last executing test programs: 2.078098225s ago: executing program 1 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) timer_create(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 2.016741696s ago: executing program 1 (id=115): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030900000000000000000001e700060009000000080008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x228, r0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "d11d040e9d547cb9aea5c1ba764842f8fd3e14da824b7c3a27d8bd97"}}, @TIPC_NLA_NODE_ID={0xbb, 0x3, "7878dd6bc7dc0a7d4718acbc22c2b182e22cdfd8b04a69ac2d73d9e4db3549dfe71e0178cfa4b13c0b0f685c330c373da1ce2958dace1de9d16d4252e14653129608f7e98233eed88e9724bd82c3570c7056909328e6b9a2a6ddc9ffe46ad3369d8547f6023e69ecbeca50d29540061123f0bf3f02f4b2f100c31007bfd825074d2f68f7f5c5ec045d6969a8f4a075f7240d6576906b8905d0c61d0365e2c4e72257201acfe35086b6ab8a38505fe8567425a7ec83f294"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3c, 0x3, "bfd8a11a7628c1cecdba65115f1872d1797731dd374b1a3add53497c1e7a6e1b839909081f02fa6ab8209dd40a67991ded0510168c8c23fa"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "b302bd8e4ef59372b08908b4206dafb16b57fb149b4bb5e40c734595a3622b9f846baaef"}}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3dbd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x8, 0x1a801, 0x0, 0x0}], 0x1}) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.529942306s ago: executing program 3 (id=129): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101}}}}, 0x3e) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x12, 0x11, 0x67, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x18}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff5, 0x6, 0x100, 0x2}}}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000480)={r7, r8, 0x8, 0x41, &(0x7f0000000400)="8644d3c2bdb88d11065e1cec46cfb707f3ddc9be037028104aa128acfaf00b369a246d9d0385ff9d2b7e8c71cfe88166f27c68023a6d9d9c5ef1336d67aed4dd9a", 0x7, 0x1, 0x6, 0x6, 0x4, 0x0, 0x2, 'syz0\x00'}) r9 = socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f0000000000)={0x6, 0x4, 0x9, 0xfffffffffffffffe, 0x9, 0xffff, 0xffffffffffffffff, 0x4}, &(0x7f0000000040)={0xe, 0x95f5, 0x3, 0x0, 0x215b, 0x3}, &(0x7f0000000080)={0x2, 0xa1cd, 0x6, 0xffff, 0x8, 0xdd95, 0x0, 0x9}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r10, &(0x7f0000000180)=""/174, 0xae) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0x9, 0x2}, {0xffe0, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x240008c0) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000040)={0x54, 0xa, 0x3, "3258c5c0008faa001b0000f4ff4000000000000000e926ba2800"}) r12 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0xc080, 0x0) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="02030009160000000000000000000000040003000400000000000000000000000000000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000200010000000000000000030300006005000500002000000a0000000000000000000000000000002000ffffe00000020000000000000000"], 0xb0}}, 0x84) 1.319231142s ago: executing program 3 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="15000200000000f4ffff060000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x204402, 0xa0) r4 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r4, 0x4d10, 0x2, 0x2, 0x0, 0x0) 1.240131424s ago: executing program 3 (id=136): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x3}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x44a2, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) pipe2$watch_queue(&(0x7f0000000280), 0x80) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x3}) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x44a2, 0x4) (async) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}}, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) (async) 1.17011744s ago: executing program 3 (id=137): r0 = socket$inet(0x2, 0x3, 0xa) (async, rerun: 64) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001680), 0x180, 0x0) (rerun: 64) ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000040)={@lba=0x51, 0x0, 0x2}) (async) clock_adjtime(0xffffffd3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x808000, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x80, 0x0, 0xffffffff, 0x0, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x65, 0x0, 0x3c, 0x2, 0x0, @empty, @loopback, {[@end]}}}}}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) (rerun: 32) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) (rerun: 32) 1.059613509s ago: executing program 2 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ce617ebf1b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x10) 910.189647ms ago: executing program 2 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x400, 0x0, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000340)=0xe8) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, r2, &(0x7f0000000380)={0xfffffffffffffa54, 0x8, 0x3ff, 0xdf, 0x9, 0x8, 0x8, 0xa5a, 0x8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0900000089808c0ed2b85b378688fef0f628883acd82cca5290000aa65f3234b1d52d581324a35d164a13f7572fdbc01fd53a7adddfd16e587c9c4fa2b0c197b577dde16c0b906201501621268ceb2097b0b727888aa75ed322deec85f1a6b42749541c16c2a784f030940f5e37bcef6d822095d37bdd7b9", @ANYRES16=r3, @ANYBLOB="0501ffffffff0a2000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000040008010400cc00"], 0x30}, 0x1, 0x0, 0x0, 0xc0801}, 0x4004050) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r8, 0xf22096ccf9951ef8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d5, &(0x7f0000000480)) r9 = socket$pptp(0x18, 0x1, 0x2) close_range(r9, 0xffffffffffffffff, 0x0) 720.105107ms ago: executing program 1 (id=144): syz_emit_ethernet(0x4b, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa1e8100230043059176e086a4fdf8975657191b3761e4d5fca1a538a9fc3db7b89ad250110c549dd76d23af1129de3c7bafdd6faefe753b3a67e23915a9370278"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x401, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5dc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}}}}}}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000500)=""/83, 0x53}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0, 0xd846f7a1ea0f1539}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$sock_int(r7, 0x1, 0xc, &(0x7f0000000080)=0x17, 0x4) socket(0x2, 0x80805, 0x0) 650.01472ms ago: executing program 1 (id=145): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @remote}, {0x0, 0x17c1, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois', 0x8) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="0080000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = socket(0x1d, 0x2, 0x6) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff004000000000811a78e51fdd63269fe000403a0100000000000000000000000000000000fe80002eae8d890000000000000000ab02009078000024a467b1ce390267d7000093306150953300fc010000000000000000080000000000000000010000000000000000500900"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x8000000000000003, {0x1}}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffff, 0x9}, {0xf, 0xb}, {0x8, 0xffe6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x200088d5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001e00)={'wg2\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 589.345171ms ago: executing program 1 (id=146): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0xff, {0xdb0, 0x400, 0x3d, 0x40c40426, 0x2, 0x3ff}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x8, 0x3, 0x8, 0xf82, 0x3, "2b60cb89c49ff9f4107448f25cee8b8f4da4e6"}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1100}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {0x8, 0x17, 0x7, 0x9}, 0x34, [0x7, 0x8, 0x1, 0x1, 0x2, 0x9, 0x6, 0x80000000, 0x1, 0x3b78, 0xffff, 0xffffff52, 0xfffffffc, 0x74, 0x7, 0x40, 0x9, 0x0, 0x4, 0x2, 0xe8f, 0x4, 0x6, 0x40, 0x9, 0x42, 0x4, 0x4, 0x8, 0x1, 0x7fffffff, 0xfffffffa, 0x1, 0x40, 0xffffff43, 0x15f, 0xb0, 0x7, 0xb1a2, 0x80, 0x0, 0x81, 0x4b, 0x8, 0x6, 0x9, 0xd, 0x800, 0x0, 0x7, 0x7, 0x7, 0x2, 0x3, 0x5, 0x6, 0xffffffff, 0xbd1b, 0x59, 0x7, 0x400, 0xd3, 0x80], [0x4, 0x8, 0x1ff, 0x7, 0x8, 0x8, 0x9, 0x1000, 0x8, 0x5, 0x0, 0x5, 0x80000001, 0x9, 0x1, 0xb, 0x4f, 0x3ab91359, 0x5, 0x4, 0x9, 0x9, 0x10000, 0x7, 0xffff, 0x5, 0xed31, 0x1, 0xf, 0x5, 0x8, 0x800, 0x258, 0x4, 0x7, 0x10, 0x1, 0x1ff, 0x5f54, 0x7, 0x4, 0x0, 0xfb, 0x11ca, 0x2e, 0x8, 0x1, 0x6, 0x0, 0x6f, 0x30, 0x247, 0x80010, 0x4, 0x47b8, 0x8, 0xffffffff, 0x7, 0x7, 0x9, 0x5, 0x0, 0xc3], [0x5, 0x3, 0x4, 0x7b0, 0x1, 0x101, 0x101, 0x7998, 0x8, 0x4, 0x7, 0x0, 0x2, 0x7, 0x7, 0x1, 0x8, 0x8, 0x8000, 0x3, 0x10, 0x1, 0xfffffbff, 0x7, 0xf, 0x6, 0xffffffff, 0x7f, 0x60, 0x8, 0x10000, 0x6, 0xffffffff, 0x97, 0x9, 0x6, 0x9, 0x0, 0x7, 0x1, 0xfbe1, 0x101, 0x0, 0x7, 0x7, 0xf2, 0xfffffff9, 0x9, 0x4, 0x200, 0x6, 0x1, 0x3, 0x9, 0xe9b1, 0x1, 0x2, 0x2, 0x9, 0x1, 0x0, 0x2, 0x3, 0x6], [0xfff, 0x1ff, 0x8001, 0x401, 0xfffffff5, 0xe8, 0xff, 0xfffffffc, 0x5, 0x2, 0x7, 0xd7, 0x5, 0x3, 0x2, 0x6, 0x41, 0x200, 0x2, 0x1, 0xdef9, 0xa, 0xe37, 0x13, 0x8001, 0x2c, 0x4, 0x7, 0x7, 0x1, 0x9, 0x1, 0x2, 0x2, 0x6, 0x6, 0x7, 0x5, 0x4, 0x3, 0x3cd11116, 0xebe, 0x200, 0x1, 0x8, 0x8, 0xfffffffa, 0x4, 0x2, 0x6, 0xfffff311, 0x4, 0x401, 0x4086, 0x8, 0x80000001, 0x99d, 0x4, 0x53c, 0x86, 0x78, 0x3, 0x5, 0x10001]}, 0x45c) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) 480.20393ms ago: executing program 0 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001"], 0x122}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="050003"], 0x28}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0xc800) r6 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) readv(r6, &(0x7f00000025c0)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {0x0}], 0x6) 406.662314ms ago: executing program 2 (id=148): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10}, 0x94) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'macvtap0\x00'}) 405.329846ms ago: executing program 0 (id=149): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000380)=""/203, 0xcb}], 0x2, 0x7, 0x7fff) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x2, r6, 0x1, 0x10, 0x6, @local}, 0x14) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)='Q', 0x1}], 0x1, 0xef9e, 0x4) 405.141327ms ago: executing program 1 (id=150): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x100, 0x4000000000000004, 0x4, 0xfffffffffffffffd, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800], [], [0x0, 0x0, 0x6]}) 404.460472ms ago: executing program 2 (id=151): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r2, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x301) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) syncfs(r1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r5, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000011c0)={0x0, 0x0, r7, r8, 0x2000, 0x0, 0x2, 0x802, {0x6, 0x2, 0x7, 0x69, 0xf4b, 0x0, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0xf6, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) ioctl$KDSETMODE(r0, 0x4b45, 0x1) 320.370757ms ago: executing program 2 (id=152): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, &(0x7f0000000480)}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 318.154462ms ago: executing program 3 (id=153): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000540)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@newqdisc={0x28, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3, 0xfff1}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000ddd01153041c000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028005002c0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 260.0255ms ago: executing program 2 (id=154): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES8=r3], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 259.410852ms ago: executing program 3 (id=155): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@can_newroute={0x44, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "d3698ac660061306"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2}, 0x6, 0x3, 0x0, 0x0, "5e0203a761254863"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @remote, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @remote, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20008044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001400b59527bd7000fb5dae7823090000b34d1200", @ANYRES32=r0, @ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 180.474589ms ago: executing program 0 (id=156): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) userfaultfd(0x80001) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) readv(r6, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf34) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7}}]}}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7}}]}}}]}, 0x60}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@empty, 0x1f, r8}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x5a413, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 100.340971ms ago: executing program 0 (id=157): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) unshare(0x6c040000) 630.512µs ago: executing program 0 (id=158): r0 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) 0s ago: executing program 0 (id=159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000015c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) sendto$isdn(r1, 0x0, 0x0, 0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$CDROM_DISC_STATUS(r4, 0x5327) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYRES16], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff0000000081000000000000001ea77c1aa78e2d1ec5c6dfd7091d1056be13bd00518d7e28002359b2138f772d3ad21a3a33dd10ac04de247c3380045ae04bd17b733d0d13412550e7630c77", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) pipe2$watch_queue(&(0x7f0000000040), 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0x4}, {0x0, 0x1}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) write$nci(r9, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @a_listen={0xc2, 0x3, 0x2, 0x80, 0x4, 0x5, 0x2, "", 0x7, 0x4f, 0xc3, 0xf, 0x52, "df74b508a1ec4511f013c218ff26e969ca5ec4d0d9c4e1a3bd95f0b7c55291ea8b331990a2abdcc443ae49b8a221da4b66530dac64402940d50668463398dffd5a588cff6bc04fac65454ab3419b2c7731e1"}}, 0x61) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x820b001, 0xfb, &(0x7f0000000440)=""/251}]}) r14 = dup(r13) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000040)={0x0, r14}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:47568' (ED25519) to the list of known hosts. [ 55.608400][ T40] audit: type=1400 audit(1765576974.280:62): avc: denied { name_bind } for pid=5916 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.636249][ T40] audit: type=1400 audit(1765576974.310:63): avc: denied { execute } for pid=5917 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.644932][ T40] audit: type=1400 audit(1765576974.310:64): avc: denied { execute_no_trans } for pid=5917 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.907943][ T40] audit: type=1400 audit(1765576976.580:65): avc: denied { mounton } for pid=5917 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.916457][ T40] audit: type=1400 audit(1765576976.590:66): avc: denied { mount } for pid=5917 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.918187][ T5917] cgroup: Unknown subsys name 'net' [ 58.066215][ T5917] cgroup: Unknown subsys name 'cpuset' [ 58.070969][ T5917] cgroup: Unknown subsys name 'rlimit' [ 58.308034][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 58.308051][ T40] audit: type=1400 audit(1765576976.980:68): avc: denied { setattr } for pid=5917 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.320584][ T40] audit: type=1400 audit(1765576976.980:69): avc: denied { create } for pid=5917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.330493][ T40] audit: type=1400 audit(1765576976.980:70): avc: denied { write } for pid=5917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.339415][ T40] audit: type=1400 audit(1765576976.980:71): avc: denied { read } for pid=5917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.348173][ T40] audit: type=1400 audit(1765576976.990:72): avc: denied { mounton } for pid=5917 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.358541][ T40] audit: type=1400 audit(1765576976.990:73): avc: denied { mount } for pid=5917 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.368736][ T40] audit: type=1400 audit(1765576977.010:74): avc: denied { read } for pid=5642 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.377584][ T40] audit: type=1400 audit(1765576977.010:75): avc: denied { read } for pid=5642 comm="dhcpcd" name="n102" dev="tmpfs" ino=1960 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.377937][ T5921] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.387191][ T40] audit: type=1400 audit(1765576977.010:76): avc: denied { open } for pid=5642 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1960 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.398966][ T40] audit: type=1400 audit(1765576977.010:77): avc: denied { getattr } for pid=5642 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1960 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.163418][ T5917] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.729814][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.735176][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.738941][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.741678][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.745299][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.758751][ T5291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.764504][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.774026][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.774056][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.776876][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.779365][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.781756][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.783585][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.785349][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.786116][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.786186][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.786717][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.786970][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.803705][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.807288][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.045665][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 63.137086][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 63.210096][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 63.257050][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.260724][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.264387][ T5930] bridge_slave_0: entered allmulticast mode [ 63.268522][ T5930] bridge_slave_0: entered promiscuous mode [ 63.297479][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.300565][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.304380][ T5930] bridge_slave_1: entered allmulticast mode [ 63.308360][ T5930] bridge_slave_1: entered promiscuous mode [ 63.323090][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 63.469978][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.474555][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.476933][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.479397][ T5934] bridge_slave_0: entered allmulticast mode [ 63.482594][ T5934] bridge_slave_0: entered promiscuous mode [ 63.491454][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.493860][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.496276][ T5934] bridge_slave_1: entered allmulticast mode [ 63.499118][ T5934] bridge_slave_1: entered promiscuous mode [ 63.507734][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.556794][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.562558][ T5930] team0: Port device team_slave_0 added [ 63.565022][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.568275][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.571349][ T5939] bridge_slave_0: entered allmulticast mode [ 63.575404][ T5939] bridge_slave_0: entered promiscuous mode [ 63.592284][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.598405][ T5930] team0: Port device team_slave_1 added [ 63.601123][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.604541][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.607661][ T5939] bridge_slave_1: entered allmulticast mode [ 63.611364][ T5939] bridge_slave_1: entered promiscuous mode [ 63.639882][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.642299][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.644546][ T5935] bridge_slave_0: entered allmulticast mode [ 63.647422][ T5935] bridge_slave_0: entered promiscuous mode [ 63.677740][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.680812][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.683805][ T5935] bridge_slave_1: entered allmulticast mode [ 63.687697][ T5935] bridge_slave_1: entered promiscuous mode [ 63.701982][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.704292][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.712262][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.717200][ T5934] team0: Port device team_slave_0 added [ 63.720624][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.733140][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.736976][ T5934] team0: Port device team_slave_1 added [ 63.739413][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.741803][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.750153][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.755207][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.764453][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.801212][ T5939] team0: Port device team_slave_0 added [ 63.804551][ T5939] team0: Port device team_slave_1 added [ 63.807221][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.809376][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.817319][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.826847][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.829034][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.836826][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.848132][ T5935] team0: Port device team_slave_0 added [ 63.855764][ T5935] team0: Port device team_slave_1 added [ 63.872856][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.875542][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.884615][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.889437][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.892386][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.901252][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.945723][ T5930] hsr_slave_0: entered promiscuous mode [ 63.948866][ T5930] hsr_slave_1: entered promiscuous mode [ 63.959146][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.961354][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.969625][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.974039][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.976153][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.984195][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.997099][ T5934] hsr_slave_0: entered promiscuous mode [ 64.000280][ T5934] hsr_slave_1: entered promiscuous mode [ 64.003312][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 64.005780][ T5934] Cannot create hsr debugfs directory [ 64.052573][ T5939] hsr_slave_0: entered promiscuous mode [ 64.055430][ T5939] hsr_slave_1: entered promiscuous mode [ 64.057562][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 64.059392][ T5939] Cannot create hsr debugfs directory [ 64.149357][ T5935] hsr_slave_0: entered promiscuous mode [ 64.151697][ T5935] hsr_slave_1: entered promiscuous mode [ 64.154566][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 64.156475][ T5935] Cannot create hsr debugfs directory [ 64.407377][ T5930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.416987][ T5930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.421792][ T5930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.441670][ T5930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.479006][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.486071][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.491975][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.499752][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.557259][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.561933][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.566600][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.570855][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.622888][ T5935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.630044][ T5935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.635481][ T5935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.640098][ T5935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.646870][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.683304][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.698521][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.700924][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.718779][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.723661][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.726724][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.750142][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.767356][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.770519][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.773370][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.785360][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.787681][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.795365][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.804078][ T5944] Bluetooth: hci1: command tx timeout [ 64.804084][ T5932] Bluetooth: hci3: command tx timeout [ 64.808376][ T5291] Bluetooth: hci0: command tx timeout [ 64.839266][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.844499][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.869486][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.872262][ T5291] Bluetooth: hci2: command tx timeout [ 64.872457][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.886640][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.889581][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.908712][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 64.908763][ T40] audit: type=1400 audit(1765576983.580:91): avc: denied { sys_module } for pid=5930 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.921329][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.924406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.930063][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.933078][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.990765][ T5935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.020481][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.069651][ T5930] veth0_vlan: entered promiscuous mode [ 65.094299][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.097895][ T5930] veth1_vlan: entered promiscuous mode [ 65.141535][ T5930] veth0_macvtap: entered promiscuous mode [ 65.157095][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.166619][ T5930] veth1_macvtap: entered promiscuous mode [ 65.173322][ T5934] veth0_vlan: entered promiscuous mode [ 65.189750][ T5934] veth1_vlan: entered promiscuous mode [ 65.199857][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.214735][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.226055][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.228955][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.236390][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.242902][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.245660][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.265255][ T5935] veth0_vlan: entered promiscuous mode [ 65.287608][ T5935] veth1_vlan: entered promiscuous mode [ 65.293604][ T5934] veth0_macvtap: entered promiscuous mode [ 65.315876][ T5934] veth1_macvtap: entered promiscuous mode [ 65.329186][ T5939] veth0_vlan: entered promiscuous mode [ 65.329217][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.336281][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.365259][ T5939] veth1_vlan: entered promiscuous mode [ 65.370400][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.379105][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.388686][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.391910][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.393438][ T5935] veth0_macvtap: entered promiscuous mode [ 65.403692][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.407002][ T40] audit: type=1400 audit(1765576984.080:92): avc: denied { mount } for pid=5930 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.413853][ T5935] veth1_macvtap: entered promiscuous mode [ 65.415029][ T40] audit: type=1400 audit(1765576984.080:93): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/syzkaller.7Qgy5C/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.425867][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.426278][ T40] audit: type=1400 audit(1765576984.080:94): avc: denied { mount } for pid=5930 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.430060][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.435770][ T40] audit: type=1400 audit(1765576984.090:95): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/syzkaller.7Qgy5C/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.447044][ T40] audit: type=1400 audit(1765576984.090:96): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/syzkaller.7Qgy5C/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.450218][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.455241][ T40] audit: type=1400 audit(1765576984.090:97): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.455267][ T40] audit: type=1400 audit(1765576984.110:98): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.455287][ T40] audit: type=1400 audit(1765576984.110:99): avc: denied { mount } for pid=5930 comm="syz-executor" name="/" dev="gadgetfs" ino=8385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.455307][ T40] audit: type=1400 audit(1765576984.120:100): avc: denied { mount } for pid=5930 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.503564][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.543987][ T5939] veth0_macvtap: entered promiscuous mode [ 65.558164][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.567695][ T5939] veth1_macvtap: entered promiscuous mode [ 65.577990][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.603048][ T1228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.606319][ T1228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.609984][ T1228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.617615][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.620789][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.623866][ T1228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.631979][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.653739][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.656743][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.659904][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.674041][ T237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.677522][ T237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.688176][ T237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.698393][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.715651][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.718968][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.755939][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.759268][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.785414][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.788912][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.816335][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.819448][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.852438][ T5996] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.884159][ T6034] x_tables: duplicate underflow at hook 1 [ 65.921654][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.956759][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 65.980928][ T6043] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 66.002228][ T5996] usb 6-1: Using ep0 maxpacket: 16 [ 66.010437][ T5996] usb 6-1: unable to get BOS descriptor or descriptor too short [ 66.015820][ T5996] usb 6-1: config 9 has an invalid interface number: 129 but max is 0 [ 66.019268][ T5996] usb 6-1: config 9 has no interface number 0 [ 66.021876][ T5996] usb 6-1: config 9 interface 129 has no altsetting 0 [ 66.029113][ T5996] usb 6-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 66.032720][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.035241][ T5996] usb 6-1: Product: syz [ 66.036707][ T5996] usb 6-1: Manufacturer: syz [ 66.038174][ T5996] usb 6-1: SerialNumber: syz [ 66.199534][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 66.342598][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.364903][ T5996] usb 6-1: bad CDC descriptors [ 66.370584][ T5996] usb 6-1: USB disconnect, device number 2 [ 66.386221][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 66.397305][ T6076] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 66.405791][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 66.482274][ T34] usb 7-1: device descriptor read/64, error -71 [ 66.557801][ T6089] netlink: 6 bytes leftover after parsing attributes in process `syz.1.20'. [ 66.650745][ T6092] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 66.702183][ T830] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.722213][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.852169][ T830] usb 8-1: Using ep0 maxpacket: 8 [ 66.852187][ T34] usb 7-1: device descriptor read/64, error -71 [ 66.855892][ T830] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 66.861048][ T830] usb 8-1: config 16 has an invalid interface number: 3 but max is 0 [ 66.861235][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 66.864029][ T830] usb 8-1: config 16 has no interface number 0 [ 66.869802][ T830] usb 8-1: config 16 interface 3 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.871223][ T6098] : entered promiscuous mode [ 66.872370][ T5291] Bluetooth: hci0: command tx timeout [ 66.872393][ T5291] Bluetooth: hci3: command tx timeout [ 66.872405][ T5291] Bluetooth: hci1: command tx timeout [ 66.874700][ T830] usb 8-1: config 16 interface 3 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.886247][ T830] usb 8-1: config 16 interface 3 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.889836][ T830] usb 8-1: config 16 interface 3 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.896390][ T830] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.899491][ T830] usb 8-1: New USB device strings: Mfr=0, Product=199, SerialNumber=0 [ 66.902513][ T830] usb 8-1: Product: syz [ 66.953127][ T5932] Bluetooth: hci2: command tx timeout [ 66.962741][ T34] usb usb7-port1: attempt power cycle [ 66.995419][ T6109] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 67.112516][ T830] usb 8-1: usb_control_msg returned -32 [ 67.114450][ T830] usbtmc 8-1:16.3: can't read capabilities [ 67.121939][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 67.223753][ T6015] hid-generic 0362:07FF:7FFFFFFF.0002: item fetching failed at offset 0/2 [ 67.227556][ T6015] hid-generic 0362:07FF:7FFFFFFF.0002: probe with driver hid-generic failed with error -22 [ 67.289984][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 67.302196][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.332846][ T34] usb 7-1: device descriptor read/8, error -71 [ 67.370382][ T6128] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 67.373026][ T6128] netlink: 'syz.1.28': attribute type 7 has an invalid length. [ 67.375858][ T6128] netlink: 'syz.1.28': attribute type 8 has an invalid length. [ 67.378483][ T6128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.28'. [ 67.592251][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.622621][ T34] usb 7-1: device descriptor read/8, error -71 [ 67.732614][ T34] usb usb7-port1: unable to enumerate USB device [ 68.247414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.273381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.316365][ T6172] Bluetooth: MGMT ver 1.23 [ 68.538525][ T6179] program syz.1.41 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.728402][ T6191] xt_CT: No such helper "snmp_trap" [ 68.822401][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.827771][ T6197] netlink: 'syz.0.47': attribute type 39 has an invalid length. [ 68.843434][ T6197] veth0_macvtap: left promiscuous mode [ 68.952600][ T5291] Bluetooth: hci3: command tx timeout [ 68.952658][ T5932] Bluetooth: hci1: command tx timeout [ 68.954830][ T5291] Bluetooth: hci0: command tx timeout [ 68.969021][ T6203] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 69.004028][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.007696][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 69.012161][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.017471][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.020811][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.025165][ T29] usb 6-1: config 0 descriptor?? [ 69.027544][ T6181] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 69.032529][ T5291] Bluetooth: hci2: command tx timeout [ 69.164625][ T6205] sp0: Synchronizing with TNC [ 69.177046][ T6205] [U] è [ 69.395971][ T6214] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1440 (2880 ns) > initial count (10 ns). Using initial count to start timer. [ 69.437026][ T29] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.439553][ T29] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.443523][ T29] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.443674][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'. [ 69.445924][ T29] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.445946][ T29] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.445958][ T29] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.457506][ T29] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.459942][ T29] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.462631][ T29] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 69.475012][ T29] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 69.481691][ T61] usb 8-1: USB disconnect, device number 2 [ 69.523465][ T6225] trusted_key: encrypted_key: insufficient parameters specified [ 69.676424][ T29] usb 6-1: USB disconnect, device number 3 [ 69.824726][ T6239] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.974598][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 69.974609][ T40] audit: type=1400 audit(1765576988.650:234): avc: denied { execute } for pid=6243 comm="syz.3.61" dev="tmpfs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.975042][ T6244] process 'syz.3.61' launched '/dev/fd/3' with NULL argv: empty string added [ 69.990933][ T40] audit: type=1400 audit(1765576988.660:235): avc: denied { execute_no_trans } for pid=6243 comm="syz.3.61" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.072941][ T40] audit: type=1400 audit(1765576988.740:236): avc: denied { sys_module } for pid=6243 comm="syz.3.61" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.246385][ T40] audit: type=1400 audit(1765576988.920:237): avc: denied { write } for pid=6254 comm="syz.1.64" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.253770][ T40] audit: type=1400 audit(1765576988.920:238): avc: denied { open } for pid=6254 comm="syz.1.64" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.261839][ T40] audit: type=1400 audit(1765576988.920:239): avc: denied { ioctl } for pid=6254 comm="syz.1.64" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.346976][ T40] audit: type=1400 audit(1765576989.020:240): avc: denied { ioctl } for pid=6258 comm="syz.2.66" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.348898][ T6263] ======================================================= [ 70.348898][ T6263] WARNING: The mand mount option has been deprecated and [ 70.348898][ T6263] and is ignored by this kernel. Remove the mand [ 70.348898][ T6263] option from the mount to silence this warning. [ 70.348898][ T6263] ======================================================= [ 70.380178][ T6261] team0: Device gtp0 is up. Set it down before adding it as a team port [ 70.401716][ T6265] xt_bpf: check failed: parse error [ 70.404937][ T40] audit: type=1400 audit(1765576989.080:241): avc: denied { bind } for pid=6254 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.432351][ T40] audit: type=1400 audit(1765576989.100:242): avc: denied { ioctl } for pid=6267 comm="syz.0.69" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8872 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.474186][ T6271] bridge0: entered promiscuous mode [ 70.476175][ T6271] macsec1: entered allmulticast mode [ 70.478076][ T6271] bridge0: entered allmulticast mode [ 70.489648][ T6268] binder: 6267:6268 ioctl 560a 200000001700 returned -22 [ 70.492829][ T40] audit: type=1400 audit(1765576989.160:243): avc: denied { watch } for pid=6267 comm="syz.0.69" path="/26/control" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.542387][ T6274] Zero length message leads to an empty skb [ 70.577718][ T6276] 9pnet_fd: p9_fd_create_tcp (6276): problem connecting socket to 127.0.0.1 [ 70.740238][ T6303] fuse: Unknown parameter 'group¾4iB00000000000000000000' [ 70.772937][ T6306] Bluetooth: MGMT ver 1.23 [ 70.847479][ T6321] Cannot find add_set index 4 as target [ 70.905269][ T6325] sit0: entered promiscuous mode [ 70.915752][ T6325] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 71.032433][ T5932] Bluetooth: hci0: command tx timeout [ 71.033508][ T5944] Bluetooth: hci3: command tx timeout [ 71.035074][ T5291] Bluetooth: hci1: command tx timeout [ 71.112863][ T5944] Bluetooth: hci2: command tx timeout [ 71.658452][ T6361] __nla_validate_parse: 3 callbacks suppressed [ 71.658468][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 72.071204][ T6382] overlayfs: missing 'lowerdir' [ 72.078530][ T6378] bond1: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 72.085154][ T6378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.099247][ T6384] openvswitch: netlink: Flow actions attr not present in new flow. [ 72.181069][ T6394] input: syz0 as /devices/virtual/input/input5 [ 72.210654][ T6397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.478999][ T6432] netlink: 144 bytes leftover after parsing attributes in process `syz.2.122'. [ 72.584660][ T5996] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.588934][ T6448] input: syz0 as /devices/virtual/input/input6 [ 72.747875][ T6473] syz.3.129 uses obsolete (PF_INET,SOCK_PACKET) [ 72.748456][ T5996] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 72.761176][ T6472] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.130'. [ 72.762936][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 72.766789][ T5996] usb 6-1: Product: syz [ 72.768137][ T5996] usb 6-1: Manufacturer: syz [ 72.769604][ T5996] usb 6-1: SerialNumber: syz [ 72.783171][ T5996] usb 6-1: config 0 descriptor?? [ 72.798178][ T5996] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 72.801650][ T5996] dvb-usb: bulk message failed: -22 (2/0) [ 72.823007][ T5996] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.827481][ T5996] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 72.830789][ T5996] usb 6-1: media controller created [ 72.847264][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.895976][ T6487] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 72.988791][ T6414] dvb-usb: bulk message failed: -22 (4/0) [ 72.999574][ T6414] cxusb: i2c read failed [ 73.002869][ T5996] cxusb: set interface failed [ 73.004906][ T5996] dvb-usb: bulk message failed: -22 (1/0) [ 73.047652][ T5996] DVB: Unable to find symbol mt352_attach() [ 73.052182][ T5996] dvb-usb: bulk message failed: -22 (5/0) [ 73.054784][ T5996] zl10353_read_register: readreg error (reg=127, ret==-121) [ 73.057912][ T5996] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 73.112292][ T5996] rc_core: IR keymap rc-dvico-mce not found [ 73.114744][ T5996] Registered IR keymap rc-empty [ 73.123633][ T5996] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 73.129156][ T6516] netlink: 260 bytes leftover after parsing attributes in process `syz.0.138'. [ 73.130735][ T5996] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input7 [ 73.150580][ T5996] dvb-usb: schedule remote query interval to 100 msecs. [ 73.153736][ T5996] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 73.157727][ T6512] xt_CT: No such helper "snmp_trap" [ 73.159545][ T5996] usb 6-1: USB disconnect, device number 4 [ 73.208971][ T6512] xt_CT: No such helper "snmp_trap" [ 73.243754][ T6512] xt_CT: No such helper "snmp_trap" [ 73.246668][ T5996] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 73.263364][ T6512] xt_CT: No such helper "snmp_trap" [ 73.287164][ T6512] xt_CT: No such helper "snmp_trap" [ 73.313321][ T6512] xt_CT: No such helper "snmp_trap" [ 73.335216][ T6512] xt_CT: No such helper "snmp_trap" [ 73.355658][ T6512] xt_CT: No such helper "snmp_trap" [ 73.377575][ T6512] xt_CT: No such helper "snmp_trap" [ 73.546900][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 73.557020][ T6549] capability: warning: `syz.1.144' uses deprecated v2 capabilities in a way that may be insecure [ 73.589062][ T6542] netlink: 'syz.0.143': attribute type 4 has an invalid length. [ 73.591627][ T6542] netlink: 17 bytes leftover after parsing attributes in process `syz.0.143'. [ 73.629683][ T6560] netlink: 536 bytes leftover after parsing attributes in process `syz.1.145'. [ 73.664277][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 73.702756][ T6564] kvm: user requested TSC rate below hardware speed [ 73.709312][ T6564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4180564684 (8361129368 ns) > initial count (6590827116 ns). Using initial count to start timer. [ 73.741227][ T6512] xt_ct_set_helper: 12 callbacks suppressed [ 73.741244][ T6512] xt_CT: No such helper "snmp_trap" [ 73.767104][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 73.773160][ T6512] xt_CT: No such helper "snmp_trap" [ 73.793370][ T6512] xt_CT: No such helper "snmp_trap" [ 73.819251][ T6512] xt_CT: No such helper "snmp_trap" [ 73.884433][ T6512] xt_CT: No such helper "snmp_trap" [ 73.908992][ T6512] xt_CT: No such helper "snmp_trap" [ 73.917592][ T6580] syz.0.149 (6580): drop_caches: 0 [ 73.933785][ T6512] xt_CT: No such helper "snmp_trap" [ 74.097537][ T6600] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 74.105163][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'. [ 74.313066][ T29] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 74.315145][ T29] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 74.322136][ C3] ------------[ cut here ]------------ [ 74.324675][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 74.327636][ C3] WARNING: kernel/workqueue.c:2251 at 0x0, CPU#3: swapper/3/0 [ 74.330883][ C3] Modules linked in: [ 74.334816][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.339112][ C3] Tainted: [L]=SOFTLOCKUP [ 74.340944][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.345281][ C3] RIP: 0010:__queue_work+0xca1/0x10e0 [ 74.347344][ C3] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d 63 bf 06 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 30 31 3a 00 90 0f 0b 90 e9 15 f6 [ 74.354895][ C3] RSP: 0018:ffffc900006f8be8 EFLAGS: 00010046 [ 74.357229][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11007288951 [ 74.360294][ C3] RDX: ffff8881075b6978 RSI: ffffffff8a6afda0 RDI: ffffffff908b71e0 [ 74.363267][ C3] RBP: ffff888039444a70 R08: 0000000000000005 R09: 0000000000000000 [ 74.366484][ C3] R10: 0000000000000100 R11: ffff88801def8b30 R12: 1ffff920000df18f [ 74.369636][ C3] R13: ffffffff8184c3c0 R14: 0000000080000101 R15: ffff8881075b6800 [ 74.372758][ C3] FS: 0000000000000000(0000) GS:ffff8880d6bfb000(0000) knlGS:0000000000000000 [ 74.376131][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.378700][ C3] CR2: 00005555612e7808 CR3: 000000000e184000 CR4: 0000000000352ef0 [ 74.382000][ C3] Call Trace: [ 74.383439][ C3] [ 74.384648][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.386954][ C3] call_timer_fn+0x19a/0x5a0 [ 74.388865][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 74.391011][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.393460][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.395914][ C3] ? __run_timers+0x559/0xae0 [ 74.397964][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.400472][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.402984][ C3] __run_timers+0x569/0xae0 [ 74.404927][ C3] ? __pfx___run_timers+0x10/0x10 [ 74.407159][ C3] run_timer_base+0x114/0x190 [ 74.409138][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 74.411355][ C3] ? rcu_is_watching+0x12/0xc0 [ 74.413414][ C3] run_timer_softirq+0x1a/0x40 [ 74.415403][ C3] handle_softirqs+0x219/0x950 [ 74.417455][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 74.419667][ C3] __irq_exit_rcu+0x109/0x170 [ 74.421572][ C3] irq_exit_rcu+0x9/0x30 [ 74.423246][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 74.425098][ C3] [ 74.426136][ C3] [ 74.427168][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.429590][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 74.431968][ C3] Code: 26 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 d9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 74.439937][ C3] RSP: 0018:ffffc90000197de8 EFLAGS: 00000286 [ 74.442580][ C3] RAX: 000000000006f41b RBX: 0000000000000003 RCX: ffffffff8b7786d9 [ 74.445864][ C3] RDX: 0000000000000000 RSI: ffffffff8dacbd07 RDI: ffffffff8bf2a800 [ 74.449223][ C3] RBP: ffffed1003bdf000 R08: 0000000000000001 R09: ffffed100d4e673d [ 74.452376][ C3] R10: ffff88806a7339eb R11: ffff88801def8b30 R12: 0000000000000003 [ 74.455418][ C3] R13: ffff88801def8000 R14: ffffffff908880d0 R15: 0000000000000000 [ 74.458431][ C3] ? ct_kernel_exit+0x139/0x190 [ 74.460464][ C3] default_idle+0x13/0x20 [ 74.462303][ C3] default_idle_call+0x6c/0xb0 [ 74.463914][ C3] do_idle+0x38d/0x510 [ 74.465281][ C3] ? __pfx_do_idle+0x10/0x10 [ 74.466841][ C3] cpu_startup_entry+0x4f/0x60 [ 74.468371][ C3] start_secondary+0x21d/0x2d0 [ 74.469969][ C3] ? __pfx_start_secondary+0x10/0x10 [ 74.472206][ C3] common_startup_64+0x13e/0x148 [ 74.474168][ C3] [ 74.475290][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.477921][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.481707][ C3] Tainted: [L]=SOFTLOCKUP [ 74.483523][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.488016][ C3] Call Trace: [ 74.489423][ C3] [ 74.490646][ C3] dump_stack_lvl+0x3d/0x1f0 [ 74.492546][ C3] vpanic+0x640/0x6f0 [ 74.494277][ C3] panic+0xca/0xd0 [ 74.495895][ C3] ? __pfx_panic+0x10/0x10 [ 74.497772][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 74.499763][ C3] check_panic_on_warn+0xab/0xb0 [ 74.501434][ C3] __warn+0x108/0x3c0 [ 74.502795][ C3] __report_bug+0x2a0/0x520 [ 74.504473][ C3] ? __pfx___report_bug+0x10/0x10 [ 74.506419][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 74.508324][ C3] ? __lock_acquire+0x436/0x2890 [ 74.510337][ C3] ? look_up_lock_class+0x59/0x130 [ 74.512450][ C3] report_bug_entry+0xb2/0x220 [ 74.514341][ C3] ? __queue_work+0xca1/0x10e0 [ 74.516329][ C3] handle_bug+0x18a/0x260 [ 74.518194][ C3] exc_invalid_op+0x17/0x50 [ 74.520146][ C3] asm_exc_invalid_op+0x1a/0x20 [ 74.522226][ C3] RIP: 0010:__queue_work+0xca1/0x10e0 [ 74.524408][ C3] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d 63 bf 06 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 30 31 3a 00 90 0f 0b 90 e9 15 f6 [ 74.532098][ C3] RSP: 0018:ffffc900006f8be8 EFLAGS: 00010046 [ 74.534585][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11007288951 [ 74.537882][ C3] RDX: ffff8881075b6978 RSI: ffffffff8a6afda0 RDI: ffffffff908b71e0 [ 74.540900][ C3] RBP: ffff888039444a70 R08: 0000000000000005 R09: 0000000000000000 [ 74.543471][ C3] R10: 0000000000000100 R11: ffff88801def8b30 R12: 1ffff920000df18f [ 74.546422][ C3] R13: ffffffff8184c3c0 R14: 0000000080000101 R15: ffff8881075b6800 [ 74.549699][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.552224][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 74.554529][ C3] ? __queue_work+0xc70/0x10e0 [ 74.556626][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.559175][ C3] call_timer_fn+0x19a/0x5a0 [ 74.561178][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 74.563380][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.565860][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.568330][ C3] ? __run_timers+0x559/0xae0 [ 74.570328][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.572772][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 74.575245][ C3] __run_timers+0x569/0xae0 [ 74.577207][ C3] ? __pfx___run_timers+0x10/0x10 [ 74.579342][ C3] run_timer_base+0x114/0x190 [ 74.581341][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 74.583584][ C3] ? rcu_is_watching+0x12/0xc0 [ 74.585624][ C3] run_timer_softirq+0x1a/0x40 [ 74.587715][ C3] handle_softirqs+0x219/0x950 [ 74.589834][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 74.592103][ C3] __irq_exit_rcu+0x109/0x170 [ 74.594150][ C3] irq_exit_rcu+0x9/0x30 [ 74.596010][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 74.598141][ C3] [ 74.599354][ C3] [ 74.600571][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.603043][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 74.605353][ C3] Code: 26 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 d9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 74.612721][ C3] RSP: 0018:ffffc90000197de8 EFLAGS: 00000286 [ 74.615232][ C3] RAX: 000000000006f41b RBX: 0000000000000003 RCX: ffffffff8b7786d9 [ 74.617992][ C3] RDX: 0000000000000000 RSI: ffffffff8dacbd07 RDI: ffffffff8bf2a800 [ 74.620881][ C3] RBP: ffffed1003bdf000 R08: 0000000000000001 R09: ffffed100d4e673d [ 74.624085][ C3] R10: ffff88806a7339eb R11: ffff88801def8b30 R12: 0000000000000003 [ 74.626716][ C3] R13: ffff88801def8000 R14: ffffffff908880d0 R15: 0000000000000000 [ 74.629279][ C3] ? ct_kernel_exit+0x139/0x190 [ 74.631019][ C3] default_idle+0x13/0x20 [ 74.632437][ C3] default_idle_call+0x6c/0xb0 [ 74.634054][ C3] do_idle+0x38d/0x510 [ 74.635393][ C3] ? __pfx_do_idle+0x10/0x10 [ 74.636946][ C3] cpu_startup_entry+0x4f/0x60 [ 74.638604][ C3] start_secondary+0x21d/0x2d0 [ 74.640351][ C3] ? __pfx_start_secondary+0x10/0x10 [ 74.642599][ C3] common_startup_64+0x13e/0x148 [ 74.644717][ C3] [ 74.646847][ C3] Kernel Offset: disabled [ 74.648645][ C3] Rebooting in 86400 seconds..