last executing test programs: 2.043602447s ago: executing program 0 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000121000010700000000000000000a000000060001003500000008000a00", @ANYRES32=r0], 0x24}}, 0x0) 2.043225505s ago: executing program 0 (id=34): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="47f0edc8e407668be13618363f03edb6f995781c776a79957bd2f53057fe401c62d787c291faec17c783fd8e593b9f2715367d", 0x33}, {&(0x7f0000000240)="34b2b3189e0838c2397df5a0ba1928d590bf8c27ecc062fdfc2e876e9f9b573dbe20e1930e15ad404c08ec171187945c25ec97d38e49accd03111bb999f7c45f1f038ecb1d1dca04bc37209bcf6560cea12a98b70616e31c4203d0c94a4535a9a21a03e9925c86f89159fcfe68a2b79059241c3e59931b5bac4b56190788be3039af3b072111e0653df2528b8dae6b93f2c029a2a638f30026f3c796b4bbdf8d542e55db68e5240c84191d93556ac719bfd6c25a1d0efddc19ad5cb2fd433eb2959c39875f85e33ff28e2a46c41108d5c9b6b4162f54f9066f866c08d09a3005e5b47e754f10be64f2b70fb8c943a673f0930b", 0xf3}], 0x2) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af3653c000cc00800040081000200300003c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b1", 0x47}, {&(0x7f0000000440)="a80e7d08f2ada5f77d70b61a5f4e41000000000000", 0x15}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4054) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x411}, {r4, 0x200}], 0x2, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) write(r0, 0x0, 0x0) 1.930953337s ago: executing program 0 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@multicast2, 0x4e24, 0x3, 0x4e22, 0xfc02, 0x2, 0x80, 0x0, 0x33, 0x0, 0xee01}, {0x401, 0x0, 0x81, 0x40002, 0x9, 0xfffffffffffffffd, 0x83a, 0x4}, {0x8, 0x6, 0x5, 0x7}, 0xfd, 0x6e6bb2, 0x2, 0x1, 0x2}, {{@in6=@local, 0x4d6, 0x33}, 0x0, @in=@local, 0x2000000, 0x5, 0x3, 0x9, 0x9, 0x478, 0x1}}, 0xe8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x80) (async) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x2141, 0x1d1) write(r5, &(0x7f0000000480)='1', 0x1) (async) write(r5, &(0x7f00000004c0)='0', 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x70bd2e, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r7, 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008840) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, 0xfffffffffffffffd, 0x0) 1.834049731s ago: executing program 0 (id=37): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b40050000000000079103000000000007b0a00fb000000009500740000000000"], &(0x7f0000000900)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 1.766108665s ago: executing program 0 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006f626a72656600001400029d080003400000000908000540000000020900020073797a320000"], 0x7c}, 0x1, 0x1000000, 0x0, 0x4048c10}, 0x48010) 1.691774883s ago: executing program 0 (id=41): r0 = openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) syz_ublk_setup_io_uring(0x7760, &(0x7f0000000000)={0x0, 0x9a31, 0x12, 0x0, 0xbd}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) r1 = syz_ublk_setup_io_uring(0x7760, &(0x7f0000000000)={0x0, 0x9a31, 0x12, 0x0, 0xbd}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_class_of_dev={{0x7}, {0x0, "e37578"}}}}, 0xa) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_class_of_dev={{0x7}, {0x0, "e37578"}}}}, 0xa) write$nsim_del_device(r0, &(0x7f00000016c0)={0x0}, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80401, 0x4) io_uring_enter(r1, 0x3800, 0xf639, 0x40, &(0x7f0000000140)={[0xf76]}, 0x8) mkdirat(r2, &(0x7f0000000340)='./file0\x00', 0xaf5b48bc459a049e) 773.670726ms ago: executing program 2 (id=58): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x4040, 0x42) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) 703.203207ms ago: executing program 2 (id=59): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00fb000000009500740000000000"], &(0x7f0000000900)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (fail_nth: 37) 702.650275ms ago: executing program 2 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) epoll_create1(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) r3 = fsopen(&(0x7f0000000540)='debugfs\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2c, &(0x7f0000000400)=0x634, 0x4) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000480)=':', 0xfc94}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd2c, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004855}, 0x4004080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x240400c0) r7 = fsmount(r3, 0x0, 0x3) fchdir(r7) r8 = fanotify_init(0x1a, 0x1) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x128) signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0x1]}, 0x8, 0x80000) fanotify_mark(r8, 0x541, 0x1023, r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 595.827153ms ago: executing program 2 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000070000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 523.931573ms ago: executing program 2 (id=64): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x5, 0x4e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000e40], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}, 0x560) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/irq_vectors/vector_setup/id\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040804) read$FUSE(r1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x28) r3 = socket(0x10, 0x3, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_open_dev$I2C(&(0x7f0000000bc0), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000c00)={&(0x7f0000000c40)=[{0x9e, 0x1000, 0x0, 0x0}], 0x1}) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x1}, 0x2, 0x7, 0x0, 0x0, "b90316a140a9f4f2"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64044050}, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x17) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101c42, 0x20) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xfffffee2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ptrace(0x10, 0x1) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, &(0x7f0000000880)={0x28, 0x7a8bc5a61b7bd99f, 0x0, r6, &(0x7f0000000800)="3881d7c7b18f5505afddb613d4b98b6afd2e80da473060b813a866b394584e82cb99ff1d6eb8ee75427daca2ec0a02bfd17fcc99fc7fc9e93b741ce234415cc30f8ae722af199205639d484269c03c8b0947c64d851254502f2016242d4e7d30c44596d31dc32ee0c3a50ef42e66490c57a2418962746f6e76718edc5f3a", 0x0, 0x8, 0x1, 0x1, {0x0, 0x0, r2, 0x4}}, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000ac0)=0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x18, 0x3a, 0x229, 0x8000, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x4, r8, 0x4}, 0x38) 453.612653ms ago: executing program 2 (id=66): r0 = fsopen(&(0x7f0000000380)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\xf9\xd1\x84\x16\xf9=\xc6\xb5L\xc6\xf9\xbePPX\xba\xaf\xceF\xc2\r\xaa\xad\xe5\x00\xfdW\xb7O\x03/\v\xe4\x97wB\x05.X\xd6\xd6F\xb7\\\xf0\xc5K\x8d1\xf4\xcb**V\x14\xf8\xd1!\xbb\xd6y\x04\xd4}\xa2,\xdb}\xda\xf6.z\xc7I\xba;\xe9\x041\r\xc8\xd6\xc6\xfb\xe8\x9e\x9co\x06\x97B\x88\xdd\xd4\xd3\xf6\x92I\x94\xbd\x90U\xb6\x01Tj\xf1\x13\xb7\xc7\xdd|\xc48\x9b\xd9\xf2\xa9\xaf!\x11hOB\x1d\xf7\x0f\x91\x84\xdaj+&Y\x16N\xe7\vD\x13\xd5\xbcB\x16\x8e\xc0\xf0', &(0x7f0000000400)='c:::\x00', 0x0) fsopen(&(0x7f0000000440)='ceph\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000440)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000480)='source', &(0x7f00000004c0)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x4, r1, 'id0\x00'}) write$nci(r2, &(0x7f0000000080)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x0, {0x0, 0x2}}, 0x5) 393.731099ms ago: executing program 3 (id=68): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006f626a72656600001400029d080003400000000908000540000000020900020073797a320000"], 0x7c}, 0x1, 0x100000000000000, 0x0, 0x4048c10}, 0x48010) 392.978525ms ago: executing program 3 (id=70): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="560002002a000000000000000001010001000000000000000000000000000000000000000000000000ffffffffffffff", 0x30) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r2, &(0x7f0000000740)=""/190, 0xbe) 324.05049ms ago: executing program 3 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4f03]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d8}, 0x4000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x11e, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x0) 262.92368ms ago: executing program 3 (id=73): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001900), 0xffffffffffffff97, 0x10, &(0x7f0000001940), 0xfffffffffffffd27}, 0x48) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x64, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0c8}, 0x4008001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/fs/cgroup', 0x0, 0x0) getdents(r3, &(0x7f0000000840)=""/240, 0xf0) write$nsim_bool(r3, &(0x7f0000000940)='1', 0x1) getpgid(0xffffffffffffffff) getdents64(r3, 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0xd, 0x80000, r2}) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = syz_open_dev$dri(&(0x7f0000000580), 0x1ff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000000900000000060015000a0000000c001680080002007f"], 0x30}}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000600)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000640)={&(0x7f0000000700)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000740)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000780)={0x0, 0x0, r9, r10, 0x1, 0x2, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x0, 0x412f, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) getpgid(0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) ioprio_get$pid(0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 262.492925ms ago: executing program 1 (id=74): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf251100000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0xa38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x20, 0x88a2, 'veth0_to_bridge\x00', 'sit0\x00', 'bridge_slave_0\x00', 'veth0_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @random="df0921f6558b", [0xff, 0xff, 0xff, 0xff], 0x0, 0x8b8, 0x8b8, 0x908, [@among={{'among\x00', 0x0, 0x418}, {{@offset=0xc, @zero, 0x2, {[0x8, 0x7, 0x200, 0x7, 0x2c0, 0x5564, 0x6, 0x7f, 0x6, 0x0, 0x6ff8, 0x8, 0x1ff, 0x4e, 0xb, 0x3, 0x6, 0x10000, 0x9, 0xfffffff8, 0x9, 0xa, 0x9, 0x19e, 0x7, 0x3, 0x2, 0xffff1255, 0x4, 0xfffffff7, 0x7fff, 0x7, 0x6, 0x83, 0x7, 0x6, 0x5, 0x7, 0x8, 0xb, 0x7, 0x54d, 0x1, 0xf23, 0x1, 0x8, 0x6, 0x40, 0x9, 0x0, 0x6, 0x200, 0x0, 0x5, 0x30000, 0x6, 0x1364, 0x1, 0x8, 0xf871, 0x5, 0x7, 0x5ee, 0x7, 0x6, 0xe9, 0x5, 0x5, 0x101, 0xfff, 0x8000, 0x7e20, 0x2, 0x5d6, 0x9, 0xf, 0x6, 0x8, 0x1, 0x622a, 0x7486, 0x6, 0xffffffff, 0x77cc2895, 0x7fffffff, 0x7, 0x3, 0x4, 0x6, 0xe0000000, 0x9, 0x8, 0x8, 0x8, 0x3, 0x8, 0x2, 0x64c0c08d, 0xaaf, 0x5, 0xba87, 0x81, 0x1df, 0x3, 0xa22, 0x9b, 0x9, 0x49ff, 0x9, 0x4, 0xc5, 0x5, 0x2, 0x0, 0x3, 0x54c57863, 0x8, 0xf5, 0xdcca, 0xb683, 0x9, 0x5, 0xff, 0x3, 0x0, 0x2, 0x6, 0x5, 0x7, 0x7, 0x3, 0x5, 0xc000000, 0x5, 0xc4, 0x2, 0x3, 0x7, 0xb, 0x3e8, 0x5, 0x8, 0xee, 0x1000, 0xea, 0x6aa, 0x10, 0x6, 0x3, 0x8, 0x6, 0x5, 0x10001, 0x1, 0x9, 0x1, 0x0, 0x3e, 0xba920, 0x2, 0x5b4, 0x7fff, 0x2118, 0x5, 0x1151, 0x4, 0x1, 0x2, 0x400, 0xb9, 0xff, 0x2, 0x9, 0x7, 0xfffffffc, 0x40, 0x1, 0x5, 0x2, 0x38a, 0x3, 0xa, 0x4, 0x0, 0x17d, 0x39c6, 0x8, 0xff, 0x7, 0x3, 0x40, 0x3, 0x6, 0x4, 0x6, 0x6, 0x200, 0x2000, 0x8, 0x7, 0x2, 0x4c, 0xf7a, 0x0, 0x1, 0x80000001, 0x6, 0x2, 0xb56, 0xff, 0x6, 0x4, 0x8001, 0x10001, 0x3, 0x0, 0x7, 0xffff, 0x7, 0x2, 0x800, 0x4, 0xd, 0x7fffffff, 0x2, 0x5f, 0xffffffff, 0x10, 0x0, 0xb, 0x4, 0x4, 0x1, 0x3464, 0x2, 0x0, 0x1, 0x0, 0x401, 0x5, 0x2c9, 0xfffffffc, 0xe, 0x43, 0x1540, 0x4, 0x80, 0x6, 0x4, 0x3ff, 0x464, 0x6a, 0x6, 0x9, 0x2, 0x9, 0x8000]}, {[0x5, 0x4, 0x0, 0x7ff, 0x4, 0x9, 0x55dca6e2, 0x5a, 0xc, 0x51, 0xb, 0x2, 0x9, 0x1, 0x7, 0xffffffff, 0x7, 0x7, 0x4, 0x6348, 0xffff, 0x7, 0x4, 0x1bb1, 0x4, 0x7, 0x2, 0x9, 0x2, 0x5, 0x10000, 0x7f, 0x9, 0xdd9, 0xffffffff, 0x1, 0x1e6, 0x8, 0x4f1, 0x4, 0xfffffff7, 0x9, 0x4, 0x8c, 0x5, 0x0, 0x8, 0x10001, 0x2, 0x76, 0x6, 0x40, 0x1000, 0x1, 0x9, 0x6, 0x7, 0x3, 0x7, 0x2, 0xfff, 0x8, 0x0, 0x1, 0x9, 0x800, 0x8b41, 0x8, 0xa50a, 0x3ff, 0xffffff52, 0x7, 0x0, 0x4, 0x9, 0x3e000, 0x40, 0x45, 0x0, 0x9, 0x4, 0x9, 0x2, 0x5, 0xaa, 0x7fffffff, 0x10001, 0x94, 0x9, 0x4, 0x2, 0x80, 0xc, 0x5, 0x3, 0x2d85, 0x4, 0x7, 0x7, 0x7, 0xa, 0x1, 0x9, 0xd98, 0xc, 0x4c, 0x3, 0x9, 0x6, 0xfff, 0x1000, 0x0, 0xfff, 0x4, 0x1, 0x80, 0x7fffffff, 0x1ff, 0x401, 0x3, 0x1a, 0x10000, 0x2, 0x5, 0xfffffff8, 0x1, 0xda0, 0x2, 0xc33, 0x4, 0x4, 0x50000, 0x9, 0x2, 0x0, 0x6, 0x4, 0x9, 0x0, 0x80000001, 0x4707, 0x2, 0x6, 0x8, 0x4, 0x8, 0x0, 0x5, 0xe25, 0x9, 0x6, 0xfb, 0x3ff, 0x9, 0x5, 0x1, 0xe3a, 0x49f, 0xc, 0x401, 0x773c0cea, 0xffffffff, 0x4, 0x9, 0x82, 0x9, 0x8, 0x401, 0x2, 0x7, 0x9a, 0x7, 0x0, 0x80000001, 0x3, 0x1, 0xa663, 0x2, 0xd3f, 0x7, 0x1, 0xa, 0x42b3, 0x0, 0x7, 0xc33, 0x1000, 0x5, 0x0, 0x8, 0x6a, 0x81, 0x2, 0x8d3, 0x1000, 0x9, 0xfffffe00, 0x5, 0x3, 0x6f62, 0xc, 0x0, 0x6, 0x3, 0x0, 0x5, 0x80200000, 0x5, 0x7, 0x0, 0xffffff7f, 0xa6f, 0xc13, 0x0, 0x91, 0x4, 0x7, 0x10001, 0x7, 0x739, 0x7, 0x3, 0x7, 0xa4d0, 0x3, 0x2, 0x4cc5, 0x3, 0x1, 0x0, 0x7, 0x8, 0x7, 0xf, 0xf85, 0x7, 0x3, 0x40000, 0x9, 0x8, 0xa, 0x4, 0x9, 0x4, 0x4, 0x3ff, 0x3, 0x4, 0xbd3, 0x6, 0x6a98, 0x9, 0x2, 0xd35, 0x299, 0x401, 0x1]}}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xf46, 'syz1\x00', {0x7}}}}}, {0x11, 0x20, 0xcdcf60ba08825cd4, 'veth0_to_hsr\x00', 'nicvf0\x00', 'dummy0\x00', 'macsec0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0xab0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf251100000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0xa38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x20, 0x88a2, 'veth0_to_bridge\x00', 'sit0\x00', 'bridge_slave_0\x00', 'veth0_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @random="df0921f6558b", [0xff, 0xff, 0xff, 0xff], 0x0, 0x8b8, 0x8b8, 0x908, [@among={{'among\x00', 0x0, 0x418}, {{@offset=0xc, @zero, 0x2, {[0x8, 0x7, 0x200, 0x7, 0x2c0, 0x5564, 0x6, 0x7f, 0x6, 0x0, 0x6ff8, 0x8, 0x1ff, 0x4e, 0xb, 0x3, 0x6, 0x10000, 0x9, 0xfffffff8, 0x9, 0xa, 0x9, 0x19e, 0x7, 0x3, 0x2, 0xffff1255, 0x4, 0xfffffff7, 0x7fff, 0x7, 0x6, 0x83, 0x7, 0x6, 0x5, 0x7, 0x8, 0xb, 0x7, 0x54d, 0x1, 0xf23, 0x1, 0x8, 0x6, 0x40, 0x9, 0x0, 0x6, 0x200, 0x0, 0x5, 0x30000, 0x6, 0x1364, 0x1, 0x8, 0xf871, 0x5, 0x7, 0x5ee, 0x7, 0x6, 0xe9, 0x5, 0x5, 0x101, 0xfff, 0x8000, 0x7e20, 0x2, 0x5d6, 0x9, 0xf, 0x6, 0x8, 0x1, 0x622a, 0x7486, 0x6, 0xffffffff, 0x77cc2895, 0x7fffffff, 0x7, 0x3, 0x4, 0x6, 0xe0000000, 0x9, 0x8, 0x8, 0x8, 0x3, 0x8, 0x2, 0x64c0c08d, 0xaaf, 0x5, 0xba87, 0x81, 0x1df, 0x3, 0xa22, 0x9b, 0x9, 0x49ff, 0x9, 0x4, 0xc5, 0x5, 0x2, 0x0, 0x3, 0x54c57863, 0x8, 0xf5, 0xdcca, 0xb683, 0x9, 0x5, 0xff, 0x3, 0x0, 0x2, 0x6, 0x5, 0x7, 0x7, 0x3, 0x5, 0xc000000, 0x5, 0xc4, 0x2, 0x3, 0x7, 0xb, 0x3e8, 0x5, 0x8, 0xee, 0x1000, 0xea, 0x6aa, 0x10, 0x6, 0x3, 0x8, 0x6, 0x5, 0x10001, 0x1, 0x9, 0x1, 0x0, 0x3e, 0xba920, 0x2, 0x5b4, 0x7fff, 0x2118, 0x5, 0x1151, 0x4, 0x1, 0x2, 0x400, 0xb9, 0xff, 0x2, 0x9, 0x7, 0xfffffffc, 0x40, 0x1, 0x5, 0x2, 0x38a, 0x3, 0xa, 0x4, 0x0, 0x17d, 0x39c6, 0x8, 0xff, 0x7, 0x3, 0x40, 0x3, 0x6, 0x4, 0x6, 0x6, 0x200, 0x2000, 0x8, 0x7, 0x2, 0x4c, 0xf7a, 0x0, 0x1, 0x80000001, 0x6, 0x2, 0xb56, 0xff, 0x6, 0x4, 0x8001, 0x10001, 0x3, 0x0, 0x7, 0xffff, 0x7, 0x2, 0x800, 0x4, 0xd, 0x7fffffff, 0x2, 0x5f, 0xffffffff, 0x10, 0x0, 0xb, 0x4, 0x4, 0x1, 0x3464, 0x2, 0x0, 0x1, 0x0, 0x401, 0x5, 0x2c9, 0xfffffffc, 0xe, 0x43, 0x1540, 0x4, 0x80, 0x6, 0x4, 0x3ff, 0x464, 0x6a, 0x6, 0x9, 0x2, 0x9, 0x8000]}, {[0x5, 0x4, 0x0, 0x7ff, 0x4, 0x9, 0x55dca6e2, 0x5a, 0xc, 0x51, 0xb, 0x2, 0x9, 0x1, 0x7, 0xffffffff, 0x7, 0x7, 0x4, 0x6348, 0xffff, 0x7, 0x4, 0x1bb1, 0x4, 0x7, 0x2, 0x9, 0x2, 0x5, 0x10000, 0x7f, 0x9, 0xdd9, 0xffffffff, 0x1, 0x1e6, 0x8, 0x4f1, 0x4, 0xfffffff7, 0x9, 0x4, 0x8c, 0x5, 0x0, 0x8, 0x10001, 0x2, 0x76, 0x6, 0x40, 0x1000, 0x1, 0x9, 0x6, 0x7, 0x3, 0x7, 0x2, 0xfff, 0x8, 0x0, 0x1, 0x9, 0x800, 0x8b41, 0x8, 0xa50a, 0x3ff, 0xffffff52, 0x7, 0x0, 0x4, 0x9, 0x3e000, 0x40, 0x45, 0x0, 0x9, 0x4, 0x9, 0x2, 0x5, 0xaa, 0x7fffffff, 0x10001, 0x94, 0x9, 0x4, 0x2, 0x80, 0xc, 0x5, 0x3, 0x2d85, 0x4, 0x7, 0x7, 0x7, 0xa, 0x1, 0x9, 0xd98, 0xc, 0x4c, 0x3, 0x9, 0x6, 0xfff, 0x1000, 0x0, 0xfff, 0x4, 0x1, 0x80, 0x7fffffff, 0x1ff, 0x401, 0x3, 0x1a, 0x10000, 0x2, 0x5, 0xfffffff8, 0x1, 0xda0, 0x2, 0xc33, 0x4, 0x4, 0x50000, 0x9, 0x2, 0x0, 0x6, 0x4, 0x9, 0x0, 0x80000001, 0x4707, 0x2, 0x6, 0x8, 0x4, 0x8, 0x0, 0x5, 0xe25, 0x9, 0x6, 0xfb, 0x3ff, 0x9, 0x5, 0x1, 0xe3a, 0x49f, 0xc, 0x401, 0x773c0cea, 0xffffffff, 0x4, 0x9, 0x82, 0x9, 0x8, 0x401, 0x2, 0x7, 0x9a, 0x7, 0x0, 0x80000001, 0x3, 0x1, 0xa663, 0x2, 0xd3f, 0x7, 0x1, 0xa, 0x42b3, 0x0, 0x7, 0xc33, 0x1000, 0x5, 0x0, 0x8, 0x6a, 0x81, 0x2, 0x8d3, 0x1000, 0x9, 0xfffffe00, 0x5, 0x3, 0x6f62, 0xc, 0x0, 0x6, 0x3, 0x0, 0x5, 0x80200000, 0x5, 0x7, 0x0, 0xffffff7f, 0xa6f, 0xc13, 0x0, 0x91, 0x4, 0x7, 0x10001, 0x7, 0x739, 0x7, 0x3, 0x7, 0xa4d0, 0x3, 0x2, 0x4cc5, 0x3, 0x1, 0x0, 0x7, 0x8, 0x7, 0xf, 0xf85, 0x7, 0x3, 0x40000, 0x9, 0x8, 0xa, 0x4, 0x9, 0x4, 0x4, 0x3ff, 0x3, 0x4, 0xbd3, 0x6, 0x6a98, 0x9, 0x2, 0xd35, 0x299, 0x401, 0x1]}}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xf46, 'syz1\x00', {0x7}}}}}, {0x11, 0x20, 0xcdcf60ba08825cd4, 'veth0_to_hsr\x00', 'nicvf0\x00', 'dummy0\x00', 'macsec0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0xab0) (async) 203.711726ms ago: executing program 1 (id=75): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b40000050000000079103000000000007b0a00fb000000009500740000000000"], &(0x7f0000000900)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 203.522845ms ago: executing program 1 (id=76): socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x434001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000300)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) syz_open_pts(r2, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x2002, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r4, 0x40045109, &(0x7f00000004c0)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(r1, &(0x7f0000000440)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000580)={[{@metacopy_on}, {@redirect_dir_nofollow}]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 154.074394ms ago: executing program 1 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0xfc, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x1, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x5, @rand_addr=0x64010100}}}}}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x91, 0x0, @empty}}}}}, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x20008802) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x438001, 0x10) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000300)=0x4091) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ed) 153.790272ms ago: executing program 3 (id=78): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000400000000003000000811904000800000095000000cb2497340711f0cb85c1fa12d0c57ea438b36af7be14d22dab98739deadb785f92e4392bd6a374569b301786e9733a8023cb9785905d5aa31287bf77b73ff60f"], &(0x7f0000000140)='GPL\x00', 0xfa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x93d, 0x0, 0x7ee69d08}]}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180)=0x2b, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x62, 0x0, &(0x7f0000000280)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x3, 0x9, 0xfffffffffffffffd, 0x77, 0x8, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) symlink(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) rmdir(&(0x7f00000005c0)='./file1\x00') chdir(&(0x7f0000000600)='./bus\x00') unlink(&(0x7f0000000640)='./file0\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.313282ms ago: executing program 1 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006f626a72656600001400029d080003400000000908000540000000020900020073797a320000"], 0x7c}, 0x1, 0x200000000000000, 0x0, 0x4048c10}, 0x48010) 2.600755ms ago: executing program 3 (id=80): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt(r0, 0x1, 0x179, &(0x7f0000000140)="670adcf572cc62e6c46b6c97007d880a99c34695ad32fc7263571fe00e822a07a73df700bcd9ba3c303e308d899fc3fef5a8b5e492b57df13344fd5654045ae4e3ed8b37a5a2b3b6fd8ae16d9c636dd357175f8634a5c4b03801ce832fe3dc1fa5a338d550da6629567895c09077aa85041877217d2295127a4bc977d44e0d5295fbed01792dbf31b3", 0x89) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x3c) writev(r3, &(0x7f0000000880)=[{&(0x7f0000000f00)}], 0x1) (async) writev(r3, &(0x7f0000000880)=[{&(0x7f0000000f00)}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f40)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000f80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x2}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001080)={'wlan0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyS0\x00', 0x2, 0x0) ioctl(r6, 0x542e, 0x0) (async) ioctl(r6, 0x542e, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000001300)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000001340)="080211000001080211000000080045", 0xf) (async) write(r7, &(0x7f0000001340)="080211000001080211000000080045", 0xf) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 1 (id=81): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000200)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001440), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x0, 0x0) pwrite64$ublk_ch(r4, &(0x7f0000000340)=@buf_1k="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", 0x1000, 0xd1b) ioctl(r4, 0xc138fd02, &(0x7f0000001340)="0400000000000000000000003801") r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30138' (ED25519) to the list of known hosts. [ 29.754959][ T42] audit: type=1400 audit(1793744750.009:116): avc: denied { name_bind } for pid=5697 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.058964][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 32.058983][ T42] audit: type=1400 audit(1793744752.309:119): avc: denied { write } for pid=5699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.116833][ T42] audit: type=1400 audit(1793744752.369:120): avc: denied { mounton } for pid=5698 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.116880][ T42] audit: type=1400 audit(1793744752.369:121): avc: denied { mount } for pid=5698 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.117283][ T5698] cgroup: Unknown subsys name 'net' [ 32.117857][ T42] audit: type=1400 audit(1793744752.369:122): avc: denied { write } for pid=5702 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.118469][ T42] audit: type=1400 audit(1793744752.369:123): avc: denied { unmount } for pid=5698 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.188916][ T42] audit: type=1400 audit(1793744752.439:124): avc: denied { write } for pid=5706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.230903][ T42] audit: type=1400 audit(1793744752.479:125): avc: denied { write } for pid=5709 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.246621][ T5698] cgroup: Unknown subsys name 'cpuset' [ 32.252796][ T5698] cgroup: Unknown subsys name 'rlimit' [ 32.390064][ T42] audit: type=1400 audit(1793744752.639:126): avc: denied { write } for pid=5712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.427997][ T42] audit: type=1400 audit(1793744752.679:127): avc: denied { write } for pid=5715 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.431434][ T42] audit: type=1400 audit(1793744752.679:128): avc: denied { setattr } for pid=5698 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.476669][ T5716] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.169532][ T5698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.809426][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.810910][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.811464][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.811580][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.812007][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.814478][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.814541][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.815062][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.815673][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.815694][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.816219][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.816811][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.816826][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.817160][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.817557][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.818480][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.818708][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.819955][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.819985][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.826846][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.012948][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.020274][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.024293][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.025437][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.028048][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.030252][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.137553][ T5780] infiniband rxe0: set active [ 37.138009][ T5137] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.138128][ T5780] infiniband rxe0: added rxe_eth0 [ 37.153912][ T5780] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 37.153935][ T5780] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 37.153958][ T5780] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 37.168499][ T5780] RDS/IB: rxe0: added [ 37.168618][ T5780] smc: adding ib device rxe0 with port count 1 [ 37.168653][ T5780] smc: ib device rxe0 port 1 has no pnetid [ 37.192810][ T5668] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.210124][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.307863][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.393401][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.393920][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.393987][ T5782] bridge_slave_0: entered allmulticast mode [ 37.394933][ T5782] bridge_slave_0: entered promiscuous mode [ 37.406911][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.406963][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.407084][ T5781] bridge_slave_0: entered allmulticast mode [ 37.407815][ T5781] bridge_slave_0: entered promiscuous mode [ 37.415237][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.415371][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.415467][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.415560][ T5782] bridge_slave_1: entered allmulticast mode [ 37.416817][ T5782] bridge_slave_1: entered promiscuous mode [ 37.418337][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.418411][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.418563][ T5781] bridge_slave_1: entered allmulticast mode [ 37.419410][ T5781] bridge_slave_1: entered promiscuous mode [ 37.464411][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.471456][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.478329][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.478431][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.478494][ T5791] bridge_slave_0: entered allmulticast mode [ 37.479245][ T5791] bridge_slave_0: entered promiscuous mode [ 37.480673][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.480713][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.480855][ T5791] bridge_slave_1: entered allmulticast mode [ 37.481534][ T5791] bridge_slave_1: entered promiscuous mode [ 37.494177][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.521235][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.529367][ T5782] team0: Port device team_slave_0 added [ 37.530928][ T5782] team0: Port device team_slave_1 added [ 37.532136][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.545827][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.553055][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.553070][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.553092][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.558862][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.558876][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.558898][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.561109][ T5781] team0: Port device team_slave_0 added [ 37.561153][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.580424][ T5781] team0: Port device team_slave_1 added [ 37.597649][ T5791] team0: Port device team_slave_0 added [ 37.599049][ T5791] team0: Port device team_slave_1 added [ 37.625833][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.625846][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.625861][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.626777][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.626786][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.626800][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.644857][ T5782] hsr_slave_0: entered promiscuous mode [ 37.645366][ T5782] hsr_slave_1: entered promiscuous mode [ 37.647929][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.647938][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.647952][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.648807][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.648815][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.648829][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.690517][ T5781] hsr_slave_0: entered promiscuous mode [ 37.690961][ T5781] hsr_slave_1: entered promiscuous mode [ 37.691248][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 37.691257][ T5781] Cannot create hsr debugfs directory [ 37.771532][ T5791] hsr_slave_0: entered promiscuous mode [ 37.771955][ T5791] hsr_slave_1: entered promiscuous mode [ 37.772246][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 37.772255][ T5791] Cannot create hsr debugfs directory [ 37.973044][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.976709][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.977227][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.980419][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.981489][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.986070][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.986605][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.990754][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.055627][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.055678][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.055906][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.055983][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.081067][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.081331][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.081432][ T5780] bridge_slave_0: entered allmulticast mode [ 38.082571][ T5780] bridge_slave_0: entered promiscuous mode [ 38.084863][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.084903][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.084956][ T5780] bridge_slave_1: entered allmulticast mode [ 38.085590][ T5780] bridge_slave_1: entered promiscuous mode [ 38.097442][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.104348][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.105599][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.108775][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.109943][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.114186][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.124316][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.125947][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.128479][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.133985][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.176202][ T5780] team0: Port device team_slave_0 added [ 38.190492][ T5780] team0: Port device team_slave_1 added [ 38.206302][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.206314][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.206328][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.207976][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.207984][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.207997][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.228780][ T5780] hsr_slave_0: entered promiscuous mode [ 38.229207][ T5780] hsr_slave_1: entered promiscuous mode [ 38.229485][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 38.229493][ T5780] Cannot create hsr debugfs directory [ 38.238802][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.238849][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.238952][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.239017][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.248228][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.250220][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.250644][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.253052][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.254264][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.258179][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.258582][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.261069][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.285026][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.285650][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.286032][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.286629][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.330855][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.401296][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.421585][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.421683][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.431418][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.431465][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.436621][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.440095][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.441072][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.444731][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.449494][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.451187][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.451653][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.453467][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.471233][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.504662][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.512233][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.512371][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.516746][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.525619][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.525664][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.546118][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.556254][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.556318][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.567783][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 38.567795][ T42] audit: type=1400 audit(1793744758.819:169): avc: denied { sys_module } for pid=5782 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.571219][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.571263][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.628443][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.657190][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.667947][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.667992][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.671509][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.671553][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.842775][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.856474][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.874803][ T5782] veth0_vlan: entered promiscuous mode [ 38.898495][ T5782] veth1_vlan: entered promiscuous mode [ 38.903056][ T5797] Bluetooth: hci2: command tx timeout [ 38.903207][ T5797] Bluetooth: hci1: command tx timeout [ 38.903273][ T5797] Bluetooth: hci0: command tx timeout [ 38.903328][ T5797] Bluetooth: hci3: command tx timeout [ 38.906720][ T5781] veth0_vlan: entered promiscuous mode [ 38.911213][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.919971][ T5781] veth1_vlan: entered promiscuous mode [ 38.947299][ T5782] veth0_macvtap: entered promiscuous mode [ 38.950813][ T5782] veth1_macvtap: entered promiscuous mode [ 38.974640][ T5791] veth0_vlan: entered promiscuous mode [ 38.977334][ T5781] veth0_macvtap: entered promiscuous mode [ 38.982129][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.988490][ T5781] veth1_macvtap: entered promiscuous mode [ 38.991981][ T5791] veth1_vlan: entered promiscuous mode [ 38.996976][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.012748][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.014992][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.033287][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.055800][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.056088][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.056123][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.056155][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.075205][ T5791] veth0_macvtap: entered promiscuous mode [ 39.078417][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.078430][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.085258][ T5791] veth1_macvtap: entered promiscuous mode [ 39.112482][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.116910][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.116955][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.124065][ T42] audit: type=1400 audit(1793744759.379:170): avc: denied { mount } for pid=5782 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.125454][ T42] audit: type=1400 audit(1793744759.379:171): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/syzkaller.0OFxPX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.128527][ T42] audit: type=1400 audit(1793744759.379:172): avc: denied { mount } for pid=5782 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.130826][ T42] audit: type=1400 audit(1793744759.379:173): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/syzkaller.0OFxPX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.131986][ T42] audit: type=1400 audit(1793744759.379:174): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/syzkaller.0OFxPX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.132530][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.132567][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.132592][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.134003][ T5780] veth0_vlan: entered promiscuous mode [ 39.136172][ T42] audit: type=1400 audit(1793744759.389:175): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.139508][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.143730][ T42] audit: type=1400 audit(1793744759.399:176): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.145456][ T42] audit: type=1400 audit(1793744759.399:177): avc: denied { mount } for pid=5782 comm="syz-executor" name="/" dev="gadgetfs" ino=8050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.150886][ T5780] veth1_vlan: entered promiscuous mode [ 39.154965][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.177984][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.178000][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.184240][ T42] audit: type=1400 audit(1793744759.439:178): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 39.212396][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.212417][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.235235][ T5782] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.235990][ T5780] veth0_macvtap: entered promiscuous mode [ 39.247607][ T5780] veth1_macvtap: entered promiscuous mode [ 39.283364][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.283409][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.291615][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.306422][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.317629][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.317649][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.333659][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.333907][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.334197][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.376279][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.376298][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.387834][ T5943] ip_tables: iptables: counters copy to user failed while replacing table [ 39.388946][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.398328][ T5943] Zero length message leads to an empty skb [ 39.405913][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.405932][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.418008][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.418190][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.418210][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.418229][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.418247][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.603044][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 39.624126][ T5967] process 'syz.0.11' launched './file0' with NULL argv: empty string added [ 39.662801][ T5971] FAULT_INJECTION: forcing a failure. [ 39.662801][ T5971] name failslab, interval 1, probability 0, space 0, times 0 [ 39.662838][ T5971] CPU: 1 UID: 0 PID: 5971 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 39.662852][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 39.662859][ T5971] Call Trace: [ 39.662864][ T5971] [ 39.662869][ T5971] dump_stack_lvl+0x100/0x190 [ 39.662901][ T5971] should_fail_ex.cold+0x5/0xa [ 39.662919][ T5971] should_failslab+0xc2/0x120 [ 39.662933][ T5971] __kvmalloc_node_noprof+0x113/0x9b0 [ 39.662952][ T5971] ? vfree+0x12f/0x850 [ 39.662963][ T5971] ? bpf_check_cfg+0xb4/0x9d0 [ 39.662982][ T5971] bpf_check_cfg+0xb4/0x9d0 [ 39.662999][ T5971] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 39.663021][ T5971] bpf_check+0x7514/0xa0f0 [ 39.663046][ T5971] ? __pfx_bpf_check+0x10/0x10 [ 39.663057][ T5971] ? lock_acquire+0x1d1/0x380 [ 39.663074][ T5971] ? find_held_lock+0x2b/0x80 [ 39.663086][ T5971] ? bpf_prog_load+0x1af0/0x2b20 [ 39.663105][ T5971] ? __asan_memset+0x23/0x50 [ 39.663140][ T5971] ? bpf_prog_load+0x1baf/0x2b20 [ 39.663171][ T5971] bpf_prog_load+0x1baf/0x2b20 [ 39.663188][ T5971] ? avc_has_perm_noaudit+0x11e/0x470 [ 39.663206][ T5971] ? __pfx_bpf_prog_load+0x10/0x10 [ 39.663235][ T5971] __sys_bpf+0x146f/0x4b60 [ 39.663249][ T5971] ? __pfx___sys_bpf+0x10/0x10 [ 39.663259][ T5971] ? find_held_lock+0x2b/0x80 [ 39.663271][ T5971] ? get_pid_task+0xfc/0x250 [ 39.663282][ T5971] ? get_pid_task+0xfc/0x250 [ 39.663297][ T5971] ? find_held_lock+0x2b/0x80 [ 39.663312][ T5971] ? rcu_read_lock_any_held+0x6a/0x90 [ 39.663326][ T5971] ? find_held_lock+0x2b/0x80 [ 39.663337][ T5971] ? ksys_write+0x190/0x250 [ 39.663348][ T5971] ? ksys_write+0x190/0x250 [ 39.663359][ T5971] ? lock_acquire+0x1d1/0x380 [ 39.663403][ T5971] ? fput+0x7c/0x100 [ 39.663418][ T5971] ? ksys_write+0x1ac/0x250 [ 39.663431][ T5971] ? __x64_sys_bpf+0xce/0x140 [ 39.663441][ T5971] __x64_sys_bpf+0xce/0x140 [ 39.663452][ T5971] ? do_syscall_64+0xae/0x790 [ 39.663465][ T5971] do_syscall_64+0x123/0x790 [ 39.663478][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.663490][ T5971] RIP: 0033:0x7f69ead9fb19 [ 39.663500][ T5971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.663510][ T5971] RSP: 002b:00007f69ebc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.663533][ T5971] RAX: ffffffffffffffda RBX: 00007f69eb025fa0 RCX: 00007f69ead9fb19 [ 39.663541][ T5971] RDX: 0000000000000048 RSI: 0000200000000800 RDI: 0000000000000005 [ 39.663547][ T5971] RBP: 00007f69ebc55090 R08: 0000000000000000 R09: 0000000000000000 [ 39.663554][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.663560][ T5971] R13: 00007f69eb026038 R14: 00007f69eb025fa0 R15: 00007ffe3863e568 [ 39.663575][ T5971] [ 39.673437][ T5973] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 39.673437][ T5973] Please contact the netfilter-devel mailing list or update your nftables rules. [ 39.728903][ T5973] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 39.729006][ T5973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 39.764283][ T5973] kvm: MWAIT instruction emulated as NOP! [ 39.813645][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 39.927689][ T5999] xt_CONNSECMARK: invalid mode: 0 [ 39.947186][ T6003] FAULT_INJECTION: forcing a failure. [ 39.947186][ T6003] name failslab, interval 1, probability 0, space 0, times 0 [ 39.947207][ T6003] CPU: 3 UID: 0 PID: 6003 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(full) [ 39.947220][ T6003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 39.947227][ T6003] Call Trace: [ 39.947232][ T6003] [ 39.947236][ T6003] dump_stack_lvl+0x100/0x190 [ 39.947260][ T6003] should_fail_ex.cold+0x5/0xa [ 39.947278][ T6003] should_failslab+0xc2/0x120 [ 39.947306][ T6003] __kvmalloc_node_noprof+0x113/0x9b0 [ 39.947325][ T6003] ? bpf_check_cfg+0x360/0x9d0 [ 39.947342][ T6003] ? bpf_compute_postorder+0x87/0x960 [ 39.947362][ T6003] bpf_compute_postorder+0x87/0x960 [ 39.947399][ T6003] ? bpf_check_cfg+0x4a3/0x9d0 [ 39.947420][ T6003] bpf_check+0x789e/0xa0f0 [ 39.947441][ T6003] ? __pfx_bpf_check+0x10/0x10 [ 39.947451][ T6003] ? lock_acquire+0x1d1/0x380 [ 39.947468][ T6003] ? find_held_lock+0x2b/0x80 [ 39.947480][ T6003] ? bpf_prog_load+0x1af0/0x2b20 [ 39.947500][ T6003] ? __asan_memset+0x23/0x50 [ 39.947519][ T6003] ? bpf_prog_load+0x1baf/0x2b20 [ 39.947536][ T6003] bpf_prog_load+0x1baf/0x2b20 [ 39.947552][ T6003] ? avc_has_perm_noaudit+0x11e/0x470 [ 39.947573][ T6003] ? __pfx_bpf_prog_load+0x10/0x10 [ 39.947603][ T6003] __sys_bpf+0x146f/0x4b60 [ 39.947617][ T6003] ? __pfx___sys_bpf+0x10/0x10 [ 39.947627][ T6003] ? find_held_lock+0x2b/0x80 [ 39.947639][ T6003] ? get_pid_task+0xfc/0x250 [ 39.947649][ T6003] ? get_pid_task+0xfc/0x250 [ 39.947664][ T6003] ? find_held_lock+0x2b/0x80 [ 39.947679][ T6003] ? rcu_read_lock_any_held+0x6a/0x90 [ 39.947693][ T6003] ? find_held_lock+0x2b/0x80 [ 39.947705][ T6003] ? ksys_write+0x190/0x250 [ 39.947716][ T6003] ? ksys_write+0x190/0x250 [ 39.947727][ T6003] ? lock_acquire+0x1d1/0x380 [ 39.947751][ T6003] ? fput+0x7c/0x100 [ 39.947766][ T6003] ? ksys_write+0x1ac/0x250 [ 39.947778][ T6003] ? __x64_sys_bpf+0xce/0x140 [ 39.947788][ T6003] __x64_sys_bpf+0xce/0x140 [ 39.947799][ T6003] ? do_syscall_64+0xae/0x790 [ 39.947812][ T6003] do_syscall_64+0x123/0x790 [ 39.947825][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.947837][ T6003] RIP: 0033:0x7f461279fb19 [ 39.947846][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.947857][ T6003] RSP: 002b:00007f461360f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.947869][ T6003] RAX: ffffffffffffffda RBX: 00007f4612a25fa0 RCX: 00007f461279fb19 [ 39.947876][ T6003] RDX: 0000000000000048 RSI: 0000200000000800 RDI: 0000000000000005 [ 39.947883][ T6003] RBP: 00007f461360f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.947890][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.947896][ T6003] R13: 00007f4612a26038 R14: 00007f4612a25fa0 R15: 00007ffd9b8024b8 [ 39.947911][ T6003] [ 40.017482][ T6007] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 40.107135][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 40.165290][ T6021] sctp: [Deprecated]: syz.0.32 (pid 6021) Use of int in maxseg socket option. [ 40.165290][ T6021] Use struct sctp_assoc_value instead [ 40.245534][ T6025] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 40.245549][ T6025] netlink: 'syz.0.34': attribute type 3 has an invalid length. [ 40.301208][ T6025] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 40.361025][ T6028] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 40.454800][ T6034] FAULT_INJECTION: forcing a failure. [ 40.454800][ T6034] name failslab, interval 1, probability 0, space 0, times 0 [ 40.454822][ T6034] CPU: 2 UID: 0 PID: 6034 Comm: syz.1.36 Tainted: G L syzkaller #0 PREEMPT(full) [ 40.454838][ T6034] Tainted: [L]=SOFTLOCKUP [ 40.454842][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.454850][ T6034] Call Trace: [ 40.454853][ T6034] [ 40.454858][ T6034] dump_stack_lvl+0x100/0x190 [ 40.454882][ T6034] should_fail_ex.cold+0x5/0xa [ 40.454903][ T6034] should_failslab+0xc2/0x120 [ 40.454917][ T6034] __kvmalloc_node_noprof+0x113/0x9b0 [ 40.454936][ T6034] ? bpf_check_cfg+0x360/0x9d0 [ 40.454953][ T6034] ? bpf_compute_postorder+0xf0/0x960 [ 40.454972][ T6034] bpf_compute_postorder+0xf0/0x960 [ 40.454990][ T6034] ? bpf_check_cfg+0x4a3/0x9d0 [ 40.455010][ T6034] bpf_check+0x789e/0xa0f0 [ 40.455030][ T6034] ? __pfx_bpf_check+0x10/0x10 [ 40.455041][ T6034] ? lock_acquire+0x1d1/0x380 [ 40.455057][ T6034] ? find_held_lock+0x2b/0x80 [ 40.455085][ T6034] ? bpf_prog_load+0x1af0/0x2b20 [ 40.455105][ T6034] ? __asan_memset+0x23/0x50 [ 40.455124][ T6034] ? bpf_prog_load+0x1baf/0x2b20 [ 40.455141][ T6034] bpf_prog_load+0x1baf/0x2b20 [ 40.455158][ T6034] ? avc_has_perm_noaudit+0x11e/0x470 [ 40.455175][ T6034] ? __pfx_bpf_prog_load+0x10/0x10 [ 40.455204][ T6034] __sys_bpf+0x146f/0x4b60 [ 40.455218][ T6034] ? __pfx___sys_bpf+0x10/0x10 [ 40.455228][ T6034] ? find_held_lock+0x2b/0x80 [ 40.455240][ T6034] ? get_pid_task+0xfc/0x250 [ 40.455251][ T6034] ? get_pid_task+0xfc/0x250 [ 40.455266][ T6034] ? find_held_lock+0x2b/0x80 [ 40.455281][ T6034] ? rcu_read_lock_any_held+0x6a/0x90 [ 40.455295][ T6034] ? find_held_lock+0x2b/0x80 [ 40.455306][ T6034] ? ksys_write+0x190/0x250 [ 40.455317][ T6034] ? ksys_write+0x190/0x250 [ 40.455328][ T6034] ? lock_acquire+0x1d1/0x380 [ 40.455353][ T6034] ? fput+0x7c/0x100 [ 40.455386][ T6034] ? ksys_write+0x1ac/0x250 [ 40.455404][ T6034] ? __x64_sys_bpf+0xce/0x140 [ 40.455414][ T6034] __x64_sys_bpf+0xce/0x140 [ 40.455426][ T6034] ? do_syscall_64+0xae/0x790 [ 40.455439][ T6034] do_syscall_64+0x123/0x790 [ 40.455452][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.455464][ T6034] RIP: 0033:0x7fe6d759fb19 [ 40.455474][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.455485][ T6034] RSP: 002b:00007fe6d8486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.455497][ T6034] RAX: ffffffffffffffda RBX: 00007fe6d7825fa0 RCX: 00007fe6d759fb19 [ 40.455505][ T6034] RDX: 0000000000000048 RSI: 0000200000000800 RDI: 0000000000000005 [ 40.455511][ T6034] RBP: 00007fe6d8486090 R08: 0000000000000000 R09: 0000000000000000 [ 40.455518][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.455525][ T6034] R13: 00007fe6d7826038 R14: 00007fe6d7825fa0 R15: 00007fff0689ec78 [ 40.455539][ T6034] [ 40.578572][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 40.673331][ T6044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.693343][ T6051] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 40.702804][ T6051] bond1: entered promiscuous mode [ 40.703025][ T6051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.797061][ T6051] vlan2: entered allmulticast mode [ 40.797076][ T6051] bond1: entered allmulticast mode [ 40.806713][ T6051] bond1: (slave bridge1): making interface the new active one [ 40.806728][ T6051] bridge1: entered promiscuous mode [ 40.806809][ T6051] bridge1: entered allmulticast mode [ 40.807990][ T6051] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 40.828793][ T6062] FAULT_INJECTION: forcing a failure. [ 40.828793][ T6062] name failslab, interval 1, probability 0, space 0, times 0 [ 40.828814][ T6062] CPU: 3 UID: 0 PID: 6062 Comm: syz.3.46 Tainted: G L syzkaller #0 PREEMPT(full) [ 40.828829][ T6062] Tainted: [L]=SOFTLOCKUP [ 40.828833][ T6062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.828841][ T6062] Call Trace: [ 40.828844][ T6062] [ 40.828849][ T6062] dump_stack_lvl+0x100/0x190 [ 40.828872][ T6062] should_fail_ex.cold+0x5/0xa [ 40.828891][ T6062] should_failslab+0xc2/0x120 [ 40.828904][ T6062] __kvmalloc_node_noprof+0x113/0x9b0 [ 40.828926][ T6062] ? bpf_check_cfg+0x360/0x9d0 [ 40.828943][ T6062] ? bpf_compute_postorder+0xf0/0x960 [ 40.828963][ T6062] bpf_compute_postorder+0xf0/0x960 [ 40.828980][ T6062] ? bpf_check_cfg+0x4a3/0x9d0 [ 40.829000][ T6062] bpf_check+0x789e/0xa0f0 [ 40.829021][ T6062] ? __pfx_bpf_check+0x10/0x10 [ 40.829031][ T6062] ? lock_acquire+0x1d1/0x380 [ 40.829048][ T6062] ? find_held_lock+0x2b/0x80 [ 40.829060][ T6062] ? bpf_prog_load+0x1af0/0x2b20 [ 40.829079][ T6062] ? __asan_memset+0x23/0x50 [ 40.829099][ T6062] ? bpf_prog_load+0x1baf/0x2b20 [ 40.829115][ T6062] bpf_prog_load+0x1baf/0x2b20 [ 40.829132][ T6062] ? avc_has_perm_noaudit+0x11e/0x470 [ 40.829149][ T6062] ? __pfx_bpf_prog_load+0x10/0x10 [ 40.829178][ T6062] __sys_bpf+0x146f/0x4b60 [ 40.829192][ T6062] ? __pfx___sys_bpf+0x10/0x10 [ 40.829202][ T6062] ? find_held_lock+0x2b/0x80 [ 40.829214][ T6062] ? get_pid_task+0xfc/0x250 [ 40.829224][ T6062] ? get_pid_task+0xfc/0x250 [ 40.829238][ T6062] ? find_held_lock+0x2b/0x80 [ 40.829253][ T6062] ? rcu_read_lock_any_held+0x6a/0x90 [ 40.829268][ T6062] ? find_held_lock+0x2b/0x80 [ 40.829279][ T6062] ? ksys_write+0x190/0x250 [ 40.829290][ T6062] ? ksys_write+0x190/0x250 [ 40.829302][ T6062] ? lock_acquire+0x1d1/0x380 [ 40.829338][ T6062] ? fput+0x7c/0x100 [ 40.829358][ T6062] ? ksys_write+0x1ac/0x250 [ 40.829371][ T6062] ? __x64_sys_bpf+0xce/0x140 [ 40.829381][ T6062] __x64_sys_bpf+0xce/0x140 [ 40.829393][ T6062] ? do_syscall_64+0xae/0x790 [ 40.829406][ T6062] do_syscall_64+0x123/0x790 [ 40.829424][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.829436][ T6062] RIP: 0033:0x7f22e499fb19 [ 40.829486][ T6062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.829510][ T6062] RSP: 002b:00007f22e58dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.829521][ T6062] RAX: ffffffffffffffda RBX: 00007f22e4c25fa0 RCX: 00007f22e499fb19 [ 40.829529][ T6062] RDX: 0000000000000048 RSI: 0000200000000800 RDI: 0000000000000005 [ 40.829536][ T6062] RBP: 00007f22e58dd090 R08: 0000000000000000 R09: 0000000000000000 [ 40.829542][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.829549][ T6062] R13: 00007f22e4c26038 R14: 00007f22e4c25fa0 R15: 00007ffcc81c4cc8 [ 40.829563][ T6062] [ 40.930271][ T6066] FAULT_INJECTION: forcing a failure. [ 40.930271][ T6066] name failslab, interval 1, probability 0, space 0, times 0 [ 40.930293][ T6066] CPU: 3 UID: 0 PID: 6066 Comm: syz.3.49 Tainted: G L syzkaller #0 PREEMPT(full) [ 40.930309][ T6066] Tainted: [L]=SOFTLOCKUP [ 40.930314][ T6066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.930320][ T6066] Call Trace: [ 40.930325][ T6066] [ 40.930329][ T6066] dump_stack_lvl+0x100/0x190 [ 40.930353][ T6066] should_fail_ex.cold+0x5/0xa [ 40.930371][ T6066] should_failslab+0xc2/0x120 [ 40.930385][ T6066] __kmalloc_noprof+0xfc/0x840 [ 40.930405][ T6066] ? sk_prot_alloc+0x10b/0x2a0 [ 40.930430][ T6066] sk_prot_alloc+0x10b/0x2a0 [ 40.930447][ T6066] sk_alloc+0x36/0xe80 [ 40.930460][ T6066] __netlink_create+0x5e/0x2c0 [ 40.930471][ T6066] ? __wake_up+0x3f/0x60 [ 40.930486][ T6066] netlink_create+0x293/0x610 [ 40.930498][ T6066] ? __pfx_rtnetlink_bind+0x10/0x10 [ 40.930513][ T6066] __sock_create+0x339/0x860 [ 40.930531][ T6066] __sys_socket+0x14d/0x260 [ 40.930549][ T6066] ? __pfx___sys_socket+0x10/0x10 [ 40.930570][ T6066] __x64_sys_socket+0x72/0xb0 [ 40.930587][ T6066] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.930599][ T6066] do_syscall_64+0x123/0x790 [ 40.930612][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.930625][ T6066] RIP: 0033:0x7f22e499fb19 [ 40.930635][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.930645][ T6066] RSP: 002b:00007f22e58dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 40.930657][ T6066] RAX: ffffffffffffffda RBX: 00007f22e4c25fa0 RCX: 00007f22e499fb19 [ 40.930665][ T6066] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 40.930671][ T6066] RBP: 00007f22e4a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 40.930678][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.930685][ T6066] R13: 00007f22e4c26038 R14: 00007f22e4c25fa0 R15: 00007ffcc81c4cc8 [ 40.930699][ T6066] [ 40.993358][ T5784] Bluetooth: hci3: command tx timeout [ 40.993381][ T5784] Bluetooth: hci1: command tx timeout [ 41.061154][ T6074] overlayfs: failed to resolve './dev/sda1': -2 [ 41.537238][ T6088] capability: warning: `syz.2.58' uses deprecated v2 capabilities in a way that may be insecure [ 41.568496][ T6090] FAULT_INJECTION: forcing a failure. [ 41.568496][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 41.568517][ T6090] CPU: 3 UID: 0 PID: 6090 Comm: syz.2.59 Tainted: G L syzkaller #0 PREEMPT(full) [ 41.568533][ T6090] Tainted: [L]=SOFTLOCKUP [ 41.568538][ T6090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.568545][ T6090] Call Trace: [ 41.568549][ T6090] [ 41.568553][ T6090] dump_stack_lvl+0x100/0x190 [ 41.568577][ T6090] should_fail_ex.cold+0x5/0xa [ 41.568601][ T6090] should_failslab+0xc2/0x120 [ 41.568615][ T6090] __kvmalloc_node_noprof+0x113/0x9b0 [ 41.568634][ T6090] ? bpf_check_cfg+0x360/0x9d0 [ 41.568650][ T6090] ? bpf_compute_postorder+0x1c2/0x960 [ 41.568670][ T6090] bpf_compute_postorder+0x1c2/0x960 [ 41.568688][ T6090] ? bpf_check_cfg+0x4a3/0x9d0 [ 41.568708][ T6090] bpf_check+0x789e/0xa0f0 [ 41.568729][ T6090] ? __pfx_bpf_check+0x10/0x10 [ 41.568739][ T6090] ? lock_acquire+0x1d1/0x380 [ 41.568756][ T6090] ? find_held_lock+0x2b/0x80 [ 41.568768][ T6090] ? bpf_prog_load+0x1af0/0x2b20 [ 41.568788][ T6090] ? __asan_memset+0x23/0x50 [ 41.568807][ T6090] ? bpf_prog_load+0x1baf/0x2b20 [ 41.568824][ T6090] bpf_prog_load+0x1baf/0x2b20 [ 41.568841][ T6090] ? avc_has_perm_noaudit+0x11e/0x470 [ 41.568858][ T6090] ? __pfx_bpf_prog_load+0x10/0x10 [ 41.568887][ T6090] __sys_bpf+0x146f/0x4b60 [ 41.568901][ T6090] ? __pfx___sys_bpf+0x10/0x10 [ 41.568911][ T6090] ? find_held_lock+0x2b/0x80 [ 41.568922][ T6090] ? get_pid_task+0xfc/0x250 [ 41.568933][ T6090] ? get_pid_task+0xfc/0x250 [ 41.568947][ T6090] ? find_held_lock+0x2b/0x80 [ 41.568962][ T6090] ? rcu_read_lock_any_held+0x6a/0x90 [ 41.568977][ T6090] ? find_held_lock+0x2b/0x80 [ 41.568989][ T6090] ? ksys_write+0x190/0x250 [ 41.568999][ T6090] ? ksys_write+0x190/0x250 [ 41.569010][ T6090] ? lock_acquire+0x1d1/0x380 [ 41.569034][ T6090] ? fput+0x7c/0x100 [ 41.569048][ T6090] ? ksys_write+0x1ac/0x250 [ 41.569061][ T6090] ? __x64_sys_bpf+0xce/0x140 [ 41.569071][ T6090] __x64_sys_bpf+0xce/0x140 [ 41.569082][ T6090] ? do_syscall_64+0xae/0x790 [ 41.569096][ T6090] do_syscall_64+0x123/0x790 [ 41.569108][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.569120][ T6090] RIP: 0033:0x7f461279fb19 [ 41.569130][ T6090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.569141][ T6090] RSP: 002b:00007f461360f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.569154][ T6090] RAX: ffffffffffffffda RBX: 00007f4612a25fa0 RCX: 00007f461279fb19 [ 41.569161][ T6090] RDX: 0000000000000048 RSI: 0000200000000800 RDI: 0000000000000005 [ 41.569168][ T6090] RBP: 00007f461360f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.569174][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.569181][ T6090] R13: 00007f4612a26038 R14: 00007f4612a25fa0 R15: 00007ffd9b8024b8 [ 41.569195][ T6090] [ 41.654155][ T6092] netlink: 'syz.2.60': attribute type 11 has an invalid length. [ 41.701179][ T6095] FAULT_INJECTION: forcing a failure. [ 41.701179][ T6095] name failslab, interval 1, probability 0, space 0, times 0 [ 41.701210][ T6095] CPU: 3 UID: 0 PID: 6095 Comm: syz.1.61 Tainted: G L syzkaller #0 PREEMPT(full) [ 41.701237][ T6095] Tainted: [L]=SOFTLOCKUP [ 41.701244][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.701256][ T6095] Call Trace: [ 41.701263][ T6095] [ 41.701270][ T6095] dump_stack_lvl+0x100/0x190 [ 41.701309][ T6095] should_fail_ex.cold+0x5/0xa [ 41.701340][ T6095] should_failslab+0xc2/0x120 [ 41.701362][ T6095] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 41.701395][ T6095] ? __d_alloc+0x34/0xad0 [ 41.701425][ T6095] __d_alloc+0x34/0xad0 [ 41.701453][ T6095] d_alloc_pseudo+0x1c/0xc0 [ 41.701473][ T6095] alloc_file_pseudo+0x118/0x290 [ 41.701502][ T6095] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 41.701529][ T6095] ? hugetlbfs_get_inode+0x394/0x740 [ 41.701555][ T6095] hugetlb_file_setup+0x2a8/0x5b0 [ 41.701579][ T6095] ksys_mmap_pgoff+0x242/0x610 [ 41.701621][ T6095] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 41.701652][ T6095] ? xfd_validate_state+0x129/0x190 [ 41.701683][ T6095] __x64_sys_mmap+0x125/0x190 [ 41.701713][ T6095] do_syscall_64+0x123/0x790 [ 41.701737][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.701758][ T6095] RIP: 0033:0x7fe6d759fb19 [ 41.701775][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.701793][ T6095] RSP: 002b:00007fe6d8486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 41.701814][ T6095] RAX: ffffffffffffffda RBX: 00007fe6d7825fa0 RCX: 00007fe6d759fb19 [ 41.701827][ T6095] RDX: 000000000200000c RSI: 0000000000ff5000 RDI: 0000200000000000 [ 41.701840][ T6095] RBP: 00007fe6d7637b70 R08: ffffffffffffffff R09: 000000009227c000 [ 41.701852][ T6095] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000 [ 41.701864][ T6095] R13: 00007fe6d7826038 R14: 00007fe6d7825fa0 R15: 00007fff0689ec78 [ 41.701889][ T6095] [ 41.790859][ T6101] ptrace attach of "/syz-executor exec"[5782] was attempted by ""[6101] [ 41.837171][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 41.837647][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 41.898643][ T6044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.900457][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 41.916765][ T6117] Bluetooth: MGMT ver 1.23 [ 41.964402][ T6120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6120 comm=syz.3.71 [ 41.968462][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 41.972777][ T6120] gretap0: entered promiscuous mode [ 42.026331][ T6126] ebt_among: dst integrity fail: 100 [ 42.029309][ T6124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=6124 comm=syz.3.73 [ 42.029329][ T6129] ebt_among: dst integrity fail: 100 [ 42.031537][ T6124] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 42.040076][ T6124] erspan1: entered allmulticast mode [ 42.102662][ T5797] Bluetooth: hci2: command tx timeout [ 42.103267][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 42.103355][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 42.127069][ T6138] bridge0: port 3(syz_tun) entered blocking state [ 42.127120][ T6138] bridge0: port 3(syz_tun) entered disabled state [ 42.127205][ T6138] syz_tun: entered allmulticast mode [ 42.128162][ T6138] syz_tun: entered promiscuous mode [ 42.128444][ T6138] bridge0: port 3(syz_tun) entered blocking state [ 42.128494][ T6138] bridge0: port 3(syz_tun) entered forwarding state [ 42.137039][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.149002][ T6137] bridge_slave_0 (unregistering): left allmulticast mode [ 42.149019][ T6137] bridge_slave_0 (unregistering): left promiscuous mode [ 42.149049][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.314423][ T6149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.81'. [ 42.321959][ T6149] netlink: 'syz.1.81': attribute type 9 has an invalid length. [ 42.350533][ T6146] ------------[ cut here ]------------ [ 42.350543][ T6146] sp->magic != HWSIM_STA_MAGIC [ 42.350548][ T6146] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1f17/0x2a20, CPU#2: syz.3.80/6146 [ 42.357935][ T6146] Modules linked in: [ 42.359467][ T6146] CPU: 2 UID: 0 PID: 6146 Comm: syz.3.80 Tainted: G L syzkaller #0 PREEMPT(full) [ 42.362900][ T6146] Tainted: [L]=SOFTLOCKUP [ 42.364272][ T6146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.367467][ T6146] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x2a20 [ 42.367492][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 42.372065][ T6146] Code: b6 58 1b 89 de e8 a9 01 95 fa 84 db 0f 85 e5 ee ff ff e8 8c 07 95 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 7a 07 95 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 88 04 00 00 48 89 44 [ 42.378075][ T6146] RSP: 0018:ffffc900056c6f78 EFLAGS: 00010293 [ 42.380004][ T6146] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000201 [ 42.382684][ T6146] RDX: ffff88805a352580 RSI: ffffffff87795d66 RDI: 0000000000000005 [ 42.385212][ T6146] RBP: ffff88803074ad90 R08: 000000006d537749 R09: 0000000000000000 [ 42.387692][ T6146] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 42.390183][ T6146] R13: ffffc900056c7130 R14: ffff88805a8d32c0 R15: ffff888038342f00 [ 42.392725][ T6146] FS: 00007f22e58dd6c0(0000) GS:ffff8880d467c000(0000) knlGS:0000000000000000 [ 42.395525][ T6146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.397587][ T6146] CR2: 0000000000000000 CR3: 000000005b6bd000 CR4: 0000000000352ef0 [ 42.400066][ T6146] Call Trace: [ 42.401189][ T6146] [ 42.402140][ T6146] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 42.403914][ T6146] ? do_raw_spin_lock+0x128/0x260 [ 42.405503][ T6146] ? mark_held_locks+0x40/0x70 [ 42.407051][ T6146] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 42.408905][ T6146] ieee80211_tx_frags+0x5c9/0xa70 [ 42.410531][ T6146] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 42.412355][ T6146] ? ieee80211_xmit_fast_finish+0x5b6/0xbe0 [ 42.414216][ T6146] __ieee80211_xmit_fast+0x834/0x2b70 [ 42.415905][ T6146] ? __siphash_unaligned+0x190/0x360 [ 42.417557][ T6146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.419401][ T6146] ? cfg80211_classify8021d+0x1f5/0xa30 [ 42.421170][ T6146] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 42.423082][ T6146] ? ieee80211_mandatory_rates+0x150/0x220 [ 42.424914][ T6146] ? mesh_path_refresh+0x14d/0x2e0 [ 42.426588][ T6146] ieee80211_mesh_xmit_fast+0xbc1/0x1260 [ 42.428359][ T6146] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 42.430308][ T6146] ? find_held_lock+0x2b/0x80 [ 42.431839][ T6146] ? __skb_flow_dissect+0x3cc/0x6d20 [ 42.433562][ T6146] __ieee80211_subif_start_xmit+0xb36/0x16a0 [ 42.435445][ T6146] ? vfs_write+0x6af/0x1050 [ 42.436908][ T6146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.438758][ T6146] ? skb_network_protocol+0x2c5/0x3c0 [ 42.440487][ T6146] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 42.442539][ T6146] ? __netif_skb_features+0x41c/0xde0 [ 42.444240][ T6146] ? rcu_is_watching+0x13/0xc0 [ 42.445786][ T6146] ? trace_contention_end.constprop.0+0x145/0x1a0 [ 42.447797][ T6146] ieee80211_subif_start_xmit+0xf8/0x7c0 [ 42.449552][ T6146] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 42.451542][ T6146] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 42.453643][ T6146] ? validate_xmit_skb+0xbd7/0x1f30 [ 42.455280][ T6146] ? rcu_lockdep_current_cpu_online+0x37/0x150 [ 42.457233][ T6146] dev_hard_start_xmit+0x121/0x760 [ 42.458847][ T6146] __dev_queue_xmit+0x1bef/0x48d0 [ 42.460444][ T6146] ? __might_fault+0xc5/0x140 [ 42.461928][ T6146] ? __might_fault+0xc5/0x140 [ 42.463476][ T6146] ? __pfx___dev_queue_xmit+0x10/0x10 [ 42.465153][ T6146] ? _copy_from_iter+0x270/0x16c0 [ 42.466766][ T6146] ? __pfx__copy_from_iter+0x10/0x10 [ 42.468428][ T6146] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 42.470141][ T6146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.472020][ T6146] ? packet_parse_headers+0x294/0x7f0 [ 42.473776][ T6146] ? __pfx_packet_parse_headers+0x10/0x10 [ 42.475610][ T6146] packet_xmit+0x24b/0x320 [ 42.477011][ T6146] packet_sendmsg+0x3205/0x4f80 [ 42.478539][ T6146] ? sock_has_perm+0x254/0x320 [ 42.480027][ T6146] ? __pfx_sock_has_perm+0x10/0x10 [ 42.481608][ T6146] ? __pfx_avc_has_perm+0x10/0x10 [ 42.483229][ T6146] ? __pfx_packet_sendmsg+0x10/0x10 [ 42.484804][ T6146] ? selinux_socket_sendmsg+0x198/0x2f0 [ 42.486567][ T6146] sock_write_iter+0x560/0x5d0 [ 42.488075][ T6146] ? __pfx_packet_sendmsg+0x10/0x10 [ 42.489693][ T6146] ? __pfx_sock_write_iter+0x10/0x10 [ 42.491297][ T6146] ? bpf_lsm_file_permission+0x9/0x10 [ 42.492982][ T6146] ? security_file_permission+0x76/0x210 [ 42.494637][ T6146] ? rw_verify_area+0xce/0x6d0 [ 42.496084][ T6146] vfs_write+0x6af/0x1050 [ 42.497415][ T6146] ? __pfx_sock_write_iter+0x10/0x10 [ 42.499041][ T6146] ? __pfx_vfs_write+0x10/0x10 [ 42.500567][ T6146] ? find_held_lock+0x2b/0x80 [ 42.502001][ T6146] ksys_write+0x1f8/0x250 [ 42.503465][ T6146] ? __pfx_ksys_write+0x10/0x10 [ 42.504954][ T6146] do_syscall_64+0x123/0x790 [ 42.506344][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.508108][ T6146] RIP: 0033:0x7f22e499fb19 [ 42.509537][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.515630][ T6146] RSP: 002b:00007f22e58dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.518209][ T6146] RAX: ffffffffffffffda RBX: 00007f22e4c25fa0 RCX: 00007f22e499fb19 [ 42.520702][ T6146] RDX: 000000000000000f RSI: 0000200000001340 RDI: 000000000000000c [ 42.523246][ T6146] RBP: 00007f22e4a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 42.525713][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.528178][ T6146] R13: 00007f22e4c26038 R14: 00007f22e4c25fa0 R15: 00007ffcc81c4cc8 [ 42.530653][ T6146] [ 42.531649][ T6146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 42.533938][ T6146] CPU: 2 UID: 0 PID: 6146 Comm: syz.3.80 Tainted: G L syzkaller #0 PREEMPT(full) [ 42.537239][ T6146] Tainted: [L]=SOFTLOCKUP [ 42.538600][ T6146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.541734][ T6146] Call Trace: [ 42.542800][ T6146] [ 42.543764][ T6146] dump_stack_lvl+0x100/0x190 [ 42.545310][ T6146] vpanic+0x2dc/0x6f8 [ 42.546576][ T6146] panic+0xd1/0xe0 [ 42.547774][ T6146] ? __pfx_panic+0x10/0x10 [ 42.549190][ T6146] check_panic_on_warn.cold+0x19/0x34 [ 42.551019][ T6146] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 42.552682][ T6146] __warn.cold+0x191/0x321 [ 42.554087][ T6146] __report_bug+0x30f/0x440 [ 42.555555][ T6146] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 42.557209][ T6146] ? __pfx___report_bug+0x10/0x10 [ 42.558786][ T6146] ? __bfs+0x150/0x2a0 [ 42.560091][ T6146] ? check_irq_usage+0x1a4/0x8b0 [ 42.561621][ T6146] ? ieee80211_encrypt_tx_skb+0x2df/0x430 [ 42.563663][ T6146] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 42.565581][ T6146] report_bug+0xb3/0x220 [ 42.567086][ T6146] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 42.568923][ T6146] handle_bug+0x16a/0x2a0 [ 42.570432][ T6146] exc_invalid_op+0x17/0x50 [ 42.572013][ T6146] asm_exc_invalid_op+0x1a/0x20 [ 42.573733][ T6146] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x2a20 [ 42.575851][ T6146] Code: b6 58 1b 89 de e8 a9 01 95 fa 84 db 0f 85 e5 ee ff ff e8 8c 07 95 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 7a 07 95 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 88 04 00 00 48 89 44 [ 42.582172][ T6146] RSP: 0018:ffffc900056c6f78 EFLAGS: 00010293 [ 42.584047][ T6146] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000201 [ 42.586403][ T6146] RDX: ffff88805a352580 RSI: ffffffff87795d66 RDI: 0000000000000005 [ 42.588764][ T6146] RBP: ffff88803074ad90 R08: 000000006d537749 R09: 0000000000000000 [ 42.591402][ T6146] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 42.594539][ T6146] R13: ffffc900056c7130 R14: ffff88805a8d32c0 R15: ffff888038342f00 [ 42.597621][ T6146] ? mac80211_hwsim_tx+0x1f16/0x2a20 [ 42.599736][ T6146] ? mac80211_hwsim_tx+0x1f16/0x2a20 [ 42.601838][ T6146] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 42.604041][ T6146] ? do_raw_spin_lock+0x128/0x260 [ 42.606088][ T6146] ? mark_held_locks+0x40/0x70 [ 42.608068][ T6146] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 42.610439][ T6146] ieee80211_tx_frags+0x5c9/0xa70 [ 42.612488][ T6146] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 42.614713][ T6146] ? ieee80211_xmit_fast_finish+0x5b6/0xbe0 [ 42.617093][ T6146] __ieee80211_xmit_fast+0x834/0x2b70 [ 42.619250][ T6146] ? __siphash_unaligned+0x190/0x360 [ 42.621378][ T6146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.623811][ T6146] ? cfg80211_classify8021d+0x1f5/0xa30 [ 42.626050][ T6146] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 42.628150][ T6146] ? ieee80211_mandatory_rates+0x150/0x220 [ 42.629882][ T6146] ? mesh_path_refresh+0x14d/0x2e0 [ 42.631446][ T6146] ieee80211_mesh_xmit_fast+0xbc1/0x1260 [ 42.633151][ T6146] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 42.634930][ T6146] ? find_held_lock+0x2b/0x80 [ 42.636569][ T6146] ? __skb_flow_dissect+0x3cc/0x6d20 [ 42.638424][ T6146] __ieee80211_subif_start_xmit+0xb36/0x16a0 [ 42.640386][ T6146] ? vfs_write+0x6af/0x1050 [ 42.641758][ T6146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.643565][ T6146] ? skb_network_protocol+0x2c5/0x3c0 [ 42.645490][ T6146] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 42.647750][ T6146] ? __netif_skb_features+0x41c/0xde0 [ 42.649489][ T6146] ? rcu_is_watching+0x13/0xc0 [ 42.650940][ T6146] ? trace_contention_end.constprop.0+0x145/0x1a0 [ 42.652885][ T6146] ieee80211_subif_start_xmit+0xf8/0x7c0 [ 42.654566][ T6146] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 42.656524][ T6146] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 42.658589][ T6146] ? validate_xmit_skb+0xbd7/0x1f30 [ 42.660242][ T6146] ? rcu_lockdep_current_cpu_online+0x37/0x150 [ 42.662181][ T6146] dev_hard_start_xmit+0x121/0x760 [ 42.663832][ T6146] __dev_queue_xmit+0x1bef/0x48d0 [ 42.665439][ T6146] ? __might_fault+0xc5/0x140 [ 42.666935][ T6146] ? __might_fault+0xc5/0x140 [ 42.668440][ T6146] ? __pfx___dev_queue_xmit+0x10/0x10 [ 42.670136][ T6146] ? _copy_from_iter+0x270/0x16c0 [ 42.671709][ T6146] ? __pfx__copy_from_iter+0x10/0x10 [ 42.673389][ T6146] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 42.675175][ T6146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.677057][ T6146] ? packet_parse_headers+0x294/0x7f0 [ 42.678745][ T6146] ? __pfx_packet_parse_headers+0x10/0x10 [ 42.680535][ T6146] packet_xmit+0x24b/0x320 [ 42.681937][ T6146] packet_sendmsg+0x3205/0x4f80 [ 42.683487][ T6146] ? sock_has_perm+0x254/0x320 [ 42.685030][ T6146] ? __pfx_sock_has_perm+0x10/0x10 [ 42.686631][ T6146] ? __pfx_avc_has_perm+0x10/0x10 [ 42.688216][ T6146] ? __pfx_packet_sendmsg+0x10/0x10 [ 42.689840][ T6146] ? selinux_socket_sendmsg+0x198/0x2f0 [ 42.691583][ T6146] sock_write_iter+0x560/0x5d0 [ 42.693091][ T6146] ? __pfx_packet_sendmsg+0x10/0x10 [ 42.694718][ T6146] ? __pfx_sock_write_iter+0x10/0x10 [ 42.696387][ T6146] ? bpf_lsm_file_permission+0x9/0x10 [ 42.698065][ T6146] ? security_file_permission+0x76/0x210 [ 42.699820][ T6146] ? rw_verify_area+0xce/0x6d0 [ 42.701325][ T6146] vfs_write+0x6af/0x1050 [ 42.702684][ T6146] ? __pfx_sock_write_iter+0x10/0x10 [ 42.704349][ T6146] ? __pfx_vfs_write+0x10/0x10 [ 42.705859][ T6146] ? find_held_lock+0x2b/0x80 [ 42.707342][ T6146] ksys_write+0x1f8/0x250 [ 42.708716][ T6146] ? __pfx_ksys_write+0x10/0x10 [ 42.710244][ T6146] do_syscall_64+0x123/0x790 [ 42.711706][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.713546][ T6146] RIP: 0033:0x7f22e499fb19 [ 42.714946][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.720863][ T6146] RSP: 002b:00007f22e58dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.723453][ T6146] RAX: ffffffffffffffda RBX: 00007f22e4c25fa0 RCX: 00007f22e499fb19 [ 42.725928][ T6146] RDX: 000000000000000f RSI: 0000200000001340 RDI: 000000000000000c [ 42.728372][ T6146] RBP: 00007f22e4a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 42.730807][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.733255][ T6146] R13: 00007f22e4c26038 R14: 00007f22e4c25fa0 R15: 00007ffcc81c4cc8 [ 42.735713][ T6146] [ 42.737343][ T6146] Kernel Offset: disabled [ 42.738702][ T6146] Rebooting in 86400 seconds..