last executing test programs: 1m48.591161621s ago: executing program 1 (id=1029): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000000000000400000000000000100000000000000020"], 0x24, 0x0) 1m47.595860514s ago: executing program 1 (id=1045): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000200)={{@local, 0x10000}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000040)={0x0, 0x6}) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) preadv2(r10, &(0x7f0000002240)=[{&(0x7f0000002040)=""/76, 0x4c}], 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x44, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x40, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x286}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x92}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0xfffffec0, 0x4, 0x8001}]}, {0xfffffffffffffdb5}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r11, 0x5760, 0x5e) r12 = socket(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r14, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4040880) write(r12, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 1m47.534711056s ago: executing program 1 (id=1047): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d530496d) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xd72, 0x0, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000603c000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000d30900000000000055090100000000009500000000000000ad508000fcffffff18360000010000000000000000000000ca8bffffffffffffbf91000000000000b702000002674668e2c7d00a7c000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe1, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1m47.414609244s ago: executing program 1 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) (async) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {0x2}, 0x8}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'nicvf0\x00', {0x7}, 0x6}) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x0, 'macvtap0\x00', {0x2}, 0x2}) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000600)=@x86={0x6, 0x0, 0x8, 0x0, 0x4, 0x8, 0x6, 0xb, 0x83, 0xf, 0x5, 0xc, 0x0, 0x101, 0x29, 0x0, 0x0, 0x0, 0x0, '\x00', 0xff, 0xd}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0x2, 0x4) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x5, 0x70bd2d, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) 1m47.243677792s ago: executing program 1 (id=1054): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) rt_tgsigqueueinfo(r2, r2, 0x400000a, &(0x7f0000000600)={0x81, 0x40000003, 0xfffff2bb}) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0xa9bd579, 0x1) fcntl$lock(r3, 0x5, &(0x7f0000000040)={0x0, 0x4, 0xfd8b, 0x5, r2}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1m46.051112497s ago: executing program 1 (id=1069): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400020, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) semctl$SETALL(0x0, 0x0, 0x11, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x5, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x30, 0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0xfffffc51) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r7, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x7, r9}], {0x4, 0x4}, [], {0x10, 0x2}}, 0x2c, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffd05, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e40701fefffffffcdbdf25017c000004004580ca00018000005a00252b27272900000073fd8800", @ANYRES32=0x0, @ANYBLOB], 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0) 1m45.956222199s ago: executing program 32 (id=1069): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400020, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) semctl$SETALL(0x0, 0x0, 0x11, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x5, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x30, 0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0xfffffc51) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r7, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x7, r9}], {0x4, 0x4}, [], {0x10, 0x2}}, 0x2c, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffd05, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e40701fefffffffcdbdf25017c000004004580ca00018000005a00252b27272900000073fd8800", @ANYRES32=0x0, @ANYBLOB], 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0) 1m20.190215652s ago: executing program 4 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc0000001000000000007000e2ffffff000003e4", @ANYRES32=0x0, @ANYBLOB="43020000cb1d07001c001280080001006772650010000280040012000600030084000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'tunl0\x00'}) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file3/file0\x00', 0x210202, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000001540)={0x51, 0x0, 0x0, 0x1, &(0x7f00000003c0)='\f', 0x8, 0x0, 0xffffff13, 0x1000, 0x60, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x30, 0x0, 0xfffffbff}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@loopback, @empty, 0x0}, &(0x7f0000000100)=0xc) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x44040, 0x11b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f00000001c0)={'tunl0\x00', r5, 0x7, 0x8, 0x3, 0x8, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast1, @multicast1, {[@end, @ssrr={0x89, 0xf, 0x3c, [@rand_addr=0x64010101, @loopback, @loopback]}]}}}}}) 1m20.189203708s ago: executing program 4 (id=1153): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2a020400) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) (async) fchdir(r4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e26}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1m20.125882381s ago: executing program 4 (id=1155): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4) bind$ax25(r1, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 1m20.026153213s ago: executing program 4 (id=1157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x40000, 0x6) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@report={0xd8, 0x20, 0x300, 0x70bd26, 0x25dfdbfb, {0x27, {@in=@rand_addr=0x64010101, @in=@multicast1, 0x4e24, 0x0, 0x4e24, 0x5, 0x2, 0xa0}}, [@extra_flags={0x8, 0x18, 0x4}, @tmpl={0x84, 0x5, [{{@in=@local, 0x4d5, 0xff}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x3500, 0x2, 0x3, 0x3, 0x48a20c8b, 0x800, 0x40}, {{@in6=@local, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3505, 0x0, 0x3, 0x2, 0x4, 0x80000001, 0x80000000}]}]}, 0xd8}}, 0x24000058) ioperm(0x0, 0x7fff, 0x15f9) r3 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000740)={0x0, 0x96}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0xc000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f00000000c0)="ae63f1b9cbfa31a46d8272373ee55338a0e38eaefd3ce83284a74929b098f4aafadbfe61f2bb5f1c9810ea74c07d932956cfbd62ebb787b4805774af3519a107c7a7895431f239b93388c47a1292cb9fa1e69352e307", 0x56) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000250009012adbdf25020000000c0040800800cb0000000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 1m19.8340394s ago: executing program 4 (id=1158): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x1, 0x6}) r1 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0xa2, 0x0, 0x8}, 0x6) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000000c0)={0xa62e376e909941e2, 0x5}) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x48b9905) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0x90d9, 0x81, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x7, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @private, @dev}, &(0x7f0000000580)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@empty, 0x0}, &(0x7f0000000600)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x700, 0x20, 0xfff, 0x5, {{0x2e, 0x4, 0x0, 0x8, 0xb8, 0x67, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp={0x44, 0x1c, 0xac, 0x0, 0x3, [0x2f8d3031, 0x8, 0x1000, 0x719c, 0x0, 0x0]}, @cipso={0x86, 0x39, 0x1, [{0x2, 0x5, "39dcc9"}, {0x7, 0x5, "c6bd07"}, {0x1, 0x5, "09cadb"}, {0x0, 0x7, "ec0ff0805c"}, {0x1, 0xe, "c67392bc2dfbec56428ca421"}, {0x1, 0x4, "f603"}, {0x5, 0x6, "d225e62b"}, {0x5, 0x5, "849fb6"}]}, @rr={0x7, 0x17, 0xaa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @local, @private=0xa010101]}, @lsrr={0x83, 0xf, 0xd3, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @private=0xa010100]}, @rr={0x7, 0x13, 0xb5, [@private=0xa010100, @empty, @private=0xa010101, @local]}, @noop, @ssrr={0x89, 0x13, 0x5, [@local, @broadcast, @multicast2, @multicast2]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x700, 0x20, 0xfff, 0x5, {{0x2e, 0x4, 0x0, 0x8, 0xb8, 0x67, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp={0x44, 0x1c, 0xac, 0x0, 0x3, [0x2f8d3031, 0x8, 0x1000, 0x719c, 0x0, 0x0]}, @cipso={0x86, 0x39, 0x1, [{0x2, 0x5, "39dcc9"}, {0x7, 0x5, "c6bd07"}, {0x1, 0x5, "09cadb"}, {0x0, 0x7, "ec0ff0805c"}, {0x1, 0xe, "c67392bc2dfbec56428ca421"}, {0x1, 0x4, "f603"}, {0x5, 0x6, "d225e62b"}, {0x5, 0x5, "849fb6"}]}, @rr={0x7, 0x17, 0xaa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @local, @private=0xa010101]}, @lsrr={0x83, 0xf, 0xd3, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @private=0xa010100]}, @rr={0x7, 0x13, 0xb5, [@private=0xa010100, @empty, @private=0xa010101, @local]}, @noop, @ssrr={0x89, 0x13, 0x5, [@local, @broadcast, @multicast2, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x12a8021}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x108, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004840}, 0x8885) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x12a8021}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x108, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004840}, 0x8885) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x671}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r1, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r5, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x9, 0x13, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0xe1}, @alu={0x7, 0x0, 0xb, 0x5, 0x1, 0x80, 0xffffffffffffffe0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x695}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000bc0)=""/30, 0x41100, 0x8, '\x00', r4, @cgroup_sock=0xf, r11, 0x8, &(0x7f0000000c40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0x4, 0x2, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)=[r12, r13, r2, 0xffffffffffffffff, r14], 0x0, 0x10, 0x7}, 0x94) io_uring_register$IORING_REGISTER_FILES(r12, 0x2, &(0x7f0000001000), 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000001040)='0', 0x1) syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r2) (async) r15 = syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, r15, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x3c}}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r16, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3}, @void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x7e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x5a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x8}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x74}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x68}, 0x1, 0x0, 0x0, 0x84080}, 0xc800) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r16, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3}, @void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x7e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x5a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x8}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x74}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x68}, 0x1, 0x0, 0x0, 0x84080}, 0xc800) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r16, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r15, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc84}, 0x0) 1m19.574158918s ago: executing program 4 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) r1 = inotify_init1(0x0) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x7fff, 0x10001}, &(0x7f0000000180)) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x610003d5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 1m19.530405266s ago: executing program 33 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) r1 = inotify_init1(0x0) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x7fff, 0x10001}, &(0x7f0000000180)) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x610003d5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 1m4.145934805s ago: executing program 2 (id=1329): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r0, &(0x7f0000000380)='./mnt\x00', r0, &(0x7f0000000340)='./file0\x00', 0x5) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r4, @ANYBLOB='\b\x00\r\x00'], 0x70}}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x6e) (async) sendto$packet(r2, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x3}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) (async) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x3}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) pread64(r1, 0x0, 0x0, 0x1) r6 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffffff, 0x0, 0x164) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, &(0x7f0000000280)) (async) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, &(0x7f0000000280)) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x0) 1m4.075321784s ago: executing program 2 (id=1332): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) close(r0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) lseek(r3, 0x7, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) pread64(r6, &(0x7f0000000440)=""/163, 0xa3, 0x96) ioctl$KVM_RUN(r7, 0xae80, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000040)=""/119, 0x77}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000180)=""/195, 0xc3}], 0x4, 0xff, 0x9) (async) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000040)=""/119, 0x77}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000180)=""/195, 0xc3}], 0x4, 0xff, 0x9) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) 1m4.022138039s ago: executing program 2 (id=1335): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c00030304000e0580a7b6070d63e286a5cefe", 0x5ac) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x400000000000000}, 0x40810) 1m3.966010126s ago: executing program 2 (id=1336): madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x30, 0x0, &(0x7f00000014c0)) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) sendmmsg$alg(r2, &(0x7f0000004180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}], 0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_clone(0xc0068000, 0x0, 0xfd6c, 0x0, 0x0, 0x0) 1m3.666315014s ago: executing program 2 (id=1343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x8, 0x2041}) 1m3.505436589s ago: executing program 2 (id=1344): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx6\x00', 0x204001, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d04, 0x0, 0xe446}]}) recvmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/239, 0xef}], 0x1, &(0x7f0000000280)=""/17, 0x11}, 0x40002000) 1m3.42808451s ago: executing program 34 (id=1344): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx6\x00', 0x204001, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d04, 0x0, 0xe446}]}) recvmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/239, 0xef}], 0x1, &(0x7f0000000280)=""/17, 0x11}, 0x40002000) 3.274452482s ago: executing program 0 (id=2271): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x3) (async) open(&(0x7f0000000240)='./file0\x00', 0x4000, 0x4) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x0, &(0x7f0000000980)='norecovery') (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012"], 0x50}}, 0x0) (async) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x11100, 0x0) read$FUSE(r3, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x33e) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x68c50012, 0x51, 0x0, 0xff, 0x7d, 0x0, 0x0, 0x1, 0xffffffff}}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f0000000180)={0xfffffffffffffce8, 0x0, r4, {0x7, 0x2d, 0xae5, 0x1000000, 0x100, 0x1ff, 0xbe05, 0x0, 0x0, 0x0, 0x80, 0x5}}, 0x50) writev(r3, &(0x7f0000000540)=[{&(0x7f00000002c0)="a7e64b2f39e3eed17ea5dd50e68ef1dd8015c7fd8276dad52f387479e1767639983420806283c0e49cfd1aec1d15590655c9733446d3a56ba1581ad83f9a9f2f9048c24d2d8a7ff498e77e9400a3612b8529c4abb04b69ac74b9cfa9aa68f84bd60143708a9873a7e71faad5a1b24cd6d43c3ee9c92ceda2fea5d70d377317a729c6ec3a174d1aea4bb4b812880e6e481cec4cf68ac2350cfcf8df54739cf0434e39fa5c75fa6d671fe7f2b074f6cdada6237a22abac614cf45d159cb99b635e64f1b9b4a0c7243abf8d8bd467c6e543ddc6ecc4b15f2297d6c6de89e8d771f00761", 0xe2}, {&(0x7f0000000440)="235aa7bd986861968c483daf6afd34aed82735c5d4ad42887f41383a352fa3004141a122e694eed7fc0f7107651e7aedafb724946accdebfbfef80927423a01eebb09adf30ecffe4b1ebb5b8a13ec6039d349d85016ca35f3033c7bc6e7a41d0e210720b223cc0bf335f3db60aa415eaf8cd6116278aa043ef42931fe638af7e86b696807ff5674c6833202e8f2a483e948509745db9177da7f283a139ffbb5a4a24900fdeeb1763c5258c02ce4fa911e5e8e7105dbe78d13bb368912dbf42f4ea256bb81209da5da69bc1f153cc429a", 0xd0}], 0x2) 3.205103832s ago: executing program 0 (id=2272): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ipvlan0\x00'}}, 0x1e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r1, &(0x7f00000000c0)="1f", 0xffc0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.197030341s ago: executing program 0 (id=2274): syz_emit_ethernet(0xb2, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0xffffffff, {[@timestamp_addr={0x44, 0x34, 0xe2, 0x1, 0x6, [{@multicast1, 0x873a}, {@multicast1}, {@loopback}, {@local, 0x1}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev, 0x2}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x6, 0x0, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0xfffffff9, 0x4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000050040009d60feffffff00000000017cb1893a20b8d2a93521f40a0400c6ce08099e4d184b924d5a10080000005feb36113abfd1be68df7bf9a0f0103bb6ae83f543de99feb5319edeeee29af7e10295f0eb804fa62ccfc0fd0170d30a0866bbe8d5c86fa441108d05c2cf3fa4a0e845c9e239fff0195ecb893a6ac18738467d043e813883d73582198750b3dd53bc934fcf972f4b1a7ce72f906691203f010bf6155694ef62bdc0e1baf97cf6fc166d7c85b5753ede84bd5d10bfa9d97fccb71a23cbbcde0f38a61cca670c94b7379e875cf49709753e3af234b07c1284ff3c52abf0cecdd1467b414c0cabd8c326b3d0b68f2997cd"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x201, 0x0, 0x0, {0x8, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x60, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", "", "", ""]}}}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xf0, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3d}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x270}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) 3.125364525s ago: executing program 0 (id=2275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b14, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4048850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ee3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e99e3c14", 0x5}, {&(0x7f0000000d00)="7aa6", 0x2}], 0x3}, 0x0) 3.12291372s ago: executing program 0 (id=2278): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004550", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) r3 = memfd_create(&(0x7f0000000a00)='\xcdT\xea\x1fd\x1a6\x13\xeb\xce(}\x91Q\x02\x00E\x88-\x00', 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="1d2317f64baa853907eed5d300", 0xd}], 0x1, 0x6, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="c85d0d6853ce", 0x6}], 0x1}, 0x800) sendfile(r0, r3, 0x0, 0x8000fb00) 3.043698202s ago: executing program 0 (id=2280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@deltaction={0x1c8, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1a}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) setrlimit(0x8, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x5, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mlockall(0x7) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r11, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newnexthop={0x64, 0x68, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfffe}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.792118871s ago: executing program 3 (id=2302): ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000300)={"0458282de77641f962339d36", &(0x7f00000001c0)="f70f438b8587ca504c381dfd1565337e108139fcd59519e7e5beda47c6a2fb8d7c3f558029890b41db8517e989431524f7eb754af77e2218b355c7eb8f55fd2c3b07bcf05f0edf6647ad288253b3762853c006f86195d3e31ac9f87d3727370577205406e6ee4fca6d5ade109d03f5a8e087e79595510e34b6588d25e1bdf79bc01aa790cdba57042f93ffd14458fb9d1eb3f13c2e99ec318643d4b605180c2c5c8f103a7b7ca95e27b8a06681425626708eb24276811d7982918b66f88ab9cc5aa9cc186c0b457c0956917b3d0a17b655fdbc99841e6d84095b4c2c80d076ac58a91d7e64f78648", 0xe8, 0x7, &(0x7f0000000040)={0x9, 0x1, 0xfb, 0x7, 0x0, 0x0, 0x0, "a43d5722", 0x5, "b9f3de77", 0x7, 0x6, 0xd6, "39a1d2", "313e697f3d15e314f02e90d77d9691612d2b462ce6dd396452026f50560eb120907e3d3a5de6e82682b90ef1038f"}, 0x2, 0x7, 0x6, &(0x7f00000002c0)}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, 0x205, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x329641, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r3, 0x0) timer_create(0xb, 0x0, &(0x7f0000000400)=0x0) timer_gettime(r4, &(0x7f0000000080)) timer_settime(r4, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x77359400}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000180)="c4c2a1285d0f0f01d1c4e3f16a260ec4c2fda90ed2ec0f070f00d50f20e035400000000f22e0f40f71f40d", 0x2b}], 0x1, 0x3, 0x0, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.632123636s ago: executing program 3 (id=2307): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 1.554880577s ago: executing program 3 (id=2308): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x9f45, 0x0, r1}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x90002, 0x0, {[0x7ff, 0x6, 0xb2d0, 0x483, 0xc, 0x8, 0x1, 0x1]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.021457313s ago: executing program 3 (id=2317): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e2d70000000000000000000071122200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], 0x0}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x29, 0x0, @empty, @private}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYRES8], &(0x7f0000000340)='GPL\x00'}, 0x94) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r7, 0x4, 0x2400) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31830000000000000000190000001800018014000200"], 0x2c}}, 0x4000) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000380)={@remote, @rand_addr, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)={0x5bc, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "0f1f80fdb30ab5fc7277a34df9ad96de6bac3e80c937df9972aa5f7349f458cf14a60d052e3b7fddfd4926ad4e6a05259a4a4d1fceba10ac67a8c0e13cc619888f5ee6dceb8a8c797ad0"}]}, @ETHTOOL_A_FEATURES_WANTED={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "90836cc59a2849bca9873d0fa05266db042a4eca7c008694a761fe34a3f3c32ee5380ae6c4b380304496ccf1b618649991da84dde499dba7587177ad13b043784f2c69166dd8e8a7ce1994a781615a9d775bb458871faa068029d6847ac3255bb74611ec69ff8b583a077d7a5cd5863e112535604a968e732d9adfbff22acc60d3b70c0e4872d024972f376f26feac2992b218b2bb21bac6e4ea0f92b5a6fbf998e2259fc158e35972f6690c0648bc9bca0a8d81b2"}]}, @ETHTOOL_A_FEATURES_WANTED={0x40c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "bbe9f7982c38086e3a11cb4c2fa5933028304322c7b4e46220bbbd46f16d913fc23f7bdb43abc8f856a744997b1f2c89e4bce5e9f98368f0e3b66100ab729f0998e861db437b7b7be6a197aeeea5f20570c6a24869c3aeffb5d9fa94f4c4329ceae1708daebcc50b152d34eb0dc204c104b1fb58482baf7ca7ebc517"}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x00\x00\x00\x00\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-)*-@]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '))@%\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '],#)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "03523cf80f05acc1862bcfed3f48d7631ee5a192e197957742ab9a44238919aaa91bd4b23105bc8d93cc48235251bb03815388e1719d57e360d28bc66a42430317e5b125f9a6f01383ff89b72dad616ca368213d1760d9ef44e246982a974db5af058f4fdc7a968cfa690c754b803c55121a19f2a07569db790e05f740c29d61ddef198b6d020307284d8377d956265498d14beb866849d4c1b45e004dfa67"}, @ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "4dac1d11a3dec9b3c95d2ee978ff017e856bc25f261ab8b8f14c55bd2f46682fdd60cb7c82adc7f2058ff037567f126aafec7d426c3deb5e6bd4d9ea99f87ba7656f5933c082cb4ab6a0f3323b0abf55bac05789fc6d"}, @ETHTOOL_A_BITSET_BITS={0x18c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$+[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '-@\'&\xac!(:+\\%-#*+&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa45e}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe79}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x90e6}, @ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "1621a2de5b43c55dece844779f02509d3c51f9ea"}]}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x40085}, 0x4010) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x13e) r11 = io_uring_setup(0x1614, &(0x7f0000000340)={0x0, 0xd794, 0x40, 0x4, 0x1d}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r11, 0xf, &(0x7f0000000540)={0x1000, 0x0, 0x0, 0x0}, 0x20) write$cgroup_int(r10, &(0x7f0000000040)=0xfe8e, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000ffff", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 944.703884ms ago: executing program 6 (id=2320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000001340)={[0xd504]}, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1}) socket$tipc(0x1e, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80}, [@FRA_DST={0x14, 0x1, @empty}]}, 0x30}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r5, &(0x7f00000002c0)=""/153, 0x99) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000004000000000000000000000000000000000000000000000001000000000000000000000000000005000000040200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000000000000008bffffffffffffff00000000000000000000000000000000dff90000000000000000000000000000fcffffffffffffff0000000000000000020000000000000000000000002000000000000000000000000000000000000001000003000000004400050020010000000000000000000000000000000000022b0000000a000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x20048010) 944.357182ms ago: executing program 3 (id=2321): prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x88, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x0, 0x0, 0x4, 0x0, @wg=@initiation={0x1, 0x0, "48a0218b5e18924d1daa9268e74fedd2c8a2a913d275e7564902d3f13a287ef9", "785d6bbffbfaf9743ba160c69403a465487d352c9ee7f60000002ae9c6e47b6d442f2f756a91993e9542e889e7cf7118", "add317350284d1cc5d8d00d6ce891743b9653014e80fb7f826a1bf30", {'s\x00', "ca5e0ff0a96b6eefdd65b199f135c5e3"}}}}}}}}, 0x0) 559.885549ms ago: executing program 3 (id=2323): socket(0x40000000015, 0x5, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r2) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="819b08fafffffad5df2503"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x842) (async) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="819b08fafffffad5df2503"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x842) r4 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000f00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x19fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x19fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r5}, 0xc) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x0, r5, 0x267a4e37}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x0, r5, 0x267a4e37}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5cd052d6240b235c498305dc16bc6e1ab432036c25202a6791149f30dfadb7ab2fd5423cba30714f5f921b9e08dea8dce60b1aa0b64e04b8446229d389ba379a2c791f8e96c71430e34a661431b47929e65d08112de6def5c765bfa144b6aef1cba63b1c1e1721a3be2544f9fffdcb635a37f58083492f925f7e41b311cc206a2676b49876062cf2710da2a61b4bfa2130e45ca32796ac191ec5f587a1a765576d271c6fa105e70d3981ad28c5c7f7fff7a475fed3c0a6021fe2d58c", 0xbc}, {&(0x7f00000000c0)="bdb95714d558fdb80000000000000000dd4b7e3d12dfdf150c78eeff008f7b409fb6e3", 0x23}], 0x2, 0x0, 0x0, 0x80}, 0x4) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) 556.750546ms ago: executing program 6 (id=2326): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x5, 0xdc, 0xd4, 0x820, 0xffffffffffffffff, 0x3b14, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x400, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0xff, 0xff, 0xfe, '\x00', 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfa, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x21, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0x8}, {0x7, 0x7f, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca3c70748412ba8", 0xa}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf15", 0x57}], 0x3, 0x0, 0x0, 0xc000}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000540)=""/91, 0x5b}], 0x2}, 0x40010021) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r4, @ANYBLOB="04002abd7000ffdbdf250d0000007c000180140002007465616d5f736c6176655f310000000008000300000000001400020076657468315f746f5f626f6e640000001400020069703665727370616e3000000000000008000100", @ANYRES32=r5, @ANYBLOB="1900", @ANYRES32=r9, @ANYBLOB="1400020076657468315f766972745f77696669000800030002000000380001800800030002000000140002006d616376746170300000000000000000080003000000000008000300020000000800030001000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4005800}, 0x4000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, &(0x7f0000000500)="0f8adf000f013e0070f30fa7e866b9f60200000f320f381e4e00f20f5f03f3df8f2f0066b9100600000f3266660ff1a800300f08", 0x34}], 0x1, 0x41, &(0x7f0000000580)=[@efer={0x2, 0x400}], 0x1) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) r14 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r14, 0x708, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0x2}, {0xd, 0x6}, {0x0, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x100440a0) 394.628164ms ago: executing program 6 (id=2330): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000b, 0x42032, 0xffffffffffffffff, 0x200000000000000) syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000580)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c26a1fecacd629e414ee4039be47000000aaaaaaaaaaaa86dd6515987f000006017c02000000006764940126177673dccae384b2e40000000000000000000000000000000000000000ffff64010100890000000000000004010300000000003b003168640000001100000000000000c2de34978c9cc016fa071ed12be4807ac129919bdaca8def7a316635749fa1488939f0255cd1d8112e0482169d9b388625a8dcfcb680e3934a233183896a235c150481ea1730114a575a6feb23689fd8f2d1bf42aeb23ea3959366e64976cb177836779dad103620c5719479", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="001000029078018102000008fe00f98978bf709e21276ed61e00190807000000020000001300936769c394a981c562ddc22b5212fc5802000100220039d25d812bfe00f989fc050043b47d8fd8b57b8f418ad753ba627b73157ff72310169fadf6643279b88961897dfb0b2a"], 0x0) r2 = socket(0x10, 0x3, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000780)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x560, 0x0, 0xab83, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_DELAY_DIST={0x11, 0x2, "859a51da5c0dde1cdfdaa602d0"}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000000)={@private0, 0x0}, &(0x7f0000000340)=0xfffffffffffffec5) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8948, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched_retired(r13, &(0x7f0000000740)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000001400)=@deltfilter={0x2398, 0x2d, 0x2, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xffff, 0xffe3}, {0xa}, {0x0, 0x3}}, [@f_rsvp={{0x9}, {0x14dc, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_POLICE={0x8d4, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x1000, 0x9, 0x800, {0xf, 0x1, 0x94bf, 0xda, 0x9}, {0x9, 0x2, 0x6, 0x7, 0x9, 0x3}, 0xff, 0xffff153f, 0x18000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2ca}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0xa39, 0xfffff000, 0x4, {0x6, 0x1, 0x5, 0x7, 0x10, 0x3}, {0x5, 0x2, 0x9, 0x0, 0x0, 0xf5}, 0x4, 0x7f, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x200, 0x9, 0xb4af, 0x6, 0x8, 0x2, 0x18, 0x2, 0xaa, 0x10001, 0x7617, 0x9d, 0x7, 0x200, 0x720e, 0x0, 0x1, 0x5, 0x9, 0x9fc7, 0x6, 0xfff, 0x3, 0x28d7449e, 0x0, 0x8, 0x10001, 0x1, 0x80, 0x2, 0x3, 0xa, 0x80, 0x80, 0x5, 0x3ff, 0x7, 0x40, 0x8, 0x1380, 0x5, 0xf3, 0x4, 0x8, 0x7f0, 0x8, 0x3, 0x8, 0x1, 0xfffffff7, 0x8, 0x1, 0x3, 0x8, 0x5, 0x7, 0x5, 0x3, 0x6, 0x82c, 0x2, 0x4, 0x5, 0x8, 0x0, 0x6, 0x6, 0x1, 0x9, 0x6e8, 0xc, 0x9, 0x7fffffff, 0x10, 0x1, 0x0, 0x3, 0x6, 0x8, 0xffffc52a, 0x8, 0x6, 0xffff, 0x81, 0x3ff, 0x8, 0x3, 0x4, 0xdacb, 0x41a69d9d, 0x7ff, 0x363, 0xf, 0x6, 0x7eba8bf0, 0x2000000, 0xe, 0x8, 0x6, 0x80000001, 0x9, 0x3, 0x200, 0xfff, 0x82, 0x3ff, 0xfffffffb, 0x1, 0xbab, 0x7, 0x100, 0x0, 0xd3e, 0x1, 0xdad0, 0x48, 0x8, 0x4, 0x7, 0xa9, 0x5, 0x3, 0x40, 0x77, 0x4, 0x3, 0x2, 0x4, 0x10, 0x652, 0x8, 0x6, 0x2, 0x2, 0x8, 0x9, 0x10001, 0xb2e0b1, 0x7, 0x2, 0x100, 0x2, 0x8, 0xa, 0xe, 0x2, 0x3, 0x10000, 0x5, 0x7f, 0x3ec8, 0x1, 0x7, 0xd50, 0x7, 0x87, 0x2, 0x3, 0x5, 0x61, 0x7, 0x9, 0x7fffffff, 0x821, 0x4, 0x3291, 0xc, 0xfb, 0x10000, 0x2, 0x4, 0x8, 0x7ff, 0x1, 0xb0, 0x6, 0x10001, 0x3ff, 0xe, 0xac, 0x3, 0x5, 0x0, 0x40, 0xe0, 0x3, 0x3, 0x18, 0x80000001, 0x1, 0x0, 0x5f31, 0x40, 0xfffffffe, 0x1ff, 0x7, 0x0, 0x3, 0x9, 0x6, 0x2, 0x1ff, 0x1, 0x2, 0x2, 0x6, 0x5, 0xfff, 0x5, 0x5, 0x9, 0x3, 0x6, 0xc, 0xc, 0x4, 0x351, 0x0, 0x7fc, 0x5, 0x400, 0x2, 0x1, 0x400, 0xe5cc, 0xacf52be7, 0x9, 0xff, 0x7, 0x8, 0x9, 0x0, 0xfffffffa, 0x3, 0x7f, 0x2, 0x1ff, 0x1000, 0x5, 0x21072f9, 0x0, 0x101, 0x4, 0x7, 0x1, 0x3, 0x500, 0x8, 0x9, 0x5, 0x8, 0x11, 0x6, 0x1, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x0, 0xffffff80, 0x6, {0x4, 0x1, 0x0, 0x2, 0x719, 0x45e8}, {0xb, 0x2, 0x0, 0x8, 0xca4, 0x4}, 0x8, 0x5, 0xb}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0x8, 0x80000001, 0x9, 0x2, 0x80000001, 0x7, 0xfffffffd, 0x2, 0x2, 0x6, 0x2b4500, 0x1, 0x1, 0x80000000, 0x7, 0x9, 0x2, 0xd, 0xffff6da8, 0x5, 0xf8, 0x1, 0x5, 0x92, 0xffffff00, 0x6, 0x4, 0x3, 0x7, 0x100, 0x401, 0x5, 0x3, 0x428, 0x7fff, 0x1, 0x401, 0x3, 0x0, 0xfffffff2, 0x5, 0x7, 0x8, 0x8, 0x7, 0x2, 0x81, 0xfffffff9, 0x2, 0x1038, 0x3ff, 0x6, 0xf, 0x4, 0x4, 0x7f, 0x2, 0x9, 0x1, 0x1, 0x7fffffff, 0x9, 0xe, 0x1b, 0x4, 0xb0c, 0x1ff, 0x80000000, 0x7, 0x8, 0x5, 0x7fffffff, 0x1000, 0x0, 0x46, 0x4, 0x6, 0x280000, 0x7, 0x9, 0xf1, 0x3, 0x4, 0x800, 0xfff, 0x1, 0x7, 0x223a43fd, 0x30be, 0xbf93, 0xfffffff8, 0x2, 0x6, 0xf, 0x1000, 0x0, 0x5, 0x7, 0x7fff, 0x3, 0x1, 0x8, 0x2, 0xbed, 0x0, 0xc17, 0xfffffffc, 0x1, 0x6, 0x3, 0x4, 0x1, 0x7, 0x10, 0x7f, 0x7fff, 0x5, 0xbe, 0x4, 0xd4, 0x400, 0x3, 0x0, 0x2, 0x0, 0xb769, 0xfffffffe, 0x0, 0x2, 0x7, 0x7fffffff, 0x1, 0xfff, 0xa6, 0x2, 0x8, 0x3, 0x1, 0x4, 0x3, 0x80000000, 0x2, 0x7, 0xfffffffb, 0x4, 0x7, 0x7f7, 0x6, 0x4, 0x7f, 0xa9000000, 0x75c6e6ce, 0x8384, 0xfffffffc, 0x6, 0x86f, 0x4, 0x0, 0x4, 0x1, 0x800, 0x100, 0x0, 0x5, 0x401, 0x9, 0x8, 0x28, 0x5, 0x3, 0x9, 0x8, 0x0, 0x6, 0x4, 0x1, 0x9, 0x7, 0x39d, 0x8, 0x1, 0x7, 0x4, 0x3, 0x4, 0x1, 0x44, 0x8, 0x80, 0x29fe, 0x2, 0x8, 0x8, 0x800, 0x3, 0xffffffff, 0x2, 0xfffffff8, 0xb, 0x8, 0x9, 0xb1ba, 0x2, 0x3, 0x8, 0xa, 0x6, 0x4, 0x0, 0x80, 0x1, 0x9, 0x9, 0x1, 0x69, 0x6dbe, 0x9d, 0x8, 0x7, 0xd, 0x8, 0x9, 0x7, 0x2, 0x2, 0x9, 0x2, 0xc, 0x21c, 0x3, 0xf, 0x800, 0xe, 0x0, 0x6, 0x81, 0x5, 0x7fff, 0x2, 0x0, 0x3081, 0x1, 0x3, 0x7, 0xfff, 0xfb2c, 0x1, 0x8, 0x1, 0x1, 0x5, 0x0, 0x6, 0x3]}]}, @TCA_RSVP_POLICE={0x4a4, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5a, 0x1, 0xfffffff9, 0xffff, 0x7, {0x7, 0x2, 0x6e, 0xfffb, 0x1, 0x7fffffff}, {0x5a, 0x0, 0x2, 0x5, 0x4, 0x5}, 0x6, 0x2, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8f}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x81, 0x4, 0x572, 0x6, 0x80000001, 0xc9, 0x1, 0x7, 0x6, 0x7, 0x8, 0x9, 0x101, 0x8c5, 0x6, 0x60677041, 0x5, 0x6, 0x2, 0x2, 0x8, 0x6, 0x8, 0x1ff, 0xa, 0x80000001, 0x40000000, 0xd1e1, 0x8000, 0xffffff81, 0x0, 0x0, 0x5, 0x9, 0x1, 0x2, 0x3ff, 0x71, 0xb4, 0x7, 0x50d, 0x1, 0xe, 0x0, 0x1, 0x6, 0x9, 0x1, 0xc7c, 0x200, 0x711, 0x1, 0x10001, 0x8, 0xa6, 0x1, 0x92, 0x59411016, 0x7b21, 0x9, 0x1, 0x5, 0x2, 0x9, 0x7, 0x0, 0xfff, 0x7, 0x9, 0x7fff, 0x6, 0x8, 0x8001, 0x7fff, 0x2, 0x7f, 0x9, 0x420, 0x1, 0x2, 0xa, 0x1533, 0xf, 0xd, 0x5e, 0xd5b2, 0xdb8a, 0x1a4, 0x5, 0x200, 0x5, 0x4, 0xfff, 0x1000, 0x7f, 0x4, 0xffffffff, 0x8, 0x9704, 0x6, 0x0, 0x3, 0x4, 0x10000, 0x7, 0x4, 0x6, 0x6, 0x0, 0x2, 0x7, 0x5, 0x1, 0x2, 0x1, 0x4, 0x7ff, 0x80000001, 0x80, 0x317f, 0xbf, 0x3, 0x7, 0x6, 0x7, 0x7, 0x80, 0x0, 0x80000001, 0x7ff, 0x68, 0x1ff, 0x7, 0x8, 0xa5f2, 0x80000001, 0x1ff, 0x9, 0x2, 0x5, 0x80, 0x200800, 0x2, 0x90, 0x7f, 0x0, 0x3, 0xf9, 0x0, 0x4, 0x9, 0xfffffff9, 0xfffffffb, 0xa, 0x6, 0x9, 0x1, 0x80000001, 0x1, 0xf4, 0x0, 0x3, 0x4, 0x1, 0x2, 0x0, 0x4, 0xbe, 0x0, 0x9, 0x1, 0x7, 0x5, 0x2, 0x546, 0x5, 0x6, 0x5, 0x5317, 0x2f4f, 0x401, 0x16b1, 0x5, 0x7fffffff, 0x1, 0x6, 0x1, 0x1, 0xfffffffd, 0xd, 0x1ff, 0x0, 0x9, 0x8, 0x3, 0x8000, 0x3, 0x0, 0x3ff, 0x9, 0x1, 0x9, 0x7, 0x200, 0x7, 0xc, 0x0, 0xff, 0x9, 0x5, 0xef4, 0x3, 0xffffffff, 0x8000, 0x479f, 0x4, 0x7, 0x9b, 0x5, 0x91d0, 0x9, 0x4, 0xbac, 0x5, 0x6, 0x47d, 0x7ca0, 0x0, 0xaba, 0x2, 0x6, 0x0, 0x80000000, 0xebf7, 0xa, 0x1, 0x5, 0x8, 0x1, 0x9, 0xd6, 0x3666, 0x1ff, 0x7fff, 0x8, 0xc, 0x1, 0xfffff5b1, 0x200, 0x7, 0xa464, 0xb, 0x0, 0x0, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x8, 0xff, 0xa0f6, {0x0, 0x2, 0x401, 0x3000, 0x9, 0xdc3d}, {0x7, 0x2, 0x4, 0x9, 0x2ba, 0x8000}, 0x8000, 0x3, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}]}, @TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xb, 0x8}, {0x8, 0x4, 0x2}, 0x89, 0x7f, 0x2}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_ACT={0x720, 0x6, [@m_skbmod={0xf0, 0xf, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3, 0x7, 0x2}, 0x6}}]}, {0x91, 0x6, "82af6d87ab90e21aa5cad97c7c3985c0d8c6b944f0926f6e73a3fab9a19b0296c49b941c26afd50890bcd2794593815e50e27be1eb926a44086e106f13c1a2ae046130a3b8549faace5ff1ce56b753ff1c029a957d290779a9789e06ee1169be94179d3cfcc83fe096e7075853d8691df8310a1454dfa3d9d1ce0ab2091d659c6b9a3a7fa7d4ad96e18fe924c4"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0xb4, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80010, 0x3, 0x20000000, 0x6, 0x3}, 0x6}}]}, {0x6c, 0x6, "fe355d8ae9372a1ccfcb84294ec9bd4c2180d344618f8068dc2be21b444e599b7c227deb993143dd1d636b1336f2dd6d2dad7ac67bfa444e70e70cae1c44bd8931b8fa874a831e4a874bb16938961de3864ea7bbb74c69693d1fdda77d41cebe6604013c326b988d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x164, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6ce, 0x5, 0x4, 0x10000}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x8, 0x1000, 0x3}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0xfffffffd, 0x0, 0xfffffffc, 0x45e}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x7}, 0xa}}]}, {0xc6, 0x6, "5584a325865c1b57780b2b661112d4ba256aea483afcd6f0e9afbfc2220ba83be23d87fc0a3152d2f85323404d8d65feed7eb49bd256d4159c03af0b14cc95f3c4933550b41d5a0e3c6961b9337f233412ffd7762047df18bd5a960b844c7fdc5cab340f9a60a79d4fd0c47a7b29708569b647b84a86a43cf7c0efb510f7e7bd32217f24723f9a2bbedd8d0707d3d4e6c09cfc8b9b17f12ff538184130fe7042acfb4c6ac3992db40108bb21d2b9eca77740e324bd8f05b4dcee95591a8e64aad3d5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0xfc, 0x13, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff, 0x5, 0x2, 0x3, 0xbe9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x79d}]}, {0x89, 0x6, "fff565d7d7da43b384de98de9fa82768675121abaee4c07553386ec303f843fcf817fa43ff788a76e7702485ba039f90722332099e1acbd1131b88b9e23a101bf72656ed06cf3e046422bd79aa77cb6bd57002da6cf35134918671f6532bbd8afe64b068a5397e6dadc0d94f691873e2baaf1cc2773be526359f46d19847f0ac5286a6b45c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xbc, 0x20, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7, 0x0, 0x62000000, 0x6475}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffd}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x3f, 0x6, "4abe63d1ed099559cd5998fbc70557cc0e7e3b7ba6743ad85daeccdc84eb3d1e3effe312f3ffd9291928d951bc6272524f1b601057cc140a1e69ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xf8, 0x1e, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="1e6b028922a5"}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_TYPE={0x6, 0x5, 0x846}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0xa3, 0x6, "72650d568ff1900403a9bfe43fb33f3a158e0d7b0278b498e5a88eb06127bd7fea1386764bf2330acddf58fc7f33406cc206416f32c00ae130113efe6096a93fdf94f9b74d73a3c342b8694d3764991fd5d120b1376d448a7fb3f65d3617cb9ce9b521897be31cbbcef5cb5c6c87595fe2397d026f727e7dc15524b1dbb1c917de62af181e3e29933db506d3faf9eef6753c7286badb51e361150cb60f0c0c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x164, 0x14, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x27, 0xe6, 0x5, 0x7fffffff, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x8, 0x6, 0x8}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7b7, 0x2, 0x1ff, 0x6}}, @TCA_DEF_DATA={0x8, 0x3, ']\\{\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8b0, 0x8001, 0xffffffffffffffff, 0x3d, 0xfffffffc}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x2, 0x8, 0x80, 0xf09}}]}, {0x9f, 0x6, "b25b7e32876c27508ea0c7ba3894dd1dc7d3652375c0349c96608fd8c87036d4402e3d4a1fabd36f88fc15a12bf0dd6ec3d9815a20ed824e8352378ed15e0f050247bfdffa7d960036da6e65a725a5a582035beaf8073fbfb6f3d9b923777af0516e119019648bac485c67767619240d46dbbcd2c8c41f3c1dfbac0603f1e276541c29a64b3b1390226737ac170a0b7106e4e4750371c6d9a2f59a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}]}}, @f_tcindex={{0xc}, {0x61c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x947b}, @TCA_TCINDEX_ACT={0x600, 0x7, [@m_skbedit={0xc4, 0xb, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x11, 0x5, 0x2, 0xd, 0x3}}]}, {0x6e, 0x6, "97a8dcdf0d6b012f7f65a9e8216e4185b9bdfd150809875499ff574c7a5852df944f4fec4aefd5dcb11ac84e607f7780c480341f2f71b2fff24cc8563ec3e3ab9699a0feda3ab9a5ea4ff696fd34cca25172a5261b9bb9542e89fa4ce13789482f9cd6dbcdccff72f4ad"}, {0xc, 0x7, {0x0, 0xb74a97682b5dc13a}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x64, 0xd, 0x0, 0x0, {{0xd}, {0x4}, {0x31, 0x6, "a1f741d02c545a1d220c20c5ef2aeb925faeff8167fb0815e24d74d7e829d5e5d3d5fa4c67b522c3d81fa78d68"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x1ec, 0x4, 0x0, 0x0, {{0xb}, {0xd4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x2, 0xffffffffffffffff, 0x3cb8b425, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\xde\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x0, 0x20000000, 0xd, 0xf8a}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x3, 0x2, 0x8001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x0, 0x10000000, 0x5, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1ff, 0x2, 0x1, 0x542a116f, 0x7fffffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x7, 0xb, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xfff, 0x8, 0x1, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x49716963, 0x3, 0xfffffffe, 0x101}}]}, {0xf0, 0x6, "f4a1f3f1e3b0773e4e2ba1e241dd00c5b3eb10240f4c959ea9be75adbd8f07b773bed3f8be17a365509b99c4640cdb77c4ac8484b64ff47145baada91ff44a0747308eb2777a5de956895cdc611c45cf18a4f71158e557f5f2200a5d2dcf04702ef0acec67409ca01bad279ce19bacc21cc6ea8625831df931ce4ea5f4300d85a55af23cd449ff2dd051c9146cf6b99aaf8a0b1214431b95c6b9dce3a7926b6aec5f09807e13db74410ef7c967a4c1bf46a0388a0bbefa9384f8a3f09c53d85f37ad04c1b4f85d55de8359d26835c0cc7d8deaca7c5a03a834a4ace01932d7d1d5363129624866786dedf0d6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xe8, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12ba, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2ed, 0xfffffffffffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf4, 0x80000001, 0x20000000, 0x1000, 0x400}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x11a5, 0x20000000}}]}, {0x7f, 0x6, "68cc9cc097474d36cdc6f6d822fe7fd1af4dfb776782d2559550f19a8157ad2ab43af9b9de1cefae23f2f4ce2534a507caacb7bdb120b056c98add727bac4164e30187375eeb04179455a58fd1148120c9a27072bc33112f71bcc10d7b69d8879e3a57d90a4c319f2579a05760cb2df31c2c5c67830dd8364628a9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_nat={0xd0, 0x15, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000, 0x40, 0x80000001}, @empty, @local, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2400000, 0x5, 0x7}, @rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x69, 0x7, 0xff7}, @loopback, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xc, 0x4, 0x401, 0x80000001}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0x0, 0x1}}]}, {0x5, 0x6, "19"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x130, 0x13, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "8afb5a96723528184d5f0a34f602b1a3"}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0xec, 0x6, "f85930d6ffb117a30e41b8f527527390d4e470d84396f5ffa51d4666a1120f26e23dc3fc4be27a5c0c50ae6d0658ef57ed39202098ce7fa59b530429125b17ba77b6e71f87199739a77b82272193a6ff8b0c59ddb7f8debe41b87b997c6acccb15055a56e4f6e8c51afc6237897d6cb722f447cb4b98d603969e640c5798f17b16072298d1f698b14746863780e0739c254c06e94d96ef8b0ae0139ff42d455b6a6182d9e12812eef76bf29a7d8c203df6c56ad9c4d4e3ecf51856529ae1a9bf98723539ca3a8ef390511d569e9005ca800ac78b15b182219e8ff539bc6c4af2c3f72fc3422abc37"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0xe0ebb75e7eaf40a7}}}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x5}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x3}]}}, @f_rsvp={{0x9}, {0x34, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x88f, 0x1, 0x9}, {0x6d, 0x9, 0x7}, 0x5e, 0x9, 0x5}}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}]}}, @f_tcindex={{0xc}, {0x818, 0x2, [@TCA_TCINDEX_POLICE={0x814, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x0, 0x3, 0xd45, 0x9, 0x7fff, 0x3, 0x5, 0x3, 0x9, 0x5, 0x779, 0xaf90, 0xfffffe01, 0x4d2d, 0xd, 0x7, 0x9, 0x1, 0x0, 0x1, 0x9, 0x3, 0x2, 0x8, 0x401, 0x2, 0x6, 0xdc8, 0x0, 0x4, 0xffff0000, 0xfffffe00, 0x0, 0xd, 0x2, 0xf, 0x4, 0x5, 0x9, 0x8, 0x200, 0x1, 0x48, 0x1, 0xffff, 0xfffffff1, 0xd8d2, 0x3, 0x8f1, 0x8001, 0x2, 0x9, 0x9, 0x3, 0x9, 0xfffffffc, 0x63, 0x3, 0x1, 0x4, 0x2, 0xa, 0x6, 0x7, 0x10000, 0x6, 0x0, 0x0, 0x7, 0x8, 0x8, 0xfe91, 0x1, 0x3, 0xffffffae, 0xc00, 0x7f, 0x6, 0x2, 0x8, 0x0, 0x5, 0x200, 0x800, 0x7, 0x1, 0x5397, 0x1, 0xe2d, 0x4, 0x98aa, 0x8, 0x7ff, 0x8000, 0xfffffffe, 0x5, 0x1a1, 0x8, 0x9, 0xb, 0x6, 0xd, 0x1, 0x4, 0x81, 0x7, 0x7ff, 0x9, 0x2, 0x1ff, 0x401, 0x4, 0x800, 0x2, 0xfffffffc, 0xfffffffa, 0xffff, 0x2, 0x556b, 0x0, 0x7e3, 0x9, 0x6, 0x7ff, 0x3, 0xdb, 0x101, 0x5, 0x8, 0x6, 0xfffffff7, 0xf9b, 0x4, 0x69d, 0x0, 0x81, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x7, 0x54e, 0x1, 0x4d, 0x7, 0x9, 0xa, 0x3, 0x6, 0x0, 0x1, 0x4e1, 0xffff, 0x800, 0x1, 0xbb6, 0x400, 0xb, 0x2, 0xb, 0x3, 0x2000000, 0x919f, 0x3, 0x5, 0x6, 0x3ff, 0x46a, 0x1ff, 0x8673, 0x5, 0x0, 0x60000, 0x0, 0x57a, 0x5, 0x7, 0xfffff000, 0x0, 0x4, 0x2, 0x3, 0x7, 0x8, 0x7, 0x3, 0x3, 0x3dc1, 0x7049, 0x9, 0x8, 0x3, 0x80000001, 0x3, 0x1, 0xd1, 0x1, 0x9, 0x2, 0xfffffff8, 0x7, 0xff, 0x3, 0xa, 0x7f, 0x6, 0x7fffffff, 0x3, 0x8, 0x3, 0x0, 0x1, 0x8, 0x4, 0xffffffff, 0x1, 0xa, 0x8, 0x1000, 0x94, 0x2, 0x4, 0x100, 0x33c069b, 0x8, 0x0, 0x2, 0x6d3, 0x9, 0x7fff, 0x8, 0x0, 0x8, 0x2, 0xffff5a47, 0xfffffeb3, 0x7, 0x8, 0x7, 0x8, 0x5, 0x3, 0x7, 0x6, 0x9, 0x5, 0xfffffffb, 0xf63, 0x3, 0x7fff, 0x81, 0x6, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x1, 0xddb, 0x7f, 0x30c8, 0x5, 0x100, 0x3, 0x2, 0x4, 0xe, 0x8, 0x7, 0x8, 0x4, 0x4, 0x4c6, 0x5ccf, 0x80, 0xfffffffd, 0x9, 0x2, 0x7, 0x4, 0x9abb, 0x8, 0x4, 0x7fff, 0x48, 0x10001, 0x7, 0x3, 0xa, 0x10, 0x80000001, 0x4, 0x40, 0x8, 0x34b9, 0x1ff, 0xfffffff4, 0x3, 0x2, 0x4, 0x9, 0x45, 0x8, 0x0, 0x9, 0x23a6, 0x0, 0x9, 0xae13, 0x93, 0x3ff, 0x7, 0xbd79, 0xffffff8b, 0x2, 0x6, 0x7f, 0x6, 0x8, 0xfffffffd, 0x7ff, 0x4, 0xc5a2, 0xffffffff, 0x7, 0x0, 0x7ff, 0x7f, 0x2, 0x5, 0x8000, 0xb, 0xece, 0xc626, 0xfffffff8, 0x2, 0xb3, 0x9, 0x9, 0x2, 0xf, 0xffff, 0x80, 0x1, 0x2, 0x10, 0x8, 0x1, 0x9, 0x5, 0xdaa2, 0x0, 0x6, 0xd523, 0x15, 0x5a, 0x4, 0x6, 0x1, 0x10001, 0x3, 0x7, 0x4, 0xffffff81, 0x40, 0x5, 0x5000, 0x8, 0xfffffffd, 0x1, 0x0, 0x2, 0xbce, 0x4, 0x0, 0x31a, 0xc, 0x10000, 0x8, 0x9, 0x0, 0x5, 0x3, 0x1, 0x7f, 0x0, 0x3, 0x4, 0x7, 0x0, 0x9, 0x81, 0x0, 0x101, 0x2, 0x0, 0xb73b, 0x6, 0x6, 0x200, 0x7, 0x2, 0xf5c6, 0x7fffffff, 0xc5, 0x1, 0x1, 0x4, 0x2, 0x7fff, 0xfe, 0x9, 0x3000000, 0xf, 0x8, 0x4, 0x2, 0x7f, 0x9, 0xb, 0x9, 0xe4, 0x1, 0x6, 0xfffffff9, 0xf17, 0x4, 0x3, 0x0, 0x4, 0x8, 0x3ff, 0x0, 0x8001, 0x0, 0x8, 0x87, 0x5, 0x284e, 0xfffffffe, 0x5, 0x3, 0x25d57407, 0x7, 0xc, 0xe8, 0x2, 0x1, 0x8, 0x4, 0x2, 0xfffffeff, 0x0, 0x5, 0xfffffff9, 0x8, 0x6, 0x6, 0x7f, 0xd59, 0x5067, 0xb, 0xc, 0x63e5, 0x3ff, 0xfff, 0x1, 0x888, 0x6, 0x2, 0x200, 0x579, 0xffffaa7e, 0x8001, 0x8, 0x9c, 0x23, 0xd9, 0x1, 0x401, 0x3, 0x2d0, 0x9594, 0x3c76, 0xb86e513, 0x9, 0xb2c0, 0x0, 0x9, 0x2, 0xfffffff3, 0x42, 0x4, 0x5, 0x5, 0x3, 0xff, 0xf, 0x1000, 0x2, 0x5, 0x6, 0x7, 0x8, 0x8, 0x7, 0x5, 0x10001, 0x6, 0x10001, 0xc0b3, 0x7]}]}]}}]}, 0x2398}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$tun(r10, &(0x7f0000000240)=ANY=[], 0xfce) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000009c83a4b333f54746526136b733ae9e30601080000000000000000070000000900020073797a310000000005000100070000002c0007801800018014000240fc00000000000000000000000000000006f84d5b2a72badc126bb566b623f1a31374f766f6330ad49d4492182f2e9c4d8661e41abe7eb4db7ee984bced619dc4b0e277f456c58e22c2ec4f22eec7c4e1"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000200)={'sit0\x00', r7, 0x788, 0x700, 0xb7, 0x9, {{0x33, 0x4, 0x0, 0x6, 0xcc, 0x66, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010102, @loopback, {[@noop, @ssrr={0x89, 0x17, 0x42, [@rand_addr=0x64010100, @local, @empty, @broadcast, @multicast1]}, @cipso={0x86, 0x14, 0x1, [{0x6, 0xe, "124ff83b22e7b62d002d2693"}]}, @rr={0x7, 0x1b, 0xd, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @rand_addr=0x64010102]}, @ssrr={0x89, 0x13, 0x3c, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @local, @loopback]}, @generic={0x82, 0x4, '.u'}, @cipso={0x86, 0x23, 0x3, [{0x7, 0x10, "ace7e81e302db85cf2af90b8c578"}, {0x0, 0xd, "d5d5e83059c4defcbed2b5"}]}, @timestamp_prespec={0x44, 0x34, 0x9f, 0x3, 0x4, [{@loopback, 0x4}, {@private=0xa010101, 0xfffffc00}, {@empty, 0x1}, {@empty, 0x20000000}, {@remote, 0x8}, {@private=0xa010100, 0x1}]}, @end]}}}}}) 234.624367ms ago: executing program 5 (id=2333): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@nested={0x4, 0x4e}]}, 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x37}], 0x1}, 0x2080) pread64(r0, &(0x7f0000002c00)=""/4069, 0xffffffffffffffd3, 0x7fffffff) 233.612181ms ago: executing program 6 (id=2334): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x11c, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a01, 0x0) ioctl$COMEDI_CMDTEST(r4, 0x8050640a, &(0x7f0000000040)={0x0, 0x40, 0x10, 0x46dd, 0x1, 0x7, 0x2, 0x4, 0x4, 0x7, 0x0, 0x80000002, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "d59c58789cb0b951ec6164233a0615920b895411ed0732b4218c6e62dd3c908fb51cfec6e6ca2b75f3716d2ea1f519b7ef90f9a8af57f11ec0df59865989b32d", 0x23}, 0x48, 0xfffffffffffffff8) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r10, 0x9f) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 125.332987ms ago: executing program 5 (id=2335): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x88, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2e6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9f8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c000}, 0x4080) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x10c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) 124.905099ms ago: executing program 5 (id=2336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4086, 0xff6}], 0x1, 0x300, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="9f874b2c1df4780ddf4368bbb694186c7dfdd404449a85d5789d300d66b8ae2dc4f7cb2a05b96cd7c6cf98da490b7e4e"], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) (async) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4086, 0xff6}], 0x1, 0x300, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="9f874b2c1df4780ddf4368bbb694186c7dfdd404449a85d5789d300d66b8ae2dc4f7cb2a05b96cd7c6cf98da490b7e4e"], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) 123.235481ms ago: executing program 6 (id=2337): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x42a4c2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000002080)="487d5b43619cfa3217e11f16f3305344affe4355b61d1ace1ab742c8050b60e914e16e22ad69b58747915158cf12de492771172ee3f95689fb03c80e9a832464baf041e8a832a29e", 0x0, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), 0xffffffffffffffff) 65.58943ms ago: executing program 5 (id=2338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, &(0x7f0000000080)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x252140, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="66b9b308000066b80010000066ba000000000f300f2396b829058ee80f2296b800008ec8ba410066ed660f616c7866b9800000c00f326635001000000f30f30f090f06", 0x43}], 0x1, 0x28, &(0x7f0000000180)=[@efer={0x2, 0x2d00}, @cstype0={0x4, 0xd}], 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) 65.093667ms ago: executing program 5 (id=2339): r0 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @p_u8=0x0}}) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001800dd8d2aa070000200000002000008985926bd88f1e1fc000000040080000006001500040000001800168014000500fc000000000000000000000000000001"], 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x81000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000ea0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000233c0)={0x0, 0x0, &(0x7f0000023380)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x20048041) (async) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x15, &(0x7f0000000480)=[{&(0x7f0000000340)=""/116, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0) r6 = socket(0x1e, 0x3, 0x9) write(r6, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 311.637µs ago: executing program 6 (id=2340): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x7c, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}]}, 0x7c}}, 0x200c895) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x10000, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) 0s ago: executing program 5 (id=2341): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000940)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x1f4, r5, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x69}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x188, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x168, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x46, 0xb, "eec2c9212177911bb39e1a09a0a8c11ff669e02ff13dc858fb0de40d3b41de945af197c754390be2cf747ecb57bbcb901f14692a4b935969398be9c882472024587a"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0x7ff}}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xfb, 0xb, "56c029d40aca35898fe147f303916dbd2e28958cade2c02a008c71777dd1daecc63cd10bf85a55e36ce65b51f9c3dbab9f0c3df0e31303ff8201c407297ce94755e0568e71e387a5bc8ecdb624e96f5955d1b49e335503cf6da4f65b9f7e9e0e49f0111177ae1e9fc5655ad2e9a0b641f00cb3c7ade5e1fbc2f87930e509954d5051675094905781e0079463fbcadc96045fe8c324f1d51a75615b9b24a95e7f41f7311fc2a45e4dd196e114550469461d6b8ac6f85e2ce57a2f2b8efee45d24dd731010c2d48ff9aa45e59a56efe13977c0c3331903942b91aafc55edcc2bdeb6f3e386f89364e983d3e78432bb3cc4c3db6f4ca9fc97"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x200, 0x3, 0x9}}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000140)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0x80184132, &(0x7f0000000340)={0x0, [[0xfffffffd]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10000}]}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7fff, @private1, 0x37e, 0x2}, 0x20) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r7, &(0x7f00000004c0)=""/57, 0x39) timer_gettime(0x0, &(0x7f0000000080)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x800000, 0x20, 0xffffffff, 0x7, 0x0, 0x80000000, 0x0, 0x0, 0x48, 0x1002, 0x7, 0x10004, 0x8000020, 0x7fffc, 0x0, 0x20000}}) pread64(r0, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) kernel console output (not intermixed with test programs): loop9: unable to read partition table [ 183.330984][T11036] loop9: partition table beyond EOD, truncated [ 183.333978][T11036] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 183.389629][T11107] netlink: 'syz.6.1419': attribute type 1 has an invalid length. [ 183.392390][T11107] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1419'. [ 183.430989][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 183.431004][ T40] audit: type=1400 audit(1772331456.156:660): avc: denied { listen } for pid=11108 comm="syz.3.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.476979][T11118] loop4: detected capacity change from 0 to 7 [ 183.498669][T11118] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 183.501593][T11118] loop4: partition table partially beyond EOD, truncated [ 183.506455][T11118] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 183.540210][T10387] udevd[10387]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 183.553825][T11123] ref_ctr_offset mismatch. inode: 0x6c offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 183.593321][T11123] team0: Device vlan2 is already an upper device of the team interface [ 183.628016][T11126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1426'. [ 183.634981][T11126] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1426'. [ 183.643704][ T40] audit: type=1400 audit(1772331456.366:661): avc: denied { read } for pid=11115 comm="syz.0.1421" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 183.643736][T11116] < [ 183.684378][T11129] tmpfs: Unknown parameter 'noswÞdÚø‰^ÄÖ½ìùåLºÏûÃ8ß’ÍÑ47ÿ5½ô×U—‡áH4z1ùˆ5' [ 183.692646][ T40] audit: type=1400 audit(1772331456.416:662): avc: denied { setopt } for pid=11128 comm="syz.5.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.905574][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1434'. [ 183.948776][T11158] netlink: 'syz.6.1436': attribute type 11 has an invalid length. [ 183.951661][T11158] netlink: 'syz.6.1436': attribute type 11 has an invalid length. [ 183.955110][T11158] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1436'. [ 183.998715][ T40] audit: type=1400 audit(1772331456.726:663): avc: denied { connect } for pid=11159 comm="syz.6.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.222670][ T63] Bluetooth: hci0: command tx timeout [ 184.248975][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1443'. [ 184.255380][T11180] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1443'. [ 184.259783][T11180] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11180 comm=syz.6.1443 [ 184.268199][T11180] Unsupported ieee802154 address type: 0 [ 184.268254][ T40] audit: type=1400 audit(1772331456.996:664): avc: denied { bind } for pid=11179 comm="syz.6.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.282977][ T53] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 184.385255][T11186] vlan2: entered promiscuous mode [ 184.387445][T11186] vlan2: entered allmulticast mode [ 184.389478][T11186] hsr_slave_1: entered allmulticast mode [ 184.400281][T11189] mkiss: ax0: crc mode is auto. [ 184.433894][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.438223][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.442977][ T53] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.447424][ T53] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.450768][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.453348][T11193] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1447'. [ 184.455296][ T53] usb 10-1: config 0 descriptor?? [ 184.458404][ T63] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 184.459231][T11193] NILFS (nbd6): device size too small [ 184.477261][T11193] tmpfs: Unknown parameter 'usrquotaØ' [ 184.874185][ T53] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 185.124263][ T9] usb 10-1: USB disconnect, device number 5 [ 185.209119][ T40] audit: type=1400 audit(1772331457.936:665): avc: denied { listen } for pid=11220 comm="syz.3.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 185.307446][ T40] audit: type=1400 audit(1772331458.036:666): avc: denied { ioctl } for pid=11225 comm="syz.3.1455" path="socket:[35614]" dev="sockfs" ino=35614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.347667][T11226] macsec0 speed is unknown, defaulting to 1000 [ 185.487635][T11240] netlink: 'syz.0.1460': attribute type 21 has an invalid length. [ 185.494685][T11241] SELinux: Context /usr/sbin/ntpd is not valid (left unmapped). [ 185.500436][ T40] audit: type=1400 audit(1772331458.226:667): avc: denied { relabelto } for pid=11233 comm="syz.6.1458" name="syz6" dev="cgroup2" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="/usr/sbin/ntpd" [ 185.508702][ T40] audit: type=1400 audit(1772331458.226:668): avc: denied { associate } for pid=11233 comm="syz.6.1458" name="syz6" dev="cgroup2" ino=252 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="/usr/sbin/ntpd" [ 185.572625][ T40] audit: type=1400 audit(1772331458.296:669): avc: denied { sys_nice } for pid=11249 comm="syz.3.1463" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 185.591364][T11252] program syz.0.1464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.600454][T11252] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 185.684280][T11255] netlink: 'syz.5.1465': attribute type 1 has an invalid length. [ 186.057100][T11262] netlink: 'syz.3.1468': attribute type 10 has an invalid length. [ 186.063936][T11262] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 186.068692][T11262] hsr0: mtu greater than device maximum [ 186.071270][T11262] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 186.098093][T11262] macsec0 speed is unknown, defaulting to 1000 [ 186.306990][ T63] Bluetooth: hci0: command tx timeout [ 186.507017][T11272] bond6: Unable to set up delay as MII monitoring is disabled [ 186.510565][T11272] bond6 (unregistering): Released all slaves [ 186.875729][T11293] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.109046][T11310] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 187.234531][T11317] ipt_ECN: cannot use operation on non-tcp rule [ 187.238689][T11317] fuse: Bad value for 'rootmode' [ 187.242474][T11317] binder: 11316:11317 ioctl c0306201 2000000004c0 returned -14 [ 187.297773][T11317] binder: 11316:11317 ioctl c0306201 2000000001c0 returned -14 [ 187.671259][T11341] 9pnet_virtio: no channels available for device syz [ 187.714810][T11345] netlink: 'syz.5.1498': attribute type 3 has an invalid length. [ 187.944460][T11355] sctp: [Deprecated]: syz.0.1499 (pid 11355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.944460][T11355] Use struct sctp_sack_info instead [ 188.035985][T11358] __nla_validate_parse: 5 callbacks suppressed [ 188.035997][T11358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1502'. [ 188.147318][T11371] efs: device does not support 512 byte blocks [ 188.149972][T11371] device does not support 512 byte blocks [ 188.149972][T11371] [ 188.208498][T11376] 9pnet_virtio: no channels available for device syz [ 188.343642][T11385] 9pnet_virtio: no channels available for device syz [ 188.402659][ T7415] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 188.445244][T11387] program syz.6.1510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.552901][ T7415] usb 8-1: Invalid ep0 maxpacket: 32 [ 188.682632][ T7415] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 188.713871][T11399] FAT-fs (nullb0): bogus number of reserved sectors [ 188.716759][T11399] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 188.832614][ T7415] usb 8-1: Invalid ep0 maxpacket: 32 [ 188.835016][ T7415] usb usb8-port1: attempt power cycle [ 188.892801][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11415 comm=syz.0.1523 [ 188.899287][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11415 comm=syz.0.1523 [ 188.905258][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11415 comm=syz.0.1523 [ 188.911035][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11415 comm=syz.0.1523 [ 188.917222][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11415 comm=syz.0.1523 [ 188.923009][ T55] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 188.927498][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11415 comm=syz.0.1523 [ 188.964634][T11419] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1524'. [ 188.968181][T11419] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1524'. [ 189.046295][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 189.046312][ T40] audit: type=1400 audit(1772331461.776:687): avc: denied { getopt } for pid=11425 comm="syz.5.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 189.080907][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1528'. [ 189.089766][T11429] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1528'. [ 189.094430][ T55] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.097483][ T55] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.101310][ T55] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.123159][ T55] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 189.128479][ T55] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 189.134849][ T55] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.137961][ T55] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.140609][ T55] usb 11-1: Product: syz [ 189.142078][ T55] usb 11-1: Manufacturer: syz [ 189.152434][ T55] cdc_wdm 11-1:1.0: skipping garbage [ 189.154604][ T55] cdc_wdm 11-1:1.0: skipping garbage [ 189.157553][ T55] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 189.159539][ T55] cdc_wdm 11-1:1.0: Unknown control protocol [ 189.182704][ T7415] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 189.214051][ T7415] usb 8-1: Invalid ep0 maxpacket: 32 [ 189.285213][ T40] audit: type=1400 audit(1772331462.016:688): avc: denied { connect } for pid=11438 comm="syz.5.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.336732][ T40] audit: type=1400 audit(1772331462.066:689): avc: denied { write } for pid=11438 comm="syz.5.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.352637][ T7415] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 189.373199][ T7415] usb 8-1: Invalid ep0 maxpacket: 32 [ 189.376218][ T7415] usb usb8-port1: unable to enumerate USB device [ 189.655490][ T40] audit: type=1400 audit(1772331462.386:690): avc: denied { unmount } for pid=10078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 189.885933][ T40] audit: type=1400 audit(1772331462.616:691): avc: denied { read } for pid=11465 comm="syz.5.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.894993][ T40] audit: type=1400 audit(1772331462.616:692): avc: denied { connect } for pid=11465 comm="syz.5.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.281556][ T40] audit: type=1400 audit(1772331463.006:693): avc: denied { ioctl } for pid=11484 comm="syz.0.1541" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 190.453890][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 190.687733][T11506] mkiss: ax0: crc mode is auto. [ 190.794677][T11515] binder: 11510:11515 ioctl c018620c 200000000340 returned -1 [ 190.870407][ T40] audit: type=1400 audit(1772331463.596:694): avc: denied { ioctl } for pid=11510 comm="syz.5.1548" path="/80/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 190.969049][T11520] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 191.044465][ T839] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 191.046392][ T40] audit: type=1400 audit(1772331463.776:695): avc: denied { accept } for pid=11522 comm="syz.5.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 191.179844][T11528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1552'. [ 191.193079][ T839] usb 5-1: Using ep0 maxpacket: 16 [ 191.204055][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 191.209036][ T839] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.212198][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.215279][ T839] usb 5-1: Product: syz [ 191.216759][ T839] usb 5-1: Manufacturer: syz [ 191.218271][ T839] usb 5-1: SerialNumber: syz [ 191.221845][ T839] usb 5-1: config 0 descriptor?? [ 191.224827][T11530] ufs: You didn't specify the type of your ufs filesystem [ 191.224827][T11530] [ 191.224827][T11530] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 191.224827][T11530] [ 191.224827][T11530] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 191.226456][ T839] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.238528][T11530] ufs: failed to set blocksize [ 191.241489][ T839] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 191.422226][T11538] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.426099][T11538] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 191.429322][T11538] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.431934][T11538] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 191.534492][ T55] usb 11-1: USB disconnect, device number 6 [ 191.553986][ T40] audit: type=1400 audit(1772331464.286:696): avc: denied { append } for pid=11549 comm="syz.6.1557" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 191.787027][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1561'. [ 191.795757][T11562] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1561'. [ 191.799926][T11562] netlink: 'syz.6.1561': attribute type 5 has an invalid length. [ 191.829185][ T839] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 191.880665][T11094] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.009115][T11576] block nbd5: not configured, cannot reconfigure [ 192.128597][ T55] IPVS: starting estimator thread 0... [ 192.132260][T11585] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.135840][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.222660][T11586] IPVS: using max 42 ests per chain, 100800 per kthread [ 192.256336][ T839] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 192.261887][ T839] em28xx 5-1:0.0: board has no eeprom [ 192.537124][T11608] random: crng reseeded on system resumption [ 192.592749][ T839] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 192.596444][ T839] em28xx 5-1:0.0: dvb set to bulk mode. [ 192.599316][ T55] em28xx 5-1:0.0: Binding DVB extension [ 192.722714][ T39] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 192.882581][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 192.886525][ T39] usb 8-1: no configurations [ 192.888601][ T39] usb 8-1: can't read configurations, error -22 [ 193.022608][ T39] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 193.182656][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 193.186497][ T39] usb 8-1: no configurations [ 193.188487][ T39] usb 8-1: can't read configurations, error -22 [ 193.191385][ T39] usb usb8-port1: attempt power cycle [ 193.532715][ T39] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 193.553187][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 193.556821][ T39] usb 8-1: no configurations [ 193.558986][ T39] usb 8-1: can't read configurations, error -22 [ 193.682710][ T39] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 193.703442][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 193.707333][ T39] usb 8-1: no configurations [ 193.709433][ T39] usb 8-1: can't read configurations, error -22 [ 193.712671][ T39] usb usb8-port1: unable to enumerate USB device [ 193.753111][T11517] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 193.764088][ T7415] usb 5-1: USB disconnect, device number 10 [ 193.766753][ T7415] em28xx 5-1:0.0: Disconnecting em28xx [ 193.784383][ T55] em28xx 5-1:0.0: Registering input extension [ 193.786899][ T7415] em28xx 5-1:0.0: Closing input extension [ 193.806773][ T7415] em28xx 5-1:0.0: Freeing device [ 194.142669][ T5934] Bluetooth: hci4: command 0x1003 tx timeout [ 194.142919][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 194.204673][T11643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1586'. [ 194.205417][T11644] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1586'. [ 194.347898][T11646] cgroup: Invalid name [ 194.349720][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 194.349735][ T40] audit: type=1400 audit(1772331723.071:707): avc: denied { mounton } for pid=11645 comm="syz.5.1587" path="/88/file3" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 194.651457][ T40] audit: type=1400 audit(1772331723.371:708): avc: denied { append } for pid=11654 comm="syz.5.1589" name="pfkey" dev="proc" ino=4026533277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 194.659887][ T40] audit: type=1400 audit(1772331723.381:709): avc: denied { map } for pid=11654 comm="syz.5.1589" path="/proc/295/net/pfkey" dev="proc" ino=4026533277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 194.705172][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1590'. [ 194.746099][ T40] audit: type=1400 audit(1772331723.471:710): avc: denied { mount } for pid=11658 comm="syz.5.1591" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 194.756094][ T40] audit: type=1400 audit(1772331723.471:711): avc: denied { mounton } for pid=11658 comm="syz.5.1591" path="/91/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 195.047617][ T40] audit: type=1400 audit(1772331723.771:712): avc: denied { name_bind } for pid=11662 comm="syz.6.1592" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 195.108061][ T40] audit: type=1400 audit(1772331723.831:713): avc: denied { unmount } for pid=10078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 195.143942][T11666] sock: sock_set_timeout: `syz.6.1594' (pid 11666) tries to set negative timeout [ 195.155191][T11668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1593'. [ 195.197261][T11670] tipc: Enabling of bearer rejected, failed to enable media [ 195.359368][T11678] macsec0 speed is unknown, defaulting to 1000 [ 195.529561][ T40] audit: type=1400 audit(1772331724.251:714): avc: denied { write } for pid=11681 comm="syz.3.1598" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 195.859765][T11694] macsec1: entered promiscuous mode [ 195.862586][T11694] macsec1: entered allmulticast mode [ 195.951156][T11698] : entered promiscuous mode [ 196.069899][T11706] bond1: Removing last ns target with arp_interval on [ 196.103172][T11710] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 196.160220][T11717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29960 sclass=netlink_route_socket pid=11717 comm=syz.5.1609 [ 196.274986][ T40] audit: type=1400 audit(1772331725.001:715): avc: denied { shutdown } for pid=11709 comm="syz.6.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.543547][ T40] audit: type=1400 audit(1772331725.271:716): avc: denied { write } for pid=11746 comm="syz.5.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.545802][T11751] Invalid argument reading file caps for ./file0 [ 196.594363][T11754] Attempt to restore checkpoint with obsolete wellknown handles [ 196.633137][ T7415] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 196.784543][ T7415] usb 11-1: Using ep0 maxpacket: 8 [ 196.792850][ T7415] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 196.796651][ T7415] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.800193][ T7415] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.803676][ T7415] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.807191][ T7415] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.811567][ T7415] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.815138][ T7415] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.839550][T11776] ceph: No source [ 196.892655][ T5938] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 196.950454][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 196.954590][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 197.022422][ T7415] usb 11-1: usb_control_msg returned -32 [ 197.024775][ T7415] usbtmc 11-1:16.0: can't read capabilities [ 197.052651][ T5938] usb 10-1: Using ep0 maxpacket: 8 [ 197.056836][ T5938] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 197.060170][ T5938] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 197.064693][ T5938] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 197.066322][T11782] rtc_cmos 00:05: Alarms can be up to one day in the future [ 197.068479][ T5938] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.068497][ T5938] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.068511][ T5938] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.068524][ T5938] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 197.068539][ T5938] usb 10-1: config 168 interface 0 has no altsetting 0 [ 197.069404][ T5938] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 197.100781][ T5938] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 197.105586][ T5938] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 197.110380][ T5938] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.114828][ T5938] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.119096][ T5938] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.124282][ T5938] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 197.130250][ T5938] usb 10-1: config 168 interface 0 has no altsetting 0 [ 197.133986][ T5938] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 197.136471][ T5938] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 197.140667][ T5938] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 197.146760][ T5938] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.151870][ T5938] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.156423][ T5938] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.160353][ T5938] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 197.165408][ T5938] usb 10-1: config 168 interface 0 has no altsetting 0 [ 197.170637][ T5938] usb 10-1: string descriptor 0 read error: -22 [ 197.173848][ T5938] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 197.177689][ T5938] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.185836][ T5938] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 197.223788][ T5938] usb 11-1: USB disconnect, device number 7 [ 197.385288][ T53] usb 10-1: USB disconnect, device number 6 [ 197.407654][T11800] program syz.0.1634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.434007][T11740] trusted_key: encrypted_key: insufficient parameters specified [ 198.115657][T11821] bpf: Bad value for 'gid' [ 198.199307][T11827] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1642'. [ 198.255492][T11831] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1643'. [ 198.361672][T11835] netlink: 'syz.5.1646': attribute type 4 has an invalid length. [ 198.484982][T11835] xt_hashlimit: max too large, truncated to 1048576 [ 198.488623][T11835] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 198.620546][T11851] netlink: 750 bytes leftover after parsing attributes in process `syz.0.1649'. [ 198.636312][T11854] 9pnet_virtio: no channels available for device syz [ 198.676439][T11859] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1652'. [ 198.681754][T11859] xt_socket: unknown flags 0xd0 [ 198.929647][T11890] syzkaller0: entered promiscuous mode [ 198.931548][T11890] syzkaller0: entered allmulticast mode [ 199.072652][ T5994] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 199.107255][ T39] IPVS: starting estimator thread 0... [ 199.202652][T11895] IPVS: using max 28 ests per chain, 67200 per kthread [ 199.232803][ T5994] usb 8-1: Using ep0 maxpacket: 8 [ 199.236062][ T5994] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.240050][ T5994] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.243788][ T5994] usb 8-1: config 0 interface 0 has no altsetting 0 [ 199.246086][ T5994] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 199.249128][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.254064][ T5994] usb 8-1: config 0 descriptor?? [ 199.347083][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.349815][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.389383][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 199.389400][ T40] audit: type=1400 audit(1772331728.111:724): avc: denied { create } for pid=11903 comm="syz.5.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 199.402997][T11906] netlink: 'syz.6.1666': attribute type 10 has an invalid length. [ 199.413363][ T40] audit: type=1400 audit(1772331728.141:725): avc: denied { ioctl } for pid=11903 comm="syz.5.1667" path="/118/file0/bus" dev="9p" ino=72614253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.425159][ T40] audit: type=1800 audit(1772331728.141:726): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1667" name="bus" dev="9p" ino=72614253 res=0 errno=0 [ 199.425874][T11906] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 199.471419][ T5994] usbhid 8-1:0.0: can't add hid device: -71 [ 199.476053][ T5994] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 199.482740][ T5994] usb 8-1: USB disconnect, device number 25 [ 199.629722][ T40] audit: type=1804 audit(1772331728.351:727): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1669" name="/newroot/410/file0" dev="tmpfs" ino=2206 res=1 errno=0 [ 199.942852][T11943] netlink: 'syz.5.1678': attribute type 1 has an invalid length. [ 199.959795][T11946] __nla_validate_parse: 1 callbacks suppressed [ 199.959807][T11946] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1679'. [ 199.977219][T11943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.406203][ T40] audit: type=1400 audit(1772331729.131:728): avc: denied { read } for pid=11979 comm="syz.3.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.463239][T11980] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.087594][T12002] macvlan0: entered allmulticast mode [ 201.117626][T12008] fuse: Bad value for 'fd' [ 201.213703][ T40] audit: type=1400 audit(1772331729.931:729): avc: denied { ioctl } for pid=12020 comm="syz.0.1702" path="socket:[42438]" dev="sockfs" ino=42438 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.265328][T12032] mkiss: ax0: crc mode is auto. [ 201.359241][T12043] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1707'. [ 201.364934][T12050] ALSA: mixer_oss: invalid OSS volume '' [ 201.404753][T12054] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 201.414651][ T40] audit: type=1400 audit(1772331730.131:730): avc: denied { read } for pid=12053 comm="syz.0.1711" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 201.463732][ T40] audit: type=1400 audit(1772331730.191:731): avc: denied { getopt } for pid=12055 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 201.491342][ T40] audit: type=1400 audit(1772331730.211:732): avc: denied { map } for pid=12057 comm="syz.3.1714" path="/proc/1278/pagemap" dev="proc" ino=41668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 201.494025][T12061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1714'. [ 201.502375][T12067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1714'. [ 202.236019][T12054] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.239095][T12054] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.241230][T12054] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.244960][T12054] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.249937][T12054] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.252972][T12054] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.258053][T12054] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.299277][T12075] netlink: 'syz.0.1716': attribute type 12 has an invalid length. [ 202.340199][ T63] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 202.341379][T12082] ALSA: mixer_oss: invalid OSS volume '' [ 202.355422][T12091] misc userio: Begin command sent, but we're already running [ 202.467391][ T40] audit: type=1400 audit(1772331731.191:733): avc: denied { wake_alarm } for pid=12099 comm="syz.6.1724" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.549677][T12109] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.563484][T12112] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.605968][T12118] pim6reg99999999: entered allmulticast mode [ 202.660850][T12122] overlayfs: conflicting options: userxattr,metacopy=on [ 202.804165][T12139] block device autoloading is deprecated and will be removed. [ 202.879301][T12146] openvswitch: netlink: Message has 4 unknown bytes. [ 202.881682][T12146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.918786][T12151] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1736'. [ 203.017205][T12160] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 203.240876][T12183] delete_channel: no stack [ 203.336494][T12191] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1741'. [ 203.434698][T12206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1745'. [ 203.438813][T12181] No source specified [ 203.502617][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.582699][T12222] netlink: 'syz.6.1750': attribute type 2 has an invalid length. [ 203.674371][T12230] mkiss: ax0: crc mode is auto. [ 203.757055][T12232] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1751'. [ 203.862674][ T39] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 203.992663][ T39] usb 8-1: device descriptor read/64, error -71 [ 204.212666][ T5994] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 204.233355][ T39] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 204.302805][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.302842][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.372836][ T39] usb 8-1: device descriptor read/64, error -71 [ 204.376878][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.380522][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.384038][ T5994] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 204.387216][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.393420][ T5994] usb 5-1: config 0 descriptor?? [ 204.483113][ T39] usb usb8-port1: attempt power cycle [ 204.555166][T12247] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 204.555166][T12247] program syz.5.1760 not setting count and/or reply_len properly [ 204.654683][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 204.654700][ T40] audit: type=1400 audit(1772331733.381:740): avc: denied { setopt } for pid=12248 comm="syz.5.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.785856][T12253] ALSA: mixer_oss: invalid OSS volume 'Åd÷Ï,]NÓ˜ñ:1D-®c%RwQÌÉ5Ð8@' [ 204.799375][ T5994] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 204.805864][ T5994] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 204.810495][ T5994] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0008/input/input25 [ 204.820383][ T5994] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 204.822228][T12255] 9p: Bad value for 'msize' [ 204.828683][ T39] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 204.830389][T12257] 9p: Bad value for 'msize' [ 204.853136][ T39] usb 8-1: device descriptor read/8, error -71 [ 204.970423][T12265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.973934][T12265] IPv6: NLM_F_CREATE should be set when creating new route [ 204.977257][T12265] IPv6: NLM_F_CREATE should be set when creating new route [ 204.983554][T12265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.092775][ T39] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 205.114023][ T39] usb 8-1: device descriptor read/8, error -71 [ 205.158193][T12270] netlink: 'syz.6.1766': attribute type 10 has an invalid length. [ 205.166877][T12270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.173224][T12270] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 205.179849][T12270] netlink: 'syz.6.1766': attribute type 10 has an invalid length. [ 205.184185][T12270] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1766'. [ 205.188022][T12270] batadv0: entered promiscuous mode [ 205.190331][T12270] batadv0: entered allmulticast mode [ 205.194173][T12270] bond0: (slave batadv0): Releasing backup interface [ 205.200620][T12270] bridge0: port 3(batadv0) entered blocking state [ 205.204617][T12270] bridge0: port 3(batadv0) entered disabled state [ 205.222957][ T39] usb usb8-port1: unable to enumerate USB device [ 205.312146][T12278] nft_compat: unsupported protocol 0 [ 205.319451][T12278] nft_compat: unsupported protocol 0 [ 205.343282][T11094] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 205.347429][T11094] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 205.474892][T12285] ALSA: mixer_oss: invalid OSS volume 'Åd÷Ï,]NÓ˜ñ:1D-®c%RwQÌÉ5Ð8@' [ 205.515526][ T53] usb 5-1: USB disconnect, device number 11 [ 205.531797][ T40] audit: type=1400 audit(1772331734.251:741): avc: denied { getopt } for pid=12286 comm="syz.5.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.036436][ T5934] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 206.036484][ T5934] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 206.074875][T12308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1781'. [ 206.100789][T12313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.106464][T12313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.114239][T12316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.120159][T12316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.128951][ T40] audit: type=1400 audit(1772331734.851:742): avc: denied { write } for pid=12314 comm="syz.0.1782" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 206.158647][ T40] audit: type=1400 audit(1772331734.881:743): avc: denied { ioctl } for pid=12320 comm="syz.6.1784" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 206.210723][T12326] Bluetooth: MGMT ver 1.23 [ 206.215226][ T40] audit: type=1400 audit(1772331734.941:744): avc: denied { getopt } for pid=12318 comm="syz.5.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.274321][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 206.293267][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 206.335425][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1787'. [ 206.349316][T12333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12333 comm=syz.6.1787 [ 206.358727][ T40] audit: type=1400 audit(1772331735.081:745): avc: denied { write } for pid=12329 comm="syz.0.1786" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 206.383003][ T5934] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.383224][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.414208][T12340] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1787'. [ 206.466161][ T40] audit: type=1400 audit(1772331735.191:746): avc: denied { ioctl } for pid=12336 comm="syz.5.1788" path="/dev/input/mouse1" dev="devtmpfs" ino=1297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 206.525146][T12348] netlink: 'syz.5.1790': attribute type 21 has an invalid length. [ 207.298461][T12358] netlink: 4456 bytes leftover after parsing attributes in process `syz.6.1793'. [ 207.398306][T12371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1797'. [ 207.401663][T12371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1797'. [ 207.404976][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'. [ 207.479143][ T40] audit: type=1400 audit(1772331736.201:747): avc: denied { append } for pid=12380 comm="syz.3.1799" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 207.612759][ T7415] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 207.657960][T12394] --map-set only usable from mangle table [ 207.739768][T12399] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1804'. [ 207.744488][T12399] openvswitch: netlink: Missing key (keys=40, expected=80) [ 207.752664][ T7415] usb 10-1: device descriptor read/64, error -71 [ 207.769410][T12401] netlink: 'syz.6.1802': attribute type 322 has an invalid length. [ 208.012732][ T7415] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 208.050509][T12406] macsec0 speed is unknown, defaulting to 1000 [ 208.152689][ T7415] usb 10-1: device descriptor read/64, error -71 [ 208.272913][ T7415] usb usb10-port1: attempt power cycle [ 208.322733][ T5938] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.463413][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.472861][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.492677][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 208.496171][ T5938] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 208.500147][ T5938] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 208.500458][ T40] audit: type=1400 audit(1772331737.221:748): avc: denied { ioctl } for pid=12418 comm="syz.3.1809" path="socket:[45215]" dev="sockfs" ino=45215 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 208.504160][ T5938] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.517354][ T5938] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.521709][ T5938] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.525749][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.540198][T12423] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 208.545130][T12423] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 208.548100][T12423] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 208.550717][T12423] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 208.622650][ T7415] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 208.664991][ T7415] usb 10-1: device descriptor read/8, error -71 [ 208.695665][T12433] ALSA: mixer_oss: invalid OSS volume 'OGAId÷Ï,]NÓ˜ñ:1D-®c%RwQÌÉ5Ð8@' [ 208.736024][ T5938] usb 5-1: GET_CAPABILITIES returned 0 [ 208.737943][ T5938] usbtmc 5-1:16.0: can't read capabilities [ 208.782677][ T55] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 208.902625][ T7415] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 208.923053][ T7415] usb 10-1: device descriptor read/8, error -71 [ 208.934528][ T55] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.938465][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 208.945385][ T55] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 208.948585][ T55] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.951442][ T55] usb 11-1: Product: syz [ 208.953236][ T55] usb 11-1: Manufacturer: syz [ 208.954793][ T55] usb 11-1: SerialNumber: syz [ 208.958138][ T55] usb 11-1: config 0 descriptor?? [ 208.961461][ T55] hub 11-1:0.0: bad descriptor, ignoring hub [ 208.963675][ T55] hub 11-1:0.0: probe with driver hub failed with error -5 [ 208.968008][ T55] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input26 [ 208.993762][T12407] siw: device registration error -23 [ 209.029546][T12406] syz.0.1806 (12406): drop_caches: 2 [ 209.038033][ T5938] usb 5-1: USB disconnect, device number 12 [ 209.042807][ T7415] usb usb10-port1: unable to enumerate USB device [ 209.413042][ T39] usb 11-1: USB disconnect, device number 8 [ 209.930723][T12455] ALSA: mixer_oss: invalid OSS volume 'OGAId÷Ï,]NÓ˜ñ:1D-®c%RwQÌÉ5Ð8@' [ 209.973967][T12459] xt_CONNSECMARK: invalid mode: 0 [ 210.014548][ T40] audit: type=1400 audit(1772331738.741:749): avc: denied { write } for pid=12460 comm="syz.0.1826" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 210.050683][T12465] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 210.054152][T12465] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.085366][T12467] unsupported nla_type 4111 [ 210.552729][T12485] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1833'. [ 210.833807][T12503] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1838'. [ 210.943949][T12510] macsec0 speed is unknown, defaulting to 1000 [ 211.032177][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1843'. [ 211.036304][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.040181][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1843'. [ 211.047414][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1843'. [ 211.051387][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.055500][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1843'. [ 211.060485][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1843'. [ 211.064933][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.068893][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1843'. [ 211.074158][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1843'. [ 211.078164][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.081729][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1843'. [ 211.087142][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.091625][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.096085][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.100323][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.105272][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.109712][T12519] netlink: 'syz.6.1843': attribute type 30 has an invalid length. [ 211.174398][T12511] macsec0 speed is unknown, defaulting to 1000 [ 211.214844][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a79b800: rx timeout, send abort [ 211.224743][ T40] audit: type=1400 audit(1772331739.951:750): avc: denied { read } for pid=5315 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 211.249351][ T40] audit: type=1400 audit(1772331739.951:751): avc: denied { search } for pid=5315 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.260674][ T40] audit: type=1400 audit(1772331739.951:752): avc: denied { search } for pid=5315 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.271283][ T40] audit: type=1400 audit(1772331739.951:753): avc: denied { add_name } for pid=5315 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.280119][ T40] audit: type=1400 audit(1772331739.951:754): avc: denied { create } for pid=5315 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.289145][ T40] audit: type=1400 audit(1772331739.951:755): avc: denied { append open } for pid=5315 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.298650][ T40] audit: type=1400 audit(1772331739.951:756): avc: denied { getattr } for pid=5315 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.300005][T12516] uprobe: syz.0.1842:12516 failed to unregister, leaking uprobe [ 211.720725][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a79b800: abort rx timeout. Force session deactivation [ 212.385987][T12565] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 212.609610][T12585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.617926][T12587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=12587 comm=syz.0.1862 [ 212.618810][T12588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=12588 comm=syz.0.1862 [ 212.625143][T12585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.728403][T12597] binder: 12596:12597 ioctl 4004e502 2000000029c0 returned -22 [ 212.772592][ T40] audit: type=1400 audit(1772331741.491:757): avc: denied { read } for pid=12601 comm="syz.0.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 212.799357][T12604] FAULT_INJECTION: forcing a failure. [ 212.799357][T12604] name failslab, interval 1, probability 0, space 0, times 1 [ 212.807673][T12604] CPU: 2 UID: 0 PID: 12604 Comm: syz.6.1869 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.807703][T12604] Tainted: [L]=SOFTLOCKUP [ 212.807709][T12604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.807719][T12604] Call Trace: [ 212.807725][T12604] [ 212.807731][T12604] dump_stack_lvl+0x100/0x190 [ 212.807776][T12604] should_fail_ex.cold+0x5/0xa [ 212.807799][T12604] should_failslab+0xc2/0x120 [ 212.807944][T12604] __kmalloc_cache_noprof+0x7a/0x6f0 [ 212.807967][T12604] ? snd_mixer_oss_proc_write+0x35c/0x690 [ 212.808003][T12604] snd_mixer_oss_proc_write+0x35c/0x690 [ 212.808030][T12604] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 212.808051][T12604] ? __lock_acquire+0x4a5/0x2630 [ 212.808103][T12604] ? find_held_lock+0x2b/0x80 [ 212.808131][T12604] snd_info_text_entry_release+0xfb/0x260 [ 212.808152][T12604] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 212.808171][T12604] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 212.808194][T12604] close_pdeo.part.0+0xdf/0x2e0 [ 212.808223][T12604] proc_reg_release+0x2df/0x350 [ 212.808248][T12604] ? __pfx_proc_reg_release+0x10/0x10 [ 212.808274][T12604] ? locks_remove_file+0xd1/0x610 [ 212.808292][T12604] ? __pfx_locks_remove_file+0x10/0x10 [ 212.808310][T12604] ? __pfx___might_resched+0x10/0x10 [ 212.808328][T12604] ? ima_iint_find+0xe9/0x130 [ 212.808356][T12604] ? __pfx_proc_reg_release+0x10/0x10 [ 212.808381][T12604] __fput+0x3ff/0xb40 [ 212.808406][T12604] fput_close_sync+0x118/0x250 [ 212.808425][T12604] ? __pfx_fput_close_sync+0x10/0x10 [ 212.808447][T12604] __x64_sys_close+0x8b/0x120 [ 212.808466][T12604] do_syscall_64+0x106/0xf80 [ 212.808484][T12604] ? clear_bhb_loop+0x40/0x90 [ 212.808507][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.808525][T12604] RIP: 0033:0x7f25a119c799 [ 212.808542][T12604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.808558][T12604] RSP: 002b:00007f25a1ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 212.808573][T12604] RAX: ffffffffffffffda RBX: 00007f25a1415fa0 RCX: 00007f25a119c799 [ 212.808583][T12604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 212.808592][T12604] RBP: 00007f25a1ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 212.808602][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.808613][T12604] R13: 00007f25a1416038 R14: 00007f25a1415fa0 R15: 00007ffe9c44c6a8 [ 212.808637][T12604] [ 212.944761][T12614] xt_NFQUEUE: number of total queues is 0 [ 212.949560][T12616] xt_NFQUEUE: number of total queues is 0 [ 212.963336][T12613] veth0_to_bond: entered allmulticast mode [ 213.062618][T12624] misc userio: Invalid payload size [ 213.111946][T12628] bond6: entered promiscuous mode [ 213.114681][T12628] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.128089][T12628] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.130663][T12628] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 213.137680][T12628] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 213.142785][T12628] bond6: (slave vxcan3): making interface the new active one [ 213.145442][T12628] vxcan3: entered promiscuous mode [ 213.147856][T12628] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 213.154256][ T40] audit: type=1400 audit(1772331741.881:758): avc: denied { read open } for pid=12627 comm="syz.0.1876" path="/" dev="configfs" ino=3163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.277846][T12644] FAULT_INJECTION: forcing a failure. [ 213.277846][T12644] name failslab, interval 1, probability 0, space 0, times 0 [ 213.284926][T12644] CPU: 0 UID: 0 PID: 12644 Comm: syz.6.1882 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.284955][T12644] Tainted: [L]=SOFTLOCKUP [ 213.284960][T12644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.284968][T12644] Call Trace: [ 213.284973][T12644] [ 213.284979][T12644] dump_stack_lvl+0x100/0x190 [ 213.285009][T12644] should_fail_ex.cold+0x5/0xa [ 213.285029][T12644] should_failslab+0xc2/0x120 [ 213.285052][T12644] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 213.285074][T12644] ? snd_mixer_oss_proc_write+0x399/0x690 [ 213.285098][T12644] kstrdup+0x51/0xe0 [ 213.285121][T12644] snd_mixer_oss_proc_write+0x399/0x690 [ 213.285141][T12644] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 213.285159][T12644] ? __lock_acquire+0x4a5/0x2630 [ 213.285195][T12644] ? find_held_lock+0x2b/0x80 [ 213.285219][T12644] snd_info_text_entry_release+0xfb/0x260 [ 213.285239][T12644] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 213.285254][T12644] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 213.285274][T12644] close_pdeo.part.0+0xdf/0x2e0 [ 213.285299][T12644] proc_reg_release+0x2df/0x350 [ 213.285320][T12644] ? __pfx_proc_reg_release+0x10/0x10 [ 213.285342][T12644] ? locks_remove_file+0xd1/0x610 [ 213.285361][T12644] ? __pfx_locks_remove_file+0x10/0x10 [ 213.285378][T12644] ? __pfx___might_resched+0x10/0x10 [ 213.285395][T12644] ? ima_iint_find+0xe9/0x130 [ 213.285412][T12644] ? __pfx_proc_reg_release+0x10/0x10 [ 213.285433][T12644] __fput+0x3ff/0xb40 [ 213.285454][T12644] fput_close_sync+0x118/0x250 [ 213.285474][T12644] ? __pfx_fput_close_sync+0x10/0x10 [ 213.285496][T12644] __x64_sys_close+0x8b/0x120 [ 213.285513][T12644] do_syscall_64+0x106/0xf80 [ 213.285529][T12644] ? clear_bhb_loop+0x40/0x90 [ 213.285547][T12644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.285564][T12644] RIP: 0033:0x7f25a119c799 [ 213.285577][T12644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.285592][T12644] RSP: 002b:00007f25a1ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 213.285606][T12644] RAX: ffffffffffffffda RBX: 00007f25a1415fa0 RCX: 00007f25a119c799 [ 213.285622][T12644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 213.285631][T12644] RBP: 00007f25a1ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 213.285639][T12644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.285648][T12644] R13: 00007f25a1416038 R14: 00007f25a1415fa0 R15: 00007ffe9c44c6a8 [ 213.285668][T12644] [ 213.533488][T12642] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 213.777292][T12675] FAULT_INJECTION: forcing a failure. [ 213.777292][T12675] name failslab, interval 1, probability 0, space 0, times 0 [ 213.792731][T12675] CPU: 3 UID: 0 PID: 12675 Comm: syz.0.1892 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.792762][T12675] Tainted: [L]=SOFTLOCKUP [ 213.792768][T12675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.792777][T12675] Call Trace: [ 213.792784][T12675] [ 213.792791][T12675] dump_stack_lvl+0x100/0x190 [ 213.792823][T12675] should_fail_ex.cold+0x5/0xa [ 213.792847][T12675] should_failslab+0xc2/0x120 [ 213.792874][T12675] __kmalloc_cache_noprof+0x7a/0x6f0 [ 213.792895][T12675] ? snd_mixer_oss_build_test+0x7b/0x3d0 [ 213.792914][T12675] ? kasan_save_stack+0x3f/0x50 [ 213.792938][T12675] ? kasan_save_stack+0x30/0x50 [ 213.792963][T12675] snd_mixer_oss_build_test+0x7b/0x3d0 [ 213.792984][T12675] ? fput_close_sync+0x118/0x250 [ 213.793009][T12675] snd_mixer_oss_build_test_all+0xdf/0x6e0 [ 213.793030][T12675] ? __pfx_snd_mixer_oss_build_test_all+0x10/0x10 [ 213.793063][T12675] snd_mixer_oss_build_input+0x139/0xd90 [ 213.793091][T12675] ? __pfx_snd_mixer_oss_build_input+0x10/0x10 [ 213.793110][T12675] ? trace_kmalloc+0x101/0x130 [ 213.793145][T12675] ? __asan_memcpy+0x3c/0x60 [ 213.793171][T12675] snd_mixer_oss_proc_write+0x3f3/0x690 [ 213.793197][T12675] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 213.793218][T12675] ? __lock_acquire+0x4a5/0x2630 [ 213.793264][T12675] ? find_held_lock+0x2b/0x80 [ 213.793288][T12675] snd_info_text_entry_release+0xfb/0x260 [ 213.793311][T12675] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 213.793331][T12675] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 213.793355][T12675] close_pdeo.part.0+0xdf/0x2e0 [ 213.793386][T12675] proc_reg_release+0x2df/0x350 [ 213.793412][T12675] ? __pfx_proc_reg_release+0x10/0x10 [ 213.793439][T12675] ? locks_remove_file+0xd1/0x610 [ 213.793463][T12675] ? __pfx_locks_remove_file+0x10/0x10 [ 213.793483][T12675] ? __pfx___might_resched+0x10/0x10 [ 213.793504][T12675] ? ima_iint_find+0xe9/0x130 [ 213.793524][T12675] ? __pfx_proc_reg_release+0x10/0x10 [ 213.793551][T12675] __fput+0x3ff/0xb40 [ 213.793582][T12675] fput_close_sync+0x118/0x250 [ 213.793604][T12675] ? __pfx_fput_close_sync+0x10/0x10 [ 213.793630][T12675] __x64_sys_close+0x8b/0x120 [ 213.793653][T12675] do_syscall_64+0x106/0xf80 [ 213.793669][T12675] ? clear_bhb_loop+0x40/0x90 [ 213.793692][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.793709][T12675] RIP: 0033:0x7f1fd799c799 [ 213.793726][T12675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.793742][T12675] RSP: 002b:00007f1fd87f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 213.793758][T12675] RAX: ffffffffffffffda RBX: 00007f1fd7c15fa0 RCX: 00007f1fd799c799 [ 213.793770][T12675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 213.793779][T12675] RBP: 00007f1fd87f2090 R08: 0000000000000000 R09: 0000000000000000 [ 213.793790][T12675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.793800][T12675] R13: 00007f1fd7c16038 R14: 00007f1fd7c15fa0 R15: 00007fff4d882e98 [ 213.793825][T12675] [ 213.872479][T12678] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 214.525912][T12701] ufs: You didn't specify the type of your ufs filesystem [ 214.525912][T12701] [ 214.525912][T12701] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 214.525912][T12701] [ 214.525912][T12701] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 214.603286][T12709] FAULT_INJECTION: forcing a failure. [ 214.603286][T12709] name failslab, interval 1, probability 0, space 0, times 0 [ 214.607666][T12709] CPU: 3 UID: 0 PID: 12709 Comm: syz.5.1902 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.607684][T12709] Tainted: [L]=SOFTLOCKUP [ 214.607687][T12709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.607694][T12709] Call Trace: [ 214.607698][T12709] [ 214.607703][T12709] dump_stack_lvl+0x100/0x190 [ 214.607726][T12709] should_fail_ex.cold+0x5/0xa [ 214.607740][T12709] should_failslab+0xc2/0x120 [ 214.607759][T12709] __kmalloc_cache_noprof+0x7a/0x6f0 [ 214.607772][T12709] ? snd_mixer_oss_build_test+0x7b/0x3d0 [ 214.607789][T12709] snd_mixer_oss_build_test+0x7b/0x3d0 [ 214.607834][T12709] snd_mixer_oss_build_test_all+0x1ac/0x6e0 [ 214.607856][T12709] ? __pfx_snd_mixer_oss_build_test_all+0x10/0x10 [ 214.607876][T12709] snd_mixer_oss_build_input+0x139/0xd90 [ 214.607895][T12709] ? __pfx_snd_mixer_oss_build_input+0x10/0x10 [ 214.607908][T12709] ? trace_kmalloc+0x101/0x130 [ 214.607929][T12709] ? __asan_memcpy+0x3c/0x60 [ 214.607945][T12709] snd_mixer_oss_proc_write+0x3f3/0x690 [ 214.607961][T12709] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 214.607973][T12709] ? __lock_acquire+0x4a5/0x2630 [ 214.608001][T12709] ? find_held_lock+0x2b/0x80 [ 214.608016][T12709] snd_info_text_entry_release+0xfb/0x260 [ 214.608032][T12709] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 214.608045][T12709] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 214.608061][T12709] close_pdeo.part.0+0xdf/0x2e0 [ 214.608080][T12709] proc_reg_release+0x2df/0x350 [ 214.608097][T12709] ? __pfx_proc_reg_release+0x10/0x10 [ 214.608115][T12709] ? locks_remove_file+0xd1/0x610 [ 214.608129][T12709] ? __pfx_locks_remove_file+0x10/0x10 [ 214.608142][T12709] ? __pfx___might_resched+0x10/0x10 [ 214.608155][T12709] ? ima_iint_find+0xe9/0x130 [ 214.608167][T12709] ? __pfx_proc_reg_release+0x10/0x10 [ 214.608184][T12709] __fput+0x3ff/0xb40 [ 214.608199][T12709] fput_close_sync+0x118/0x250 [ 214.608212][T12709] ? __pfx_fput_close_sync+0x10/0x10 [ 214.608234][T12709] __x64_sys_close+0x8b/0x120 [ 214.608248][T12709] do_syscall_64+0x106/0xf80 [ 214.608259][T12709] ? clear_bhb_loop+0x40/0x90 [ 214.608273][T12709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.608285][T12709] RIP: 0033:0x7f832559c799 [ 214.608295][T12709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.608305][T12709] RSP: 002b:00007f83263df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 214.608317][T12709] RAX: ffffffffffffffda RBX: 00007f8325815fa0 RCX: 00007f832559c799 [ 214.608323][T12709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 214.608329][T12709] RBP: 00007f83263df090 R08: 0000000000000000 R09: 0000000000000000 [ 214.608335][T12709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.608341][T12709] R13: 00007f8325816038 R14: 00007f8325815fa0 R15: 00007ffe7f380528 [ 214.608355][T12709] [ 214.728235][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 214.760178][T12714] geneve2: entered promiscuous mode [ 215.003351][T12725] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 215.053689][T12744] FAULT_INJECTION: forcing a failure. [ 215.053689][T12744] name failslab, interval 1, probability 0, space 0, times 0 [ 215.058831][T12744] CPU: 0 UID: 0 PID: 12744 Comm: syz.5.1913 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.058860][T12744] Tainted: [L]=SOFTLOCKUP [ 215.058866][T12744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.058877][T12744] Call Trace: [ 215.058884][T12744] [ 215.058891][T12744] dump_stack_lvl+0x100/0x190 [ 215.058924][T12744] should_fail_ex.cold+0x5/0xa [ 215.058949][T12744] should_failslab+0xc2/0x120 [ 215.058977][T12744] __kmalloc_cache_noprof+0x7a/0x6f0 [ 215.058995][T12744] ? snd_mixer_oss_build_test+0x7b/0x3d0 [ 215.059018][T12744] snd_mixer_oss_build_test+0x7b/0x3d0 [ 215.059040][T12744] snd_mixer_oss_build_test_all+0x230/0x6e0 [ 215.059066][T12744] ? __pfx_snd_mixer_oss_build_test_all+0x10/0x10 [ 215.059097][T12744] snd_mixer_oss_build_input+0x139/0xd90 [ 215.059129][T12744] ? __pfx_snd_mixer_oss_build_input+0x10/0x10 [ 215.059150][T12744] ? trace_kmalloc+0x101/0x130 [ 215.059184][T12744] ? __asan_memcpy+0x3c/0x60 [ 215.059208][T12744] snd_mixer_oss_proc_write+0x3f3/0x690 [ 215.059231][T12744] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 215.059251][T12744] ? __lock_acquire+0x4a5/0x2630 [ 215.059294][T12744] ? find_held_lock+0x2b/0x80 [ 215.059318][T12744] snd_info_text_entry_release+0xfb/0x260 [ 215.059341][T12744] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 215.059360][T12744] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 215.059385][T12744] close_pdeo.part.0+0xdf/0x2e0 [ 215.059412][T12744] proc_reg_release+0x2df/0x350 [ 215.059443][T12744] ? __pfx_proc_reg_release+0x10/0x10 [ 215.059469][T12744] ? locks_remove_file+0xd1/0x610 [ 215.059492][T12744] ? __pfx_locks_remove_file+0x10/0x10 [ 215.059510][T12744] ? __pfx___might_resched+0x10/0x10 [ 215.059527][T12744] ? ima_iint_find+0xe9/0x130 [ 215.059545][T12744] ? __pfx_proc_reg_release+0x10/0x10 [ 215.059569][T12744] __fput+0x3ff/0xb40 [ 215.059591][T12744] fput_close_sync+0x118/0x250 [ 215.059611][T12744] ? __pfx_fput_close_sync+0x10/0x10 [ 215.059636][T12744] __x64_sys_close+0x8b/0x120 [ 215.059658][T12744] do_syscall_64+0x106/0xf80 [ 215.059674][T12744] ? clear_bhb_loop+0x40/0x90 [ 215.059694][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.059710][T12744] RIP: 0033:0x7f832559c799 [ 215.059724][T12744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.059739][T12744] RSP: 002b:00007f83263df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 215.059755][T12744] RAX: ffffffffffffffda RBX: 00007f8325815fa0 RCX: 00007f832559c799 [ 215.059765][T12744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 215.059774][T12744] RBP: 00007f83263df090 R08: 0000000000000000 R09: 0000000000000000 [ 215.059783][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.059791][T12744] R13: 00007f8325816038 R14: 00007f8325815fa0 R15: 00007ffe7f380528 [ 215.059841][T12744] [ 215.265480][T12736] macsec0 speed is unknown, defaulting to 1000 [ 215.303518][T12755] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 215.407390][T12760] ALSA: mixer_oss: invalid OSS volume 'ÿÌm¢@aäü£DõóÇ`ýa2$' [ 215.455588][T12759] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 215.625904][T12785] FAULT_INJECTION: forcing a failure. [ 215.625904][T12785] name failslab, interval 1, probability 0, space 0, times 0 [ 215.632368][T12785] CPU: 0 UID: 0 PID: 12785 Comm: syz.6.1925 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.632391][T12785] Tainted: [L]=SOFTLOCKUP [ 215.632395][T12785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.632402][T12785] Call Trace: [ 215.632406][T12785] [ 215.632412][T12785] dump_stack_lvl+0x100/0x190 [ 215.632436][T12785] should_fail_ex.cold+0x5/0xa [ 215.632453][T12785] should_failslab+0xc2/0x120 [ 215.632473][T12785] __kmalloc_cache_noprof+0x7a/0x6f0 [ 215.632488][T12785] ? snd_mixer_oss_build_test+0x7b/0x3d0 [ 215.632522][T12785] snd_mixer_oss_build_test+0x7b/0x3d0 [ 215.632541][T12785] snd_mixer_oss_build_test_all+0x2b4/0x6e0 [ 215.632557][T12785] ? __pfx_snd_mixer_oss_build_test_all+0x10/0x10 [ 215.632580][T12785] snd_mixer_oss_build_input+0x139/0xd90 [ 215.632600][T12785] ? __pfx_snd_mixer_oss_build_input+0x10/0x10 [ 215.632616][T12785] ? trace_kmalloc+0x101/0x130 [ 215.632640][T12785] ? __asan_memcpy+0x3c/0x60 [ 215.632657][T12785] snd_mixer_oss_proc_write+0x3f3/0x690 [ 215.632675][T12785] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 215.632689][T12785] ? __lock_acquire+0x4a5/0x2630 [ 215.632731][T12785] ? find_held_lock+0x2b/0x80 [ 215.632757][T12785] snd_info_text_entry_release+0xfb/0x260 [ 215.632783][T12785] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 215.632806][T12785] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 215.632835][T12785] close_pdeo.part.0+0xdf/0x2e0 [ 215.632869][T12785] proc_reg_release+0x2df/0x350 [ 215.632895][T12785] ? __pfx_proc_reg_release+0x10/0x10 [ 215.632915][T12785] ? locks_remove_file+0xd1/0x610 [ 215.632932][T12785] ? __pfx_locks_remove_file+0x10/0x10 [ 215.632947][T12785] ? __pfx___might_resched+0x10/0x10 [ 215.632960][T12785] ? ima_iint_find+0xe9/0x130 [ 215.632979][T12785] ? __pfx_proc_reg_release+0x10/0x10 [ 215.633003][T12785] __fput+0x3ff/0xb40 [ 215.633026][T12785] fput_close_sync+0x118/0x250 [ 215.633047][T12785] ? __pfx_fput_close_sync+0x10/0x10 [ 215.633076][T12785] __x64_sys_close+0x8b/0x120 [ 215.633094][T12785] do_syscall_64+0x106/0xf80 [ 215.633106][T12785] ? clear_bhb_loop+0x40/0x90 [ 215.633122][T12785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.633134][T12785] RIP: 0033:0x7f25a119c799 [ 215.633145][T12785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.633157][T12785] RSP: 002b:00007f25a1ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 215.633170][T12785] RAX: ffffffffffffffda RBX: 00007f25a1415fa0 RCX: 00007f25a119c799 [ 215.633177][T12785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 215.633184][T12785] RBP: 00007f25a1ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 215.633191][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.633200][T12785] R13: 00007f25a1416038 R14: 00007f25a1415fa0 R15: 00007ffe9c44c6a8 [ 215.633217][T12785] [ 215.809870][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 215.809883][ T40] audit: type=1400 audit(1772331744.531:764): avc: denied { execute } for pid=12789 comm="syz.0.1923" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 215.917844][ T40] audit: type=1400 audit(1772331744.641:765): avc: denied { setattr } for pid=12797 comm="syz.0.1928" name="[io_uring]" dev="anon_inodefs" ino=45637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.032637][ T4382] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 216.070905][T12801] validate_nla: 60 callbacks suppressed [ 216.070929][T12801] netlink: 'syz.0.1930': attribute type 89 has an invalid length. [ 216.077675][T12801] __nla_validate_parse: 141 callbacks suppressed [ 216.077685][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'. [ 216.157896][T12802] 9p: Bad value for 'version' [ 216.184581][ T4382] usb 10-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 216.188368][ T4382] usb 10-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 216.194411][ T4382] usb 10-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 216.198028][ T4382] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.201259][ T4382] usb 10-1: Product: syz [ 216.203771][ T4382] usb 10-1: Manufacturer: syz [ 216.205769][ T4382] usb 10-1: SerialNumber: syz [ 216.421107][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1926'. [ 216.425274][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1926'. [ 216.443039][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1926'. [ 216.485964][ T39] usb 10-1: USB disconnect, device number 11 [ 216.610875][T12823] FAULT_INJECTION: forcing a failure. [ 216.610875][T12823] name failslab, interval 1, probability 0, space 0, times 0 [ 216.615475][T12823] CPU: 2 UID: 0 PID: 12823 Comm: syz.5.1935 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.615493][T12823] Tainted: [L]=SOFTLOCKUP [ 216.615497][T12823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.615504][T12823] Call Trace: [ 216.615517][T12823] [ 216.615522][T12823] dump_stack_lvl+0x100/0x190 [ 216.615554][T12823] should_fail_ex.cold+0x5/0xa [ 216.615568][T12823] should_failslab+0xc2/0x120 [ 216.615586][T12823] __kmalloc_cache_noprof+0x7a/0x6f0 [ 216.615599][T12823] ? snd_mixer_oss_build_test+0x7b/0x3d0 [ 216.615620][T12823] snd_mixer_oss_build_test+0x7b/0x3d0 [ 216.615635][T12823] snd_mixer_oss_build_test_all+0x33c/0x6e0 [ 216.615649][T12823] ? __pfx_snd_mixer_oss_build_test_all+0x10/0x10 [ 216.615669][T12823] snd_mixer_oss_build_input+0x139/0xd90 [ 216.615687][T12823] ? __pfx_snd_mixer_oss_build_input+0x10/0x10 [ 216.615700][T12823] ? trace_kmalloc+0x101/0x130 [ 216.615722][T12823] ? __asan_memcpy+0x3c/0x60 [ 216.615738][T12823] snd_mixer_oss_proc_write+0x3f3/0x690 [ 216.615753][T12823] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 216.615766][T12823] ? __lock_acquire+0x4a5/0x2630 [ 216.615825][T12823] ? find_held_lock+0x2b/0x80 [ 216.615842][T12823] snd_info_text_entry_release+0xfb/0x260 [ 216.615858][T12823] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 216.615870][T12823] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 216.615886][T12823] close_pdeo.part.0+0xdf/0x2e0 [ 216.615905][T12823] proc_reg_release+0x2df/0x350 [ 216.615923][T12823] ? __pfx_proc_reg_release+0x10/0x10 [ 216.615940][T12823] ? locks_remove_file+0xd1/0x610 [ 216.615954][T12823] ? __pfx_locks_remove_file+0x10/0x10 [ 216.615967][T12823] ? __pfx___might_resched+0x10/0x10 [ 216.615980][T12823] ? ima_iint_find+0xe9/0x130 [ 216.615998][T12823] ? __pfx_proc_reg_release+0x10/0x10 [ 216.616015][T12823] __fput+0x3ff/0xb40 [ 216.616030][T12823] fput_close_sync+0x118/0x250 [ 216.616043][T12823] ? __pfx_fput_close_sync+0x10/0x10 [ 216.616059][T12823] __x64_sys_close+0x8b/0x120 [ 216.616073][T12823] do_syscall_64+0x106/0xf80 [ 216.616084][T12823] ? clear_bhb_loop+0x40/0x90 [ 216.616098][T12823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.616109][T12823] RIP: 0033:0x7f832559c799 [ 216.616119][T12823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.616130][T12823] RSP: 002b:00007f83263df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 216.616140][T12823] RAX: ffffffffffffffda RBX: 00007f8325815fa0 RCX: 00007f832559c799 [ 216.616147][T12823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 216.616154][T12823] RBP: 00007f83263df090 R08: 0000000000000000 R09: 0000000000000000 [ 216.616160][T12823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.616166][T12823] R13: 00007f8325816038 R14: 00007f8325815fa0 R15: 00007ffe7f380528 [ 216.616180][T12823] [ 216.792762][ T7410] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 216.810086][T12830] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1938'. [ 216.844121][T12820] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 216.888387][T12837] zonefs (loop5) ERROR: Not a zoned block device [ 216.928532][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 216.954456][ T7410] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 216.958141][ T7410] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.961090][ T7410] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.964785][ T7410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 216.967872][ T7410] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.970941][ T7410] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.974584][ T7410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 216.977648][ T7410] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.980627][ T7410] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.984252][ T7410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 216.987400][ T7410] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.990523][ T7410] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.994306][ T7410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 216.997732][ T7410] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.000789][ T7410] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.004430][ T7410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 217.007401][ T7410] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.010576][ T7410] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.014636][ T7410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 217.018115][ T7410] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.021144][ T7410] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.024825][ T7410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 217.027894][ T7410] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.030860][ T7410] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.034769][ T7410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 217.039119][ T7410] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 217.039929][T12848] FAULT_INJECTION: forcing a failure. [ 217.039929][T12848] name failslab, interval 1, probability 0, space 0, times 0 [ 217.042463][ T7410] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 217.042478][ T7410] usb 8-1: Product: syz [ 217.042486][ T7410] usb 8-1: Manufacturer: syz [ 217.042577][ T7410] usb 8-1: SerialNumber: syz [ 217.044611][ T7410] usb 8-1: config 0 descriptor?? [ 217.053309][T12848] CPU: 2 UID: 0 PID: 12848 Comm: syz.6.1945 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.053328][T12848] Tainted: [L]=SOFTLOCKUP [ 217.053332][T12848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.053338][T12848] Call Trace: [ 217.053342][T12848] [ 217.053348][T12848] dump_stack_lvl+0x100/0x190 [ 217.053371][T12848] should_fail_ex.cold+0x5/0xa [ 217.053385][T12848] should_failslab+0xc2/0x120 [ 217.053403][T12848] __kmalloc_cache_noprof+0x7a/0x6f0 [ 217.053416][T12848] ? snd_mixer_oss_build_test+0x7b/0x3d0 [ 217.053433][T12848] snd_mixer_oss_build_test+0x7b/0x3d0 [ 217.053450][T12848] snd_mixer_oss_build_test_all+0x3c0/0x6e0 [ 217.053464][T12848] ? __pfx_snd_mixer_oss_build_test_all+0x10/0x10 [ 217.053484][T12848] snd_mixer_oss_build_input+0x139/0xd90 [ 217.053502][T12848] ? __pfx_snd_mixer_oss_build_input+0x10/0x10 [ 217.053515][T12848] ? trace_kmalloc+0x101/0x130 [ 217.053537][T12848] ? __asan_memcpy+0x3c/0x60 [ 217.053553][T12848] snd_mixer_oss_proc_write+0x3f3/0x690 [ 217.053574][T12848] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 217.053587][T12848] ? __lock_acquire+0x4a5/0x2630 [ 217.053614][T12848] ? find_held_lock+0x2b/0x80 [ 217.053630][T12848] snd_info_text_entry_release+0xfb/0x260 [ 217.053645][T12848] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 217.053658][T12848] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 217.053673][T12848] close_pdeo.part.0+0xdf/0x2e0 [ 217.053693][T12848] proc_reg_release+0x2df/0x350 [ 217.053710][T12848] ? __pfx_proc_reg_release+0x10/0x10 [ 217.053728][T12848] ? locks_remove_file+0xd1/0x610 [ 217.053742][T12848] ? __pfx_locks_remove_file+0x10/0x10 [ 217.053755][T12848] ? __pfx___might_resched+0x10/0x10 [ 217.053767][T12848] ? ima_iint_find+0xe9/0x130 [ 217.053780][T12848] ? __pfx_proc_reg_release+0x10/0x10 [ 217.053797][T12848] __fput+0x3ff/0xb40 [ 217.053812][T12848] fput_close_sync+0x118/0x250 [ 217.053825][T12848] ? __pfx_fput_close_sync+0x10/0x10 [ 217.053842][T12848] __x64_sys_close+0x8b/0x120 [ 217.053855][T12848] do_syscall_64+0x106/0xf80 [ 217.053867][T12848] ? clear_bhb_loop+0x40/0x90 [ 217.053881][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.053892][T12848] RIP: 0033:0x7f25a119c799 [ 217.053902][T12848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.053912][T12848] RSP: 002b:00007f25a1ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 217.053923][T12848] RAX: ffffffffffffffda RBX: 00007f25a1415fa0 RCX: 00007f25a119c799 [ 217.053930][T12848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 217.053936][T12848] RBP: 00007f25a1ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 217.053942][T12848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.053948][T12848] R13: 00007f25a1416038 R14: 00007f25a1415fa0 R15: 00007ffe9c44c6a8 [ 217.054014][T12848] [ 217.135065][T12858] mkiss: ax0: crc mode is auto. [ 217.156500][ T7410] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 217.202665][ T7415] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.342629][ T7415] usb 5-1: device descriptor read/64, error -71 [ 217.357335][ T39] usb 8-1: USB disconnect, device number 30 [ 217.371011][ T39] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 217.602694][ T7415] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.691424][ T40] audit: type=1400 audit(1772331746.411:766): avc: denied { append } for pid=12883 comm="syz.6.1956" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 217.743287][ T7415] usb 5-1: device descriptor read/64, error -71 [ 217.853261][ T7415] usb usb5-port1: attempt power cycle [ 217.906931][ T63] Bluetooth: hci2: unexpected event for opcode 0x040d [ 217.908715][T12893] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1960'. [ 217.954147][T12897] binder: 12896:12897 ioctl 8924 200000000000 returned -22 [ 217.959531][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 217.965283][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 217.975713][T12902] netlink: 'syz.5.1964': attribute type 1 has an invalid length. [ 217.996982][T12907] input: syz0 as /devices/virtual/input/input28 [ 217.999116][T12902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.100543][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1967'. [ 218.161158][T12913] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1967'. [ 218.220787][ T7415] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 218.232292][T12920] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 218.263256][ T7415] usb 5-1: device descriptor read/8, error -71 [ 218.339668][T12925] jfs: Unknown parameter 'usrquota$' [ 218.522637][ T7415] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 218.546085][ T7415] usb 5-1: device descriptor read/8, error -71 [ 218.569388][T12941] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 218.572346][T12941] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 218.662845][ T7415] usb usb5-port1: unable to enumerate USB device [ 218.847921][T12954] binfmt_misc: register: failed to install interpreter file ./file0 [ 218.908209][T12957] openvswitch: netlink: Duplicate key (type 6). [ 218.964583][T12959] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 219.053677][T12967] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 219.054215][T12968] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 219.425444][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.570806][T13006] SET target dimension over the limit! [ 219.575269][ T40] audit: type=1400 audit(1772331748.301:767): avc: denied { create } for pid=13005 comm="syz.6.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 219.675864][T13019] tmpfs: Bad value for 'mpol' [ 219.678695][T13019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=13019 comm=syz.6.2001 [ 219.706828][T13022] lo speed is unknown, defaulting to 1000 [ 219.710707][T13022] lo speed is unknown, defaulting to 1000 [ 219.713849][T13022] lo speed is unknown, defaulting to 1000 [ 219.740705][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.745314][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.815576][T13022] infiniband syz0: set active [ 219.817171][ T7415] lo speed is unknown, defaulting to 1000 [ 219.819100][T13022] infiniband syz0: added lo [ 219.840838][T13022] RDS/IB: syz0: added [ 219.842601][T13022] smc: adding ib device syz0 with port count 1 [ 219.843973][T13033] xt_HMARK: spi-set and port-set can't be combined [ 219.844799][T13022] smc: ib device syz0 port 1 has no pnetid [ 219.850002][T13022] lo speed is unknown, defaulting to 1000 [ 219.852582][ T7415] lo speed is unknown, defaulting to 1000 [ 219.856753][T13033] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.947169][T13022] lo speed is unknown, defaulting to 1000 [ 220.101647][T13054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.101664][T13022] lo speed is unknown, defaulting to 1000 [ 220.192290][T13061] netlink: 'syz.6.2012': attribute type 1 has an invalid length. [ 220.209029][T13061] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 220.258323][T13022] lo speed is unknown, defaulting to 1000 [ 220.291343][T13067] EXT4-fs: Conflicting test_dummy_encryption options [ 220.394090][T13022] lo speed is unknown, defaulting to 1000 [ 220.523537][T13022] syz0: rxe_newlink: already configured on lo [ 220.526672][T13022] syz0: rxe_newlink: already configured on lo [ 220.529529][T13022] syz0: rxe_newlink: already configured on lo [ 220.532377][T13022] syz0: rxe_newlink: already configured on lo [ 220.812860][ T55] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 220.921010][T13098] loop4: detected capacity change from 0 to 7 [ 220.929090][T13098] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 220.930918][T13098] loop4: partition table partially beyond EOD, truncated [ 220.933868][T13098] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 220.965840][ T55] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 220.969051][ T55] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.971654][T10387] udevd[10387]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 220.973431][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.981842][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.985902][ T55] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.990337][ T55] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.995581][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.001010][ T55] usb 11-1: config 0 descriptor?? [ 221.003513][T13082] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 221.212874][ T55] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 221.225950][ T55] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 221.241301][ T55] usb 11-1: USB disconnect, device number 9 [ 221.282267][ T40] audit: type=1326 audit(1772331750.001:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.0.2028" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fd799c799 code=0x0 [ 221.298832][T13116] fido_id[13116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/report_descriptor': No such file or directory [ 221.522880][T13130] SELinux: failed to load policy [ 221.728848][T13147] __nla_validate_parse: 6 callbacks suppressed [ 221.728861][T13147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2035'. [ 221.761718][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 222.272200][T13165] geneve3: entered promiscuous mode [ 222.274832][T13165] geneve3: entered allmulticast mode [ 222.465011][T13171] fuse: Bad value for 'rootmode' [ 222.465094][T13170] fuse: Bad value for 'rootmode' [ 222.472235][T13170] x_tables: duplicate underflow at hook 2 [ 222.601865][T13176] openvswitch: netlink: IP tunnel dst address not specified [ 222.663967][ T40] audit: type=1400 audit(1772331751.391:769): avc: denied { map } for pid=13173 comm="syz.6.2042" path="/194" dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 222.675269][ T40] audit: type=1400 audit(1772331751.391:770): avc: denied { execute } for pid=13173 comm="syz.6.2042" path="/194" dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 222.705248][T13174] macsec0 speed is unknown, defaulting to 1000 [ 222.890333][T13174] lo speed is unknown, defaulting to 1000 [ 223.829538][T13208] fuse: Unknown parameter 'rootmode^00000000000000' [ 223.885301][T13213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.945513][ T40] audit: type=1400 audit(1772331752.671:771): avc: denied { mount } for pid=13221 comm="syz.0.2054" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 223.961780][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2055'. [ 223.985890][T13224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13224 comm=syz.5.2055 [ 224.053747][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2058'. [ 224.057689][T13232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2058'. [ 224.088041][T13234] tmpfs: Bad value for 'mpol' [ 224.098821][T13236] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2060'. [ 224.143909][T13241] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2062'. [ 224.185743][ T40] audit: type=1400 audit(1772331752.911:772): avc: denied { accept } for pid=13242 comm="syz.5.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.196451][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2064'. [ 224.200963][T13246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13246 comm=syz.6.2064 [ 224.250843][T13248] netlink: 'syz.5.2065': attribute type 6 has an invalid length. [ 224.342144][T13258] SELinux: Context system_u:object_r:dhcp_etc_t:s0 is not valid (left unmapped). [ 224.347157][ T40] audit: type=1400 audit(1772331753.061:773): avc: denied { relabelfrom } for pid=13257 comm="syz.5.2068" name="RAWv6" dev="sockfs" ino=52255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.356008][ T40] audit: type=1400 audit(1772331753.081:774): avc: denied { relabelto } for pid=13257 comm="syz.5.2068" name="RAWv6" dev="sockfs" ino=52255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:dhcp_etc_t:s0" [ 224.366945][T13258] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2068'. [ 224.370243][T13259] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2068'. [ 224.812660][ T39] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 224.841713][T13266] ufs: You didn't specify the type of your ufs filesystem [ 224.841713][T13266] [ 224.841713][T13266] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 224.841713][T13266] [ 224.841713][T13266] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 224.972606][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 224.976887][ T39] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.981989][ T39] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.986594][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 224.989218][ T39] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 224.994180][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.002884][ T39] usb 10-1: config 0 descriptor?? [ 225.211431][T13289] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 225.218611][T13289] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 225.222470][ T39] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 225.232650][ T39] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 225.242614][ T39] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 225.245885][ T39] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 225.252650][ T39] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 225.256667][ T39] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 225.543176][ T40] audit: type=1400 audit(1772331754.261:775): avc: denied { map } for pid=13299 comm="syz.6.2081" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.572605][ T53] usb 10-1: USB disconnect, device number 12 [ 225.583041][ T7410] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 225.772643][ T7410] usb 8-1: Using ep0 maxpacket: 8 [ 225.782215][ T7410] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.785812][T13317] netlink: 'syz.5.2085': attribute type 10 has an invalid length. [ 225.790836][ T7410] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 225.794933][ T7410] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 225.799660][ T7410] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 225.804809][ T7410] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 225.808848][ T7410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.834551][ T7410] hub 8-1:1.0: bad descriptor, ignoring hub [ 225.837390][ T7410] hub 8-1:1.0: probe with driver hub failed with error -5 [ 225.840800][ T7410] cdc_wdm 8-1:1.0: skipping garbage [ 225.860096][ T7410] cdc_wdm 8-1:1.0: skipping garbage [ 225.870315][ T7410] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 225.873058][ T7410] cdc_wdm 8-1:1.0: Unknown control protocol [ 225.897557][T13323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.210472][T13349] binder: 13348:13349 ioctl c0306201 0 returned -14 [ 226.482118][T13293] usb 8-1: reset high-speed USB device number 31 using dummy_hcd [ 226.495160][T13367] tmpfs: Group quota block hardlimit too large. [ 226.645668][ T63] Bluetooth: hci0: unexpected event for opcode 0x080f [ 226.688790][T13385] xt_hashlimit: size too large, truncated to 1048576 [ 226.697641][T13386] bridge_slave_0 (unregistering): left allmulticast mode [ 226.700917][T13386] bridge_slave_0 (unregistering): left promiscuous mode [ 226.708472][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.968519][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.973379][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.005392][ C2] Unknown status report in ack skb [ 227.036353][T13396] macsec0 speed is unknown, defaulting to 1000 [ 227.083260][ T7410] usb 8-1: USB disconnect, device number 31 [ 227.149060][T13401] netlink: 'syz.3.2107': attribute type 1 has an invalid length. [ 227.171195][T13401] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.176241][T13396] lo speed is unknown, defaulting to 1000 [ 227.206222][T13401] bond7: (slave veth5): Enslaving as an active interface with a down link [ 227.219189][T13401] bond7: (slave dummy0): making interface the new active one [ 227.222782][T13401] dummy0: entered promiscuous mode [ 227.226880][T13401] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 227.232089][T13401] netlink: 'syz.3.2107': attribute type 10 has an invalid length. [ 227.234923][T13401] __nla_validate_parse: 8 callbacks suppressed [ 227.234931][T13401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2107'. [ 227.246642][T13401] bond7: (slave dummy0): Releasing active interface [ 227.255854][ T40] audit: type=1400 audit(1772331755.981:776): avc: denied { connect } for pid=13400 comm="syz.3.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 227.475843][T13431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2115'. [ 227.491027][T13431] fuse: Bad value for 'fd' [ 227.508733][T13435] macsec1: entered promiscuous mode [ 227.511040][T13435] macsec1: entered allmulticast mode [ 227.696984][ T40] audit: type=1400 audit(1772331756.421:777): avc: denied { mounton } for pid=13445 comm="syz.0.2120" path="/" dev="tmpfs" ino=3043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 227.978514][ T4382] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.147900][ T4382] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 228.151808][ T4382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.157061][ T4382] usb 5-1: Product: syz [ 228.158949][ T4382] usb 5-1: Manufacturer: syz [ 228.160890][ T4382] usb 5-1: SerialNumber: syz [ 228.169916][ T4382] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 228.205422][T13459] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2123'. [ 228.208790][ T53] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 228.232710][ T29] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 228.362726][ T29] usb 10-1: device descriptor read/64, error -71 [ 228.423947][ T40] audit: type=1800 audit(1772331757.141:778): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2120" name="bus" dev="9p" ino=72614253 res=0 errno=0 [ 228.464291][ T4382] usb 5-1: USB disconnect, device number 17 [ 228.536172][T13466] netlink: 'syz.6.2126': attribute type 13 has an invalid length. [ 228.541032][T13466] netlink: 'syz.6.2126': attribute type 13 has an invalid length. [ 228.573606][T13469] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2127'. [ 228.578731][T13469] ksmbd: Unknown IPC event: 0, ignore. [ 228.614863][ T29] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 228.743629][ T29] usb 10-1: device descriptor read/64, error -71 [ 228.801367][T13471] netlink: 'syz.6.2128': attribute type 21 has an invalid length. [ 228.805356][T13471] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2128'. [ 228.863397][ T29] usb usb10-port1: attempt power cycle [ 229.222835][ T29] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 229.243458][ T29] usb 10-1: device descriptor read/8, error -71 [ 229.262768][ T53] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 229.265466][ T53] ath9k_htc: Failed to initialize the device [ 229.270025][ T4382] usb 5-1: ath9k_htc: USB layer deinitialized [ 229.449893][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 229.493387][ T29] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 229.523821][ T29] usb 10-1: device descriptor read/8, error -71 [ 229.604773][T13492] 8021q: adding VLAN 0 to HW filter on device bond7 [ 229.634304][ T29] usb usb10-port1: unable to enumerate USB device [ 229.700603][T13498] program syz.0.2137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.926835][T13513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.992628][ T4382] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 230.162654][ T4382] usb 11-1: Using ep0 maxpacket: 32 [ 230.167313][ T4382] usb 11-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 230.171114][ T4382] usb 11-1: config 10 has 0 interfaces, different from the descriptor's value: 1 [ 230.177072][ T4382] usb 11-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=46.41 [ 230.180662][ T4382] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.183653][ T4382] usb 11-1: Product: syz [ 230.185230][ T4382] usb 11-1: Manufacturer: syz [ 230.186850][ T4382] usb 11-1: SerialNumber: syz [ 230.395447][ T63] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 230.599993][T13503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.603266][T13503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.606653][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2138'. [ 230.611768][T13503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.615304][T13503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.619234][T13503] netlink: 'syz.6.2138': attribute type 4 has an invalid length. [ 230.623043][T13503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.626093][ T63] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 230.629197][T13503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.645531][ T4382] usb 11-1: USB disconnect, device number 10 [ 230.744068][T13531] overlayfs: missing 'workdir' [ 230.839511][T13538] netlink: 'syz.0.2147': attribute type 6 has an invalid length. [ 230.901316][ T40] audit: type=1400 audit(1772331759.621:779): avc: denied { execute } for pid=13539 comm="syz.0.2148" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.946769][ T40] audit: type=1400 audit(1772331759.671:780): avc: denied { append } for pid=13545 comm="syz.0.2150" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.014257][T13549] macsec0 speed is unknown, defaulting to 1000 [ 231.049905][T13553] netlink: 'syz.0.2151': attribute type 4 has an invalid length. [ 231.053961][T13553] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2151'. [ 231.112394][ T63] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 231.162664][T13549] lo speed is unknown, defaulting to 1000 [ 231.199679][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2156'. [ 231.204523][T13566] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.230938][T13570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.268904][T13573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.442656][T13593] netlink: 'syz.3.2161': attribute type 21 has an invalid length. [ 231.615446][T13604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2164'. [ 231.790068][T13621] dlm: Unknown command passed to DLM device : 33 [ 231.790068][T13621] [ 231.848048][T13625] geneve1: entered allmulticast mode [ 231.954047][ T40] audit: type=1400 audit(1772331760.681:781): avc: denied { append } for pid=13633 comm="syz.0.2174" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 232.042239][T13641] macsec0 speed is unknown, defaulting to 1000 [ 232.161311][T13648] macsec0 speed is unknown, defaulting to 1000 [ 232.163299][T13641] lo speed is unknown, defaulting to 1000 [ 232.275912][T13664] __nla_validate_parse: 4 callbacks suppressed [ 232.275928][T13664] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2182'. [ 232.372636][T13644] macsec0 speed is unknown, defaulting to 1000 [ 232.373936][T13648] lo speed is unknown, defaulting to 1000 [ 232.557720][T13644] lo speed is unknown, defaulting to 1000 [ 232.827855][T13678] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 232.926311][ T40] audit: type=1400 audit(1772331761.651:782): avc: denied { append } for pid=13686 comm="syz.5.2189" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 233.113158][T13687] sp0: Synchronizing with TNC [ 233.166625][T13692] gretap1: entered promiscuous mode [ 233.402816][T13700] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 233.411938][T13698] ref_ctr_offset mismatch. inode: 0x51d offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 234.097795][ T40] audit: type=1400 audit(1772331762.821:783): avc: denied { listen } for pid=13733 comm="syz.3.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.346325][T13753] MPI: mpi too large (124808 bits) [ 234.366968][ T40] audit: type=1326 audit(1772331763.091:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13750 comm="syz.0.2208" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fd799c799 code=0x0 [ 234.788903][ T40] audit: type=1400 audit(1772331763.511:785): avc: denied { kexec_image_load } for pid=13803 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 234.908479][T13813] xt_hashlimit: size too large, truncated to 1048576 [ 235.196231][T13825] Cannot find add_set index 65532 as target [ 235.330241][ T5934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.339132][ T5934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.347986][ T5934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.351960][ T5934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.356030][ T5934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.395485][T13840] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 235.401624][T13833] macsec0 speed is unknown, defaulting to 1000 [ 235.455396][T13840] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 235.478713][T13841] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 235.533766][T13833] lo speed is unknown, defaulting to 1000 [ 235.555258][T13841] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 235.634638][T13845] macsec0 speed is unknown, defaulting to 1000 [ 235.681879][ T63] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 235.782876][T13845] lo speed is unknown, defaulting to 1000 [ 235.828763][T13856] macsec0 speed is unknown, defaulting to 1000 [ 235.878861][T13833] chnl_net:caif_netlink_parms(): no params data found [ 235.932969][T13869] netlink: 'syz.6.2240': attribute type 1 has an invalid length. [ 235.979232][T13856] lo speed is unknown, defaulting to 1000 [ 235.979971][T13833] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.984956][T13833] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.987750][T13833] bridge_slave_0: entered allmulticast mode [ 235.991260][T13833] bridge_slave_0: entered promiscuous mode [ 235.997347][T13833] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.000629][T13833] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.003488][T13833] bridge_slave_1: entered allmulticast mode [ 236.008276][T13833] bridge_slave_1: entered promiscuous mode [ 236.042603][T13833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.049897][T13833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.080299][T13875] usb usb8: usbfs: process 13875 (syz.5.2243) did not claim interface 4 before use [ 236.095962][T13833] team0: Port device team_slave_0 added [ 236.099710][T13833] team0: Port device team_slave_1 added [ 236.133289][T13833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.135730][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.145295][T13833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.152465][T13833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.155588][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.166816][T13833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.227828][T13833] hsr_slave_0: entered promiscuous mode [ 236.230588][T13833] hsr_slave_1: entered promiscuous mode [ 236.233829][T13833] debugfs: 'hsr0' already exists in 'hsr' [ 236.235952][T13833] Cannot create hsr debugfs directory [ 236.452854][T13883] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2246'. [ 236.629453][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2249'. [ 236.642675][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2249'. [ 236.814960][T13833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.823374][T13833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.830266][T13833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.840182][T13833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.850526][ T40] audit: type=1400 audit(1772331765.571:786): avc: denied { map } for pid=13896 comm="syz.3.2251" path="socket:[54693]" dev="sockfs" ino=54693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 236.882880][ T40] audit: type=1400 audit(1772331765.611:787): avc: denied { accept } for pid=13896 comm="syz.3.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.958947][T13833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.973668][T13833] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.981012][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.984116][T11068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.997960][T11069] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.999952][ T40] audit: type=1326 audit(1772331765.721:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.6.2254" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25a119c799 code=0x0 [ 237.001335][T11069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.084019][T13911] netlink: 'syz.5.2256': attribute type 10 has an invalid length. [ 237.087841][T13911] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2256'. [ 237.092350][T13911] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 237.095650][T13911] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 237.099051][T13911] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 237.210130][T13833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.262623][T13833] veth0_vlan: entered promiscuous mode [ 237.271477][T13833] veth1_vlan: entered promiscuous mode [ 237.277501][T13925] ªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 237.308981][T13833] veth0_macvtap: entered promiscuous mode [ 237.316489][T13833] veth1_macvtap: entered promiscuous mode [ 237.330706][T13833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.344530][T13833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.353241][T11080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.357267][T11080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.362427][T11080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.367933][T11080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.424570][T11069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.428355][T11069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.432936][ T63] Bluetooth: hci4: command tx timeout [ 237.452464][T11069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.453427][T13932] netlink: 'syz.3.2261': attribute type 10 has an invalid length. [ 237.456264][T11069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.459173][T13932] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 237.464923][T13932] hsr0: mtu greater than device maximum [ 237.466870][T13932] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 237.489604][ T40] audit: type=1400 audit(1772331766.211:789): avc: denied { mounton } for pid=13833 comm="syz-executor" path="/syzkaller.nHSuCQ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 237.580702][ T40] audit: type=1400 audit(1772331766.301:790): avc: denied { listen } for pid=13938 comm="syz.3.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.589535][ T40] audit: type=1400 audit(1772331766.301:791): avc: denied { accept } for pid=13938 comm="syz.3.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.613800][T13942] random: crng reseeded on system resumption [ 237.623646][T13942] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2264'. [ 237.627316][T13942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13942 comm=syz.0.2264 [ 237.702997][T13946] can: request_module (can-proto-0) failed. [ 238.030591][T13961] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 238.034703][T13961] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 238.038735][T13961] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 238.042113][T13961] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 238.120652][T13969] netlink: 'syz.3.2273': attribute type 1 has an invalid length. [ 238.125024][T13969] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2273'. [ 238.227656][T13982] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2278'. [ 238.233968][T13982] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2278'. [ 238.237900][T13982] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 238.288481][T13986] vlan0: entered promiscuous mode [ 238.424679][T13988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.569565][T14005] Cannot find add_set index 65532 as target [ 238.898222][T14016] overlayfs: missing 'lowerdir' [ 238.900820][T14016] overlayfs: missing 'lowerdir' [ 238.908758][T14016] overlayfs: missing 'lowerdir' [ 238.919366][T14016] overlayfs: missing 'lowerdir' [ 238.936656][T14016] overlayfs: missing 'lowerdir' [ 238.940118][T14016] overlayfs: missing 'lowerdir' [ 238.946691][T14016] overlayfs: missing 'lowerdir' [ 238.950227][T14016] overlayfs: missing 'lowerdir' [ 238.954164][T14016] overlayfs: missing 'lowerdir' [ 238.957498][T14016] overlayfs: missing 'lowerdir' [ 238.960516][T14016] overlayfs: missing 'lowerdir' [ 238.971674][T14016] overlayfs: missing 'lowerdir' [ 238.975155][T14016] overlayfs: missing 'lowerdir' [ 238.977279][T14022] overlayfs: failed to resolve './file0': -2 [ 238.982350][T14016] overlayfs: missing 'lowerdir' [ 238.988961][T14016] overlayfs: missing 'lowerdir' [ 238.995307][T14016] overlayfs: missing 'lowerdir' [ 238.998495][T14016] overlayfs: missing 'lowerdir' [ 239.000168][T14019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2289'. [ 239.008803][T14016] overlayfs: missing 'lowerdir' [ 239.016379][T14016] overlayfs: missing 'lowerdir' [ 239.029809][T14016] overlayfs: missing 'lowerdir' [ 239.037466][T14016] overlayfs: missing 'lowerdir' [ 239.047530][T14016] overlayfs: missing 'lowerdir' [ 239.050821][T14016] overlayfs: missing 'lowerdir' [ 239.054748][T14016] overlayfs: missing 'lowerdir' [ 239.057895][T14016] overlayfs: missing 'lowerdir' [ 239.060305][T14016] overlayfs: missing 'lowerdir' [ 239.063518][T14016] overlayfs: missing 'lowerdir' [ 239.066213][T14016] overlayfs: missing 'lowerdir' [ 239.069533][T14016] overlayfs: missing 'lowerdir' [ 239.075070][T14016] overlayfs: missing 'lowerdir' [ 239.079227][T14016] overlayfs: missing 'lowerdir' [ 239.086905][T14016] overlayfs: missing 'lowerdir' [ 239.090839][T14016] overlayfs: missing 'lowerdir' [ 239.094301][T14016] overlayfs: missing 'lowerdir' [ 239.097360][T14016] overlayfs: missing 'lowerdir' [ 239.100663][T14016] overlayfs: missing 'lowerdir' [ 239.105620][T14016] overlayfs: missing 'lowerdir' [ 239.111213][T14016] overlayfs: missing 'lowerdir' [ 239.115116][T14016] overlayfs: missing 'lowerdir' [ 239.117603][T14016] overlayfs: missing 'lowerdir' [ 239.120463][T14016] overlayfs: missing 'lowerdir' [ 239.129680][T14016] overlayfs: missing 'lowerdir' [ 239.142642][T14016] overlayfs: missing 'lowerdir' [ 239.146410][T14016] overlayfs: missing 'lowerdir' [ 239.151315][T14016] overlayfs: missing 'lowerdir' [ 239.154952][T14016] overlayfs: missing 'lowerdir' [ 239.157740][T14016] overlayfs: missing 'lowerdir' [ 239.160163][T14016] overlayfs: missing 'lowerdir' [ 239.163255][T14016] overlayfs: missing 'lowerdir' [ 239.165507][T14016] overlayfs: missing 'lowerdir' [ 239.167652][T14016] overlayfs: missing 'lowerdir' [ 239.169841][T14016] overlayfs: missing 'lowerdir' [ 239.172343][T14016] overlayfs: missing 'lowerdir' [ 239.177214][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 239.186603][T14016] overlayfs: missing 'lowerdir' [ 239.187516][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 239.193147][T14016] overlayfs: missing 'lowerdir' [ 239.197565][T14016] overlayfs: missing 'lowerdir' [ 239.201187][T14016] overlayfs: missing 'lowerdir' [ 239.207687][T14016] overlayfs: missing 'lowerdir' [ 239.212782][T14016] overlayfs: missing 'lowerdir' [ 239.217183][T14016] overlayfs: missing 'lowerdir' [ 239.220051][T14016] overlayfs: missing 'lowerdir' [ 239.414803][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2300'. [ 239.503921][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2301'. [ 239.508828][ T40] audit: type=1400 audit(1772331768.231:792): avc: denied { write } for pid=14064 comm="syz.6.2301" name="file0" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 239.512735][ T63] Bluetooth: hci4: command tx timeout [ 239.624235][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2304'. [ 239.697428][T14083] netlink: 'syz.6.2306': attribute type 1 has an invalid length. [ 239.712226][T14083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.734523][T14083] bond3: (slave bridge3): making interface the new active one [ 239.737666][T14083] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 239.871369][T13988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.968234][T14096] sctp: [Deprecated]: syz.6.2312 (pid 14096) Use of int in maxseg socket option. [ 239.968234][T14096] Use struct sctp_assoc_value instead [ 240.017372][ T40] audit: type=1400 audit(1772331768.741:793): avc: denied { lock } for pid=14097 comm="syz.6.2313" path="socket:[56836]" dev="sockfs" ino=56836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.161853][ T40] audit: type=1400 audit(1772331768.881:794): avc: denied { map } for pid=14108 comm="syz.5.2316" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 240.274890][T14116] program syz.3.2317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.312134][T14116] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 240.481856][T14134] IPv6: Can't replace route, no match found [ 240.493106][T14137] Cannot find set identified by id 65534 to match [ 240.543398][T14134] macvlan0: entered allmulticast mode [ 240.552791][T14134] veth1_vlan: entered allmulticast mode [ 240.560762][T14134] pim6reg: entered allmulticast mode [ 240.573560][T14134] veth1_vlan: left allmulticast mode [ 240.580681][T14134] macvlan0 (unregistering): left allmulticast mode [ 240.612725][T14145] loop9: detected capacity change from 0 to 7 [ 240.618353][T10387] Dev loop9: unable to read RDB block 7 [ 240.620539][T10387] loop9: AHDI p2 p3 [ 240.621955][T10387] loop9: partition table partially beyond EOD, truncated [ 240.634375][T10387] loop9: p2 size 1701016946 extends beyond EOD, truncated [ 240.655986][T14145] Dev loop9: unable to read RDB block 7 [ 240.658298][T14145] loop9: AHDI p2 p3 [ 240.659910][T14145] loop9: partition table partially beyond EOD, truncated [ 240.662924][T14145] loop9: p2 size 1701016946 extends beyond EOD, truncated [ 240.685916][T14147] kvm: Disabled LAPIC found during irq injection [ 240.694466][T10387] udevd[10387]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 240.712305][T10387] udevd[10387]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 240.740869][ T40] audit: type=1326 audit(1772331769.461:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14152 comm="syz.5.2328" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f832559c799 code=0x0 [ 240.771635][T14147] netlink: 'syz.6.2326': attribute type 4 has an invalid length. [ 240.961486][T14172] o2cb: This node has not been configured. [ 240.965653][T14172] o2cb: Cluster check failed. Fix errors before retrying. [ 240.968546][T14172] (syz.5.2331,14172,2):user_dlm_register:674 ERROR: status = -22 [ 240.971376][T14172] (syz.5.2331,14172,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 241.017409][T14174] sctp: [Deprecated]: syz.5.2332 (pid 14174) Use of int in maxseg socket option. [ 241.017409][T14174] Use struct sctp_assoc_value instead [ 241.153676][T14181] netlink: 'syz.5.2335': attribute type 1 has an invalid length. [ 241.252726][T13988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.327356][T11080] ------------[ cut here ]------------ [ 241.329622][T11080] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 241.335130][T11080] WARNING: net/mac80211/tx.c:753 at ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20, CPU#0: kworker/u32:48/11080 [ 241.339145][T11080] Modules linked in: [ 241.341151][T11080] CPU: 0 UID: 0 PID: 11080 Comm: kworker/u32:48 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.346302][T11080] Tainted: [L]=SOFTLOCKUP [ 241.347956][T11080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.351436][T11080] Workqueue: events_unbound cfg80211_wiphy_work [ 241.353739][T11080] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20 [ 241.355960][T11080] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 e9 05 00 00 48 8d 3d 15 ee dc 05 48 8b 75 68 89 d9 4c 89 e2 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 2a f8 ff ff e8 c1 4c fb f6 e8 dc [ 241.362599][T11080] RSP: 0018:ffffc9000399f5d8 EFLAGS: 00010282 [ 241.364734][T11080] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 241.367352][T11080] RDX: ffff8880614093c4 RSI: ffff888044a59808 RDI: ffffffff90ea3ff0 [ 241.370048][T11080] RBP: ffffc9000399f850 R08: 0000000000000005 R09: 0000000000000000 [ 241.372850][T11080] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880614093c4 [ 241.375720][T11080] R13: ffffc9000399f8c0 R14: 0000000000000000 R15: 0000000000000001 [ 241.378248][ T40] audit: type=1400 audit(1772331770.101:796): avc: denied { write } for pid=5912 comm="syz-executor" path="pipe:[7241]" dev="pipefs" ino=7241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 241.379254][T11080] FS: 0000000000000000(0000) GS:ffff8880d6347000(0000) knlGS:0000000000000000 [ 241.392129][T11080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.394959][T11080] CR2: 0000200000003000 CR3: 0000000056466000 CR4: 0000000000352ef0 [ 241.398308][T11080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.402070][T11080] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 241.405928][T11080] Call Trace: [ 241.407386][T11080] [ 241.408699][T11080] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 241.411265][T11080] ? kmalloc_reserve+0x148/0x350 [ 241.413470][T11080] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 241.416033][T11080] ? sta_info_hash_lookup+0x259/0x660 [ 241.418320][T11080] invoke_tx_handlers_late+0xfb4/0x2750 [ 241.420833][T11080] ? ieee80211_queue_skb+0x3ae/0x1fc0 [ 241.423319][T11080] ? __fq_adjust_removal+0x260/0x390 [ 241.425625][T11080] ? invoke_tx_handlers_early+0x65d/0x27d0 [ 241.428215][T11080] ieee80211_tx+0x304/0x460 [ 241.430351][T11080] ? __pfx_ieee80211_tx+0x10/0x10 [ 241.432849][T11080] ? ieee80211_skb_resize+0x119/0x670 [ 241.435272][T11080] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 241.437699][T11080] ieee80211_xmit+0x30f/0x3e0 [ 241.439798][T11080] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 241.442351][T11080] ieee80211_scan_state_send_probe+0x33d/0xac0 [ 241.445101][T11080] ieee80211_scan_work+0x750/0x1ff0 [ 241.447346][T11080] ? preempt_schedule_thunk+0x16/0x30 [ 241.449702][T11080] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 241.452157][T11080] ? preempt_schedule_thunk+0x16/0x30 [ 241.454690][T11080] ? rcu_is_watching+0x12/0xc0 [ 241.456822][T11080] cfg80211_wiphy_work+0x446/0x5c0 [ 241.459114][T11080] process_one_work+0x9d7/0x1920 [ 241.463156][T11080] ? __pfx_process_one_work+0x10/0x10 [ 241.465492][T11080] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 241.467903][T11080] worker_thread+0x5da/0xe40 [ 241.469855][T11080] ? kthread+0x13a/0x450 [ 241.472078][T11080] ? __pfx_worker_thread+0x10/0x10 [ 241.474537][T11080] kthread+0x370/0x450 [ 241.476363][T11080] ? __pfx_kthread+0x10/0x10 [ 241.478398][T11080] ret_from_fork+0x754/0xd80 [ 241.480404][T11080] ? __pfx_ret_from_fork+0x10/0x10 [ 241.482640][T11080] ? __switch_to+0x7b4/0x1120 [ 241.484768][T11080] ? __pfx_kthread+0x10/0x10 [ 241.487134][T11080] ret_from_fork_asm+0x1a/0x30 [ 241.489411][T11080] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 241.490852][T11080] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.494480][T11080] CPU: 0 UID: 0 PID: 11080 Comm: kworker/u32:48 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.499195][T11080] Tainted: [L]=SOFTLOCKUP [ 241.501052][T11080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.505471][T11080] Workqueue: events_unbound cfg80211_wiphy_work [ 241.508090][T11080] Call Trace: [ 241.509418][T11080] [ 241.510678][T11080] dump_stack_lvl+0x100/0x190 [ 241.512845][T11080] vpanic+0x552/0x970 [ 241.514600][T11080] ? __pfx_vpanic+0x10/0x10 [ 241.516580][T11080] panic+0xd1/0xe0 [ 241.518199][T11080] ? __pfx_panic+0x10/0x10 [ 241.520190][T11080] ? check_panic_on_warn+0x1f/0x90 [ 241.522388][T11080] check_panic_on_warn.cold+0x19/0x34 [ 241.524640][T11080] ? ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20 [ 241.527188][T11080] __warn.cold+0x191/0x348 [ 241.529214][T11080] __report_bug+0x296/0x3d0 [ 241.531199][T11080] ? ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20 [ 241.533879][T11080] ? __pfx___report_bug+0x10/0x10 [ 241.536121][T11080] ? kasan_save_stack+0x3f/0x50 [ 241.538489][T11080] ? kasan_save_stack+0x30/0x50 [ 241.540827][T11080] ? ieee80211_scan_work+0x750/0x1ff0 [ 241.543183][T11080] ? cfg80211_wiphy_work+0x446/0x5c0 [ 241.545455][T11080] ? process_one_work+0x9d7/0x1920 [ 241.547656][T11080] ? worker_thread+0x5da/0xe40 [ 241.549733][T11080] ? kthread+0x370/0x450 [ 241.551581][T11080] ? ret_from_fork+0x754/0xd80 [ 241.553679][T11080] ? ret_from_fork_asm+0x1a/0x30 [ 241.555856][T11080] report_bug_entry+0xe1/0x290 [ 241.557962][T11080] ? ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20 [ 241.560462][T11080] handle_bug+0x1c9/0x2a0 [ 241.562329][T11080] exc_invalid_op+0x17/0x50 [ 241.564292][T11080] asm_exc_invalid_op+0x1a/0x20 [ 241.566366][T11080] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20 [ 241.569174][T11080] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 e9 05 00 00 48 8d 3d 15 ee dc 05 48 8b 75 68 89 d9 4c 89 e2 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 2a f8 ff ff e8 c1 4c fb f6 e8 dc [ 241.577236][T11080] RSP: 0018:ffffc9000399f5d8 EFLAGS: 00010282 [ 241.579813][T11080] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 241.583079][T11080] RDX: ffff8880614093c4 RSI: ffff888044a59808 RDI: ffffffff90ea3ff0 [ 241.586757][T11080] RBP: ffffc9000399f850 R08: 0000000000000005 R09: 0000000000000000 [ 241.590278][T11080] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880614093c4 [ 241.593787][T11080] R13: ffffc9000399f8c0 R14: 0000000000000000 R15: 0000000000000001 [ 241.597226][T11080] ? ieee80211_tx_h_rate_ctrl+0x1297/0x1a20 [ 241.599798][T11080] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 241.602422][T11080] ? kmalloc_reserve+0x148/0x350 [ 241.604576][T11080] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 241.607144][T11080] ? sta_info_hash_lookup+0x259/0x660 [ 241.609444][T11080] invoke_tx_handlers_late+0xfb4/0x2750 [ 241.611814][T11080] ? ieee80211_queue_skb+0x3ae/0x1fc0 [ 241.614076][T11080] ? __fq_adjust_removal+0x260/0x390 [ 241.616287][T11080] ? invoke_tx_handlers_early+0x65d/0x27d0 [ 241.618775][T11080] ieee80211_tx+0x304/0x460 [ 241.620812][T11080] ? __pfx_ieee80211_tx+0x10/0x10 [ 241.623090][T11080] ? ieee80211_skb_resize+0x119/0x670 [ 241.625432][T11080] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 241.627730][T11080] ieee80211_xmit+0x30f/0x3e0 [ 241.629755][T11080] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 241.632294][T11080] ieee80211_scan_state_send_probe+0x33d/0xac0 [ 241.634913][T11080] ieee80211_scan_work+0x750/0x1ff0 [ 241.637237][T11080] ? preempt_schedule_thunk+0x16/0x30 [ 241.639578][T11080] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 241.642000][T11080] ? preempt_schedule_thunk+0x16/0x30 [ 241.644322][T11080] ? rcu_is_watching+0x12/0xc0 [ 241.646372][T11080] cfg80211_wiphy_work+0x446/0x5c0 [ 241.648589][T11080] process_one_work+0x9d7/0x1920 [ 241.650730][T11080] ? __pfx_process_one_work+0x10/0x10 [ 241.653118][T11080] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 241.655612][T11080] worker_thread+0x5da/0xe40 [ 241.657626][T11080] ? kthread+0x13a/0x450 [ 241.659504][T11080] ? __pfx_worker_thread+0x10/0x10 [ 241.661747][T11080] kthread+0x370/0x450 [ 241.663510][T11080] ? __pfx_kthread+0x10/0x10 [ 241.665505][T11080] ret_from_fork+0x754/0xd80 [ 241.667493][T11080] ? __pfx_ret_from_fork+0x10/0x10 [ 241.669707][T11080] ? __switch_to+0x7b4/0x1120 [ 241.671787][T11080] ? __pfx_kthread+0x10/0x10 [ 241.673853][T11080] ret_from_fork_asm+0x1a/0x30 [ 241.676024][T11080] [ 241.678225][T11080] Kernel Offset: disabled [ 241.680067][T11080] Rebooting in 86400 seconds..