ioctl } for pid=13539 comm="syz.2.2300" path="socket:[47111]" dev="sockfs" ino=47111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 190.859484][T13540] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=13540 comm=syz.2.2300 [ 190.875055][T13540] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=13540 comm=syz.2.2300 [ 190.969508][T13549] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 190.984402][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'. [ 190.989341][ T5937] Bluetooth: hci5: command tx timeout [ 191.007041][T13549] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.038687][T13547] netlink: 'syz.4.2302': attribute type 4 has an invalid length. [ 191.044728][ T24] usb 7-1: USB disconnect, device number 26 [ 191.504415][T13577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.958071][T13586] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2312'. [ 192.040864][ T40] audit: type=1400 audit(1774479540.460:1369): avc: denied { view } for pid=13588 comm="syz.4.2313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 192.138541][ T40] audit: type=1326 audit(1774479540.553:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.4.2315" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7dc79c799 code=0x0 [ 192.272377][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 192.276052][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2319'. [ 192.339251][T13617] tipc: Enabled bearer , priority 10 [ 192.353055][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'. [ 192.472868][T13600] infiniband syz1: set down [ 192.476743][T13600] infiniband syz1: added bond0 [ 192.518185][T13600] RDS/IB: syz1: added [ 192.520575][T13600] smc: adding ib device syz1 with port count 1 [ 192.523674][T13600] smc: ib device syz1 port 1 has no pnetid [ 192.617425][ T5937] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 192.622375][ T5937] Bluetooth: hci4: Injecting HCI hardware error event [ 192.628665][ T5937] Bluetooth: hci4: hardware error 0x00 [ 193.294653][ T40] audit: type=1400 audit(1774479541.629:1371): avc: denied { execute } for pid=13661 comm="syz.3.2332" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.425289][ T8760] tipc: Node number set to 1110768152 [ 193.503528][T13676] binder: 13675:13676 ioctl c040583c 2000000000c0 returned -22 [ 193.509911][ T40] audit: type=1400 audit(1774479541.835:1372): avc: denied { getopt } for pid=13675 comm="syz.4.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.815629][T13692] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2343'. [ 193.988279][T13706] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 194.038137][T13708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47311 sclass=netlink_route_socket pid=13708 comm=syz.4.2348 [ 194.299763][T13714] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 194.307698][T13714] bond6 (unregistering): Released all slaves [ 194.381531][T13718] syz.4.2351(13718): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 194.407247][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2350'. [ 194.651376][ T34] IPVS: starting estimator thread 0... [ 194.732867][T13729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.739891][T13727] IPVS: using max 45 ests per chain, 108000 per kthread [ 194.846781][ T5937] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 195.336570][T13736] bond6: Unable to set up delay as MII monitoring is disabled [ 195.340135][T13736] bond6 (unregistering): Released all slaves [ 195.729781][T13749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.734324][T13749] batadv_slave_0: entered promiscuous mode [ 195.737077][T13749] batadv_slave_0: entered allmulticast mode [ 195.848927][T13755] lo speed is unknown, defaulting to 1000 [ 195.878591][T13757] Bluetooth: hci1: expected 4354 bytes, got 2 bytes [ 195.896639][T13757] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 195.904532][T13757] tmpfs: Too small a size for current use [ 195.909075][T13757] Bluetooth: hci1: expected 4354 bytes, got 2 bytes [ 196.081584][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 196.081600][ T40] audit: type=1400 audit(1774479544.239:1377): avc: denied { setattr } for pid=13776 comm="syz.1.2369" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 196.195290][T13783] __nla_validate_parse: 2 callbacks suppressed [ 196.195311][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 196.424874][ T40] audit: type=1400 audit(1774479544.566:1378): avc: denied { setopt } for pid=13788 comm="syz.2.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.435839][ T40] audit: type=1400 audit(1774479544.575:1379): avc: denied { read } for pid=13788 comm="syz.2.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.538054][T13793] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 196.543145][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 196.619894][T13798] xt_hashlimit: size too large, truncated to 1048576 [ 196.623597][T13800] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 196.884865][ T40] audit: type=1326 audit(1774479544.996:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.2.2379" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde6379c799 code=0x0 [ 196.987316][ T40] audit: type=1400 audit(1774479545.090:1381): avc: denied { map } for pid=13820 comm="syz.3.2381" path="socket:[50475]" dev="sockfs" ino=50475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.999598][ T40] audit: type=1400 audit(1774479545.090:1382): avc: denied { accept } for pid=13820 comm="syz.3.2381" path="socket:[50475]" dev="sockfs" ino=50475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.106419][T13831] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 197.110216][T13833] afs: Unknown parameter 'dT' [ 197.110952][T13830] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 197.157917][T13833] overlayfs: failed lookup in lower (newroot/531, name='file1', err=-40): overlapping layers [ 197.164941][ T40] audit: type=1400 audit(1774479545.249:1383): avc: denied { write } for pid=13832 comm="syz.1.2384" dev="sockfs" ino=50482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 197.167338][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 197.176592][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 197.182926][T13833] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2384'. [ 197.211873][T13847] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 197.211873][T13847] program syz.4.2385 not setting count and/or reply_len properly [ 197.242719][T13852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 197.360545][T13857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2391'. [ 197.369714][ T40] audit: type=1400 audit(1774479545.445:1384): avc: denied { map } for pid=13856 comm="syz.1.2391" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.383390][ T40] audit: type=1400 audit(1774479545.455:1385): avc: denied { execute } for pid=13856 comm="syz.1.2391" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.477585][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 197.558934][T13872] bond6: option primary: mode dependency failed, not supported in mode broadcast(3) [ 197.565530][T13872] bond6 (unregistering): Released all slaves [ 197.584589][T13878] overlayfs: conflicting options: userxattr,metacopy=on [ 197.588272][T13878] geneve1: entered allmulticast mode [ 197.591271][T13878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2396'. [ 197.615403][T13878] tmpfs: Unknown parameter 'nr_inode' [ 197.792068][T13889] veth0_vlan: left promiscuous mode [ 197.885690][T13890] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.968437][ T6012] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 198.051918][T13896] all: renamed from bridge_slave_0 (while UP) [ 198.128904][ T6012] usb 7-1: Using ep0 maxpacket: 8 [ 198.131808][ T6012] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 198.134394][ T6012] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 198.138037][ T6012] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 198.141287][ T6012] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 198.144730][ T6012] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 198.147901][ T6012] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.152091][ T6012] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.155197][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.228220][ T29] IPVS: starting estimator thread 0... [ 198.321242][T13905] IPVS: using max 27 ests per chain, 64800 per kthread [ 198.377318][ T6012] usb 7-1: usb_control_msg returned -32 [ 198.377892][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.379817][ T6012] usbtmc 7-1:16.0: can't read capabilities [ 198.383092][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.608538][T13909] netlink: 'syz.3.2404': attribute type 1 has an invalid length. [ 198.715342][T13917] tipc: Resetting bearer [ 198.768842][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 198.777419][T13920] usbtmc 7-1:16.0: Unable to send data, error -71 [ 198.782360][T13920] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 198.795033][ T5966] usb 7-1: USB disconnect, device number 27 [ 198.887497][T13926] tun0: tun_chr_ioctl cmd 1074025675 [ 198.893216][T13926] tun0: persist disabled [ 198.907424][ T40] audit: type=1400 audit(1774479546.886:1386): avc: denied { remove_name } for pid=13925 comm="syz.3.2409" name="file0" dev="9p" ino=76546155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.045280][T13935] overlay: ./file0 is not a directory [ 199.657606][ T34] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 199.817888][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 199.821609][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.824615][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.828456][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.831988][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.836747][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.840298][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.066693][ T34] usb 7-1: GET_CAPABILITIES returned 0 [ 200.069173][ T34] usbtmc 7-1:16.0: can't read capabilities [ 200.284486][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.289147][ T24] usb 7-1: USB disconnect, device number 28 [ 200.388465][T13962] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 200.524124][T13970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'. [ 200.534914][T13970] vlan1: entered allmulticast mode [ 200.537106][T13970] veth0_to_bond: entered allmulticast mode [ 201.100850][ T6012] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 201.262848][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 201.266719][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 201.270116][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 201.273909][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 201.279385][ T6012] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 201.283031][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.286084][ T6012] usb 7-1: Product: syz [ 201.287608][ T6012] usb 7-1: Manufacturer: syz [ 201.289608][ T6012] usb 7-1: SerialNumber: syz [ 201.293761][ T6012] usb 7-1: config 0 descriptor?? [ 201.429898][T13989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.512473][ T6012] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 201.727969][T13985] usb 7-1: Couldn't submit interrupt_out_urb -90 [ 201.733344][ T24] usb 7-1: USB disconnect, device number 29 [ 201.826321][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 201.826339][ T40] audit: type=1400 audit(1774479549.608:1389): avc: denied { mount } for pid=14003 comm="syz.1.2433" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 201.860628][ T40] audit: type=1400 audit(1774479549.645:1390): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 201.884350][T14007] netlink: 'syz.1.2434': attribute type 1 has an invalid length. [ 201.898895][T14007] bond6: entered promiscuous mode [ 201.900947][T14007] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.905245][T14007] __nla_validate_parse: 1 callbacks suppressed [ 201.905259][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'. [ 201.910172][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'. [ 201.916941][T14008] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2434'. [ 201.923762][T14007] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2434'. [ 201.928198][T14008] bond6: (slave bridge8): making interface the new active one [ 201.931422][T14008] bridge8: entered promiscuous mode [ 201.935087][T14008] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 201.951976][T14007] bond6: (slave bridge9): Enslaving as a backup interface with an up link [ 202.055935][ T40] audit: type=1326 audit(1774479549.832:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.1.2436" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb92cf9c799 code=0x0 [ 202.603942][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 202.607519][T14029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2440'. [ 202.611367][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 202.614763][T14029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2440'. [ 202.657818][T13960] syz.4.2421 (13960) used greatest stack depth: 19104 bytes left [ 202.733770][T14038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2443'. [ 202.796350][T14045] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2445'. [ 202.831257][ T40] audit: type=1400 audit(1774479550.553:1392): avc: denied { create } for pid=14046 comm="syz.4.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 202.879609][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.881622][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.999330][T14062] SELinux: failed to load policy [ 203.000909][T14061] lo speed is unknown, defaulting to 1000 [ 203.215894][T14068] syzkaller0: refused to change device tx_queue_len [ 203.324251][T14075] netlink: 'syz.3.2456': attribute type 1 has an invalid length. [ 203.327967][T14076] netlink: 'syz.3.2456': attribute type 1 has an invalid length. [ 203.344345][T14076] bond2: entered promiscuous mode [ 203.347102][T14076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.367166][ T29] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 203.455702][T14083] cgroup2: Unknown parameter 'func' [ 203.530443][T14087] openvswitch: netlink: Flow key attr not present in new flow. [ 203.559763][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.563133][T14089] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 203.566931][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.570248][T14089] overlayfs: failed to set xattr on upper [ 203.572858][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.574130][T14089] overlayfs: ...falling back to redirect_dir=nofollow. [ 203.577461][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.585123][T14089] overlayfs: ...falling back to index=off. [ 203.587474][T14089] overlayfs: ...falling back to uuid=null. [ 203.589723][T14089] overlayfs: ...falling back to xino=off. [ 203.592759][T14089] overlayfs: conflicting lowerdir path [ 203.646164][T14089] netlink: 'syz.3.2460': attribute type 4 has an invalid length. [ 203.768908][T14094] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.774662][T14094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.799284][T14104] netlink: 'syz.2.2465': attribute type 3 has an invalid length. [ 203.802835][ T29] usb 9-1: usb_control_msg returned -32 [ 203.805257][ T29] usbtmc 9-1:16.0: can't read capabilities [ 203.805943][T14104] netlink: 'syz.2.2465': attribute type 3 has an invalid length. [ 203.827887][T14109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.868116][T14113] fuse: Unknown parameter 'fyuaФjQ7x½d' [ 204.049567][T14121] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 204.124333][T14128] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 204.153271][T14131] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 204.334488][T14144] netlink: 'syz.2.2479': attribute type 1 has an invalid length. [ 204.357795][T14144] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.373354][T14144] bond6: (slave geneve5): making interface the new active one [ 204.377938][T14144] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 204.419932][T14149] Falling back ldisc for ttyS3. [ 204.455080][ T40] audit: type=1400 audit(1774479552.068:1393): avc: denied { read } for pid=14150 comm="syz.2.2481" name="file0" dev="tmpfs" ino=2737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 204.468541][ T40] audit: type=1400 audit(1774479552.068:1394): avc: denied { open } for pid=14150 comm="syz.2.2481" path="/511/file0" dev="tmpfs" ino=2737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 204.492872][ T5937] Bluetooth: hci3: connection err: -111 [ 204.494672][T14153] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 204.536586][T14155] Cannot find add_set index 65532 as target [ 204.596066][T14163] netlink: 'syz.1.2485': attribute type 10 has an invalid length. [ 204.947739][T14170] kvm: Disabled LAPIC found during irq injection [ 205.433145][ T40] audit: type=1400 audit(1774479552.994:1395): avc: denied { getopt } for pid=14173 comm="syz.3.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 206.323490][ T59] usb 9-1: USB disconnect, device number 4 [ 206.362533][ T40] audit: type=1400 audit(1774479553.864:1396): avc: denied { write } for pid=14198 comm="syz.1.2495" name="file0" dev="tmpfs" ino=3034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 206.369982][ T40] audit: type=1400 audit(1774479553.864:1397): avc: denied { ioctl } for pid=14198 comm="syz.1.2495" path="/568/file0" dev="tmpfs" ino=3034 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 206.386509][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.389386][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.397957][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.402084][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.467599][T14213] netlink: 'syz.2.2499': attribute type 1 has an invalid length. [ 206.514563][T14213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.544834][T14225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65048 sclass=netlink_route_socket pid=14225 comm=syz.3.2500 [ 206.945155][ T5937] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 207.117093][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.125835][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.227345][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.230726][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.304191][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.307660][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.312626][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.317634][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.325910][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.362083][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.366021][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.379577][T14259] lo speed is unknown, defaulting to 1000 [ 207.448781][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.453009][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.522144][T14270] QAT: failed to copy from user cfg_data. [ 207.574149][T14259] chnl_net:caif_netlink_parms(): no params data found [ 207.667294][ T46] bridge_slave_1: left allmulticast mode [ 207.669096][ T46] bridge_slave_1: left promiscuous mode [ 207.670975][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.675057][ T46] bridge_slave_0: left allmulticast mode [ 207.682981][ T46] bridge_slave_0: left promiscuous mode [ 207.685010][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.750323][ T40] audit: type=1400 audit(1774479555.155:1398): avc: denied { execute } for pid=14282 comm="syz.1.2519" path="/file1" dev="ramfs" ino=49866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 207.867902][ T5966] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 207.965141][T14294] __nla_validate_parse: 19 callbacks suppressed [ 207.965159][T14294] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2520'. [ 208.007001][ T5966] usb 9-1: device descriptor read/64, error -71 [ 208.063568][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.071961][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.075909][ T46] bond0 (unregistering): Released all slaves [ 208.080755][ T46] bond1 (unregistering): Released all slaves [ 208.091140][ T46] bond2 (unregistering): Released all slaves [ 208.098997][T14259] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.101409][T14259] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.103961][T14259] bridge_slave_0: entered allmulticast mode [ 208.106796][T14259] bridge_slave_0: entered promiscuous mode [ 208.111547][T14259] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.114119][T14259] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.116404][T14259] bridge_slave_1: entered allmulticast mode [ 208.119664][T14259] bridge_slave_1: entered promiscuous mode [ 208.131829][T14292] netlink: 'syz.2.2520': attribute type 29 has an invalid length. [ 208.134595][T14293] netlink: 'syz.2.2520': attribute type 29 has an invalid length. [ 208.144558][T14259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.151740][T14259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.166875][T14259] team0: Port device team_slave_0 added [ 208.181266][T14259] team0: Port device team_slave_1 added [ 208.200380][T14259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.202691][T14259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.211132][T14259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.215472][T14259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.217720][T14259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.226244][T14259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.263516][ T5966] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 208.267504][T14259] hsr_slave_0: entered promiscuous mode [ 208.269830][T14259] hsr_slave_1: entered promiscuous mode [ 208.271929][T14259] debugfs: 'hsr0' already exists in 'hsr' [ 208.273732][T14259] Cannot create hsr debugfs directory [ 208.289049][T14299] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2522'. [ 208.318394][ T40] audit: type=1400 audit(1774479555.688:1399): avc: denied { ioctl } for pid=14307 comm="syz.2.2523" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 208.399727][T14259] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.405386][T14259] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.409719][T14259] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.414146][T14259] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.414370][ T5966] usb 9-1: device descriptor read/64, error -71 [ 208.506580][ T46] hsr_slave_0: left promiscuous mode [ 208.509471][ T46] hsr_slave_1: left promiscuous mode [ 208.511554][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.513815][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.516491][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.519249][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.530873][ T5966] usb usb9-port1: attempt power cycle [ 208.540326][ T46] veth1_macvtap: left promiscuous mode [ 208.543898][ T46] veth0_macvtap: left promiscuous mode [ 208.546383][ T46] veth1_vlan: left promiscuous mode [ 208.548693][ T46] veth0_vlan: left promiscuous mode [ 208.602752][T14325] x_tables: ip_tables: osf match: only valid for protocol 6 [ 208.711560][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'. [ 208.718265][T14338] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 208.721840][T14338] nbd: error processing sock list [ 208.739231][ T46] team0 (unregistering): Port device team_slave_1 removed [ 208.748500][ T46] team0 (unregistering): Port device team_slave_0 removed [ 208.845900][T14325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2525'. [ 208.870904][T14259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.878696][T14259] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.892893][T14348] Bluetooth: MGMT ver 1.23 [ 208.898006][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.900303][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.903747][T14346] Cannot find add_set index 65532 as target [ 208.920016][T13144] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.922390][T13144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.938971][ T5966] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 208.969594][ T5966] usb 9-1: device descriptor read/8, error -71 [ 209.075499][T14259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.191519][ T46] IPVS: stop unused estimator thread 0... [ 209.222975][T14259] veth0_vlan: entered promiscuous mode [ 209.228763][T14259] veth1_vlan: entered promiscuous mode [ 209.237064][ T5966] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 209.246000][T14259] veth0_macvtap: entered promiscuous mode [ 209.255116][T14259] veth1_macvtap: entered promiscuous mode [ 209.263360][T14259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.269009][ T5966] usb 9-1: device descriptor read/8, error -71 [ 209.269585][T14259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.276721][T13140] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.279710][T13140] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.283224][T13140] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.285981][T13140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.348309][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.351450][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.368671][ T9205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.371238][ T9205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.386594][ T5966] usb usb9-port1: unable to enumerate USB device [ 209.500859][ T40] audit: type=1400 audit(1774479556.792:1400): avc: denied { execute } for pid=14375 comm="syz.5.2514" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=53588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 209.546575][ T5937] Bluetooth: hci0: command tx timeout [ 209.850097][T14383] ipt_rpfilter: unknown options [ 209.859349][T14381] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 209.889139][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2537'. [ 209.918803][T14389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14389 comm=syz.1.2537 [ 209.926167][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 209.929999][ T40] audit: type=1400 audit(1774479557.194:1401): avc: denied { getopt } for pid=14392 comm="syz.5.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.054942][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 210.058366][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 210.066286][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 210.104640][T14412] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 210.119443][T14412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 210.152705][ T5937] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 210.194631][ T40] audit: type=1400 audit(1774479557.446:1402): avc: denied { append } for pid=14424 comm="syz.1.2547" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 210.218504][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.221866][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.225526][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.228033][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.230754][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.233306][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.235952][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.238567][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.245005][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.247659][ T5966] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 210.265945][ T5966] hid-generic 0006:0004:0009.000C: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 210.298471][T14431] fido_id[14431]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.455102][ T6525] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 210.496683][T14442] ntfs3(sr0): Primary boot signature is not NTFS. [ 210.500183][T14442] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 210.532498][ T40] audit: type=1400 audit(1774479557.764:1403): avc: denied { setopt } for pid=14446 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 210.570001][T14449] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 210.626676][ T6525] usb 6-1: Using ep0 maxpacket: 8 [ 210.629664][ T6525] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 210.632401][ T6525] usb 6-1: config 179 has no interface number 0 [ 210.634461][ T6525] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 210.638253][ T6525] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 210.641932][ T6525] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.645476][ T6525] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 210.649715][ T6525] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 210.653904][ T6525] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 210.656737][ T6525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.664126][T14425] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.689419][T14459] overlayfs: failed to resolve './file0': -2 [ 210.778364][T14471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2562'. [ 210.786291][ T40] audit: type=1400 audit(1774479557.989:1404): avc: denied { setattr } for pid=14475 comm="syz.4.2563" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 210.835501][T14482] EXT4-fs: Conflicting test_dummy_encryption options [ 210.862882][T14484] loop5: detected capacity change from 0 to 7 [ 210.868135][ T5932] Dev loop5: unable to read RDB block 7 [ 210.870038][ T5932] loop5: AHDI p1 [ 210.871347][ T5932] loop5: partition table partially beyond EOD, truncated [ 210.880505][T14484] Dev loop5: unable to read RDB block 7 [ 210.882342][T14484] loop5: AHDI p1 [ 210.883866][T14484] loop5: partition table partially beyond EOD, truncated [ 211.109757][ T6525] usb 6-1: USB disconnect, device number 28 [ 211.112834][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 211.112882][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 211.114263][ T40] audit: type=1400 audit(1774479558.298:1405): avc: denied { map } for pid=14512 comm="syz.2.2574" path="socket:[53850]" dev="sockfs" ino=53850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 211.155384][T14523] netlink: 'syz.4.2575': attribute type 10 has an invalid length. [ 211.160042][T14523] binder: 14511:14523 ioctl ae01 7 returned -22 [ 211.162916][T14523] gfs2: Unknown parameter 'ο1 孝*3e}c#tq&a [~`s 7Vڀ!i&/LTFL6xyΖfJ+' [ 211.322883][T14537] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 211.401765][T14548] [U] v3f"S/4:XTzWtlW= [ 211.404197][T14548] [U] J"e:" [ 211.407035][T14548] [U] v3f"S/4:XTzWtlW= [ 211.408945][T14548] [U] J"e:" [ 211.443067][T14557] futex_wake_op: syz.2.2586 tries to shift op by 32; fix this program [ 211.489217][T14559] bond8: invalid ARP target 0.0.0.0 specified for addition [ 211.492134][T14559] bond8: option arp_ip_target: invalid value (0) [ 211.495113][T14559] bond8 (unregistering): Released all slaves [ 211.692435][T14574] netlink: 'syz.2.2590': attribute type 21 has an invalid length. [ 211.695304][T14574] netlink: 'syz.2.2590': attribute type 4 has an invalid length. [ 211.697837][T14574] netlink: 'syz.2.2590': attribute type 5 has an invalid length. [ 211.780970][ T5937] Bluetooth: hci0: command tx timeout [ 212.188512][ T40] audit: type=1400 audit(1774479559.308:1406): avc: denied { listen } for pid=14604 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.195983][T14605] overlay: Unknown parameter '/' [ 212.201651][T14608] deleting an unspecified loop device is not supported. [ 212.370340][T14619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.375538][T14619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.456489][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 212.491202][T14619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.496938][T14619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.563093][T14619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.568312][T14619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.615922][ T34] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 212.620478][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.624325][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.629096][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.633376][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.639611][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.650756][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.656289][T14619] netdevsim netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.659506][T14619] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.664048][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.666885][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.670612][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.673912][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.676701][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.680359][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.683284][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.686226][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.690528][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.693772][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.696480][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.700278][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.703369][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.706216][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.709572][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.713062][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.715723][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.719557][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.724671][ T34] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.727522][ T34] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.730161][ T34] usb 10-1: Product: syz [ 212.731496][ T34] usb 10-1: Manufacturer: syz [ 212.733319][ T34] usb 10-1: SerialNumber: syz [ 212.736302][ T34] usb 10-1: config 0 descriptor?? [ 212.742867][ T34] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 212.772668][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.776450][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.785186][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.789033][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.806550][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.810351][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.824644][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.827332][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.900252][T14649] netlink: 'syz.2.2614': attribute type 11 has an invalid length. [ 212.957204][ T34] usb 10-1: USB disconnect, device number 2 [ 212.961844][ T34] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 213.006228][T14654] netlink: 'syz.4.2609': attribute type 2 has an invalid length. [ 213.506885][ T40] audit: type=1400 audit(1774479560.543:1407): avc: denied { unmount } for pid=14259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 213.630163][ T6871] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 213.737516][T14686] lo speed is unknown, defaulting to 1000 [ 213.791977][ T6871] usb 9-1: Using ep0 maxpacket: 8 [ 213.795985][ T6871] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 213.800054][ T6871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.828119][ T6871] pvrusb2: Hardware description: Terratec Grabster AV400 [ 213.831116][ T6871] pvrusb2: ********** [ 213.832927][ T6871] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 213.837869][ T6871] pvrusb2: Important functionality might not be entirely working. [ 213.841207][ T6871] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 213.847912][ T6871] pvrusb2: ********** [ 213.889322][T14687] lo speed is unknown, defaulting to 1000 [ 213.993738][ T5937] Bluetooth: hci0: command tx timeout [ 214.043385][ T2487] pvrusb2: Invalid write control endpoint [ 214.075281][ T2487] pvrusb2: Invalid write control endpoint [ 214.077858][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 214.083937][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 214.090067][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 214.093588][ T2487] pvrusb2: Device being rendered inoperable [ 214.098787][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 214.102716][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 214.113294][ T2487] pvrusb2: Attached sub-driver cx25840 [ 214.116068][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 214.119782][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 214.251982][T14702] tipc: Started in network mode [ 214.254320][T14702] tipc: Node identity 4a0c76058518, cluster identity 4711 [ 214.257181][T14702] tipc: Enabled bearer , priority 0 [ 214.261415][T14702] syzkaller0: entered promiscuous mode [ 214.262986][T14678] pvrusb2: Attempted to execute control transfer when device not ok [ 214.263781][T14702] syzkaller0: entered allmulticast mode [ 214.272430][T14699] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 214.274509][ T40] audit: type=1400 audit(1774479561.263:1408): avc: denied { nlmsg_tty_audit } for pid=14701 comm="syz.5.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 214.278214][ T6871] usb 9-1: USB disconnect, device number 9 [ 214.285704][T14702] tipc: Resetting bearer [ 214.291873][T14701] tipc: Resetting bearer [ 214.307368][T14701] tipc: Disabling bearer [ 214.363894][T14706] 9p: Could not find request transport: virtio*version=9p2000.u [ 214.577074][T14718] __nla_validate_parse: 11 callbacks suppressed [ 214.577087][T14718] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2632'. [ 215.274092][T14739] netlink: 'syz.4.2638': attribute type 10 has an invalid length. [ 215.280992][T14739] team0: Device vxcan1 is of different type [ 215.312950][T14741] netlink: 'syz.2.2637': attribute type 2 has an invalid length. [ 215.316063][T14741] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2637'. [ 215.835187][T14775] bpf: Bad value for 'uid' [ 215.837496][ T40] audit: type=1400 audit(1774479562.722:1409): avc: denied { getopt } for pid=14774 comm="syz.5.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 215.838020][T14775] comedi: No check for data length of config insn id 4050 is implemented [ 215.849787][T14775] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 215.853860][T14775] comedi: Assuming n=15 is correct [ 215.965643][T14781] EXT4-fs (nbd5): unable to read superblock [ 215.980028][ T40] audit: type=1400 audit(1774479562.853:1410): avc: denied { map } for pid=14780 comm="syz.5.2649" path="socket:[54703]" dev="sockfs" ino=54703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.227984][ T5937] Bluetooth: hci0: command tx timeout [ 216.324301][ T5966] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 216.516782][ T5966] usb 10-1: Using ep0 maxpacket: 8 [ 216.528097][ T5966] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.532121][ T5966] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.535349][ T5966] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.550000][ T5966] usb 10-1: config 0 descriptor?? [ 216.690357][T14797] ufs: You didn't specify the type of your ufs filesystem [ 216.690357][T14797] [ 216.690357][T14797] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 216.690357][T14797] [ 216.690357][T14797] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 216.742490][T14797] ufs: You didn't specify the type of your ufs filesystem [ 216.742490][T14797] [ 216.742490][T14797] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 216.742490][T14797] [ 216.742490][T14797] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 216.772699][ T5966] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 216.818740][T14800] exFAT-fs (nbd4): unable to read boot sector [ 216.821409][T14800] exFAT-fs (nbd4): failed to read boot sector [ 216.823359][T14800] exFAT-fs (nbd4): failed to recognize exfat type [ 216.887157][T14800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2656'. [ 216.945058][T14801] netlink: 'syz.4.2656': attribute type 7 has an invalid length. [ 217.011561][T14783] kvm: kvm [14782]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 217.016005][T14783] kvm: kvm [14782]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 217.130937][ T1465] usb 10-1: USB disconnect, device number 3 [ 217.357240][T14809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14809 comm=syz.2.2658 [ 217.396467][ T40] audit: type=1400 audit(1774479564.181:1411): avc: denied { map } for pid=14810 comm="syz.2.2659" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 217.772285][ T40] audit: type=1400 audit(1774479564.527:1412): avc: denied { setattr } for pid=14832 comm="syz.5.2662" name="" dev="pipefs" ino=56432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 217.789608][ T40] audit: type=1400 audit(1774479564.527:1413): avc: denied { getopt } for pid=14832 comm="syz.5.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.881064][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2664'. [ 217.884074][T14849] openvswitch: netlink: Missing key (keys=40, expected=80) [ 217.888546][T14849] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 218.056408][ T8760] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 218.242569][ T8760] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 218.245431][ T8760] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.247912][ T8760] usb 10-1: Product: syz [ 218.251752][ T8760] usb 10-1: Manufacturer: syz [ 218.253332][ T8760] usb 10-1: SerialNumber: syz [ 218.254435][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805da27c00: rx timeout, send abort [ 218.259773][ T40] audit: type=1400 audit(1774479564.995:1414): avc: denied { read } for pid=5316 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 218.272499][ T40] audit: type=1400 audit(1774479564.995:1415): avc: denied { search } for pid=5316 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.286981][ T40] audit: type=1400 audit(1774479564.995:1416): avc: denied { search } for pid=5316 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.372160][T14873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2666'. [ 218.734663][ T8760] rtl8150 10-1:1.0: couldn't reset the device [ 218.737835][ T8760] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 218.750033][ T8760] usb 10-1: USB disconnect, device number 4 [ 218.789045][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805da27400: rx timeout, send abort [ 218.793436][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805da27c00: abort rx timeout. Force session deactivation [ 218.810854][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805da27400: connection exists (fe ff). last cmd: 20 [ 218.836857][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'. [ 218.837620][T14881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.888740][T14882] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 218.894885][T14887] nbd: socks must be embedded in a SOCK_ITEM attr [ 218.899031][T14882] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2668'. [ 218.902667][T14881] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2668'. [ 218.905926][T14881] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2668'. [ 218.908917][T14882] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2668'. [ 219.078100][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805da25800: rx timeout, send abort [ 219.616335][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805da25800: abort rx timeout. Force session deactivation [ 219.773905][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.783723][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.790028][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.797789][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.804050][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.845945][T14909] lo speed is unknown, defaulting to 1000 [ 219.987157][T14922] 9pnet_virtio: no channels available for device syz [ 220.019243][T14921] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 220.023740][T14922] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2672'. [ 220.079228][T14909] chnl_net:caif_netlink_parms(): no params data found [ 220.140786][T14909] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.143187][T14909] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.145622][T14909] bridge_slave_0: entered allmulticast mode [ 220.148454][T14909] bridge_slave_0: entered promiscuous mode [ 220.152083][T14909] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.159908][T14909] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.162915][T14909] bridge_slave_1: entered allmulticast mode [ 220.174341][T14909] bridge_slave_1: entered promiscuous mode [ 220.310258][T13142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.315265][T13142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.327038][T14909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.339007][T14909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.359165][T14947] syzkaller0: entered promiscuous mode [ 220.362476][T14947] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2681'. [ 220.365634][T14948] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2681'. [ 220.374403][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2680'. [ 220.385788][T14948] bond1: entered promiscuous mode [ 220.396360][T14947] bond2: entered promiscuous mode [ 220.413108][T14909] team0: Port device team_slave_0 added [ 220.435387][T13142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.439727][T13142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.450957][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 220.475921][T14909] team0: Port device team_slave_1 added [ 220.597756][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 220.597771][ T40] audit: type=1400 audit(1774479567.175:1423): avc: denied { getopt } for pid=14958 comm="syz.4.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.614408][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 220.618192][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.621605][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.625452][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.628357][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.631596][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.635372][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.638237][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.641029][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.644687][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.647564][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.650433][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.655123][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.658783][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.662242][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.666895][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.670538][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.673906][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.678517][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.681957][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.685422][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.689970][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.693887][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.698335][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.702438][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.706732][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 220.710682][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 220.713910][ T24] usb 7-1: Product: syz [ 220.715347][ T24] usb 7-1: Manufacturer: syz [ 220.717285][ T24] usb 7-1: SerialNumber: syz [ 220.728345][ T24] usb 7-1: config 0 descriptor?? [ 220.737233][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 220.968681][T14940] ceph: No source [ 220.971172][T14940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14940 comm=syz.2.2677 [ 220.998590][ T6871] usb 7-1: USB disconnect, device number 30 [ 221.002610][ T6871] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 221.663017][T14964] random: crng reseeded on system resumption [ 221.682439][T14964] Hibernate inconsistent memory map detected! [ 221.684764][T14964] PM: hibernation: Image mismatch: architecture specific data [ 221.885214][T14909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.887430][T14909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.904820][T14909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.920407][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2684'. [ 221.926060][T14970] netlink: 'syz.4.2684': attribute type 30 has an invalid length. [ 221.928917][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2684'. [ 221.929100][T13142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.935680][T13142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.946037][T14909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.953897][T14909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.963355][T14909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.000504][T14909] hsr_slave_0: entered promiscuous mode [ 222.012153][T14909] hsr_slave_1: entered promiscuous mode [ 222.015182][T14909] debugfs: 'hsr0' already exists in 'hsr' [ 222.017745][T14909] Cannot create hsr debugfs directory [ 222.031638][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'. [ 222.043837][ T5934] Bluetooth: hci2: command tx timeout [ 222.063037][T13142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.067109][T13142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.207864][T13142] team0: left promiscuous mode [ 222.212583][T13142] team_slave_1: left promiscuous mode [ 222.214446][T13142] vlan2: left promiscuous mode [ 222.216293][T13142] dummy0: left promiscuous mode [ 222.218720][T13142] bridge0: port 3(team0) entered disabled state [ 222.222610][T13142] bridge_slave_1: left allmulticast mode [ 222.224427][T13142] bridge_slave_1: left promiscuous mode [ 222.226778][T13142] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.241338][T13142] bridge_slave_0: left allmulticast mode [ 222.243910][T13142] bridge_slave_0: left promiscuous mode [ 222.246547][T13142] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.262173][T14991] netlink: 'syz.5.2688': attribute type 10 has an invalid length. [ 222.440390][T13142] bond5 (unregistering): (slave gretap1): Releasing active interface [ 222.451142][T13142] dvmrp6 (unregistering): left allmulticast mode [ 222.753886][T13142] bond0 (unregistering): (slave bridge4): Releasing active interface [ 222.756162][T13142] bridge4 (unregistering): left promiscuous mode [ 222.758225][T13142] bridge4 (unregistering): left allmulticast mode [ 222.931855][ T40] audit: type=1400 audit(1774479569.354:1424): avc: denied { unmount } for pid=11872 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 223.017003][ T40] audit: type=1326 audit(1774479569.438:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.4.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dc79c799 code=0x7ffc0000 [ 223.024719][ T40] audit: type=1326 audit(1774479569.438:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.4.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dc79c799 code=0x7ffc0000 [ 223.038201][ T40] audit: type=1326 audit(1774479569.438:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.4.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dc79c799 code=0x7ffc0000 [ 223.046005][ T40] audit: type=1326 audit(1774479569.438:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.4.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dc79c799 code=0x7ffc0000 [ 223.054282][T13142] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 223.055564][ T40] audit: type=1326 audit(1774479569.448:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.4.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7dc79c799 code=0x7ffc0000 [ 223.057235][T13142] bond6 (unregistering): (slave bridge8): the permanent HWaddr of slave - 76:41:48:4d:99:af - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 223.057256][T13142] bridge8 (unregistering): left promiscuous mode [ 223.057268][T13142] bond6 (unregistering): (slave bridge9): making interface the new active one [ 223.064828][ T40] audit: type=1326 audit(1774479569.448:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.4.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dc79c799 code=0x7ffc0000 [ 223.070954][T13142] bridge9 (unregistering): entered promiscuous mode [ 223.073009][ T40] audit: type=1326 audit(1774479569.448:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.4.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dc79c799 code=0x7ffc0000 [ 223.093303][ T40] audit: type=1326 audit(1774479569.448:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.4.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7dc79c799 code=0x7ffc0000 [ 223.109088][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 223.112421][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2692'. [ 223.150545][T13142] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 223.153990][T13142] bridge9 (unregistering): left promiscuous mode [ 223.215482][T13142] bond1 (unregistering): Released all slaves [ 223.226950][T13142] bond2 (unregistering): Released all slaves [ 223.239237][T13142] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 223.245098][T13142] bond3 (unregistering): Released all slaves [ 223.260825][T13142] bond0 (unregistering): Released all slaves [ 223.275665][T13142] bond4 (unregistering): Released all slaves [ 223.284086][T13142] bond5 (unregistering): Released all slaves [ 223.300694][T13142] bond6 (unregistering): Released all slaves [ 223.308124][T13142] bond7 (unregistering): Released all slaves [ 223.320741][T13142] bond8 (unregistering): Released all slaves [ 223.360249][T15008] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 223.365322][T15008] bond4 (unregistering): Released all slaves [ 223.374954][T15020] sit0: Caught tx_queue_len zero misconfig [ 223.377704][T15020] netem: change failed [ 223.388123][T15024] netlink: 'syz.5.2696': attribute type 6 has an invalid length. [ 223.405483][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2696'. [ 223.435308][T15027] debugfs: 'netdev@ffff888039f0c620' already exists in 'ref_tracker' [ 223.559992][T13142] tipc: Disabling bearer [ 223.564089][T13142] tipc: Left network mode [ 223.569651][T15030] tmpfs: Cannot change global quota limit on remount [ 223.814331][T15064] Invalid logical block size (536872960) [ 223.821946][T15064] tipc: Failed to remove unknown binding: 66,0,0/0:752048260/752048261 [ 223.838089][T15064] tipc: Failed to remove unknown binding: 66,0,0/0:752048260/752048261 [ 223.842772][T15064] tmpfs: Unknown parameter 'Wrpquot' [ 223.845924][T15064] overlayfs: conflicting options: userxattr,redirect_dir=on [ 223.994926][T14909] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.011331][T14909] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.045767][T15087] sock: sock_timestamping_bind_phc: sock not bind to device [ 224.048346][T14909] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.060250][T15091] bridge_slave_0: left allmulticast mode [ 224.067397][T15091] bridge_slave_0: left promiscuous mode [ 224.069746][T15091] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.074496][T15091] bridge_slave_1: left allmulticast mode [ 224.076752][T15091] bridge_slave_1: left promiscuous mode [ 224.078898][T15091] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.084561][T15091] bond0: (slave bond_slave_0): Releasing backup interface [ 224.090997][T15091] bond0: (slave bond_slave_1): Releasing backup interface [ 224.099097][T15091] team0: Port device team_slave_0 removed [ 224.103330][T15091] team0: Port device team_slave_1 removed [ 224.108306][T15091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.110847][T15091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.116506][T15091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.119665][T15091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.127936][T15091] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.133397][T14909] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.223242][T14909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.251283][T14909] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.269624][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.272063][ T9206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.274547][ T5934] Bluetooth: hci2: command tx timeout [ 224.280245][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.282749][ T9206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.313421][T15112] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 224.435401][T13142] hsr_slave_0: left promiscuous mode [ 224.438671][T13142] hsr_slave_1: left promiscuous mode [ 224.444264][T13142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.448010][T13142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.464794][T13142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.485635][T13142] veth1_macvtap: left promiscuous mode [ 224.487704][T13142] veth0_macvtap: left promiscuous mode [ 224.489917][T13142] veth1_vlan: left promiscuous mode [ 224.543255][T13142] vlan2 (unregistering): left allmulticast mode [ 224.547601][T13142] dummy0 (unregistering): left allmulticast mode [ 224.549655][T15123] netlink: 'syz.4.2720': attribute type 4 has an invalid length. [ 224.552921][T13142] team0 (unregistering): Port device vlan2 removed [ 224.654458][T13142] team_slave_1 (unregistering): left allmulticast mode [ 224.657560][T13142] team0 (unregistering): Port device team_slave_1 removed [ 224.733244][T15123] .`: renamed from bond0 [ 224.754729][T14909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.791706][T14909] veth0_vlan: entered promiscuous mode [ 224.803432][T14909] veth1_vlan: entered promiscuous mode [ 224.819741][T14909] veth0_macvtap: entered promiscuous mode [ 224.832580][T14909] veth1_macvtap: entered promiscuous mode [ 224.843673][T14909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.852605][T14909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.858453][T13140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.867550][T13140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.871568][T13140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.889349][T13140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.956463][T14670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.961047][T14670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.999934][ T9205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.000639][T15136] syzkaller0: entered promiscuous mode [ 225.002728][ T9205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.004477][T15136] syzkaller0: entered allmulticast mode [ 225.075848][T15144] pimreg: entered allmulticast mode [ 225.098510][T15144] pimreg: left allmulticast mode [ 225.117130][T15142] bond3: entered promiscuous mode [ 225.119024][T15142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.125399][T15142] dummy0: entered allmulticast mode [ 225.125741][T13142] IPVS: stop unused estimator thread 0... [ 225.128700][T15141] dummy0: left allmulticast mode [ 225.263023][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.272592][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.277630][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.282686][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.287779][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.308047][T15152] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.311617][T15152] block device autoloading is deprecated and will be removed. [ 225.321524][T15150] lo speed is unknown, defaulting to 1000 [ 225.329523][T15154] "syz.1.2730" (15154) uses obsolete ecb(arc4) skcipher [ 225.507239][T15150] chnl_net:caif_netlink_parms(): no params data found [ 225.523312][T15182] netlink: 'syz.5.2739': attribute type 8 has an invalid length. [ 225.532403][T15184] tmpfs: Bad value for 'mpol' [ 225.560950][T15150] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.563253][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.565660][T15150] bridge_slave_0: entered allmulticast mode [ 225.568365][T15150] bridge_slave_0: entered promiscuous mode [ 225.572884][T15150] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.575718][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.578249][T15150] bridge_slave_1: entered allmulticast mode [ 225.581324][T15150] bridge_slave_1: entered promiscuous mode [ 225.589222][T15192] __nla_validate_parse: 4 callbacks suppressed [ 225.589236][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 225.613126][T15150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.629854][T15150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.644565][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2743'. [ 225.662546][T15150] team0: Port device team_slave_0 added [ 225.667985][T15150] team0: Port device team_slave_1 added [ 225.691885][T15150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.694864][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.705695][T15150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.713413][T15150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.715673][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.724582][T15150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.764514][ T9148] syz_tun (unregistering): left allmulticast mode [ 225.767134][ T9148] syz_tun (unregistering): left promiscuous mode [ 225.769698][ T9148] bridge0: port 3(syz_tun) entered disabled state [ 225.773672][T15200] netlink: 'syz.4.2745': attribute type 4 has an invalid length. [ 225.809626][T15183] input: syz0 as /devices/virtual/input/input22 [ 225.820524][T15150] hsr_slave_0: entered promiscuous mode [ 225.823838][T15150] hsr_slave_1: entered promiscuous mode [ 225.946634][T15204] netlink: 'syz.5.2746': attribute type 1 has an invalid length. [ 225.955970][T15150] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.964521][T15150] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.987849][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2748'. [ 225.990824][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2748'. [ 225.997542][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2747'. [ 226.002248][T15206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2747'. [ 226.010058][T15208] batadv_slave_1: entered allmulticast mode [ 226.083043][T15150] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.087202][T15150] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.184982][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2753'. [ 226.195930][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2754'. [ 226.196620][T15222] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 226.198788][T15226] netlink: 'syz.1.2754': attribute type 3 has an invalid length. [ 226.207512][T15222] bond4 (unregistering): Released all slaves [ 226.220089][T15150] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.223173][T15150] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.275759][T15231] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 226.278225][T15231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.282939][T15231] vhci_hcd vhci_hcd.0: Device attached [ 226.306550][T15150] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.317216][T15150] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.441819][T15150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.446798][T15150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.462572][T15150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.466726][T15150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.490935][ T5934] Bluetooth: hci2: command tx timeout [ 226.506430][T15150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.518401][T15150] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.525085][T14670] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.527442][T14670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.533413][T14672] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.533905][ T1465] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 226.535859][T14672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.625317][T15260] netlink: 'syz.5.2759': attribute type 1 has an invalid length. [ 226.642711][T15260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.668078][T15150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.697732][T15150] veth0_vlan: entered promiscuous mode [ 226.702572][ T40] kauditd_printk_skb: 323 callbacks suppressed [ 226.702583][ T40] audit: type=1400 audit(1774479572.881:1756): avc: denied { connect } for pid=15265 comm="syz.1.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.703457][T15150] veth1_vlan: entered promiscuous mode [ 226.731188][T15150] veth0_macvtap: entered promiscuous mode [ 226.735416][T15150] veth1_macvtap: entered promiscuous mode [ 226.745346][T15150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.752401][T15150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.767961][T14672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.772078][T14672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.778643][T14672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.781568][ T40] audit: type=1400 audit(1774479572.965:1757): avc: denied { read } for pid=15273 comm="syz.5.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 226.789209][T14672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.164889][T15232] vhci_hcd: connection reset by peer [ 227.170491][T13142] vhci_hcd vhci_hcd.4: stop threads [ 227.173542][T13142] vhci_hcd vhci_hcd.4: release socket [ 227.178411][T13142] vhci_hcd vhci_hcd.4: disconnect device [ 227.506861][ T5934] Bluetooth: hci1: command tx timeout [ 228.115936][ T5934] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.116090][ T34] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 228.121746][ T34] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 228.703993][ T5934] Bluetooth: hci2: command tx timeout [ 229.730477][ T5934] Bluetooth: hci1: command tx timeout [ 230.329016][ T34] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 230.331620][ T34] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 231.964646][ T5934] Bluetooth: hci1: command tx timeout [ 232.029039][ T1465] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 232.553177][ T34] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 232.556021][ T34] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 232.609724][ T9205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.613411][ T9205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.632410][T14672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.635682][T14672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.925821][T15301] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=15301 comm=syz.5.2770 [ 238.931587][T15301] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2562 sclass=netlink_xfrm_socket pid=15301 comm=syz.5.2770 [ 238.937495][T15301] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2574 sclass=netlink_xfrm_socket pid=15301 comm=syz.5.2770 [ 238.981467][T15299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.990807][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 238.995974][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 239.031738][T15318] openvswitch: netlink: Key type 31 is not supported [ 239.118973][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 239.122129][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2777'. [ 239.149916][T14670] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.154536][T14670] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.158787][T14670] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.163140][T14670] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.257865][T15341] binder_alloc: binder_alloc_mmap_handler: 15339 200000ffb000-200000fff000 already mapped failed -16 [ 239.283931][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 239.288913][T15346] overlay: Unknown parameter ':' [ 239.326622][ T40] audit: type=1400 audit(233.209:1758): avc: denied { connect } for pid=15350 comm="syz.1.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 239.438965][T15355] tmpfs: Bad value for 'mpol' [ 239.440664][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2786'. [ 239.446365][ T40] audit: type=1400 audit(233.321:1759): avc: denied { mount } for pid=15353 comm="syz.5.2785" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 239.447999][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2786'. [ 239.456093][T15355] overlayfs: failed to resolve '/9')Oxl': -2 [ 239.463407][T15355] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 239.641116][T15360] ptrace attach of "/syz-executor exec"[15361] was attempted by "/syz-executor exec"[15360] [ 239.648400][T15371] netlink: 'syz.1.2789': attribute type 1 has an invalid length. [ 239.651364][T15371] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2789'. [ 239.654653][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2789'. [ 239.699371][ T40] audit: type=1400 audit(233.564:1760): avc: denied { unmount } for pid=14259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 239.731944][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2792'. [ 239.858773][T15384] openvswitch: netlink: Missing key (keys=40, expected=100) [ 240.085257][T15399] cgroup: Need name or subsystem set [ 240.131576][ T40] audit: type=1400 audit(233.957:1761): avc: denied { shutdown } for pid=15395 comm="syz.1.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.154687][ T40] audit: type=1400 audit(233.966:1762): avc: denied { write } for pid=15395 comm="syz.1.2800" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 240.256576][ T40] audit: type=1400 audit(234.079:1763): avc: denied { connect } for pid=15408 comm="syz.5.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.298177][T15409] netlink: 'syz.5.2804': attribute type 14 has an invalid length. [ 240.352578][T15409] netlink: 'syz.5.2804': attribute type 14 has an invalid length. [ 240.356145][T14671] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.362615][T14671] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.377883][T14671] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.381880][T14671] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.422162][T15419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15419 comm=syz.2.2806 [ 240.430044][T15422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=15422 comm=syz.5.2809 [ 240.478645][T15428] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 240.480918][T15428] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 240.497251][T15428] vhci_hcd vhci_hcd.0: Device attached [ 240.617263][T15444] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 240.795027][ T34] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 240.795086][ T6012] usb 48-1: SetAddress Request (2) to port 0 [ 240.800837][ T6012] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 240.955437][ T34] usb 6-1: Invalid ep0 maxpacket: 32 [ 241.094554][ T34] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 241.255739][ T34] usb 6-1: Invalid ep0 maxpacket: 32 [ 241.258110][ T34] usb usb6-port1: attempt power cycle [ 241.477097][T15474] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 241.513812][T15474] bond0 (unregistering): Released all slaves [ 241.535893][T15479] netlink: 'syz.2.2821': attribute type 13 has an invalid length. [ 241.618193][ T34] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 241.640203][ T34] usb 6-1: Invalid ep0 maxpacket: 32 [ 241.779517][ T34] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 241.801049][ T34] usb 6-1: Invalid ep0 maxpacket: 32 [ 241.803077][ T34] usb usb6-port1: unable to enumerate USB device [ 242.259609][T15431] vhci_hcd: connection reset by peer [ 242.272893][T14670] vhci_hcd vhci_hcd.5: stop threads [ 242.274611][T14670] vhci_hcd vhci_hcd.5: release socket [ 242.276451][T14670] vhci_hcd vhci_hcd.5: disconnect device [ 242.395527][T15508] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.399150][T15508] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.471053][T15515] kvm: kvm [15514]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 242.695330][ T40] audit: type=1400 audit(236.361:1764): avc: denied { getopt } for pid=15517 comm="syz.4.2837" lport=45898 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 242.838697][ T40] audit: type=1400 audit(236.501:1765): avc: denied { mounton } for pid=15525 comm="syz.4.2842" path="/" dev="tmpfs" ino=1255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 243.116511][T15534] vxfs: unable to read disk superblock at 1 [ 243.119923][T15534] vxfs: unable to read disk superblock at 8 [ 243.122315][T15534] vxfs: can't find superblock. [ 243.377474][T15539] random: crng reseeded on system resumption [ 243.802692][T15552] i2c i2c-1: Invalid block write size 34 [ 243.820017][T15552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.856077][T15557] loop4: detected capacity change from 0 to 7 [ 243.858505][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.860933][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.865362][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.868269][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.871017][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.875312][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.878131][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.880777][T15557] ldm_validate_partition_table(): Disk read failed. [ 243.882892][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.886703][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.889708][T15557] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.892976][T15557] Dev loop4: unable to read RDB block 0 [ 243.896286][T15557] loop4: unable to read partition table [ 243.899363][T15557] loop4: partition table beyond EOD, truncated [ 243.901920][T15557] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 243.968691][T15571] netlink: 'syz.2.2857': attribute type 1 has an invalid length. [ 243.971700][T15571] netlink: 'syz.2.2857': attribute type 2 has an invalid length. [ 244.071192][T15579] syzkaller0: entered promiscuous mode [ 244.071742][T15581] fuse: Bad value for 'group_id' [ 244.073154][T15579] syzkaller0: entered allmulticast mode [ 244.074959][T15581] fuse: Bad value for 'group_id' [ 244.079580][T15579] program syz.2.2862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.537026][ T5966] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 244.719073][ T5966] usb 9-1: Using ep0 maxpacket: 8 [ 244.722452][ T5966] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 244.725538][ T5966] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.729279][ T5966] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.733381][ T5966] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.736673][ T5966] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.741276][ T5966] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.744469][ T5966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.928895][T15604] fuse: Bad value for 'user_id' [ 244.931186][T15604] fuse: Bad value for 'user_id' [ 244.992800][T15606] bond5: option downdelay: invalid value (18446744073709551615) [ 244.995058][T15606] bond5: option downdelay: allowed values 0 - 2147483647 [ 244.999750][T15606] bond5 (unregistering): Released all slaves [ 245.053109][T15609] __nla_validate_parse: 12 callbacks suppressed [ 245.053125][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 245.166095][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2873'. [ 245.280669][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'. [ 245.422824][T15632] dns_resolver: Unsupported content type (234) [ 245.453147][T15636] netlink: 'syz.5.2879': attribute type 1 has an invalid length. [ 245.456784][T15636] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 245.488983][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2880'. [ 245.518725][T15643] sg_write: data in/out 1869897485/14 bytes for SCSI command 0x0-- guessing data in; [ 245.518725][T15643] program syz.5.2881 not setting count and/or reply_len properly [ 245.560163][T15594] usbtmc 9-1:16.0: simple usb_control_msg failed -32 [ 245.563590][ T5966] usb 9-1: USB disconnect, device number 10 [ 245.618759][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 245.661212][T15655] netlink: 'syz.5.2885': attribute type 1 has an invalid length. [ 245.672522][T15655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.677229][T15655] bond5: option tlb_dynamic_lb: unable to set because the bond device is up [ 245.696893][T15657] kvm: pic: single mode not supported [ 245.707319][T15657] kvm: pic: non byte write [ 245.710759][T15657] kvm: pic: non byte write [ 245.727342][T15657] kvm: pic: single mode not supported [ 245.727507][T15657] kvm: pic: level sensitive irq not supported [ 245.730282][T15657] kvm: pic: single mode not supported [ 245.732216][T15657] kvm: pic: level sensitive irq not supported [ 245.734310][T15657] kvm: pic: single mode not supported [ 245.756988][T15662] nftables ruleset with unbound set [ 245.968275][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2890'. [ 246.045409][ T1465] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 246.142655][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2894'. [ 246.180860][T15681] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2894'. [ 246.191360][T15681] syzkaller1: entered promiscuous mode [ 246.193766][T15681] syzkaller1: entered allmulticast mode [ 246.223590][ T1465] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 246.227317][ T1465] usb 10-1: config 0 interface 0 has no altsetting 0 [ 246.232003][ T1465] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 246.236078][ T1465] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 246.240214][ T6012] usb 48-1: device descriptor read/8, error -110 [ 246.243077][ T1465] usb 10-1: Product: syz [ 246.244527][ T1465] usb 10-1: Manufacturer: syz [ 246.246109][ T1465] usb 10-1: SerialNumber: syz [ 246.250885][ T1465] usb 10-1: config 0 descriptor?? [ 246.258597][ T1465] usb 10-1: selecting invalid altsetting 0 [ 246.399368][T15685] siw: device registration error -23 [ 246.474204][ T1465] usb 10-1: USB disconnect, device number 5 [ 246.609652][T15698] netlink: 'syz.1.2899': attribute type 20 has an invalid length. [ 246.618048][ T40] audit: type=1400 audit(524528.032:1766): avc: denied { setopt } for pid=15696 comm="syz.1.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.623505][ T50] IPVS: starting estimator thread 0... [ 246.663814][ T40] audit: type=1400 audit(524528.069:1767): avc: denied { setattr } for pid=15701 comm="syz.4.2901" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.678073][ T6012] usb usb48-port1: attempt power cycle [ 246.705881][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 246.710094][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'. [ 246.713661][T15707] netlink: 'syz.4.2903': attribute type 20 has an invalid length. [ 246.717582][T15707] netlink: 'syz.4.2903': attribute type 20 has an invalid length. [ 246.740958][T15700] IPVS: using max 46 ests per chain, 110400 per kthread [ 246.934065][ T40] audit: type=1400 audit(524528.331:1768): avc: denied { map } for pid=15716 comm="syz.1.2907" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 246.941730][ T40] audit: type=1400 audit(524528.331:1769): avc: denied { execute } for pid=15716 comm="syz.1.2907" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 246.943525][ T5934] block nbd0: Receive control failed (result -32) [ 246.955915][ T40] audit: type=1326 audit(524528.349:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15716 comm="syz.1.2907" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3473d9c799 code=0x0 [ 246.956005][ T1465] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 246.967417][T15718] futex_wake_op: syz.4.2908 tries to shift op by 32; fix this program [ 247.069264][T15730] nbd: must specify an index to disconnect [ 247.111488][ T40] audit: type=1400 audit(524528.490:1771): avc: denied { map } for pid=15732 comm="syz.2.2913" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.135111][T15736] fuse: Bad value for 'fd' [ 247.138250][ T1465] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 247.142402][ T1465] usb 10-1: config 0 interface 0 has no altsetting 0 [ 247.155382][ T1465] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 247.163775][ T1465] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 247.167138][ T1465] usb 10-1: Product: syz [ 247.168740][ T1465] usb 10-1: Manufacturer: syz [ 247.170534][ T1465] usb 10-1: SerialNumber: syz [ 247.177264][ T1465] usb 10-1: config 0 descriptor?? [ 247.186406][ T1465] usb 10-1: selecting invalid altsetting 0 [ 247.201650][ T40] audit: type=1400 audit(524528.583:1772): avc: denied { create } for pid=15741 comm="syz.2.2916" name=0A scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.297674][ T6012] usb usb48-port1: unable to enumerate USB device [ 247.355332][T15754] netlink: 'syz.4.2918': attribute type 8 has an invalid length. [ 247.406416][ T6012] usb 10-1: USB disconnect, device number 6 [ 247.417551][ T40] audit: type=1400 audit(524528.779:1773): avc: denied { unlink } for pid=15150 comm="syz-executor" name=0A dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.854899][T15773] lo speed is unknown, defaulting to 1000 [ 248.080492][T15789] comedi comedi3: dt2817: I/O port conflict (0x20d00,5) [ 248.119115][T15795] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 248.124770][T15795] netlink: 'syz.4.2931': attribute type 10 has an invalid length. [ 248.127408][T15795] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 248.169511][T15797] netlink: 'syz.1.2930': attribute type 10 has an invalid length. [ 248.175513][T15797] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 248.297187][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 248.299271][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 248.404019][T15809] ceph: No mds server is up or the cluster is laggy [ 248.431483][ T1465] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 248.515102][ T40] audit: type=1400 audit(524529.798:1774): avc: denied { write } for pid=15825 comm="syz.1.2939" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 249.503944][ T40] audit: type=1400 audit(524530.733:1775): avc: denied { mounton } for pid=15855 comm="syz.1.2949" path="/proc/139/cgroup" dev="proc" ino=63028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 249.575461][T15869] FAT-fs (sr0): bogus number of reserved sectors [ 249.581824][T15869] FAT-fs (sr0): Can't find a valid FAT filesystem [ 249.626964][T15876] futex_wake_op: syz.5.2955 tries to shift op by -1; fix this program [ 249.727030][T15897] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 249.857021][T15911] netlink: 'syz.1.2966': attribute type 1 has an invalid length. [ 249.904650][T15912] bond1 (unregistering): Released all slaves [ 250.141839][T15927] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 250.167646][T15927] can: request_module (can-proto-0) failed. [ 250.182574][T15931] netlink: 'syz.1.2970': attribute type 1 has an invalid length. [ 250.214961][T15931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.429386][T15940] tmpfs: Unknown parameter 'inode' [ 250.553209][T15943] openvswitch: netlink: IP tunnel dst address not specified [ 250.616998][T15950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=15950 comm=syz.2.2976 [ 250.661987][T15954] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 250.736520][T15962] __nla_validate_parse: 18 callbacks suppressed [ 250.736534][T15962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2979'. [ 250.845024][T15976] bond6: (slave bond_slave_1): Device is not bonding slave [ 250.848136][T15976] bond6: option active_slave: invalid value (bond_slave_1) [ 250.859751][T15976] bond6 (unregistering): Released all slaves [ 250.961701][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2985'. [ 251.224765][T15999] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 251.240392][T16007] random: crng reseeded on system resumption [ 251.247590][T16007] PM: hibernation: Image mismatch: memory size [ 251.250734][T16007] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2992'. [ 251.292915][T16009] syzkaller0: entered promiscuous mode [ 251.295407][T16009] syzkaller0: entered allmulticast mode [ 251.393411][T16025] cgroup: Name too long [ 251.410652][T16027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2998'. [ 251.429559][T16027] (syz.2.2998,16027,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 251.433700][T16027] (syz.2.2998,16027,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 251.439535][T16029] validate_nla: 1 callbacks suppressed [ 251.439551][T16029] netlink: 'syz.1.2999': attribute type 3 has an invalid length. [ 251.489554][T16034] wg2: Caught tx_queue_len zero misconfig [ 251.525445][T16045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3004'. [ 251.532570][T16048] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 251.538099][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'. [ 251.545676][T16034] sit1: entered allmulticast mode [ 251.551352][T16048] romfs: unable to set blocksize [ 251.551352][T16048] [ 251.560324][T16048] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 251.570545][T16048] romfs: unable to set blocksize [ 251.570545][T16048] [ 251.707292][T16059] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 251.713360][T16059] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 251.781318][T16084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3011'. [ 251.799471][T16071] ------------[ cut here ]------------ [ 251.801828][T16071] enable_ept && !allow_smaller_maxphyaddr [ 251.801840][T16071] WARNING: arch/x86/kvm/vmx/vmx.c:5444 at handle_exception_nmi+0xa6e/0x1bb0, CPU#3: syz.2.3011/16071 [ 251.808536][T16071] Modules linked in: [ 251.811839][T16071] CPU: 3 UID: 0 PID: 16071 Comm: syz.2.3011 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.815658][T16071] Tainted: [L]=SOFTLOCKUP [ 251.817480][T16071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.821272][T16071] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 251.823545][T16071] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 251.830608][T16071] RSP: 0018:ffffc9000445f9d8 EFLAGS: 00010283 [ 251.832977][T16071] RAX: 0000000000018715 RBX: ffff88805aa029c0 RCX: ffffc9002c567000 [ 251.836108][T16071] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff88802e76c980 [ 251.839105][T16071] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 251.842325][T16071] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 251.845850][T16071] R13: 0000000000000000 R14: ffff88803e3cd000 R15: ffff88805aa02a98 [ 251.849097][T16071] FS: 00007fecbe1e46c0(0000) GS:ffff8880d663f000(0000) knlGS:0000000000000000 [ 251.852270][T16071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.854666][T16071] CR2: 000000000f6632eb CR3: 0000000064eac000 CR4: 0000000000352ef0 [ 251.857484][T16071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000020 [ 251.860712][T16071] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 251.864122][T16071] Call Trace: [ 251.865698][T16071] [ 251.867009][T16071] ? __pfx_handle_exception_nmi+0x10/0x10 [ 251.869146][T16071] vmx_handle_exit+0x84d/0x1f40 [ 251.870970][T16071] vcpu_run+0x34cf/0x5ca0 [ 251.872453][T16071] ? __pfx_vcpu_run+0x10/0x10 [ 251.874029][T16071] ? rcu_is_watching+0x12/0xc0 [ 251.875870][T16071] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 251.877798][T16071] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 251.879571][T16071] kvm_vcpu_ioctl+0x730/0x1730 [ 251.881392][T16071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 251.883230][T16071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.885456][T16071] ? do_vfs_ioctl+0x226/0x13e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.887746][T16071] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 251.889934][T16071] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 251.893116][T16071] ? __fget_files+0x215/0x3d0 [ 251.895319][T16071] ? hook_file_ioctl_common+0x146/0x410 [ 251.898102][T16071] ? selinux_file_ioctl+0x139/0x290 [ 251.900194][T16071] ? selinux_file_ioctl+0xb4/0x290 [ 251.902326][T16071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 251.904333][T16071] __x64_sys_ioctl+0x18e/0x210 [ 251.906462][T16071] do_syscall_64+0x106/0xf80 [ 251.908655][T16071] ? clear_bhb_loop+0x40/0x90 [ 251.910662][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.913426][T16071] RIP: 0033:0x7fecbd39c799 [ 251.915473][T16071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.923672][T16071] RSP: 002b:00007fecbe1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.927215][T16071] RAX: ffffffffffffffda RBX: 00007fecbd615fa0 RCX: 00007fecbd39c799 [ 251.930063][T16071] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 251.933034][T16071] RBP: 00007fecbd432c99 R08: 0000000000000000 R09: 0000000000000000 [ 251.936309][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.939623][T16071] R13: 00007fecbd616038 R14: 00007fecbd615fa0 R15: 00007ffe19cdf588 [ 251.944077][T16071] [ 251.945432][T16071] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.948026][T16071] CPU: 3 UID: 0 PID: 16071 Comm: syz.2.3011 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.951808][T16071] Tainted: [L]=SOFTLOCKUP [ 251.953343][T16071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.956832][T16071] Call Trace: [ 251.958017][T16071] [ 251.959061][T16071] dump_stack_lvl+0x100/0x190 [ 251.960742][T16071] vpanic+0x552/0x970 [ 251.962158][T16071] ? __pfx_vpanic+0x10/0x10 [ 251.963759][T16071] panic+0xd1/0xe0 [ 251.965108][T16071] ? __pfx_panic+0x10/0x10 [ 251.966694][T16071] check_panic_on_warn.cold+0x19/0x34 [ 251.968531][T16071] ? handle_exception_nmi+0xa6e/0x1bb0 [ 251.970438][T16071] __warn.cold+0x191/0x348 [ 251.972000][T16071] __report_bug+0x296/0x3d0 [ 251.973604][T16071] ? handle_exception_nmi+0xa6e/0x1bb0 [ 251.975511][T16071] ? __pfx___report_bug+0x10/0x10 [ 251.977377][T16071] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 251.979661][T16071] ? kvm_pmu_trigger_event.isra.0+0x789/0xc00 [ 251.982251][T16071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.984389][T16071] ? handle_exception_nmi+0xa6e/0x1bb0 [ 251.986385][T16071] report_bug+0xb2/0x220 [ 251.987926][T16071] ? handle_exception_nmi+0xa6e/0x1bb0 [ 251.989868][T16071] handle_bug+0x16a/0x2a0 [ 251.991387][T16071] exc_invalid_op+0x17/0x50 [ 251.993131][T16071] asm_exc_invalid_op+0x1a/0x20 [ 251.994998][T16071] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 251.997560][T16071] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 252.005648][T16071] RSP: 0018:ffffc9000445f9d8 EFLAGS: 00010283 [ 252.008263][T16071] RAX: 0000000000018715 RBX: ffff88805aa029c0 RCX: ffffc9002c567000 [ 252.011080][T16071] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff88802e76c980 [ 252.013832][T16071] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 252.016959][T16071] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 252.020388][T16071] R13: 0000000000000000 R14: ffff88803e3cd000 R15: ffff88805aa02a98 [ 252.023329][T16071] ? handle_exception_nmi+0xa6d/0x1bb0 [ 252.025276][T16071] ? handle_exception_nmi+0xa6d/0x1bb0 [ 252.027230][T16071] ? __pfx_handle_exception_nmi+0x10/0x10 [ 252.029241][T16071] vmx_handle_exit+0x84d/0x1f40 [ 252.030971][T16071] vcpu_run+0x34cf/0x5ca0 [ 252.032574][T16071] ? __pfx_vcpu_run+0x10/0x10 [ 252.034462][T16071] ? rcu_is_watching+0x12/0xc0 [ 252.036571][T16071] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 252.038902][T16071] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 252.041115][T16071] kvm_vcpu_ioctl+0x730/0x1730 [ 252.042865][T16071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 252.044725][T16071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 252.046961][T16071] ? do_vfs_ioctl+0x226/0x13e0 [ 252.048768][T16071] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 252.050886][T16071] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 252.053650][T16071] ? __fget_files+0x215/0x3d0 [ 252.055806][T16071] ? hook_file_ioctl_common+0x146/0x410 [ 252.058120][T16071] ? selinux_file_ioctl+0x139/0x290 [ 252.060376][T16071] ? selinux_file_ioctl+0xb4/0x290 [ 252.062295][T16071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 252.064135][T16071] __x64_sys_ioctl+0x18e/0x210 [ 252.065930][T16071] do_syscall_64+0x106/0xf80 [ 252.067587][T16071] ? clear_bhb_loop+0x40/0x90 [ 252.069580][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.072484][T16071] RIP: 0033:0x7fecbd39c799 [ 252.074233][T16071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.081395][T16071] RSP: 002b:00007fecbe1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.084604][T16071] RAX: ffffffffffffffda RBX: 00007fecbd615fa0 RCX: 00007fecbd39c799 [ 252.087838][T16071] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 252.090830][T16071] RBP: 00007fecbd432c99 R08: 0000000000000000 R09: 0000000000000000 [ 252.094258][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.097817][T16071] R13: 00007fecbd616038 R14: 00007fecbd615fa0 R15: 00007ffe19cdf588 [ 252.100575][T16071] [ 252.102307][T16071] Kernel Offset: disabled [ 252.103820][T16071] Rebooting in 86400 seconds..