last executing test programs: 2.159242385s ago: executing program 2 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = memfd_create(&(0x7f00000002c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./virtfs_dir\x00', 0x777) mount(0x0, &(0x7f0000000240)='./virtfs_dir\x00', &(0x7f0000000440)='virtiofs\x00', 0x0, &(0x7f0000000480)='dax\x00') write(r3, &(0x7f0000000400)="7cc8d2", 0x3) r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) write$sysctl(r7, &(0x7f0000000500)='3\x00', 0x2) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x0) 1.961766726s ago: executing program 1 (id=35): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fchdir(r2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0xe, 0x0, &(0x7f0000000480)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r5 = syz_clone(0x80000000, 0x0, 0x60, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f00000000c0)='map_files\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000500)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r7 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'lo\x00', 0x0}) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) (async) ftruncate(r10, 0xc17a) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) (async) sendmsg$inet(r6, &(0x7f0000000800)={0x0, 0x14, &(0x7f0000000840)=[{&(0x7f0000000880)=' ', 0xffffff1f}], 0x1}, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.958938636s ago: executing program 2 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000019500040000000000360a020000000000180100002020782500000000002020207b1a11fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0xb0) write(r1, &(0x7f00000005c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x2800402, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x1e3) write(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8607}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="08ed"], 0x38}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 1.881993968s ago: executing program 2 (id=38): sched_setattr(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x111, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000080)='n', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x19ca, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0xf3f, 0x4) sendto$packet(r1, &(0x7f0000000240)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f00000002c0)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) nanosleep(&(0x7f00000004c0)={r6, r7+10000000}, &(0x7f0000000500)) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f00000001c0)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/pool_stats\x00', 0x0, 0x0) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000440)='./file0\x00', 0x40, 0x0) readv(r8, &(0x7f0000001640)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) 1.585485945s ago: executing program 0 (id=41): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/..\x00', &(0x7f00000001c0)={0x101482, 0x0, 0x8}, 0x18) r2 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000300), 0x0, 0x800) clock_gettime(0x3, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r4, 0x800c}], 0x1, &(0x7f00000003c0)={r5, r6+60000000}, 0x0, 0x0) fsync(r1) sendto$inet6(r3, &(0x7f0000000240)="800037bb680100ce", 0x8, 0x20000084, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0x4309, 0x4) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x8140, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.581463143s ago: executing program 0 (id=43): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x2, 0xa, 0x0, 0x7, 0x80, 0x45, 0xf8, 0x73, 0xce, 0x9, 0x4, 0x6}, 0xe) chdir(&(0x7f0000000080)='./file0\x00') getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0xfff, 0xffff, 0x80000000}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x48, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0xe1, @rand_addr=' \x01\x00', 0xffffffff}, @in6={0xa, 0x4e21, 0x46, @loopback, 0x8}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}]}, &(0x7f0000000200)=0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x21c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fae8949ee1ea59a045b6466827"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x6, 0x4, "855a"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5466}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x70b}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d22ad851bd0c4f83f4b873b9b4"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_SEQ={0x11, 0x4, "566a7788da4922f7ec87b511ab"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "2240cad29c818712bfe95bc6"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1344d44dc2"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e9e67b495c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '2'}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'T'}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4d60a4af87"}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x21c}, 0x1, 0x0, 0x0, 0x91}, 0x4000001) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x17, 0x4, 0x1, 0x8882, 0x40040, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000680)={0x4, 0x3, 0x88, 0x1, r3}, &(0x7f00000006c0)=0x10) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000700)={0x2, 0x9, "50b3b6", 0x9f, 0x2}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r4) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x50}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x96772a4a9fc0532c}, 0x4040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl1\x00', r9, 0x2f, 0x6, 0xa8, 0x8, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x3, 0x7fffffff}}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x180000000) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f00000009c0)) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000b80)=0x1, 0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x20000801) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000cc0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000d00)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0, 0x1}) write$vhost_msg(r4, &(0x7f0000000e80)={0x1, {&(0x7f0000000d80)=""/143, 0x8f, &(0x7f0000000e40)=""/27, 0x2, 0x2}}, 0x48) sendmsg$nl_route(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10252}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)=@bridge_newvlan={0x74, 0x70, 0x20, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000005}, 0x4048080) fstat(r7, &(0x7f0000001040)) inotify_init() write$vhost_msg_v2(r4, &(0x7f0000001200)={0x2, 0x0, {&(0x7f00000010c0)=""/86, 0x56, &(0x7f0000001140)=""/189, 0x2, 0x1}}, 0x48) 1.510403522s ago: executing program 0 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@hopopts={0x89}]}}}}}, 0x0) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000000000000003000000b20000090900017b797a31000000001400000100000a00"/55], 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 1.420521523s ago: executing program 0 (id=47): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000200)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.282038248s ago: executing program 0 (id=51): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x7, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000000c0)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1e, 0xc, 0x715, 0x8000000000000000, 0x0, 0x82000000000000, 0x800, 0xa13}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x99, &(0x7f0000000240)={0x0, 0x3cb1, 0x1c080, 0x10000a, 0x5b}) syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000340), &(0x7f0000000380), 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1.100353638s ago: executing program 1 (id=55): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x154, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x1234, 0x1234, @in6=@loopback}}]}, 0x154}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0xffffffff, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x40, 0x0, 0x2, 0x1}, {0x0, 0xfffffffffffffffc}}, {{@in=@rand_addr=0x64010102, 0xfffffffc, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x2, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.010662205s ago: executing program 2 (id=57): syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000080)="000000007cb7b8b0000000000000", 0x0, 0xfffff908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x60) 1.008344496s ago: executing program 1 (id=58): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000280), 0xa0d, 0x0, 0x0) close_range(r0, r4, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3, r0}, 0xc) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='erspan0\x00', 0x10) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r6, 0x80207501, &(0x7f0000000440)={0x0, 0xffff, 0x8, &(0x7f00000004c0)}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a00)={0x0, &(0x7f0000000a40)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0xfffffffffffffffd, @save_area=0x54b, 0x4, 0x91, 0x5}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}], 0x78}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 920.61987ms ago: executing program 2 (id=59): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000200)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 772.073175ms ago: executing program 2 (id=60): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_create_resource$futex(&(0x7f0000000380)=0x1) (async) r2 = syz_create_resource$futex(&(0x7f00000003c0)=0x1) futex(r2, 0x9, 0x1, 0x0, r2, 0x2) (async) futex(r2, 0x3, 0x0, &(0x7f0000000400), r1, 0x1) r3 = open(&(0x7f0000000200)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r3, 0x410, &(0x7f0000000240)={0x1, 0x1, 0x1, 0x9}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) openat(r3, &(0x7f0000000300)='./file0\x00', 0x800, 0x19) (async, rerun: 64) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r4, &(0x7f00000002c0)=@known='user.syz\x00') (async, rerun: 64) close(r3) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x5001}) (async, rerun: 64) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000006c0)) (rerun: 64) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f00000001c0)=@md5={0x1, "aa1beb43f425f4dd88b1231a46f03858"}, 0x11, 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=ANY=[@ANYBLOB="030307000000070018"], 0x9, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c000280080001400000004214000000110001"], 0xdc}}, 0x8040) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r8, 0x0, 0x12, 0x0, &(0x7f0000000340)) (async) syz_emit_ethernet(0x46, &(0x7f0000000700)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYRES8=r8], 0x58}}, 0x0) 428.862173ms ago: executing program 0 (id=61): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0xa, 0x62080) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x1000) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000840) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) listen(r2, 0x2) 381.796941ms ago: executing program 3 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x74) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) capset(&(0x7f0000000240)={0x19980330}, &(0x7f0000000280)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, 0x0) 381.549377ms ago: executing program 3 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000054000100ff4fa744c3c015d4787f0000", @ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x22004014}, 0x40080c0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000054000100ff4fa744c3c015d4787f0000", @ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x22004014}, 0x40080c0) (async) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0) (async) read$FUSE(r2, 0x0, 0x0) (async) 281.285522ms ago: executing program 3 (id=64): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xe1000d00) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0xffffffff, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) inotify_init() (async) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xe1000d00) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0xffffffff, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 280.911895ms ago: executing program 3 (id=65): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003002000000014000000110001"], 0xec}}, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000a00)={0x0, 0x1af9, 0x1, 0x7, 0x9, 0x0, [{0xffff, 0x3, 0x9, '\x00', 0x1000}, {0x800, 0x10, 0x6d, '\x00', 0x1d00}, {0x7, 0x6, 0xfffffffffffff8ad, '\x00', 0x3288}, {0x1, 0x0, 0xe53e, '\x00', 0x2005}, {0x8, 0x100000000, 0x7, '\x00', 0x100}, {0x6, 0x8000000000000000, 0x1ff}, {0x5, 0x2, 0x1c00000, '\x00', 0x1080}, {0x6, 0x8000000000000000, 0x2, '\x00', 0x2009}, {0x401, 0x6, 0x1ff, '\x00', 0x4}]}) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x18f, 0x6, 0xffff, 0x8251c, 0x7, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x10, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x4000000000000e}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000001e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x6}]}, {0x0, [0x5f]}}, &(0x7f0000001ec0)=""/5, 0x37, 0x5, 0x1, 0x9, 0x10000}, 0x28) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000001fc0)='bpf_lsm_socket_connect\x00') r8 = syz_open_procfs(0x0, &(0x7f0000002000)='net/icmp6\x00') pread64(r8, &(0x7f0000002040)=""/195, 0xc3, 0x100) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@arena={0x21, 0x0, 0x0, 0x2e, 0x30400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x10, 0x22, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000010040003d01100008000f0018370000030000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffff2135ca05c521ad05c9a23879d426bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000025590600fcffffffac460c00ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000018420000080000000000000000000000185700000700000000000000000000009500000000000000"], &(0x7f0000000e40)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000e80)=""/4096, 0x41000, 0x58, '\x00', 0x0, @fallback=0x1d, r6, 0x8, &(0x7f0000001f40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001f80)={0x1, 0x0, 0x3, 0x2}, 0x10, r7, r8, 0x8, &(0x7f00000021c0)=[0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f0000002200)=[{0x3, 0x5, 0x6, 0xa}, {0x2, 0x1, 0x3, 0x4}, {0x2, 0x4, 0x7, 0x4}, {0x5, 0x3, 0xf, 0x7}, {0x5, 0x3, 0x4, 0x7}, {0x5, 0x3, 0xd, 0x9}, {0x1, 0x3, 0x1, 0x2}, {0x3, 0x2, 0xe, 0xa}], 0x10, 0x80000000}, 0x94) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r10, &(0x7f0000000c40)=[{{&(0x7f0000000c80)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002340)=[{&(0x7f00000023c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f00000024c0)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000002580)="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", 0x182}, {&(0x7f0000002740)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00"/48, 0x30}, {&(0x7f0000002780)="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", 0x29a}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000002a40)=0x4, 0x4) sendmmsg$inet(r10, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) ioctl$SIOCX25GCAUSEDIAG(r0, 0x541b, &(0x7f0000000000)={0x22, 0x81}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x484000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r12 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo/3\x00') read$eventfd(r12, &(0x7f00000003c0), 0x8) ioctl$SNDCTL_SEQ_SYNC(r11, 0x5101) 62.026857ms ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ed) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100), 0x0) mount(0x0, &(0x7f0000000040)='./nfsd/pool_stats\x00', &(0x7f0000000080)='overlay\x00', 0x20084, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/pool_stats\x00', 0xd2a80, 0x12) r1 = openat(r0, &(0x7f0000000540)='./nfsd/pool_stats\x00', 0x0, 0xd1) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) 58.676881ms ago: executing program 1 (id=67): syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000080)="000000007cb7b8b0000000000000", 0x0, 0xfffff908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x60) 58.389253ms ago: executing program 3 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000600)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000640)={@hyper, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000200)=0x4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0xfffffffd}}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000000)={0x1, 0xd2, "4d83cdb2a9094a7303abeca285115ae265687dfa082bfbda1f0821db61977fddc53483b54e381c6e33a0ba78e79e4018ec8501a1b0d469dff44f1e0d64a3d22016438a16a817019f1e3fa5e7a7f93d1f7f1ab8ddd40961df069cda7bd003cadf8bff06ade8a94ebe18feac2d42de0c679fbde6d095b2e73d5bad76dcf3a621e1f107ccd054c326cbbab06dc59d259d5cfdde39a0d185447aee7915730dfe8a0011d90c918ed676ff6a456a18e1ada9e63cd1cab94fc826592b2f789f7f6ad6083b09a53a5540a04b3c69411b0434f70f6cb4"}, &(0x7f0000000140)=0xda) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) fchmod(r7, 0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000180)={r6, 0xfd6}, &(0x7f00000001c0)=0x8) 244.382µs ago: executing program 1 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x5, 0x1, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f00000003c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x38, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa}, @NFACCT_FILTER={0x4}]}, 0x38}}, 0x2000c000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000780)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r6, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000009c0), 0x0, 0xfeffffff, 0x10, 0x8, 0x20000, 0x0}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x101602, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000ac0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000b00)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000b40)={&(0x7f0000000b80)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f0000000bc0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r10, 0xc03064b7, &(0x7f0000000c00)={r11, r12, r13, 0x5, 0x90, 0x4, 0x7ff0, 0x587, 0x3a6a, 0x3, 0xf6c, 0x8}) write$tun(r9, &(0x7f00000002c0)={@val={0x0, 0x9000}, @void, @ipv6=@icmpv6={0x5, 0x6, "cc0ff4", 0x8, 0x3a, 0x1, @mcast1, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xdb, 0xb}}}}, 0x34) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r15 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r15, 0x0, 0x19, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=r16, @ANYBLOB="00000000000000000a0001000242ac1100020000050021000000000008000a00", @ANYRES32=r14], 0x3c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a"], 0x0) 0s ago: executing program 3 (id=70): socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000200)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=71): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:64106' (ED25519) to the list of known hosts. [ 38.433965][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 38.433978][ T42] audit: type=1400 audit(1793373277.637:138): avc: denied { name_bind } for pid=5765 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.464693][ T42] audit: type=1400 audit(1793373277.667:139): avc: denied { execute } for pid=5766 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 38.465071][ T42] audit: type=1400 audit(1793373277.667:140): avc: denied { execute_no_trans } for pid=5766 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.434580][ T42] audit: type=1400 audit(1793373279.637:141): avc: denied { mounton } for pid=5766 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.436249][ T42] audit: type=1400 audit(1793373279.637:142): avc: denied { mount } for pid=5766 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 40.438353][ T5766] cgroup: Unknown subsys name 'net' [ 40.439636][ T42] audit: type=1400 audit(1793373279.647:143): avc: denied { unmount } for pid=5766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 40.618926][ T5766] cgroup: Unknown subsys name 'cpuset' [ 40.622749][ T5766] cgroup: Unknown subsys name 'rlimit' [ 40.792607][ T42] audit: type=1400 audit(1793373279.997:144): avc: denied { setattr } for pid=5766 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.793160][ T42] audit: type=1400 audit(1793373279.997:145): avc: denied { create } for pid=5766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.793567][ T42] audit: type=1400 audit(1793373279.997:146): avc: denied { write } for pid=5766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.793950][ T42] audit: type=1400 audit(1793373279.997:147): avc: denied { read } for pid=5766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.863046][ T5771] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.556092][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.317349][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 45.317365][ T42] audit: type=1400 audit(1793373284.527:154): avc: denied { execmem } for pid=5773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.543243][ T42] audit: type=1400 audit(1793373284.747:155): avc: denied { create } for pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.543713][ T42] audit: type=1400 audit(1793373284.747:156): avc: denied { read write } for pid=5777 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.544354][ T42] audit: type=1400 audit(1793373284.747:157): avc: denied { open } for pid=5777 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.563392][ T42] audit: type=1400 audit(1793373284.767:158): avc: denied { ioctl } for pid=5777 comm="syz-executor" path="socket:[6761]" dev="sockfs" ino=6761 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.577236][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.578764][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.579114][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.579894][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.580362][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.586272][ T42] audit: type=1400 audit(1793373284.787:159): avc: denied { read } for pid=5777 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.596593][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.598032][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.598707][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.599583][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.600104][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.604433][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.607105][ T42] audit: type=1400 audit(1793373284.797:160): avc: denied { open } for pid=5777 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.607141][ T42] audit: type=1400 audit(1793373284.797:161): avc: denied { mounton } for pid=5777 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.607172][ T42] audit: type=1400 audit(1793373284.807:162): avc: denied { module_request } for pid=5777 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.609854][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.610364][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.611867][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.612230][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.612660][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.613068][ T42] audit: type=1400 audit(1793373284.817:163): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.614134][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.614554][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.615277][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.615440][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.809133][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.809769][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.810349][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.876912][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 45.890446][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 45.893388][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 45.907996][ T5782] infiniband rxe0: set active [ 45.908009][ T5782] infiniband rxe0: added rxe_eth0 [ 45.919415][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.921853][ T5782] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 45.921879][ T5782] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 45.921910][ T5782] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 45.935556][ T5782] RDS/IB: rxe0: added [ 45.935813][ T5782] smc: adding ib device rxe0 with port count 1 [ 45.935876][ T5782] smc: ib device rxe0 port 1 has no pnetid [ 45.943189][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.944472][ T3305] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.054274][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.159099][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.159518][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.159632][ T5777] bridge_slave_0: entered allmulticast mode [ 46.160447][ T5777] bridge_slave_0: entered promiscuous mode [ 46.173676][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.173737][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.173967][ T5777] bridge_slave_1: entered allmulticast mode [ 46.175084][ T5777] bridge_slave_1: entered promiscuous mode [ 46.197644][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.227577][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.240513][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.263268][ T5777] team0: Port device team_slave_0 added [ 46.268324][ T5777] team0: Port device team_slave_1 added [ 46.294976][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.294987][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.294999][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.301010][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.301022][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.301041][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.353404][ T5777] hsr_slave_0: entered promiscuous mode [ 46.354052][ T5777] hsr_slave_1: entered promiscuous mode [ 46.431358][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.491468][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.491589][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.491681][ T5786] bridge_slave_0: entered allmulticast mode [ 46.492857][ T5786] bridge_slave_0: entered promiscuous mode [ 46.500740][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.500817][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.500912][ T5786] bridge_slave_1: entered allmulticast mode [ 46.503130][ T5786] bridge_slave_1: entered promiscuous mode [ 46.563788][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.566554][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.639527][ T5786] team0: Port device team_slave_0 added [ 46.660807][ T5786] team0: Port device team_slave_1 added [ 46.689738][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.689754][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.689767][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.690717][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.690724][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.690736][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.756441][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.756560][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.756662][ T5781] bridge_slave_0: entered allmulticast mode [ 46.757927][ T5781] bridge_slave_0: entered promiscuous mode [ 46.769188][ T5786] hsr_slave_0: entered promiscuous mode [ 46.769959][ T5786] hsr_slave_1: entered promiscuous mode [ 46.770488][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 46.770553][ T5786] Cannot create hsr debugfs directory [ 46.776072][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.776406][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.776508][ T5781] bridge_slave_1: entered allmulticast mode [ 46.777396][ T5781] bridge_slave_1: entered promiscuous mode [ 46.867993][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.888313][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.894850][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.900003][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.900883][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.905218][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.929894][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.934077][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.934863][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.938002][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.970171][ T5781] team0: Port device team_slave_0 added [ 46.972798][ T5781] team0: Port device team_slave_1 added [ 47.021051][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.021066][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.021084][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.073776][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.073803][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.073818][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.125949][ T5781] hsr_slave_0: entered promiscuous mode [ 47.126700][ T5781] hsr_slave_1: entered promiscuous mode [ 47.127035][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 47.127046][ T5781] Cannot create hsr debugfs directory [ 47.137324][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.137503][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.137751][ T5782] bridge_slave_0: entered allmulticast mode [ 47.139001][ T5782] bridge_slave_0: entered promiscuous mode [ 47.157766][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.157841][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.157934][ T5782] bridge_slave_1: entered allmulticast mode [ 47.159226][ T5782] bridge_slave_1: entered promiscuous mode [ 47.198896][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.222634][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.267670][ T5782] team0: Port device team_slave_0 added [ 47.270249][ T5782] team0: Port device team_slave_1 added [ 47.306721][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.306736][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.306754][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.310779][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.310793][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.310811][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.312191][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.315504][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.352934][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.354808][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.355377][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.358501][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.359194][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.362073][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.421664][ T5782] hsr_slave_0: entered promiscuous mode [ 47.422391][ T5782] hsr_slave_1: entered promiscuous mode [ 47.422945][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 47.422961][ T5782] Cannot create hsr debugfs directory [ 47.479377][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.492179][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.494252][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.494609][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.496405][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.502953][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.507412][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.508407][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.518861][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.547042][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.580814][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.580888][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.617897][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.618057][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.656912][ T5779] Bluetooth: hci2: command tx timeout [ 47.667171][ T5779] Bluetooth: hci1: command tx timeout [ 47.667269][ T5779] Bluetooth: hci0: command tx timeout [ 47.667354][ T5137] Bluetooth: hci3: command tx timeout [ 47.699530][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.699674][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.702185][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.702849][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.705231][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.705902][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.712123][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.712871][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.716054][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.768585][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.789262][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.789377][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.790885][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.790958][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.795116][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.822922][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.841095][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.841147][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.853001][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.853103][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.861644][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.892697][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.913744][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.923879][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.923995][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.939458][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.939520][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.030878][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.065811][ T5777] veth0_vlan: entered promiscuous mode [ 48.073833][ T5777] veth1_vlan: entered promiscuous mode [ 48.089990][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.099540][ T5777] veth0_macvtap: entered promiscuous mode [ 48.102527][ T5777] veth1_macvtap: entered promiscuous mode [ 48.120163][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.128845][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.130346][ T5786] veth0_vlan: entered promiscuous mode [ 48.144126][ T5786] veth1_vlan: entered promiscuous mode [ 48.159523][ T5882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.159638][ T5882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.159657][ T5882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.159674][ T5882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.184531][ T5786] veth0_macvtap: entered promiscuous mode [ 48.193467][ T5786] veth1_macvtap: entered promiscuous mode [ 48.215178][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.218971][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.222178][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.222193][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.235286][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.245805][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.263169][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.263189][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.312466][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.312480][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.339716][ T5782] veth0_vlan: entered promiscuous mode [ 48.340546][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.340557][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.360023][ T5781] veth0_vlan: entered promiscuous mode [ 48.361280][ T5782] veth1_vlan: entered promiscuous mode [ 48.362148][ T5777] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.364780][ T5781] veth1_vlan: entered promiscuous mode [ 48.409371][ T5781] veth0_macvtap: entered promiscuous mode [ 48.412300][ T5782] veth0_macvtap: entered promiscuous mode [ 48.415396][ T5781] veth1_macvtap: entered promiscuous mode [ 48.418842][ T5782] veth1_macvtap: entered promiscuous mode [ 48.431121][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.436365][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.436402][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.436435][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.436461][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.440215][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.442782][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.448236][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.510262][ T5936] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 48.535748][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.535762][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.562852][ T5940] device-mapper: table: 248:0: verity: Device must be readonly (-EINVAL) [ 48.562865][ T5940] device-mapper: ioctl: error adding target to table [ 48.573897][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.573913][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.578113][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.578128][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.586435][ T5882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586585][ T5882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586617][ T5882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586645][ T5882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586674][ T5882] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586704][ T5882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586734][ T5882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586763][ T5882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.616564][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.616583][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.680561][ T5950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6'. [ 48.862660][ T5963] device-mapper: table: 248:1: verity: Device must be readonly (-EINVAL) [ 48.862682][ T5963] device-mapper: ioctl: error adding target to table [ 48.900044][ T5958] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 49.103781][ T5973] mmap: syz.0.14 (5973) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.223601][ T5986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5986 comm=syz.0.17 [ 49.229452][ T5986] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET) [ 49.251271][ T5851] wacom 0003:056A:0043.0002: Unknown device_type for 'syz0'. Assuming pen. [ 49.254641][ T5851] wacom 0003:056A:0043.0002: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 49.256012][ T5851] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0002/input/input5 [ 49.325394][ T5990] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.664341][ T6015] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 49.711760][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27'. [ 49.720460][ T6024] No source specified [ 49.736340][ T5137] Bluetooth: hci1: command tx timeout [ 49.736361][ T5137] Bluetooth: hci0: command tx timeout [ 49.736404][ T5137] Bluetooth: hci2: command tx timeout [ 49.743259][ T6027] device-mapper: table: 248:2: verity: Device must be readonly (-EINVAL) [ 49.743272][ T6027] device-mapper: ioctl: error adding target to table [ 49.746910][ T5779] Bluetooth: hci3: command tx timeout [ 49.759457][ T6030] Zero length message leads to an empty skb [ 49.844628][ T6040] device-mapper: table: 248:2: too large device [ 49.844638][ T6040] device-mapper: ioctl: error adding target to table [ 49.886127][ T6046] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 50.147697][ T6066] netlink: 136 bytes leftover after parsing attributes in process `syz.0.40'. [ 50.335278][ T42] kauditd_printk_skb: 101 callbacks suppressed [ 50.335292][ T42] audit: type=1400 audit(1793373289.537:265): avc: denied { read } for pid=6076 comm="syz.3.44" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 50.335582][ T42] audit: type=1400 audit(1793373289.537:266): avc: denied { open } for pid=6076 comm="syz.3.44" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 50.336104][ T42] audit: type=1400 audit(1793373289.537:267): avc: denied { ioctl } for pid=6076 comm="syz.3.44" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x4020ae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 50.336149][ T42] audit: type=1400 audit(1793373289.537:268): avc: denied { create } for pid=6076 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.408759][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 50.409975][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 50.411150][ T42] audit: type=1400 audit(1793373289.617:269): avc: denied { getopt } for pid=6088 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.411307][ T6089] netlink: 'syz.3.46': attribute type 7 has an invalid length. [ 50.412289][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 50.413088][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 50.414409][ T6090] netlink: 'syz.3.46': attribute type 7 has an invalid length. [ 50.500027][ T42] audit: type=1400 audit(1793373289.707:270): avc: denied { create } for pid=6099 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.500576][ T42] audit: type=1400 audit(1793373289.707:271): avc: denied { bind } for pid=6099 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.500934][ T42] audit: type=1400 audit(1793373289.707:272): avc: denied { setopt } for pid=6099 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.501353][ T6100] device-mapper: table: 248:1: verity: Device must be readonly (-EINVAL) [ 50.501366][ T6100] device-mapper: ioctl: error adding target to table [ 50.542633][ T6103] device-mapper: table: 248:1: verity: Device must be readonly (-EINVAL) [ 50.542652][ T6103] device-mapper: ioctl: error adding target to table [ 50.568327][ T42] audit: type=1400 audit(1793373289.777:273): avc: denied { read } for pid=6105 comm="syz.0.51" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 50.568358][ T42] audit: type=1400 audit(1793373289.777:274): avc: denied { open } for pid=6105 comm="syz.0.51" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 50.590903][ T6108] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.52' resets device [ 51.105595][ T6142] netlink: 56 bytes leftover after parsing attributes in process `syz.2.60'. [ 51.676299][ T3305] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.817181][ T5779] Bluetooth: hci3: command tx timeout [ 51.817214][ T5779] Bluetooth: hci2: command tx timeout [ 51.817233][ T5779] Bluetooth: hci0: command tx timeout [ 51.817251][ T5779] Bluetooth: hci1: command tx timeout [ 51.827774][ T3305] usb 5-1: Using ep0 maxpacket: 16 [ 51.829421][ T3305] usb 5-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 51.831350][ T3305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.831386][ T3305] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.831405][ T3305] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.831423][ T3305] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 51.831444][ T3305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 51.831469][ T3305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.837213][ T3305] usb 5-1: config 0 descriptor?? [ 51.913207][ T6170] bridge0: port 3(syz_tun) entered blocking state [ 51.913362][ T6170] bridge0: port 3(syz_tun) entered disabled state [ 51.913461][ T6170] syz_tun: entered allmulticast mode [ 51.914929][ T6170] syz_tun: entered promiscuous mode [ 51.915569][ T6170] bridge0: port 3(syz_tun) entered blocking state [ 51.915653][ T6170] bridge0: port 3(syz_tun) entered forwarding state [ 51.933603][ T6177] [ 51.934746][ T6177] ============================= [ 51.937416][ T6177] WARNING: suspicious RCU usage [ 51.939912][ T6177] syzkaller #0 Not tainted [ 51.942154][ T6177] ----------------------------- [ 51.944326][ T6177] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 51.948284][ T6177] [ 51.948284][ T6177] other info that might help us debug this: [ 51.948284][ T6177] [ 51.952644][ T6177] [ 51.952644][ T6177] rcu_scheduler_active = 2, debug_locks = 1 [ 51.955989][ T6177] locks held by syz.2.71/6177: 1, last CPU#1: [ 51.958644][ T6177] #0: ffffffff8ffea4f8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: bpf_prog_test_run_syscall+0x301/0xb30 [ 51.963477][ T6177] [ 51.963477][ T6177] stack backtrace: [ 51.966001][ T6177] CPU: 1 UID: 0 PID: 6177 Comm: syz.2.71 Not tainted syzkaller #0 PREEMPT(full) [ 51.969793][ T6177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.973973][ T6177] Call Trace: [ 51.975393][ T6177] [ 51.976605][ T6177] dump_stack_lvl+0x100/0x190 [ 51.978151][ T6177] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 51.980378][ T6177] get_callchain_entry+0x278/0x3f0 [ 51.982543][ T6177] get_perf_callchain+0x2d6/0x9c0 [ 51.984683][ T6177] ? finish_task_switch.isra.0+0x250/0x10d0 [ 51.987181][ T6177] ? __pfx_get_perf_callchain+0x10/0x10 [ 51.989485][ T6177] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 51.991970][ T6177] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.994146][ T6177] ? rcu_is_watching+0x13/0xc0 [ 51.996155][ T6177] __bpf_get_stack+0x34a/0x7f0 [ 51.998156][ T6177] ? __pfx___bpf_get_stack+0x10/0x10 [ 52.000416][ T6177] bpf_get_stack_raw_tp+0x1dd/0x280 [ 52.002589][ T6177] bpf_prog_33198c9320b70387_F+0x2f/0x35 [ 52.004975][ T6177] bpf_prog_0f401ca562e3309f+0x21/0x2e [ 52.007253][ T6177] bpf_prog_test_run_syscall+0x4ba/0xb30 [ 52.009595][ T6177] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 52.012186][ T6177] ? fput+0x7c/0x100 [ 52.013886][ T6177] ? __bpf_prog_get+0x97/0x290 [ 52.015935][ T6177] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 52.018502][ T6177] __sys_bpf+0x1d13/0x4b60 [ 52.020446][ T6177] ? __pfx___sys_bpf+0x10/0x10 [ 52.022402][ T6177] ? find_held_lock+0x2b/0x80 [ 52.024325][ T6177] ? futex_wake+0x4ea/0x5e0 [ 52.026260][ T6177] ? lock_acquire+0x1d1/0x380 [ 52.028271][ T6177] ? __x64_sys_futex+0x34f/0x4d0 [ 52.030410][ T6177] ? __x64_sys_futex+0x358/0x4d0 [ 52.032498][ T6177] ? __pfx___x64_sys_rt_sigprocmask+0x10/0x10 [ 52.035037][ T6177] ? xfd_validate_state+0x129/0x190 [ 52.037225][ T6177] ? __x64_sys_bpf+0xce/0x140 [ 52.039198][ T6177] __x64_sys_bpf+0xce/0x140 [ 52.041107][ T6177] ? do_syscall_64+0xae/0x790 [ 52.043198][ T6177] do_syscall_64+0x123/0x790 [ 52.045163][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.047098][ T6177] RIP: 0033:0x7fafaf79f559 [ 52.048898][ T6177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.056862][ T6177] RSP: 002b:00007fafb063a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.060390][ T6177] RAX: ffffffffffffffda RBX: 00007fafafa26090 RCX: 00007fafaf79f559 [ 52.063774][ T6177] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 52.067172][ T6177] RBP: 00007fafaf836b20 R08: 0000000000000000 R09: 0000000000000000 [ 52.070463][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.073790][ T6177] R13: 00007fafafa26128 R14: 00007fafafa26090 R15: 00007ffcdc06d3e8 [ 52.077108][ T6177] [ 52.197684][ T37] bridge0: port 3(syz_tun) entered disabled state [ 52.292547][ T3305] logitech-djreceiver 0003:046D:C53A.0003: hiddev0,hidraw1: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 52.486517][ T5873] usb 5-1: USB disconnect, device number 2 [ 53.898535][ T5137] Bluetooth: hci1: command tx timeout [ 53.898569][ T5137] Bluetooth: hci2: command tx timeout [ 53.898596][ T5137] Bluetooth: hci3: command tx timeout [ 53.898614][ T5137] Bluetooth: hci0: command tx timeout [ 57.025007][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.065449][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 57.065467][ T42] audit: type=1400 audit(1793373296.267:292): avc: denied { write } for pid=6183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.127767][ T42] audit: type=1400 audit(1793373296.337:293): avc: denied { write } for pid=6186 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1