last executing test programs: 2m32.63761123s ago: executing program 3 (id=965): socket(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x20e400, 0x0) socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x1, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5, 0xffff}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 2m32.4580903s ago: executing program 3 (id=967): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000004200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m32.378280194s ago: executing program 3 (id=968): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r1, r0, 0x0) 2m32.378014481s ago: executing program 3 (id=969): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) syz_80211_inject_frame(&(0x7f0000000f40)=@broadcast, &(0x7f0000002340)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x9, 0x5}, "", @value={0xa, 0x0, 0x1, 0x0, 0xc6}}}, 0x1a) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000002240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x30, 0xc2, 0x0, 0x0, 0x0, {[@nop, @eol, @mptcp=@remove_addr={0x1e, 0x88, 0x2, 0x0, "7e54ceff63411693105d43a5dce60b379c5d36facc8b7ac8d265d81e804508935373c469f99d43c81cb6ae61fbd2eb23affc8b87b082b6f9799e2440e65dd950ab43e5d1230cecd570624db5550a062fb171bee943b04111fde1cc0971469afd541e4d45a4744b06a1df96feba1082245bbb36d3d5e423c735159845fd5253a13498831c74"}, @md5sig={0x13, 0x12, "7c395733018c7bd5eb0b6d1fc194d870"}, @exp_fastopen={0xfe, 0x7, 0xf989, "465a9f"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) write(r3, &(0x7f0000000840)='\n', 0x1) 2m31.738081495s ago: executing program 3 (id=974): r0 = epoll_create1(0x80000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x110) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r2, &(0x7f0000000400)=""/1000, 0x3e8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x4c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/161) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r5) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x1) ptrace$pokeuser(0x6, r4, 0x388, 0x6) 2m31.528273129s ago: executing program 3 (id=977): listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x26081, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x0, 0x5, 0x88, {}, 0x0, 0xffff}) 2m16.522372649s ago: executing program 32 (id=977): listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x26081, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x0, 0x5, 0x88, {}, 0x0, 0xffff}) 1m10.047116828s ago: executing program 2 (id=2671): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100007fff000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m9.977528606s ago: executing program 2 (id=2673): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='totmaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000540)=0xfffffe0b) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f00000001c0), 0x218006, &(0x7f0000000240)={[{@subsystem='cpuset'}]}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, r7, {0x7, 0x1f, 0x4, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x10, {0x6, 0xfffffffffffffffd, 0x8001, 0x2000000000000000, 0x1, 0x5, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0xc000, 0x2001, r8, 0xee01, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r8) r9 = syz_open_dev$MSR(&(0x7f0000000500), 0xb, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r9) write(r1, &(0x7f0000000000)="000000000902190003010080320904000001ff000000070581024000000902190001012f9b67da02dc21008032090400fa00ff0000c536005890300705810200020012fbfd020000", 0x48) r10 = open_tree(r0, &(0x7f0000000300)='mnt\x00', 0x8801) ftruncate(r1, 0x3) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x89100) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) move_mount(r10, 0x0, r11, 0x0, 0x46) 1m9.917767059s ago: executing program 2 (id=2675): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x8001}]}]}}, 0x0, 0x66, 0x0, 0x4e}, 0x28) 1m9.917548311s ago: executing program 2 (id=2676): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000880)={0x1, 0x5, 0x7fffffffffffffff, 0x400, 0xfff, 0x5}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000140)=0x3ff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', 0x0, r1, 0x5, 0x5, 0x2}, 0x50) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1m9.824395646s ago: executing program 2 (id=2677): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket(0x10, 0xa, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r1, r1, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10d2, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)}) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000040), 0x4) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x15) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) write(r6, &(0x7f0000000400)='ptn36502 0x1a\n\x00', 0xe) r7 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) r8 = signalfd(r0, &(0x7f0000000140)={[0xdc]}, 0x8) kcmp(0x0, r7, 0x0, r8, r4) 1m9.726038099s ago: executing program 2 (id=2679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'ip6gre0\x00'}}, 0x1e) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:']) shutdown(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) listen(r1, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0xffff48af}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(0x0, r5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000780)={0x304, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6ffc4a5b2e2ba2a09fc20369fa76ea39327c556763cf029e17357c"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9289baf5db919fbca07d58b192a1ad2f35c7078a17"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "40863dad50bbcd569306046d1ab575e643069e868714eebf5fc9eedfd8481c338570"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "cb96475be9ee7fecc8918d86bfb6634253862946731b201b140ef783007d25"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xefc}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "20f467b23c908af7958b41250e83d3146ebfd7d05ffd00e2c045d2d7f12bb705bec6dc"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x15, 0x3, "280bda7d57db898995cca1beb10f141830"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4f51}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf3}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x8004040}, 0x40001) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 53.795375551s ago: executing program 33 (id=2679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'ip6gre0\x00'}}, 0x1e) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:']) shutdown(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) listen(r1, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0xffff48af}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(0x0, r5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000780)={0x304, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6ffc4a5b2e2ba2a09fc20369fa76ea39327c556763cf029e17357c"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9289baf5db919fbca07d58b192a1ad2f35c7078a17"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "40863dad50bbcd569306046d1ab575e643069e868714eebf5fc9eedfd8481c338570"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "cb96475be9ee7fecc8918d86bfb6634253862946731b201b140ef783007d25"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xefc}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "20f467b23c908af7958b41250e83d3146ebfd7d05ffd00e2c045d2d7f12bb705bec6dc"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x15, 0x3, "280bda7d57db898995cca1beb10f141830"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4f51}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf3}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x8004040}, 0x40001) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 31.393932976s ago: executing program 4 (id=3325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 31.246840229s ago: executing program 4 (id=3327): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00, 0x0, 0x0, 0xb004], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 31.186034493s ago: executing program 4 (id=3329): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, 0x0, 0x2d, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xb}}, 0x30) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000700000000aa0000000e"], 0x0) 31.137284397s ago: executing program 4 (id=3330): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) mmap(&(0x7f0000043000/0x4000)=nil, 0x4000, 0xd3283d0368e269b3, 0x13, 0xffffffffffffffff, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f00000001c0)='environ\x00') r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000001200)=@deltclass={0xd70, 0x29, 0x0, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xd, 0xb}, {0xfff3, 0xfff9}}, [@tclass_kind_options=@c_htb={{0x8}, {0x82c, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0xd7, 0x3, 0x7, 0x5, 0xc4, 0x9, 0x2, 0x6, 0x97, 0x1, 0x3, 0x2f2, 0x276e, 0x9, 0x4, 0x3ff0000, 0x2, 0x5, 0x9, 0x3, 0x1, 0x10000, 0x9, 0x808f, 0x6, 0xfffffffe, 0x200, 0x8, 0x8, 0x1, 0x3, 0x5, 0x3, 0x6, 0x2, 0x257, 0x1ff, 0x0, 0x1, 0xffffffff, 0xfffffffd, 0xdb0, 0xb63a, 0x1, 0x5, 0xb, 0x9, 0x8e5b, 0x9, 0xfffff000, 0x3, 0x8, 0x6, 0x5, 0x0, 0x4, 0xffff, 0xff, 0x1e, 0x0, 0x1, 0x7, 0x80, 0x8, 0xe90, 0x9, 0x4, 0x82, 0x9, 0x6, 0x9f0, 0x1005, 0xf, 0x80000001, 0x1, 0x8, 0x6, 0x8000, 0x5, 0x9, 0x7fff, 0x6, 0xa, 0x2, 0x10001, 0x10001, 0x8000, 0x5, 0x1, 0xfffffffc, 0x5, 0x2, 0x8, 0x5, 0x7e0e, 0x12d, 0x2, 0x9, 0x1ff, 0x6, 0x2, 0x1, 0xf6d1, 0x8, 0x3, 0x6, 0xa, 0x0, 0x8001, 0x7, 0x71c1310c, 0xffffffff, 0x66f6, 0x80000001, 0x10001, 0xff, 0x1, 0x3, 0x3, 0x6, 0x4, 0x4, 0x299, 0x2, 0x9, 0xa9f, 0x10000, 0x10000, 0x6, 0x401, 0xffffbfab, 0x100, 0x9, 0x6, 0x4, 0x3, 0x7fff, 0x48000000, 0x1, 0x4, 0x9337, 0x7, 0x1, 0x2, 0x2, 0x9, 0x5, 0x1, 0x6, 0x3, 0x6, 0x1000000, 0x81, 0x1, 0x7, 0x100, 0x48, 0x5, 0x5, 0x97d4, 0x2, 0x4d, 0x0, 0x0, 0x0, 0x101, 0xa, 0x3, 0x8, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0xffffffff, 0x7, 0x2, 0x0, 0x52fd, 0x0, 0x1, 0xb31, 0x7, 0x5, 0x5, 0x7, 0x340b91ed, 0x3, 0x4, 0x180, 0x3, 0x1ff, 0x7978f2e3, 0x5, 0xb7, 0x9, 0x762, 0x9, 0x3, 0x4, 0xffff, 0xf, 0xffffff7f, 0x0, 0x62d81a18, 0xbf16, 0x4, 0x224154ae, 0x420, 0x2, 0x1, 0x8, 0xf3a2, 0x6, 0x956, 0x1, 0xc, 0x2c0, 0x0, 0x2, 0xc, 0xffffff95, 0x761e, 0x7, 0x8, 0x1, 0x8, 0x6, 0x9, 0xc3, 0x2, 0x8, 0x10000, 0x5, 0x1, 0x7b3f, 0x5, 0x200, 0x5, 0x5, 0x7f, 0x2, 0x0, 0xcb6, 0x5, 0x2, 0x3, 0xfffffffd, 0x6, 0x6, 0x0, 0x60000000, 0xce000000, 0x30000000, 0x6]}, @TCA_HTB_RTAB={0x404, 0x4, [0x81, 0x8, 0x9, 0x5, 0x7, 0x5, 0x5, 0x2, 0x7, 0xd, 0x9, 0x8, 0x5, 0x76, 0xb0000000, 0xfffffd38, 0x2, 0xbde, 0x5, 0x3, 0x4, 0x4f6, 0x1, 0x0, 0x9, 0x200, 0x9, 0xff, 0x7, 0xffff, 0xe3, 0x3, 0x7, 0x5, 0x1ff, 0x9, 0x2560, 0x0, 0x8001, 0x5, 0xfffffff8, 0xc, 0xfff, 0x774f210b, 0x1, 0x2, 0x8001, 0x0, 0x8001, 0x7fffffff, 0x6, 0x88, 0x26, 0x1a0, 0x40, 0x9, 0x1, 0x5, 0x0, 0x5, 0x5, 0xfffffffa, 0x2, 0xc, 0x80, 0x6, 0x2, 0x9, 0x4, 0xffff, 0x6, 0x0, 0x684, 0x8, 0x1, 0x44, 0x7, 0x7, 0x5d, 0x5, 0xe8, 0x5, 0x3, 0x9, 0x8, 0x2, 0x4, 0x1eb4fca0, 0x0, 0x5, 0x0, 0x4, 0x4, 0xf, 0x2, 0xa0, 0x2, 0x0, 0x60000, 0xe, 0xbad, 0x8, 0x9, 0x2, 0x102, 0x10001, 0x3, 0x84, 0x6, 0x8, 0x6, 0x6946, 0x7, 0xfe, 0x7fff, 0x8, 0x2, 0xfffffffb, 0x80, 0x10001, 0x1ff, 0x5, 0x1, 0x8000, 0xffffffff, 0xfffffff8, 0x4, 0x6, 0x5, 0x9, 0x3, 0x6, 0x2, 0x4, 0x4, 0x4, 0x5, 0x80, 0x1, 0x2, 0xf, 0x5, 0xa, 0xffffff7f, 0x9, 0xe, 0x3, 0xd0e, 0x5, 0xb8, 0x81, 0x4, 0x80000001, 0x7, 0x5, 0xc0, 0x7c3, 0x1ff, 0x100, 0x3, 0x5, 0x2, 0x3, 0x3, 0x9, 0x1, 0x401, 0x2, 0x1e77, 0x7, 0x7, 0xd, 0x632, 0x4, 0xc, 0x0, 0x8, 0x2, 0x8001, 0x400, 0x7, 0xc, 0x1, 0x4, 0x9, 0x8000, 0xd, 0xb1b, 0x1, 0x100, 0xffff, 0x8, 0x4, 0xf, 0x6, 0x3, 0xfffffffa, 0x6, 0x8e6d, 0x7321, 0x3, 0x7, 0x0, 0x5, 0xffff, 0xe00, 0x3, 0x9c9, 0xa9, 0xe, 0x0, 0x0, 0x5, 0x3ff, 0x2, 0x9, 0x8, 0x9d55, 0x8, 0x80000000, 0x4, 0xffffffff, 0xffffffff, 0x3, 0x10000, 0x7ff, 0x1, 0x0, 0xe54, 0x6, 0xd1f8, 0x3, 0x5, 0x3, 0x80, 0xfffffffc, 0x8, 0xffffcf2e, 0xfffff801, 0x4, 0x80000000, 0x7, 0x8, 0x4, 0xf26e, 0x7, 0x0, 0x7fffffff, 0x80, 0xcf0d, 0x1, 0x1, 0x4, 0x29b, 0x5, 0x78d52887]}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0xc2}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5d}}, @tclass_kind_options=@c_htb={{0x8}, {0x484, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xd446}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x8}, @TCA_HTB_CEIL64={0xc, 0x7, 0xe7}, @TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_CEIL64={0xc, 0x7, 0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffc00000000}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0xffffff00, 0xd62, 0x5744, 0xfcce, 0xe, 0x0, 0x2, 0x8001, 0x2, 0x7, 0x7, 0xe, 0x100, 0x7fffffff, 0x7a, 0x5, 0x3, 0x8, 0x2, 0xffff, 0x3, 0x5, 0x7ff, 0xffffffff, 0x0, 0x0, 0x3, 0x6, 0x4, 0x10000000, 0xffffffff, 0xf, 0x9, 0x80, 0x4c7edaaa, 0x4, 0x4, 0x700, 0x6, 0x19, 0x5, 0x6, 0xfff, 0xffffffe4, 0x6, 0x2, 0x4, 0x4, 0xf, 0x1, 0xff, 0x0, 0x9, 0xfffffff7, 0x8, 0x81, 0xc, 0x81, 0x4, 0x7e, 0xfffff001, 0x6, 0x401, 0x48, 0x1, 0x3, 0x3, 0x400000d, 0x8, 0x3, 0x10, 0x4, 0x9, 0x1ff, 0x9, 0x7, 0x80000001, 0x1, 0x55e1, 0x80000001, 0xb, 0x7fffffff, 0x2, 0x3, 0x4305fc6e, 0xb06, 0x2, 0x101, 0x8, 0x2, 0x3, 0x0, 0x8, 0x4, 0xffff, 0x5, 0x39efebec, 0x3, 0xe, 0x1ff, 0xf271, 0x7, 0x1, 0x1, 0x8, 0x88, 0x9, 0x700000, 0x2, 0xcee, 0x81, 0x7fffffff, 0x9, 0x5, 0x6, 0x4fd, 0x0, 0x101, 0x2707, 0xe4d3, 0x5, 0x3, 0x10, 0x5, 0xd4, 0x8, 0x7, 0x2, 0x2, 0x4, 0x3, 0x0, 0xfffffffb, 0x62b5, 0x6, 0x1a, 0x7, 0x610f, 0x6, 0x10000, 0xfffffffb, 0x80000000, 0x1, 0x9, 0x6, 0x8, 0x6, 0x0, 0x8, 0x10000, 0x1, 0x4, 0x5, 0xb, 0x7f, 0x8, 0x6, 0x4, 0x2, 0x8, 0x0, 0x80000001, 0x4, 0xc3a, 0x1000, 0xb95, 0xf, 0x1, 0x6a, 0xe, 0x5, 0x7, 0x3, 0x3, 0x3ff, 0xfffffff9, 0x101, 0x5b32, 0xa, 0x8, 0x8, 0xf, 0x5, 0x8, 0x4bed, 0xd9, 0x2, 0x5, 0x400, 0x3, 0x3, 0x0, 0x4, 0x101, 0x7, 0x4, 0xffffff80, 0x80000001, 0x9, 0x6, 0x2, 0x6, 0x6, 0x7f, 0xfffffff7, 0x8, 0x2e0fec52, 0x3, 0x6eb, 0x7, 0x1, 0xb18f, 0x7, 0x7, 0xc, 0x4, 0xfffffff7, 0xd6, 0x1000, 0x1, 0xfffff628, 0x2, 0x1, 0x9, 0x9, 0x5, 0xbe877a9, 0x7, 0x8, 0x9, 0x8, 0x7f, 0x7, 0x2, 0x2, 0x7, 0xc256, 0xeb86dc68, 0x6, 0x6, 0x2, 0x6122d7a9, 0x2, 0x8, 0x8, 0xffff, 0x87, 0x0, 0x0, 0xa, 0x101, 0x6, 0x9, 0x6, 0x9]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x3, 0x0, 0xfa, 0x10001}, {0xb, 0x1, 0xd980, 0x4, 0x4, 0x505}, 0x1e, 0x200000, 0x9, 0x4, 0x5}}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xfffc0000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0xd85}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x941}, @TCA_QFQ_WEIGHT={0x8}]}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0xd70}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000880)={0x1, 0x5, 0x7fffffffffffffff, 0x400, 0xfff, 0x5}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) write(r0, &(0x7f0000000240)="7de313f2a4081f6c5ac7fc9a74874efa755c3eed02ad8866e1d8616b61cfe2be293fa012a152c82c9af42a7b42d0e5a5ce5bbf8192bf2a8495087ebef0d9da29fa3766dc5bee870f4525105f7cb71c545aca04c86c924cf2902510561227eb3a13d1fb19462169920fc821426e01358ce1bf49993000196773750aebfc7539fd6fd8c4441011493c2404da75ed0eb427ab89279676f09174d73d7285fbc78d5e338223001a890c2d27b92c5ee1ab8c0ec2ea5d0e69b60f00749e0baec62c5d9611db06df9e0b5de9cb8a38168226853841836ef8b2528856953211647c44447d3bdb184a575b74594eb4c6517bebf98db6c48dd65792073a", 0xf8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0), 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000140)=0x3ff, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000500014000,,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0xb3, 0x7, 0x100100, 0x33524742, [0x4b6fb5c, 0x8], [0x3], 0x1}}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x7, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) kcmp$KCMP_EPOLL_TFD(r8, r2, 0x7, r1, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x104}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 31.034884787s ago: executing program 4 (id=3331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000070000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 30.797531431s ago: executing program 4 (id=3335): add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000000ffffffffffffff8c00", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0) 30.732251323s ago: executing program 34 (id=3335): add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000000ffffffffffffff8c00", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0) 9.455548003s ago: executing program 0 (id=3830): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000012000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.296445541s ago: executing program 0 (id=3836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000f00000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x991}, 0x40880) 9.237362862s ago: executing program 0 (id=3837): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001300050001000000000000000700009e", @ANYRES32=r2, @ANYBLOB="000000000000000058001a000600000002000000040004"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.176030391s ago: executing program 0 (id=3840): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x143) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10d) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=""/68, &(0x7f0000000500)=""/238, &(0x7f0000000600)=""/111, 0xdddd0000}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) syz_80211_inject_frame(&(0x7f0000000f40)=@broadcast, &(0x7f0000002340)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x9, 0x5}, "", @value={0xa, 0x0, 0x1, 0x0, 0xc6}}, @random="cf23c72d3da2144d99301a95cbf88ee328a2acfd61026981261283978edc7282349ccd8ae924e94c46817cb9d9e1b9fa8c7bbdcbd254f6610b79d4d90b0fc075996e482cf264c44448966a57bbc2b6388263c188d30dfbb33d2dc843a2e2291a85ec6dc2f9d2da7d79ea8c8c26957d78105c4ad73068e4d2ae2bc5a0c9377f9358d9ea2e81674fa6fe298d293bfa5fe6ee12ed9440a243aaf7f107fe7487bdcc76a6ef80b1a14f30120fa667e65f5bce5ca6c82e117759ccae88a190eaeb19740155b5fac99a07761db29f62fdc2e23fb5aee32a47fc727eac37af7ffa4ee1180bb6700da1e38e9713e47922ba8219bedbbdf866e245a383f6a7e19529ae4125e58b4a06321b2fe680a4330195a6a0ecd31e6ec302d9425f038419800f19199a366ba10565c8598e6fa4745ad375360d7b9685241e3fa5c94ab5bd562e2f388ee877bd08cbf3732066058e1e2d872ace98ba7fcb6864a80221b7ad7c44b11406fdc6d45a654add7376366fbccef4111c920db6abac8584b30cbeafa1770bd2da652e285c709392e0461da0d0f3d93f454778b17751349145d1cab9ea0b0259af322890e85f9a16206b7053320f8931011be3acdf246e73cc2a4324f73e39c9b878b83a74e55cda4ea4a75b434550770735dd1b461547f668035794eeec769d4aa4b2719f422d340efadb0490d33f63df73de71b55cdf590be26b8fa0eb6eb8446c4bd1851021776db21d70bec3afadebbd361040fa559afbc06e4f801e59f0d35724a8a844ee77f8726ba2b96cc12b3be953af2698c24369e1597b6b2a77e68dea5d2969994b9177d45eab53e963480c1f7b035ade02125f38d032639158faf9f260e8bd6e7cb142333b4c7875d3943ca8a9c3355dcfcc0386f9cefe99417645b86097a0cf95d1cb358978898331065e5622fafab067f49d5a1bf6abe0b44fd8b390a4a3dc1679dadc3c2175acc23bdb13f3b164f65b4e534e33b3f51539a4b6ed88a6a6b2feebecb6b6cf4a8cbcb2d914c28f6addca2e89796947257ac4e3d0e11f0b9cae65edf4929180cfe94c5d8c5c9246b24186d82cff02d97918910bda86625e2357ac0f6b1b89d276ff463c14ea3479e3fc69ee26f653ae5ba9dd23af407330d9da01cbb7ad5fd04c420099a6813b4ff0a4b76c233021ea9c074ed937f1596050092759564d5b7b35ed4436c14be3c30bae3ccf871fb5f4d4012a892e976a8235750ee892036bd1c80a3245ce186023ea96b0dcb5c64cbb5c928e6ecba849af29feb75d3ba8fa54a173d04ef1dc3d84b6df755f1b80f3dfa6b8bbbfeed6132bc5ee24875ba3e83a23320a83e893335c0d0884189a9189b86626c1c838a1e74e17aed3cec489bef082ea265537c4a434522c37b2f8ab655847565e9617073d1e00fe6faa75a71a3a3bfeba092b4892975dd140abbebe4c7b8cd242fb8fb5ed7ba64c57a7439c5335e903499227bd33428291ca783aaf3f8011b0c8feb4cc25a95f3fd7b892cd5297f3ab20e4598c5cba4620d16acf0e414ebdc3df4a3e59f3db921ed9c567ff35b1bddb6b2e4c15630fbd3062323cc2ddfb67a3a588a20c1d68d32d25aa81a48f73b783af154664a8aa7c8b0f09a90152ebf021fa059df2c00868d90ea94e206906281dbdc9581f576f48ec42203f9523657f19595d384e05a61e0170ec347a2b46c80901c7df6ad96e0ac80183c02cd54ccb7c2c0475487bf0ca89b9c64bd5de012e3abbfd70e2651dabe67bd754be57bc89c4606c0e985b4404e8fd02e78123efdb785cbded3a0138cf67f30d04919ec51af04d93bcbced3673744a1a87fbe0c1284e0d1d0f83665171019baaf67750494a22a8ff80af63daf4807db72ef17f8a0dce62a213775c9087296e6132fc157712b78ff1c57998f868ac0ec6fc608f103709206ba7d09fa51d19f605c46ad9aeca4ee745b4af738667693fce4dc59554fbaddfb973d78600653d1b4ca0d453ea1d95a75e56b99582857d56c7b609d29f2ef1bba186d842b1ad1f4631d9700b050d76f7f4bbb27fa7796f45986e9a115952c34f1ba91c1211555ad1f80bea6eff48f2932f5f49ec0fe318b193872cfe9d56fec1fb1cd56c66877b656f8d98913a94bda887a5ba918f1c6344b77f4f12f930591351494c1c122379471983da61caa796384a940065c727f3ef4eb0edcbc2f824733626f018fa3ef88ce4ac10b447e8e91645bef7d17d0045d06034b467d3337178dfc324e4b6062b3376639449c7e16b6479aa50965d8ef7d4e3084c365175ccc0ba3a5810f6caa857cd8549db1be37905b020954b46f275c039a2179fc2b213e10e02e7f1f51831e27a7e8d46a704c4ac94859881e53f3cf5ad19f26c46963e7900ebb274dca356e725d6f8578f630d3cf9fa7ab4d5cf86e4ad310e22c9e179a443091ec13dd8dba1815b4c9678fdf74bf128c684e53e7b05529c9b5e2683f707d99307f4689af3225a95da18efbf51035eedddded4409524b48ff69eb958528701a6fc2ada7b5e84834ca3b491138ab74ca04ff33b1494667b93ae2129d4a85e17b56e6e708f2877b07a8639973e2529e97ea2e0e284f8bed8ba8a12e281a3e6872824147d647b1c251e8c71f19793de86781f68e89e032e1bf78783253f3d2951b4ac8865c58204d875a6125141c35f7d77278e836a14c3dec8650a0469f096143387e6bd478e20b6b1f260e9e55a1262be66c1e67695e9116bfd1853756666bf0be228080fad9d27aa2f6a7efe252f3f7984abdc88b11ce48665098e988379e4ca9a1fd1eec58ba8170abdec18c8be59f37da529a617aaef47f0a09125ddb0bec9aec6e92359c7a627f0867bbb2a565e93298979e5f1bad963677946e07bf38a37308e8bf386c7fe249bfcac304f4742b326a4a349c0f6f31e5dfd075563a66068b2604895e58c726502ae691c67d7bd61a17d528941bcfedc79249095002045beea09675dea674c714bc5a69f2a2a8c42b9b330e1a8329c743186a14aaae527d295328c62e61db1f659512bbc7888bd521a73af59b4d0b5c641680a75b5f9866d8f22"}, 0x88c) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) r4 = openat(0xffffffffffffffff, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000002240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x30, 0xc2, 0x0, 0x0, 0x0, {[@nop, @eol, @mptcp=@remove_addr={0x1e, 0x88, 0x2, 0x0, "7e54ceff63411693105d43a5dce60b379c5d36facc8b7ac8d265d81e804508935373c469f99d43c81cb6ae61fbd2eb23affc8b87b082b6f9799e2440e65dd950ab43e5d1230cecd570624db5550a062fb171bee943b04111fde1cc0971469afd541e4d45a4744b06a1df96feba1082245bbb36d3d5e423c735159845fd5253a13498831c74"}, @md5sig={0x13, 0x12, "7c395733018c7bd5eb0b6d1fc194d870"}, @exp_fastopen={0xfe, 0x7, 0xf989, "465a9f"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) write(r4, &(0x7f0000000840)='\n', 0x1) 8.504648094s ago: executing program 0 (id=3870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) brk(0x689d80000000) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffdd3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000800}, 0x24040084) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @buffer={0x0, 0x56, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0cd8e3e4052abbbf4d755ef653e8f4a6151d2e4d974c", 0x0, 0x1, 0x10039, 0x0, 0x0}) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000050001000700"/28], 0x1c}}, 0x40000) 8.11660226s ago: executing program 0 (id=3879): r0 = eventfd2(0x2, 0x1) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) close_range(r0, r1, 0x2) r2 = syz_io_uring_setup(0x6176, &(0x7f0000000080)={0x0, 0x111, 0x2000, 0x1, 0x285}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r2, 0x3b33, 0x10d0, 0x24, &(0x7f00000001c0)={[0x6]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x11000}) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r5}, 0x18) recvmsg$unix(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}, {&(0x7f0000001480)=""/99, 0x63}, {&(0x7f0000001500)=""/120, 0x78}, {&(0x7f0000001580)=""/254, 0xfe}], 0x7, &(0x7f0000001700)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x40000040) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000001880)={0x5, 0x7, 0xe4b5, 0x1, 0x9}) openat$dsp(0xffffffffffffff9c, &(0x7f00000018c0), 0x400000, 0x0) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r8) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x68, r15, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24004884) splice(0xffffffffffffffff, &(0x7f0000001a80)=0x6, r14, &(0x7f0000001ac0)=0x6, 0x6, 0x9) mount$9p_fd(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x341845, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@directio}, {@aname={'aname', 0x3d, '/dev/dsp\x00'}}, {@cache_none}, {@version_L}], [{@seclabel}]}}) r16 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002000)={0x0, &(0x7f0000001c00)=[@nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0xb61}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0xd6, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x9, 0x2, 0x6, 0xfffffffffffffff9}}, @out_dx={0x6a, 0x28, {0x9865, 0x0, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5, 0x10}}, @nested_create_vm={0x12d, 0x18}, @out_dx={0x6a, 0x28, {0xc502, 0x7, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x958, 0x4}}, @out_dx={0x6a, 0x28, {0x3de5, 0x2, 0x7}}, @code={0xa, 0x71, {"c744240000000000c7442402fd7f0000c7442406000000000f011424b9800000c00f3235000100000f30c442bddc1a0f20c035040000000f22c00f01d166400f73d36ab97a030000b800000080ba000000000f30f2410f5fccd2fd3e460f2042"}}, @nested_load_syzos={0x136, 0x40, {0x3, 0x8, [@wr_drn={0x68, 0x20, {0x6, 0x858}}]}}, @nested_load_code={0x12e, 0x65, {0x2, "66baf80cb8e754738eef66bafc0cec66baf80cb802f5598fef66bafc0c66edb9800000c00f3235000800000f3066ba2100ec66ba4200b085ee0f20850f796f00c4e17b118d66d2ffff0f01c4ad"}}, @out_dx={0x6a, 0x28, {0xa58, 0x4, 0x6d2}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x8e, 0x0, 0x6, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x6e, 0x1, 0xa, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xf5, 0x1, 0x3}}, @nested_amd_stgi={0x17e, 0x10}], 0x3ce}) ioctl$KVM_GET_STATS_FD_cpu(r16, 0xaece) r17 = syz_open_dev$amidi(&(0x7f0000002040), 0x7, 0x10200) write$midi(r17, &(0x7f0000002080)="d9a5682a8b86ece3efc99814ffa3e71b7da53b9b72bf405312cfa87a0a53", 0x1e) lseek(r6, 0xe8, 0x0) getrandom(&(0x7f00000020c0)=""/226, 0xe2, 0x3) fcntl$F_GET_RW_HINT(r12, 0x40b, &(0x7f00000021c0)) ioctl$BLKPBSZGET(r9, 0x127b, &(0x7f0000002200)) ioctl$sock_inet_SIOCGIFBRDADDR(r13, 0x8919, &(0x7f0000002240)={'bond_slave_1\x00', {0x2, 0x0, @empty}}) fcntl$setpipe(r7, 0x407, 0xcf) recvmsg(r14, &(0x7f0000004800)={&(0x7f0000002280)=@hci, 0x80, &(0x7f0000004740)=[{&(0x7f0000002300)=""/131, 0x83}, {&(0x7f00000023c0)=""/65, 0x41}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/177, 0xb1}, {&(0x7f0000003500)=""/63, 0x3f}, {&(0x7f0000003540)=""/15, 0xf}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/158, 0x9e}, {&(0x7f0000004640)=""/217, 0xd9}], 0x9}, 0x41) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004880), r10) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000049c0)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004980)={&(0x7f0000004900)={0x50, r18, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x285, 0x2a}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{0x6, 0x1}, {0xc}, {0x3, 0x1}, {0x2f, 0x1}, {0x3, 0x1}, {0x9, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x1) 7.960000442s ago: executing program 35 (id=3879): r0 = eventfd2(0x2, 0x1) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) close_range(r0, r1, 0x2) r2 = syz_io_uring_setup(0x6176, &(0x7f0000000080)={0x0, 0x111, 0x2000, 0x1, 0x285}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r2, 0x3b33, 0x10d0, 0x24, &(0x7f00000001c0)={[0x6]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x11000}) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r5}, 0x18) recvmsg$unix(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}, {&(0x7f0000001480)=""/99, 0x63}, {&(0x7f0000001500)=""/120, 0x78}, {&(0x7f0000001580)=""/254, 0xfe}], 0x7, &(0x7f0000001700)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x40000040) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000001880)={0x5, 0x7, 0xe4b5, 0x1, 0x9}) openat$dsp(0xffffffffffffff9c, &(0x7f00000018c0), 0x400000, 0x0) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r8) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x68, r15, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24004884) splice(0xffffffffffffffff, &(0x7f0000001a80)=0x6, r14, &(0x7f0000001ac0)=0x6, 0x6, 0x9) mount$9p_fd(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x341845, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@directio}, {@aname={'aname', 0x3d, '/dev/dsp\x00'}}, {@cache_none}, {@version_L}], [{@seclabel}]}}) r16 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002000)={0x0, &(0x7f0000001c00)=[@nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0xb61}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0xd6, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x9, 0x2, 0x6, 0xfffffffffffffff9}}, @out_dx={0x6a, 0x28, {0x9865, 0x0, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5, 0x10}}, @nested_create_vm={0x12d, 0x18}, @out_dx={0x6a, 0x28, {0xc502, 0x7, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x958, 0x4}}, @out_dx={0x6a, 0x28, {0x3de5, 0x2, 0x7}}, @code={0xa, 0x71, {"c744240000000000c7442402fd7f0000c7442406000000000f011424b9800000c00f3235000100000f30c442bddc1a0f20c035040000000f22c00f01d166400f73d36ab97a030000b800000080ba000000000f30f2410f5fccd2fd3e460f2042"}}, @nested_load_syzos={0x136, 0x40, {0x3, 0x8, [@wr_drn={0x68, 0x20, {0x6, 0x858}}]}}, @nested_load_code={0x12e, 0x65, {0x2, "66baf80cb8e754738eef66bafc0cec66baf80cb802f5598fef66bafc0c66edb9800000c00f3235000800000f3066ba2100ec66ba4200b085ee0f20850f796f00c4e17b118d66d2ffff0f01c4ad"}}, @out_dx={0x6a, 0x28, {0xa58, 0x4, 0x6d2}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x8e, 0x0, 0x6, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x6e, 0x1, 0xa, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xf5, 0x1, 0x3}}, @nested_amd_stgi={0x17e, 0x10}], 0x3ce}) ioctl$KVM_GET_STATS_FD_cpu(r16, 0xaece) r17 = syz_open_dev$amidi(&(0x7f0000002040), 0x7, 0x10200) write$midi(r17, &(0x7f0000002080)="d9a5682a8b86ece3efc99814ffa3e71b7da53b9b72bf405312cfa87a0a53", 0x1e) lseek(r6, 0xe8, 0x0) getrandom(&(0x7f00000020c0)=""/226, 0xe2, 0x3) fcntl$F_GET_RW_HINT(r12, 0x40b, &(0x7f00000021c0)) ioctl$BLKPBSZGET(r9, 0x127b, &(0x7f0000002200)) ioctl$sock_inet_SIOCGIFBRDADDR(r13, 0x8919, &(0x7f0000002240)={'bond_slave_1\x00', {0x2, 0x0, @empty}}) fcntl$setpipe(r7, 0x407, 0xcf) recvmsg(r14, &(0x7f0000004800)={&(0x7f0000002280)=@hci, 0x80, &(0x7f0000004740)=[{&(0x7f0000002300)=""/131, 0x83}, {&(0x7f00000023c0)=""/65, 0x41}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/177, 0xb1}, {&(0x7f0000003500)=""/63, 0x3f}, {&(0x7f0000003540)=""/15, 0xf}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/158, 0x9e}, {&(0x7f0000004640)=""/217, 0xd9}], 0x9}, 0x41) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004880), r10) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000049c0)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004980)={&(0x7f0000004900)={0x50, r18, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x285, 0x2a}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{0x6, 0x1}, {0xc}, {0x3, 0x1}, {0x2f, 0x1}, {0x3, 0x1}, {0x9, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x1) 2.936007346s ago: executing program 5 (id=3956): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000b31e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) socket(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b857fb90f60000012cbd7000fbdbdf25de000000d60c00000000000000000001e000000200000000000000010000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b80000001300e9d90000020700000000fc000000000071f2d44e53dd5d4541ad18cee3391529e2e891b7dced73e0553d713cad91a5e31c705c04d42386188cf418473cf476c1df736b09afa9aed102a4af60279bbe30f278c53f291c6124c4db0c194da4969ac01c65ddd6634bf6d31b5a090abd960c56481cb4f1a3d3f6a27419b98468"], 0xb8}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd08, &(0x7f0000000000)="0400000000000000000000003801") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB="012ca7701b2b95776227b1e2edba6b8c7313f744aaac02c24f6850848dcda69aaf0bc847dac12a9f7996a78640e4b45c50fa09453a1280faa033da7592afd09e89621ab1d5f476214ebee2b89e5b4a26beb17b31f9a712140e6c60129cbbce62f3ade3c3374e63ecab42811d409e2067079cb8054ddaadfd24a3a367f7965929f37333837ae3881b3a1cde7f49a3d795202da540562e68572e5ea21c8acc15ef23f0cb72e9068d313860dccc694c01", @ANYBLOB="82d587ebb0ed62e1fa455561259bcaa5198ec70c6657e5", @ANYRES64=r1]) 2.547368752s ago: executing program 7 (id=3966): socket$inet(0xa, 0x801, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000100)=0xd5) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f00000111004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r3, 0x0, r5) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r6], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x20000014) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, 0x0) 2.397823709s ago: executing program 6 (id=3968): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080032427e15a330", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000034"], 0x40}, 0xfffe) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) 2.397154365s ago: executing program 6 (id=3970): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) (async) listen(r4, 0x6f6) splice(r0, &(0x7f0000000080)=0x100000001, r4, &(0x7f00000000c0)=0x1ff, 0xffff, 0x7) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.321659803s ago: executing program 7 (id=3973): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x0, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x10, 0x20, 0xb12e, 0x2, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x65, 0x0, 0x3, 0x4, 0x0, @empty, @remote, {[@lsrr={0x83, 0xb, 0xc6, [@empty, @broadcast]}, @ssrr={0x89, 0x17, 0x57, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @broadcast]}, @cipso={0x86, 0x15, 0x0, [{0x5, 0xb, "2d88c3fda9c1416bde"}, {0x2, 0x4, "d752"}]}, @cipso={0x86, 0xa, 0x1, [{0x5, 0x4, "6680"}]}, @noop, @noop, @ssrr={0x89, 0x1f, 0x25, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010100, @private=0xa010102, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000880)={'vxcan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@getstats={0x1c, 0x5e, 0x1b8, 0x70bd27, 0x25dedbfd, {0x0, 0x0, 0x0, r7, 0x4}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x20, 0x1, 0x70fe, 0xffff8001, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x66, 0x0, 0xd, 0x29, 0x0, @broadcast, @broadcast, {[@generic={0x88, 0x10, "37baf0726eaa27c54f097d4392df"}, @timestamp={0x44, 0xc, 0xc, 0x0, 0x0, [0x3, 0x12]}, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0xe, [{@broadcast, 0x6}, {@broadcast}, {@private=0xa010102, 0x2fbed4ea}, {@multicast1, 0x6}]}, @ra={0x94, 0x4}, @generic={0x94, 0x11, "cc59484fda79e226a24bb38e64a899"}, @ra={0x94, 0x4}, @cipso={0x86, 0x17, 0x2, [{0x1, 0x11, "daa460dde64c78651565f8e37e44ad"}]}]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000280)="10031200e4ff020002004788aa96a13bb100001100007fca1a00c295cedbe2350200a75c41af6637e861860d3643", 0x2e, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 2.321417264s ago: executing program 6 (id=3974): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x10002005}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@my=0x0}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000880)={0x1, 0x5, 0x7fffffffffffffff, 0x400, 0xfff, 0x5}) exit(0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x4000800) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.906612831s ago: executing program 7 (id=3976): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f00000002c0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=virtio,posixacl,noxattr,']) read$FUSE(r0, &(0x7f00000045c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000240)={0x10, 0x0, r5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ebffffb60300000000000085000000b00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x10, 0x41) setuid(r1) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000080)=0x6) 1.837247362s ago: executing program 7 (id=3979): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0xffffffff, 0x10000, 0x3, 0x55}, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x21, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x0, 0x40000102, 0x1}) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000004800)={0x4}, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000800)={'batadv_slave_1\x00', &(0x7f00000007c0)=@ethtool_wolinfo={0xa, 0x0, 0x0, "2d51305d39af"}}) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x42}}], 0x40}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x40, 0x107, 0x70ad2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$NFT_BATCH(r10, &(0x7f00000047c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004780)={&(0x7f0000004840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x3e, 0x6, "eaa4593d6a4f3389588b8fff5470b6c24a9457e83d858d68dd999580bd03faf77c4442de1a276337c47eb8e8d02412ed5a7db3f7423b1e289516"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x260, 0xc, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x240, 0x3, 0x0, 0x1, [{0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1b8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "06ce6204e51b2d14fce2b495b0cace2726518b6d729bec848ea55bd1fee3a8b09e07c9cc629aa189e0a8be6ae067a2cf13afb247a5f49bd477565ec09b730a992befcac5ea5bf49d8a0665bb34d86bbafed7e25942d33942da55f204e949903291860cfad87c53feab9ccc823174ad6ca40b67be1befa6d8e7dec849b3242b1ddcdf6b9c1fcb11642284079df1d76f64fb6a7b020e628c71017b3c8f38a33266ff511e779ae55b7c95461393626a84197369b4e4e8e60e5e5182"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "6dce1dccaeba57236019e7339785937c4b27ff7d3aacf7cf6280ab53e0cf3454bb351f3d4ced44cf01b9eece6a705b248f8edb7abd041d3cd5a6fa"}, @NFTA_DATA_VALUE={0xa5, 0x1, "4e125f9e940d9236135d598a4c62ed27126a0300922a6992793274e6aa28a091f2d133b18b3d3c3ebd3d88d8359127e55a022951b680a14376ab9002161a12f9a751efb78b3f698180571047e950d9a2c92bf8bf288751e6c44725acb1e76a3c9116d086b2ac9ef063923091653c0a7a60fdc9ecb8fbbd0cc90f275cd34f0218bb05562ac28a3b4a7fcfab4c50c594c8e685791f00"/161}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000}]}]}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x100, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x3918, 0xe, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe40, 0x3, 0x0, 0x1, [{0x520, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x51c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "c8e70ab616233b5b955a482facd4cc7d1155b7462941e7c7912245a20a4a1e1156624c77a291a75b5cc72f99081aebbd9c98c97e8142d1b85da9e43136f2f04ab89d730f3abead18979861a25ffe6965ed319a6343cce483d09cda72e2523fdaadc961e0fe111e421bad0dc7435eb48e4e3294468b5809ef19623f75f44a922ba80be88acef5909849dc18b2ef236e8dd3d68bb6e63b82806129962d2a42840ba5006a7a9ecf03a5dc97701fe84dc5ab35903d7ebc8d8e5c17abcfbff5f6b90d452d6a33fef514"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "81f594cda12478139348483e1afeff7315fe5f8641eed55b1e63d69cdcf3da28510323391628bd724701baf47d0908ceb2d5bdc4f8865c8e52c9c13d28f9e0a546040e62e0ef43bb00721470c2125379b26ec25becddaa7e38103a825ff80cb26afdf076afe3870595be665002e1808707aa6a020386e31f6cec30940b05de932ecdada75af7db06c522b53744ab768baebe5b0373e9ee124f09bf7e713eed77d84741a97ee8eb7be4b7a016958a82992f76dc0f6e775c9d4140b502151d4c10d7db25eca27bed19ffdf328e26585bd122edb1a6"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "88b64eb47149335fbbf5d2486446559f43bf4408d79193121cd1ea77a3d1cf5baa2b794e553607c7316c5294fcfab01d57ae81771467459c4114f164fe1e304f5140ad20a4652ca236418213afdf5d367d492ea9a0accee368db92c2b67b4fb5180a84e77cca86e54dae0f0cb7f107c0aa278f8dc880aba1e0d3448c429281fa02985cf70bdef29489dce4cfd9030b1d72a0bb04b5ae164dd696f1d7b2dede4ce726bf6295c57103588e234720fd62"}, @NFTA_DATA_VALUE={0xa7, 0x1, "23c13d2270487421b48bd128c528ad198114a7a9c5b5dd83a352cd2beaec73d5fb8d6d263b2a391a9ae1ec0e19c10ac7bc5d1ce9f41afe0664951494d3dc594822ae0bd7fc8e3a4e710bc18020a687fa0dfb5bf86e51e1b1cd3e917534ecdef2ef06c0ee170d7d18243c4c58500571720a9088270f9d50feb2ac6523c315f367bcae1dd55301437e6cd46e24281b200239df988430e0ab492dcbb3c5b601a636d0e99a"}, @NFTA_DATA_VALUE={0xb5, 0x1, "52adf3167b44ab079975b7ead0278f58a0c7c9ac53cc2697c8855862ac6f92f8e0dd1cc88b6529a57486ca32d767c659ba3e6d499916ec88e7fa633bb1a294d28a67abc5697d42dea8f6f21d9bff3993ce2108e798d3d258d7c57d0bfde5a20cdb0df08a633b03031bcdf08d6e38ead19812d6be848ffd1c62952fb16f1fdf872a35ec98d61d08e0006c005508d7e17491bdf3d33c76420c68d3a797b27502794d8426e4dc9bd8b9609c82af44d0e3cd59"}, @NFTA_DATA_VALUE={0xa1, 0x1, "90987df427e42ef11f449b2fb674a2e1070c52d1c6f2326abba02a65573037ff9963eb5a49fc4ff6eed8f16ea68081bb3612294ae60a4524fe68e96faab8ae7d8d2da80dce708e018ddc546a136b73f06930a4902bd2c6d7cc51966c371e52d63e19b547a26174f85fb34af342faa9032e5efaf2aaf7a96a4316378b9e3f9fcc6e41b69abb96d686f7a80b7f1b693e7c192a1d3ce54e6081f20807b1da"}]}]}, {0x43c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x30, 0x1, "8ccf159e583e25738c17b5d7aacd86357f172cbbafa4fba1341ab1ca6bcc9aaa33b68f6df0b0eb7114804823"}, @NFTA_DATA_VALUE={0xa1, 0x1, "8ccc1e2dd703f22dbbb6c0c179e3b235d23cb410c162cbdfd27364eb9fd7276580be9af7830ccb2465846e9e82bc6611f1c8b2384142a90468d144ed70851c2a4a9d6f75338efb000dcd4ca8ae432662f8f45cb64cdf744803b38c036dc44a00c8a46a41e926d92159b630bfe9091632b3bb78e825165eb0215b3f1f518857f25d62f62a1ebc9ea9ebea1419a9e771a9915d66c740c4e5f26026a4c5d6"}, @NFTA_DATA_VALUE={0xb5, 0x1, "4c344df3ee76153eb13a60a7be41d9ab07c5e67b66df0352aa6ec281c1a00e66b383a89e76c512d49ffc1d2c1e1a11c38778faa3ac6faa1b5111928059f5ac67de978820fcaaaeb787ea4ec0e541d130356e2d789ce00a85aa39e3434aa21755ea132723b6141bad5250634026df6b741520f49ef2674e84e1c9607c86082a13798dcc5fb081df4f72db2a3b626884d968e8117a030f371c80754041f50f0d2b4867f2b1c9e4effc7ada095c39322a9edc"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "52218ac135e84efe96337d8e8bf19878db971a583812747e2820e519553cce065315945609676de0a614812df4b10a3e0b44ae7b654e92636a0b333c7ff5582b78ce1a5c17a5ce5e6644548d295c230b62d0427fca66eec4ef13898d60b1b012e6cf2ac44e23d7b3912a544d81c6bb427327f97684380623b5042bd24a4ff12c84e7a5d3f16df0966b0e55309125606839ed1ae415872cacd5a75b42671e1828d5091c2b2ccd7a03b62ba8f6d063ffbe17ba7b72faedcf949a5083a6e9065058"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "f7e4bc9e604e3982a4620f9d05e10d3295d2c4e974526b5b7e7e562f5cda6101703bb2ef423467313717cc11b4b72c6a73447864a78c322f6b748b57a8355dc7e258665062ab0d517ddccedc5b1f6c3db40dbc3e499335744e8aef900e6f3fb0c330f5dfa49ffe50ba47cf395db7d8cc4a90a35275812253ab16ee902d6fc61bc6703c970ca51fd33149ec5b1278a57f8b51429b8841a8fe8faf253e8d3effc10d178fc33fb49723674083384e4d970381b90b3653253d9a6ef299e8b8ead23fde3286169a22e5fd90a986547a66796a7d5a1ca00f830d"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}]}, {0x244, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_DATA={0x1e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "f50b3de0c7b303d97b8808e9075a09fc426a5eccc0e46910839e3fb1cc6d2354f810321c96a481a0c7f8cf38b474962bbecefa77b15310b03e44878b46c0dca2f611faef86fc8cb80b4949f00f4141d87d7d872fc820b1c7f2334b351dc2c7d0dde2eae44f92e8f0b9552b2b11cbb5626a8d3a502611cfdbf97781ff4e1e3e6ec70d377b92626afafb20e426bebece066171f082c99f0d8ad337cf54e47fc5ba61470b021fe2c9f6bd6e9f69855ff9e53d05e8f5b08dc1a6abb5cbaafeb8e0c0556883d7573972531b5f2a17c768b429ddccaa8b6ccd741f0acb53bd752fb73c49b39d924e9514e7bb"}, @NFTA_DATA_VALUE={0xd0, 0x1, "c95fccea16e2476d74fb8ccb68c829263253cc5b1423ce7078c48bdaabe0d6c9c3d26a5da93b45325a08d7636aeb7896bbec859ec5fef7fb362138556c1c40b19cb9a09d654b02180df7702e2cff97cdfd7b217a07c92e30de8d9a64f3c9facd98e140a43064d4867c491ab989a0d27237b8221c867f8368810050eb240168526a2352640c38fba8d781e6c5f147d83cf1f977325923575abb370cf0267ed970810a504edf7921118f39885fe4e7ccd55dcaa02687a630e091c3218567576638d0f1b46c499d8ed562df7558"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "3a02655793d693ecf0cf7a128ce34785e2eae682419757be2279a0776761febe625f6e754b390a56c2a4153255b5d82b48a5e9c8e4c3a31e216be467ad02045103c0e4aacfb5a116efdd6ae993ec1f4002b89125bc4b7b566ffbb1ba9b70cf501f7966dd03fac0f4eee3ad33079900be9736e65a7c6792053fd4db05da1dd983796e2628a452da51cfeea858f8d3c40e57a2291e3715b3db99bcdb857e8fb80aa16a3d5dc6fc0d3529"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0xc0, 0x7, 0x0, 0x1, @target={{0xb}, @val={0xb0, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0x67, 0x3, "1a55cb95dc8c341dbe23ca5097c7ba2f6aacf26776bbce7ab1aa0706b0dc81f1479988b2dbaad474f74a55f5288f7f41792cd7b7d4898151ce33b2af485ba7da58b55586fbb0321c94dd8a317f3f658ff9474dd27fc406b24ca06341d404c10eec63ed"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_NAME={0x7, 0x1, 'CT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_USERDATA={0x31, 0x6, 0x1, 0x0, "953365b16031b4f35da83635a4a862822337920d1a40985f5c75f7d84e7210d9f924b032580a7c895a6818e8d1"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "3bafa3a343d4d3f62b597759a0050bf592b19917bb612c8a4392e5b3e76ff4dd7751fd33f36cedafd83799345590924a224ad91f1f5ffaac832fd5a21db73942bfa4f7ef27e77257af41863a508d7349350885d543c34b3bbda09e9eeb296e1f3dfc3b53b4f4a0d8723208e4b35413c2558242009073b5695a8f3505a5afe0d29499e6ba617d811bef3dac3a0c83fe38d702cc73cdd29891741c"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2aa4, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffc01}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x100c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8}]}}}, @NFTA_SET_ELEM_USERDATA={0xeb, 0x6, 0x1, 0x0, "3b7bad751f8e5a50a6c0d11f5702c6493cda2ad897c78d208d03cef94592fd542f37a3886250657a0bfbfdfd303525612f488d28f3ea93b59c916b61dda7f3a7d782dd5bdbd028b0874e4fac07608553f95b0be3adad60f21dbb57a7a74b9505d259b7d4cc69aa6c9877de93765f5fcb80c86438b534a1ea998080c304c83cd176d47962f127a24fe93837244789151ae3228faf674abad05c78dca120d769d37975fda88523376b248f88433e1b4c9a37106423e945ec9a6a500e649c5d7e1822a6f453d691799365afbfa605ad3c70e7c7ea34158f6230eb3ba7f8ce21bf534b3d0bf4d3b68f"}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1c000000}]}, {0x18e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x370, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x2b8, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x2a8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xac, 0x3, "4f1682feacf20a8a07fb497554dc863125430659aceed74d1eb1f264e0fdcf63f3529b329108dbb41fa1045bea43fe30b17c2ebf2c1646eaff4ed376ca4769ccea887f5cbfba00dbbf307deae59b7b9f75218b88e88cd60e5ff96e53ecc72c982fbfa60ad5939368f7e72cce240ac511b50c13980456fa841bff59d5c7d4f975643a9224a54df9a2cfddeaa5d658fef65e9baff6546491d3b2f84b59af7eaa62635aa328ef6caf37"}, @NFTA_TARGET_INFO={0xf6, 0x3, "c1f46f2378a79a9e3ba994291984ffb676ed215562d06452b3dda0ec9e776f99960d16a8303a29c21dfecaaa8ec80b1a01022080cb4ac23e16e5f42f9c7a52159b6f4fd3f0ad3459924e84dd0479a8c6264763bf8aa610f84e0bb8daaeb6dd5ffd943c04b3136a0dd0b17eaed3cb52afb85659d5cb54a858f538d271aa4e70c3ab7dc3e56f568a38af264a25745d12bf0f68da1d14a69ec08ca64acace9bdb02fc9e6dd521ffdc82bfc81790a75263488da242c50bc3c00cd35f237adc90e29b2e7752001c1fe777b36bd1cb60a2cbcc8fe9482030a220489516d1b6366a39ebbe3f61fea4e33209e95621e8ff9199292e8f"}, @NFTA_TARGET_INFO={0xff, 0x3, "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"}]}}}, {0x54, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x59, 0x1, "ff93941992aec99668472d89272a717b0a33ececfdee87d633d11c7f29369544150005d27748512014712c4107127f0be0d36ff864a21ae74f67043edbc2988b75982d57aae840d387b19dc710a7cf2c64bb644e80"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x124, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x104, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xf4, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x54, 0x7, 0x0, 0x1, {{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x10000}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_EXPR={0x50, 0x7, 0x0, 0x1, {{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xff}]}}}]}, @NFTA_SET_ELEM_KEY={0x138c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa7, 0x1, "b766079910305309e805a70fe40222325542c749185d8f88e2f26f4a32367a37e68fb0f8f51652b6d21ff324c05e3f2a2120a76c9e55887370d250b0fd4322d29d0a662cb0bdf7c4b247befadbf82465aaa8c7ebddbc7b11f1b845d3244c12ccebb503fd5c49690716b71c57266b50b87c8bb55460ba4b0dc25038c9886e7cee33b63124303893d9d3b51a81bdae54453cb72e605e9f1737e138382575b720d8994801"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xb7, 0x1, "1c9566613dbc4f8db9fe65e9f0328b00376d90d36e083960bdb795ff54ea60431922fcf8c736d60f2b46fd5fb83198e8378a515fffd434ff88dbb6364110c484c9967c224512ca84e031d56cd5b529ee0eb977d27738f604c34196027b88b83d7bf1c1575a1450c64839df8581d7c90b8b32e9afa95bc29928b8fc113fe75cc2aba4cb5b4647019a5c0303056acd1049b80b68a79840bd36cadce89f680fc0a7293ef39929a75fe45b99937673233a6f50f656"}, @NFTA_DATA_VALUE={0xef, 0x1, "51aeb038e5e8b55999fd4541593cc855bcc2aba1edae58461c133028e295cecb958f291be000431bbbe0aef84d2ffd2cc6fbf82852774d9286c4a4f69be11caa57eac5b427af1b84cbb1fb0c183ed6b5cf59a34bf3a0628c6b752e91745b3bfdd1d680ced1747ad27ddffe31f3d5ec09fd75ec6d41f0199822b084317f81ec356a054e191725288e3eeaf014dabd91ae5c792d02984e8fbe1e72688606a562d5fe88b2ce8916b70179c2ca87a45d5264ba63bde58d9261923e4a357bde45400a06df1b35511c208b4d3dcacdbd0f48dd47b12fb0b263ff666652add5ffb1fc0c607fcc9713a49bba5a55d4"}, @NFTA_DATA_VALUE={0x8b, 0x1, "b49dd5bf42a16aec07f3e61508a4ab4e83f4a38c2c85d9d1a205bbf655855d31848ccf22367560f67e9b6f3f75ff7e1c1bce8f8695ee66f7d5e70afb7e21384fe7dc096835bf722a49f76ba18e4449af36665ce73a5f5bf35b044ce1e0f5f7f915cf73e9665312adb922e12f3eed2a8096a35ff4796b62322827389783359eff911d8a1bc7b413"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x204, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x5c, 0x6, "7e907e3e5a42c3732ce4e2192c52c5e271dad1028121859b9fd04dface9f6d28c83248fd20ef4fecc9105efe66c3729ecb86e9dddd25aa8a96578b55b2240b0de884cc47a6aa4eb45c9ebfed0ff2fb7c1ef893aaed2b3790"}, @NFTA_TABLE_USERDATA={0x75, 0x6, "0ace664eca2e29acfe8a5ee270f31a3d5b723705e87eff95500f7bab055ded6359aca84e23dbdc18de5df3c24bb54dcb8dda658459254a876fed0fd9d69b5411238011903137bab64959d45ccb04907e23a8ae0e177fe627f9995f69ce34146790ed3e23da8c5680ae71f6c79396cdc017"}, @NFTA_TABLE_USERDATA={0xff, 0x6, "8b8e05f54b084b0f9e65035890b5949cde9978022c16fcb4716a22161f17f96ebdb8f090fbdd62bf404d78e757bda60a56e98d2305f58e4e096fc66ec5ef89f376d72b4b496cd928c4936de632814eb9983f3a8ba84fa3791bca3bd7cfb1bec50e2e6b7a4b0559aa88a770313861d1c837b61c315cf8b7e001636ee2fdcb327a71ead1ffb66bab623af11d76b0c6bbbabe26fcb3b75d5d6d4d88ef9e9db10a3215334ad00cb9ea86dfeab781b41fe55b7d8a6fd79f616139443aa1a04838aa500244b1066f05d82efacbc89004f0c8a97ce958710bfec28da8a7b5b090c25544d2100de7c81013d3b7fccb3115847c7e561318f7b23af2def333b9"}, @NFTA_TABLE_USERDATA={0xe, 0x6, "f2fa19510a6950e5e65f"}]}, @NFT_MSG_DELRULE={0x208, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x1e4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x154, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x144, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x138, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd3, 0x1, "2c895266d3955edaca6ff2d515c489c46c6f22c806e846f2865eaca1039e156200544cf25f737e2f2859b7c9a9e0e76e50cc5b0ff580deb96f53cf30f37ddbe24e6f46ef01b3af141acc8ed1be1d55a09d4c8a9c82dc0a165721614cae3eb0671c9744b66940845db788fc3cb1cec56fdbdcf1f7c2f59c4d2f77d2cac4b3a125f76a7723849cabf601c83b13f832a933997ebc5051988b463e0365ce57d0cfcd71488ae531fb87c5c46e576da34fca7be1a3fdcca0b5505d9cb569f19c1fa6ba898e1b6ce350060dc79f9d449be7dc"}, @NFTA_DATA_VALUE={0x50, 0x1, "500c6316bc87c3f373c8832c4d872500a79dc633067ed1a116580531f42140fcf6a1468be596941a1c4625d0e6507056a19e7d520f2568a0dd4e9079b431c2970cf630a201260e0671bc41a4"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}, @NFT_MSG_DELTABLE={0x27c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x41, 0x6, "ad0b7b0deb8e8e37a8c4d063574fe15f7a6170e2a2cc3eeb03345453e15c4a86da6163f48648573df2a4ec724d3fe10c70d8facb1647739f4352104ca6"}, @NFTA_TABLE_USERDATA={0xdf, 0x6, "757f8ad7cf4b97ef57c97122da37c22e7044432ba0d4f1464f97be1982ebc7d5c231332e7ed6911c508e3198ed89fe04a099f32ad6af7c2e01b9bb1acad860d56c593c0f6057ee4cc4fdf425fab17d138f0f02eb7f8f9cb38293d0e85c9efa3c47dbc5f67816047f8924d8f163d519b380606afa8062a61b1167476cb5f25b192a1154185dced8d195e2fc4f00590300b43ee7454420124d1769ccc23a4f9750098a61e186904376f3aaffb709cb121c26386d2033dfe8aa186337cf6350bb942d93cf909d04626d6bc23322eb26fcab8d1583bc9c1312fb6ab168"}, @NFTA_TABLE_USERDATA={0x70, 0x6, "c59d59a6befe1b35952b1d5559937827860c274462327b5e8d6f1224409e69f604ae3bf403299a72604b0ae79d2934528aa12ff0ace39d9679d83f717b7897b1c9a1e329d02df71e5d2ef55eddbe97b8cd815ef6a95be10430568f580122893d44e92b9eeb8f273362efb449"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xa0, 0x6, "97c7afeee70956d25e4bca009cc7ddfc2c22922d80f61ca8ca927af1f18696d06677c21f00eab7f94450bb5ca0b6657b1db82f19569cc509ab807c4ee129005bdbae784a9ee4ef2dc1d2f42f70d84cff2ca76c6c27d7910ff02487f01b8272c7d6eb724304514af6b1c84917827e2c3989ff339f2a7174dd7e74c75af98e5691cafd28945d919b24bb29447f224d73d2baff864026727b7b73db08ba"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x42f8}, 0x1, 0x0, 0x0, 0x4010}, 0x48800) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x28c802, 0x2d, 0x12}, 0x18) r13 = syz_open_procfs$userns(0x0, &(0x7f0000000380)) mount_setattr(r12, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0)={0x1000f2, 0x0, 0x60000, {r13}}, 0x20) syz_emit_ethernet(0x76, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@hopopts={0x62, 0x0, '\x00', [@generic={0x6d}]}]}}}}}}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dbg={0x25, 0xd, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x24008880) r14 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r14}, &(0x7f0000000140)) syz_pidfd_open(r14, 0x0) 1.467697639s ago: executing program 7 (id=3985): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x8001}]}]}}, 0x0, 0x66, 0x0, 0x0, 0xffffe}, 0x28) 1.451894398s ago: executing program 7 (id=3986): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r1, 0x5608, 0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x1ff) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000780)={0x20, 0x2, 0x2, {0x2, 0x6}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0x10, 0xb9, "5763ee64cf9237714c4bd7d2a1f6e90f87bbc63c4a28cbe98e67475276578d83f5a799b96004248727b7b05d7f7c1f1c4af9c94ae163972e1ea21a0361e4a944764cdca9d2faf686ca86277bb0db4169f08e44c79056e61912f9cc17731d0e0fc5654326583aa8342bb91b90f3a359ebc3d5700e2f60723dac311357838ab4e6705dfba767167bd6e6f24195f28f59b5e382ee63d35516a0002b03e707d5147eece99598fd8b450b6b19731d42995afbc758ccf15110b62a9f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0xfffffff7}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "769db71e36672982ffeb1d1980d642c1b18d3ffda4a81a7cccadc479eca66191ccaf1021d3b94e8f9a20551b584678"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 1.262800143s ago: executing program 6 (id=3987): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.216520375s ago: executing program 6 (id=3989): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='tcpci 0x50\n\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x300024) write(r1, &(0x7f0000000700)='tcpci 0x5', 0x9) 1.21598524s ago: executing program 1 (id=3990): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x0, 0x1, 0x4, 0x4}, {0x0, 0x5a, 0x7f, 0x81}, {0xc67, 0x7c, 0x3, 0x136a800}, {0x3, 0x0, 0x7, 0x1}, {0x0, 0xff, 0x7, 0x3666b531}, {0x8, 0x1d, 0x3, 0x5c}]}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000000000001, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x7}}}, &(0x7f0000000240)=0x84) r3 = signalfd4(r0, &(0x7f0000000280)={[0xa8]}, 0x8, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipmr_delroute={0x74, 0x19, 0x20, 0x70bd2a, 0x25dfdbfc, {0x80, 0x0, 0x20, 0x2, 0xfc, 0x3, 0xfd, 0x8, 0x1c00}, [@RTA_NH_ID={0x8, 0x1e, 0xf}, @RTA_METRICS={0x2e, 0x8, 0x0, 0x1, "460941f8b9d2ecfa777058a23ed4da92766753fec7d0d5df3f07946594f27eb44475ab72d232d887aa06"}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_TABLE={0x8, 0xf, 0xd}, @RTA_NH_ID={0x8, 0x1e, 0xff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004010}, 0x40000) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000400)={r3, 0x0, 0x0, "fa3949140619291b84767432da5a8b29e1b6913f25f640fd56f5c07597c29094a196c1696926d290af749b6fc01fc914fdc1c4b6e65765a65d6a627e87e49edb669324835c81bff1484e997ef8898c66167d7baba8173f59d2fef580a129a29b3213a9c5ecb6ec76279c95a8c0d03026bf4ecc8b23d0482cbdbe7de83daf3db6f8404723e2c61f60164d8a88c16f5476ec69d931f5ccd936c9f33b679e3f61f312481d4870bc624321d037d5a628564d4904d3a1a2a338507a8cf60ee6f92385a3bbaba496f0c159e3b27d7dcb7ef8b14c0dd3ace046475db85a225291b2f272f4b87df9d813"}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r2, 0x9}, 0x8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = dup2(r4, r3) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540), 0x300, 0x0) r7 = io_uring_setup(0x2b68, &(0x7f0000000580)={0x0, 0x4c45, 0x200, 0x0, 0x32f, 0x0, r6}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r5) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbafd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x38}}, 0x40001) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000740)=0x3, 0x4) write$tun(r5, &(0x7f0000000780)={@val={0x0, 0x4}, @void, @llc={@snap={0x0, 0x1, "f244", "dbbdb8", 0x0, "2c24285ac5f3804dcfb853979997947e9b73c85b4a02acb91ae08f4fbb6d50bbcaf3f809884f09b06e9c0b07ce5b9d84867378bdf407e7054a5337d6b4015222b0bce6e65bf070ada373742ae3e064b4cd4b5bcd064048871041abed38ad21f87358172510a7acc9a1b347a8fd2e91ba0cbb940fafa06e3e144d4d76e2952e97bfcba63b4900ca8fe83d55d62ab623f8e418820deb7dc99f206a6d8f3b99c059cfaa008f4bfc6327afd8406e5a870e6239a32e007b49326a661830d7809b86b6af05a66af754025957528e02492c52903c64ba06cb995a114e6776f3263789e4a025ad008af02ccddc62d5bf5ddafc79ca8c911ceb62"}}}, 0x103) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000008c0)={{@any, 0x6}, 0x6, 0x3, 0xef6, 0x1, 0xa6, 0x1000, 0xcf66, 0x3}) open_by_handle_at(r6, &(0x7f0000000900)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x2, 0x5, 0x4, 0xfffffffffffffffb, 0x8000, 0xfffffffffffffff9}}, 0x200200) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xc4, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd62}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfe42}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4080}, 0x4008000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000b00)={r2, 0x8f, "ecc05fc67f170a926c4da20a4a664ac9cd7f08fdfdf4ce1f26ba0114cb123ebeee9a98010f35ed53479c82fda94adfa784fbc636575878d5b94142e00284c559a22095ff24897d4e46a6a640caf9146d5cd65ac7ed24fc9a8e596fe472eeb78e2b72a7605f6aed0c259e6d6c9a03d562a1f1da0b4e0960f780ad8e183ccd4fcdb9181ea35ec825c8f157a3e9ce67e6"}, &(0x7f0000000bc0)=0x97) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff39, 0x6}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x114}], @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x408d1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r8) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x140, r10, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0xe4, 0x3, "3fab341a12329d55a84481f8ebe9ef3f7fb319c509811bfb4be9fceaa10c9eb5c65be56ec2cbbb627648ddd829e031a7c557ae7942825c60602784fe128b860de00e890cb2eeecc48c48c998ab8dc0aab7bf7fbea44353fe070ca76a432288c2616390c30edf0a273c640555b0c386abe8a1887712341dc7f84dd90ca3bd494174375697831f803ff471c86d88991e5efdcc5abe7b3d11d89200d02bf219c8fa61af128006f10a40807dfdea925c8f570e5427076753c2ff06a99bdec0840ebc7fba40c67a7e4e9b03e042279ecb26f01081d25fe62c933a196f26834cbc5f22"}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "308fa146be9a5002fb1696"}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x50}, 0x81) fcntl$setlease(r0, 0x400, 0x2) r11 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000f80)=r11, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, [{0x4}, {0x60, 0x1}, {0x5}, {0x5, 0x1}, {0x18}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x60}, {0x6}, {0x4}, {0x5, 0x1}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40841) 1.117145489s ago: executing program 1 (id=3991): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_ACT={0x34, 0x3, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x500000000000000, 0x20041890}, 0x0) 1.117013316s ago: executing program 6 (id=3992): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0xfeffffff, 0x42014}, 0x4080040) 1.115938234s ago: executing program 1 (id=3993): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4800, 0xff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001600010a000000000400b8eb219f0a00"], 0x24}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4800, 0xff}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001600010a000000000400b8eb219f0a00"], 0x24}}, 0x0) (async) 1.037061255s ago: executing program 1 (id=3994): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001100)={&(0x7f0000000100)=[0x81, 0x645d, 0x0, 0x3, 0x10000, 0x0, 0x3, 0x6, 0x5, 0x0, 0x1, 0x40, 0x1, 0x80000001, 0x3, 0xb, 0x2, 0xf7, 0x200, 0x0, 0x0, 0x19f6, 0x0, 0x7f, 0x3, 0xd5, 0x0, 0xc, 0x7, 0x0, 0x80000001, 0xd, 0x400, 0x7f, 0xc01, 0x5, 0x4, 0x5, 0x5, 0xff, 0x3, 0x0, 0x3, 0xf69, 0xa6385aa, 0x1, 0xe74, 0xfffffff9, 0x1, 0xfffffff9, 0x6fe50f4c, 0x1, 0x572a56f6, 0x8, 0x9, 0x6, 0x800, 0x6, 0x0, 0xbd0000, 0x4c2, 0x9, 0x5, 0x6, 0x0, 0x2, 0x1, 0x24b99e25, 0x5, 0x5, 0x0, 0x8, 0xffff, 0x3, 0x6, 0x7, 0xd, 0x7ff, 0x2, 0x0, 0x0, 0x6, 0x2, 0x3, 0xfffffffc, 0xfffffffe, 0x7, 0x1, 0x9, 0xffff, 0x1, 0x7, 0x3, 0x4, 0x8001, 0x1, 0x3, 0x8, 0x0, 0x8, 0x7, 0x4, 0x100, 0x3, 0xcd7d, 0x8, 0x10000, 0x9aed, 0xffffa26f, 0x401, 0x100, 0x4, 0x1, 0x7fff, 0x0, 0x3, 0x5, 0x8, 0xffffff7f, 0xffffff7f, 0x1d9a, 0xc20, 0xa, 0x4, 0x6, 0x6, 0x0, 0xb45, 0x0, 0xf, 0x0, 0xf, 0x1, 0xffff, 0x7c, 0x5, 0x1, 0xaa, 0x8, 0xffffb4e9, 0x3, 0x102, 0xfffffffc, 0x7, 0x4, 0x10000, 0x7, 0x8, 0x9, 0x7, 0xfc7, 0x7, 0x6, 0x0, 0xeb0, 0x10, 0x6, 0x9, 0x3, 0x6, 0x3, 0x6, 0x7, 0x1, 0xfffffbeb, 0x7d2e, 0xb8, 0x2, 0x5, 0x81, 0xffffffff, 0x0, 0x8, 0x3, 0x6, 0x5, 0x3, 0x8000, 0x7, 0x10, 0x8, 0x2, 0x0, 0x3, 0x7fff, 0x2, 0x8, 0x6, 0x1000, 0x79, 0x6, 0xc, 0xd, 0x8001, 0x0, 0x1, 0x2, 0x5, 0x5, 0xd82, 0x80000000, 0x10001, 0xffffffff, 0xfc9e, 0x10, 0x1, 0x2, 0x904, 0x8, 0x0, 0x3, 0x6, 0x3, 0x5, 0x1, 0x4f4, 0x5, 0x4, 0x1, 0x200, 0x3d703428, 0x6a3, 0x0, 0x7ff, 0x1, 0x7, 0xd, 0x4, 0xfffffff7, 0x7668, 0x10001, 0x4, 0x4, 0x8, 0x9, 0xe, 0x0, 0x3, 0xa4b, 0x12, 0x2, 0x7, 0x2, 0xa16, 0x8, 0x6, 0x401, 0x4, 0x2, 0x7, 0x2, 0x9, 0x1ff, 0x3, 0x401, 0x0, 0x4, 0x9, 0xd, 0x401, 0x1, 0x2, 0x2, 0x1, 0xd273, 0x200, 0xb, 0xff, 0x1, 0x180, 0x40, 0x7, 0x3ff, 0x0, 0x834b, 0xff, 0x4, 0x3a4a580e, 0x7, 0x9, 0x6, 0x77f6, 0x3, 0x1ff, 0x101, 0x81, 0x400, 0x6, 0x5, 0x4, 0x8, 0x624, 0x10001, 0x200, 0x9, 0x2, 0x1, 0x0, 0x6, 0xed0, 0x15f59704, 0x6, 0xf, 0x6, 0x7, 0x100, 0x3, 0x8, 0x0, 0xb6, 0x8001, 0x3, 0xfffffff7, 0x8, 0x2, 0x3, 0x80000001, 0x2, 0xffff, 0x4, 0x1, 0x8, 0x6, 0xffff0001, 0xffff8df0, 0x6, 0xee0, 0x4, 0xfe8, 0xab, 0x3b12, 0x7ff, 0x6, 0x9, 0x9, 0x6, 0x2, 0x4, 0x41, 0x5, 0x101, 0x7fff, 0xb35, 0xfffffff8, 0x0, 0x6, 0xf47b, 0x2, 0x8001, 0x2, 0x0, 0x14b7b6af, 0x6, 0x1d, 0xffff, 0xffffffff, 0x3, 0x1, 0x200, 0xe, 0xff, 0xbad, 0x0, 0x923, 0x800, 0xf, 0x4, 0x8, 0x1, 0x5e40, 0x4, 0x800, 0x3, 0x80, 0x7, 0x5, 0x5, 0x2, 0x100, 0xad, 0x1, 0x200, 0x5, 0xffffcd56, 0x2, 0x8, 0x10001, 0x1, 0x4, 0x6, 0x80, 0x2, 0x7, 0x0, 0x3, 0x4, 0x401, 0xc71, 0x4, 0x8, 0xc4, 0xfffe000, 0x0, 0x7, 0x5, 0x6, 0x6, 0x2988dd09, 0x4, 0x0, 0x2, 0x2, 0x9, 0xe, 0x6, 0x3, 0x4, 0xd16a, 0x2, 0x4, 0x40, 0x16e, 0x9, 0x482d6858, 0x101, 0x6, 0x6, 0x21ce, 0x4, 0x400, 0x54, 0xfa4, 0xf7e4, 0x3, 0x9, 0x8, 0x6, 0x0, 0x3, 0x41, 0x1ff, 0x8eb, 0x401, 0x6, 0xff800000, 0x56c6, 0x0, 0x7fffffff, 0x4, 0x6b, 0x2, 0x7, 0x553, 0x1, 0xb, 0x2, 0x100, 0x3e, 0x101, 0x8, 0x8, 0x0, 0x1, 0x3, 0x3, 0x0, 0x79dc, 0xe2e, 0xf, 0xef3, 0xf734, 0x8, 0x6aa2, 0x8, 0x81, 0x9, 0x524, 0xaa, 0x6, 0x9, 0x0, 0x2a3d17d8, 0x3, 0x8176, 0x7ff, 0x8, 0x200, 0x3ff, 0x2, 0x5, 0x80000001, 0xb, 0x1, 0x81, 0x7, 0xfffffffc, 0x3, 0x3ff, 0x5, 0x6, 0xa2, 0x4, 0xdfa, 0x3, 0x7, 0x0, 0x2e, 0x8, 0x5, 0x2, 0x8001, 0x3ff, 0x1, 0x80000001, 0x7, 0xff, 0x4, 0x4f, 0x1, 0x80, 0x0, 0x1, 0x2, 0x1, 0xd1, 0x2, 0xfffffff7, 0x401, 0x3, 0x8001, 0xd, 0x0, 0xb, 0x6c2, 0x4, 0xfffffffc, 0x4, 0x7, 0x0, 0x2, 0x101, 0x1, 0x4, 0x80, 0x779e, 0x0, 0x0, 0x7ff, 0xfffffffc, 0x7785, 0x0, 0xfffffff9, 0x401, 0x2, 0x6, 0x0, 0x0, 0x7, 0x3, 0x3, 0xe, 0x8f, 0x8000, 0x0, 0x2321, 0x0, 0x0, 0x4, 0xff, 0x8001, 0x1000, 0x8, 0x4, 0x2, 0x3, 0x0, 0x5, 0xefd, 0x1, 0xc, 0xc, 0xfe, 0x9, 0x6, 0x0, 0x2, 0x2, 0x1, 0x2fde9a03, 0x5, 0x9, 0x101, 0xc, 0x850, 0x400, 0x101, 0x2, 0xc3, 0x8, 0x1, 0x6, 0x2, 0x8, 0x0, 0x0, 0xc8e, 0x3, 0x3, 0x0, 0x8, 0x10, 0xff, 0x5, 0x5, 0x1a1a, 0x0, 0x6, 0xf6, 0x4, 0xd, 0x5, 0x7, 0xaa7c, 0x7, 0x1, 0x6, 0x127, 0xff, 0x4, 0x0, 0x4, 0x9, 0x402, 0x1, 0x10000, 0x7, 0x1, 0x9bd7, 0x1000, 0x7, 0x40, 0x9, 0x4, 0xf0b, 0x0, 0x26, 0x4, 0x7, 0x8, 0x3, 0xfff, 0x6, 0x7, 0x4, 0xfffffc67, 0x9, 0x2, 0x59, 0x64, 0x200, 0x7, 0x8, 0x8000, 0x6, 0x0, 0x9, 0x9, 0x9, 0x2, 0xab9, 0x2, 0x5, 0x0, 0x6, 0x5, 0xcb04, 0x3, 0x59d, 0x5, 0xa03, 0x5, 0x2, 0xdad8, 0x9, 0x9, 0x2, 0x50, 0x401, 0x6, 0x80000000, 0x3, 0x101, 0xc27, 0x0, 0x0, 0x0, 0x6, 0x8, 0x4, 0x1, 0x5, 0x2, 0x7fff, 0xd, 0x0, 0x1, 0x0, 0x7, 0x4, 0x0, 0x3, 0x5b, 0xe68, 0x2, 0x5, 0x0, 0xe, 0x5, 0x3ff, 0x2, 0x0, 0x81, 0x3d7, 0x7fff, 0x3ff, 0x7, 0x4e, 0x2, 0x1, 0x6, 0x7, 0x4, 0x10000, 0x2, 0xfffffffb, 0x1ff, 0xfffffff8, 0x401, 0x3, 0xe7e3, 0x8, 0x0, 0xe8, 0xfffffff8, 0xb, 0xa, 0x10001, 0x8, 0x6, 0xfffffffd, 0x8, 0x9, 0xf4dd, 0x6, 0x8, 0x3, 0x10b20000, 0x0, 0x3, 0x2, 0x10001, 0x1, 0x1000, 0xfffffff5, 0x1ff, 0x3ff00, 0x7, 0x44, 0x6e14, 0x8, 0x3, 0xb7, 0x5, 0x7, 0x7fff, 0x0, 0x5, 0x6, 0x3a8, 0x473, 0x6, 0x6b, 0x1000, 0x73d1, 0x8, 0x0, 0x0, 0x2, 0x5574, 0x10001, 0x4, 0x1bef, 0xb60, 0x0, 0xe, 0x43, 0x8, 0x8001, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x4, 0xa, 0x3, 0x7, 0x4, 0x8, 0xfff, 0x800, 0x8001, 0x4, 0x101, 0x1, 0x5, 0x2, 0x7fff, 0x24, 0x4, 0x80000000, 0xb0bb, 0x2, 0x6, 0x1, 0x10, 0x40, 0x800, 0xbeb, 0xfffffe01, 0xf000000, 0x6, 0x56693c9a, 0xd, 0xe2cb, 0x4, 0x8000, 0x0, 0x4, 0x4, 0x7, 0x2, 0x3, 0x200e85b, 0x3, 0x7, 0x2, 0x101, 0x3ff, 0x9, 0xa9a6, 0x7fff, 0x10001, 0x7, 0x8, 0x1, 0x0, 0x6, 0x0, 0x1, 0x0, 0xa, 0x3, 0x4cd2, 0xe, 0x16, 0x7, 0x5, 0xffffffde, 0x401, 0xb6, 0x5, 0x1, 0xf6, 0xfffffff7, 0x2, 0xa87, 0x9, 0x3, 0x200, 0xdf56, 0x9, 0x6, 0x6e5c, 0x4, 0xbae, 0xd, 0x7, 0x0, 0xee6, 0x400, 0x8, 0x161f, 0x1000, 0xfffffff9, 0x8001, 0x4, 0x5, 0xfff, 0x4, 0x9, 0x8, 0xfffffffc, 0x4, 0xffff745b, 0x7, 0x10001, 0xffffffff, 0x4, 0x5, 0x4, 0x7, 0x7fff, 0x0, 0x10, 0x2, 0x4, 0x0, 0x6, 0x1, 0x405, 0x80000000, 0x9, 0x298, 0x7, 0x5, 0x7, 0x1f272a62, 0x4, 0x544d, 0x259f, 0x7ff, 0x2, 0x11, 0xc, 0x0, 0x7f, 0x6, 0x29111b7c, 0x6cb, 0x6, 0x8, 0x80, 0x0, 0x7f, 0xe, 0x0, 0xe, 0x9, 0x3, 0x9, 0xfff, 0x9, 0xfffffffa, 0x2, 0x3, 0x0, 0xf47, 0x2, 0x1e4, 0x8, 0x5d57, 0xb7ed, 0x7, 0x0, 0x2, 0xfffffff8, 0x1ff, 0x401, 0xf582, 0x4, 0xaa, 0x80, 0x5, 0xc64, 0x6, 0x5, 0x6, 0x9, 0x5, 0x3ff, 0x2, 0x4dd4, 0x80000000, 0x6, 0xc759, 0x7, 0x1, 0x7f, 0x2, 0x2, 0x5, 0x6, 0xfffffff9, 0xf5, 0x1, 0x400, 0xaf3, 0x7, 0x1, 0x5, 0x4, 0xd41b, 0x7, 0x5, 0x1000, 0xadb8, 0x7, 0xff, 0x9, 0x3, 0xeada, 0x4, 0x3, 0xf, 0x6, 0x1, 0x3c, 0x6, 0x6, 0x4, 0xb47d, 0x3, 0x703], 0x2, 0x400, 0x6}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) clock_gettime(0xfffffffffffffff9, &(0x7f0000003a40)) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x3, 0x195701) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000af40)=ANY=[@ANYBLOB="9c2c00004400010029bd7000040000000100000004004880812c01"], 0x2c9c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000ac0)="0058de", 0x3}], 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0xc0281, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg/0:0:0:0\x00', 0x10b003, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 976.960666ms ago: executing program 1 (id=3995): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x10002005}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@my=0x0}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000880)={0x1, 0x5, 0x7fffffffffffffff, 0x400, 0xfff, 0x5}) exit(0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x4000800) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 577.520076ms ago: executing program 5 (id=3996): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0), 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x14, "2af01c3d0040fbffffffffffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000b40)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x536d) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 517.403037ms ago: executing program 5 (id=3997): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x0, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x10, 0x20, 0xb12e, 0x2, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x65, 0x0, 0x3, 0x4, 0x0, @empty, @remote, {[@lsrr={0x83, 0xb, 0xc6, [@empty, @broadcast]}, @ssrr={0x89, 0x17, 0x57, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @broadcast]}, @cipso={0x86, 0x15, 0x0, [{0x5, 0xb, "2d88c3fda9c1416bde"}, {0x2, 0x4, "d752"}]}, @cipso={0x86, 0xa, 0x1, [{0x5, 0x4, "6680"}]}, @noop, @noop, @ssrr={0x89, 0x1f, 0x25, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010100, @private=0xa010102, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000880)={'vxcan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@getstats={0x1c, 0x5e, 0x1b8, 0x70bd27, 0x25dedbfd, {0x0, 0x0, 0x0, r7, 0x4}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x20, 0x1, 0x70fe, 0xffff8001, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x66, 0x0, 0xd, 0x29, 0x0, @broadcast, @broadcast, {[@generic={0x88, 0x10, "37baf0726eaa27c54f097d4392df"}, @timestamp={0x44, 0xc, 0xc, 0x0, 0x0, [0x3, 0x12]}, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0xe, [{@broadcast, 0x6}, {@broadcast}, {@private=0xa010102, 0x2fbed4ea}, {@multicast1, 0x6}]}, @ra={0x94, 0x4}, @generic={0x94, 0x11, "cc59484fda79e226a24bb38e64a899"}, @ra={0x94, 0x4}, @cipso={0x86, 0x17, 0x2, [{0x1, 0x11, "daa460dde64c78651565f8e37e44ad"}]}]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 157.335137ms ago: executing program 5 (id=3998): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 107.230009ms ago: executing program 5 (id=3999): ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f00000001c0)=0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e803"], 0x48}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000ac310000000028000001294", 0x2e}], 0x1}, 0x80054) 106.318594ms ago: executing program 5 (id=4000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003f0007012bbd700000000000017c0000040006000000018008000600", @ANYRES32=0x0, @ANYBLOB="0e00028007e4bbf18fb2341c756d0000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x7, 0x0, 0x80000}, 0x100}) write$sndseq(r1, &(0x7f0000000c40)=[{0x3, 0x5d, 0x7, 0xa, @time={0x243, 0x2}, {0x5, 0x7f}, {0x3, 0x9a}, @raw32={[0x80, 0x6, 0x8001]}}, {0x2, 0x9, 0x4, 0xa3, @time={0x1f8, 0x2}, {0x40, 0x6}, {0x2, 0xe}, @quote={{0x7, 0x3}, 0x8}}], 0x38) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x9e8, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x470, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2810a3392961c8d46bc68fd2b861625f3f139bc770749bf3d1916d6e2d688e84"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x404, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3b8, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x101, @mcast1, 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @loopback, 0x3}}]}]}, @WGDEVICE_A_PEERS={0x514, 0x8, 0x0, 0x1, [{0x1dc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x1a4, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e78b0fa376e4a6e2afd0949894745a0fa97354d82fb78a88da0a9b7ae7f12ee1"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x4}, {0x2e4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x280, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xffff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @remote, 0x7}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x9e8}, 0x1, 0x0, 0x0, 0x2800c000}, 0x20000000) 0s ago: executing program 1 (id=4001): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000540)={{0xa, 0x2, 0xfd, 0x6, 0xffffff81}, &(0x7f0000000340)=[{}, {}]}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) syz_80211_inject_frame(&(0x7f0000000f40)=@broadcast, &(0x7f0000002340)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x9, 0x5}, "", @value={0xa, 0x0, 0x1, 0x0, 0xc6}}, @random="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"}, 0x88c) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000002240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x30, 0xc2, 0x0, 0x0, 0x0, {[@nop, @eol, @mptcp=@remove_addr={0x1e, 0x88, 0x2, 0x0, "7e54ceff63411693105d43a5dce60b379c5d36facc8b7ac8d265d81e804508935373c469f99d43c81cb6ae61fbd2eb23affc8b87b082b6f9799e2440e65dd950ab43e5d1230cecd570624db5550a062fb171bee943b04111fde1cc0971469afd541e4d45a4744b06a1df96feba1082245bbb36d3d5e423c735159845fd5253a13498831c74"}, @md5sig={0x13, 0x12, "7c395733018c7bd5eb0b6d1fc194d870"}, @exp_fastopen={0xfe, 0x7, 0xf989, "465a9f"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0xfffffffffffffd2d}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) write(r5, &(0x7f0000000840)='\n', 0x1) kernel console output (not intermixed with test programs): team0: Device veth0 is up. Set it down before adding it as a team port [ 207.810582][T14338] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 207.831547][T14341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3082'. [ 207.919556][T14348] netlink: 'syz.5.3085': attribute type 1 has an invalid length. [ 207.945067][T14348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.044611][T14356] bridge0: port 3(syz_tun) entered blocking state [ 208.055441][T14356] bridge0: port 3(syz_tun) entered disabled state [ 208.058927][T14356] syz_tun: entered allmulticast mode [ 208.064319][T14356] syz_tun: entered promiscuous mode [ 208.066744][T14356] bridge0: port 3(syz_tun) entered blocking state [ 208.069367][T14356] bridge0: port 3(syz_tun) entered forwarding state [ 208.070498][T14358] SET target dimension over the limit! [ 208.076002][T14356] bridge0: port 3(syz_tun) entered disabled state [ 208.078642][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.081664][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.131956][T14364] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3091'. [ 208.302007][T14373] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 208.308665][T14374] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 208.766029][T14385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3100'. [ 208.856847][ T42] audit: type=1400 audit(1786201153.775:1116): avc: denied { write } for pid=14388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.934320][ T42] audit: type=1400 audit(1786201153.855:1117): avc: denied { write } for pid=14393 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.971686][T14398] netlink: 'syz.1.3106': attribute type 10 has an invalid length. [ 208.983860][T14398] team0: Device veth0 is up. Set it down before adding it as a team port [ 209.050272][T14408] SET target dimension over the limit! [ 209.092548][T14410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3109'. [ 209.120193][ T42] audit: type=1400 audit(1786201154.045:1118): avc: denied { write } for pid=14406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.212618][T14423] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 209.237466][ T42] audit: type=1400 audit(1786201154.155:1119): avc: denied { write } for pid=14419 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.294396][T14429] syzkaller0: entered promiscuous mode [ 209.296616][T14429] syzkaller0: entered allmulticast mode [ 209.381796][ T42] audit: type=1400 audit(1786201154.305:1120): avc: denied { write } for pid=14435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.428509][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3120'. [ 209.473904][ T42] audit: type=1400 audit(1786201154.395:1121): avc: denied { write } for pid=14447 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.482499][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3121'. [ 209.512366][T14452] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.630920][ T42] audit: type=1400 audit(1786201154.555:1122): avc: denied { write } for pid=14461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.655678][T14468] team0: No ports can be present during mode change [ 209.659761][T14468] binder: 14467:14468 ioctl c0306201 200000000040 returned -11 [ 209.662384][T14468] binder: 14467:14468 ioctl c0306201 200000000640 returned -22 [ 209.672045][T14473] netlink: 'syz.1.3127': attribute type 10 has an invalid length. [ 209.686513][T14473] team0: Device veth0 is up. Set it down before adding it as a team port [ 209.723614][T14484] netlink: 'syz.1.3131': attribute type 1 has an invalid length. [ 209.738395][T14484] 8021q: adding VLAN 0 to HW filter on device bond9 [ 209.975127][T14519] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 210.011271][T14527] SET target dimension over the limit! [ 210.040964][T14530] netlink: 'syz.1.3151': attribute type 10 has an invalid length. [ 210.051732][T14530] team0: Device veth0 is up. Set it down before adding it as a team port [ 210.082616][T14534] netlink: 'syz.1.3153': attribute type 1 has an invalid length. [ 210.113296][T14534] 8021q: adding VLAN 0 to HW filter on device bond10 [ 210.887412][T14567] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 210.891276][T14567] SELinux: failed to load policy [ 210.899496][T14571] netlink: 'syz.4.3167': attribute type 1 has an invalid length. [ 210.930162][T14571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.952985][T14571] bond1: (slave geneve2): making interface the new active one [ 210.960820][T14571] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 211.061103][T14591] bridge0: port 3(syz_tun) entered disabled state [ 211.063325][T14591] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.065766][T14591] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.219493][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 211.222430][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'. [ 211.225439][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 211.228706][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'. [ 211.234351][ T5084] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 211.289310][T14594] SELinux: failed to load policy [ 211.348839][T14627] xt_l2tp: missing protocol rule (udp|l2tpip) [ 211.406254][T14635] SET target dimension over the limit! [ 211.408471][T14634] netlink: 'syz.1.3191': attribute type 1 has an invalid length. [ 211.439027][T14634] 8021q: adding VLAN 0 to HW filter on device bond11 [ 211.561721][T14658] netlink: 'syz.0.3199': attribute type 10 has an invalid length. [ 211.567662][T14658] team0: Device veth0 is up. Set it down before adding it as a team port [ 211.687776][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 211.725195][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 211.753417][T14672] 8021q: adding VLAN 0 to HW filter on device bond12 [ 211.762031][T14672] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 212.149000][T14696] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 212.167634][T14691] gtp0: entered promiscuous mode [ 212.169912][T14691] gtp0: entered allmulticast mode [ 212.174011][T14691] team0: Device gtp0 is of different type [ 212.457182][T14703] netlink: 'syz.1.3218': attribute type 1 has an invalid length. [ 212.501015][T14703] 8021q: adding VLAN 0 to HW filter on device bond13 [ 212.565183][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'. [ 212.579122][T14712] netlink: 'syz.1.3223': attribute type 10 has an invalid length. [ 212.595194][T14715] 8021q: adding VLAN 0 to HW filter on device bond9 [ 212.605295][T14712] team0: Device veth0 is up. Set it down before adding it as a team port [ 212.659931][T14722] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 212.664383][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 212.664400][ T42] audit: type=1400 audit(1786201157.585:1130): avc: denied { relabelto } for pid=14719 comm="syz.0.3226" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 212.682830][ T42] audit: type=1400 audit(1786201157.605:1131): avc: denied { associate } for pid=14719 comm="syz.0.3226" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 212.770370][T14732] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3230'. [ 212.788657][T14740] SET target dimension over the limit! [ 212.846472][T14746] netlink: 'syz.1.3237': attribute type 8 has an invalid length. [ 212.851437][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3237'. [ 212.858796][T14746] bond0: entered promiscuous mode [ 212.860634][T14746] bond_slave_0: entered promiscuous mode [ 212.862992][T14746] bond_slave_1: entered promiscuous mode [ 212.867268][T14746] gretap0: entered promiscuous mode [ 212.870602][T14746] team0: entered promiscuous mode [ 212.872721][T14746] team_slave_0: entered promiscuous mode [ 212.875126][T14746] team_slave_1: entered promiscuous mode [ 212.883845][T14746] hsr1: entered promiscuous mode [ 212.890925][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3237'. [ 212.896014][ T42] audit: type=1400 audit(1786201157.815:1132): avc: denied { read append } for pid=14735 comm="syz.4.3233" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 212.905132][ T42] audit: type=1400 audit(1786201157.815:1133): avc: denied { open } for pid=14735 comm="syz.4.3233" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 212.912359][T14746] team_slave_0 (unregistering): left promiscuous mode [ 212.917386][T14746] team0: Port device team_slave_0 removed [ 213.030328][T14750] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 213.035877][T14750] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 213.040792][T14770] netlink: 'syz.5.3245': attribute type 1 has an invalid length. [ 213.059402][T14770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.061587][T14750] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 213.079762][T14750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.081877][T14750] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 213.086592][T14750] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 213.090135][T14750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 213.092237][T14750] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 213.097848][T14750] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 213.104534][T14750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 213.108256][T14750] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 213.112647][T14750] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 213.205884][T14782] netlink: 'syz.0.3248': attribute type 10 has an invalid length. [ 213.211909][T14782] team0: Device veth0 is up. Set it down before adding it as a team port [ 213.284329][ T42] audit: type=1400 audit(1786201158.205:1134): avc: denied { write } for pid=14787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.324311][T14796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.337661][ T42] audit: type=1400 audit(1786201158.265:1135): avc: denied { write } for pid=14798 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.412735][ T42] audit: type=1400 audit(1786201158.335:1136): avc: denied { write } for pid=14802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.463697][ T42] audit: type=1400 audit(1786201158.385:1137): avc: denied { write } for pid=14812 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.550464][ T42] audit: type=1400 audit(1786201158.475:1138): avc: denied { write } for pid=14821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.616894][ T42] audit: type=1400 audit(1786201158.535:1139): avc: denied { write } for pid=14832 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.732567][T14847] netlink: 'syz.5.3268': attribute type 1 has an invalid length. [ 213.770909][T14847] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.797514][T14853] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 213.862220][T14866] netlink: 'syz.0.3276': attribute type 10 has an invalid length. [ 213.879624][T14866] team0: Device veth0 is up. Set it down before adding it as a team port [ 213.983879][T14881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.024340][T14869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.026644][T14869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.030276][T14869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.032407][T14869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.287128][ T10] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 214.440558][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 214.443367][ T10] usb 5-1: config 0 has no interface number 0 [ 214.445418][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.450223][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 214.454681][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 214.459595][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 214.463801][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 214.467542][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.472258][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 214.475261][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.480049][ T10] usb 5-1: config 0 descriptor?? [ 214.483513][T14878] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.486684][T14878] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.498228][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 214.608010][ T5804] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 214.639410][T14929] netlink: 'syz.1.3300': attribute type 1 has an invalid length. [ 214.664510][T14929] 8021q: adding VLAN 0 to HW filter on device bond14 [ 214.705861][T14876] SELinux: syz.0.3280 (14876) wrote to checkreqprot. This is no longer supported. [ 214.756983][T14934] netlink: 'syz.1.3302': attribute type 10 has an invalid length. [ 214.774645][ T5804] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 214.775897][T14934] team0: Device veth0 is up. Set it down before adding it as a team port [ 214.781153][ T5804] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.790996][ T5804] usb 9-1: Product: syz [ 214.792803][ T5804] usb 9-1: Manufacturer: syz [ 214.797463][ T5804] usb 9-1: SerialNumber: syz [ 214.897848][ T10] usb 5-1: USB disconnect, device number 25 [ 214.904660][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 214.974866][T14942] 8021q: adding VLAN 0 to HW filter on device bond10 [ 215.017358][ T5804] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 215.021034][ T5804] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 215.024235][ T5804] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 215.033765][ T5804] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 215.046250][ T5804] usb 9-1: USB disconnect, device number 6 [ 215.372721][T14952] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.375698][T14952] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.384459][T14958] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 215.385608][T14952] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.389569][T14952] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.562155][T14961] e1000e 0000:00:02.0 eth1: removed PHC [ 215.685857][T14961] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 215.963240][T14964] ohci-pci 0000:00:02.0: OHCI PCI host controller [ 215.985561][T14964] ohci-pci 0000:00:02.0: new USB bus registered, assigned bus number 63 [ 215.992920][T14964] ohci-pci 0000:00:02.0: irq 27, io mem 0xfea80000 [ 216.071061][T14964] ohci-pci 0000:00:02.0: USB HC reset timed out! [ 216.077928][ T5514] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 216.080475][T14964] ohci-pci 0000:00:02.0: can't start [ 216.086414][T14964] ohci-pci 0000:00:02.0: startup error -1 [ 216.089261][T14964] ohci-pci 0000:00:02.0: USB bus 63 deregistered [ 216.160452][T14964] ohci-pci 0000:00:02.0: init 0000:00:02.0 fail, -1 [ 216.163961][T14964] ohci-pci 0000:00:02.0: probe with driver ohci-pci failed with error -1 [ 216.241168][ T5514] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 216.254482][ T5514] usb 6-1: config 0 has no interface number 0 [ 216.258888][ T5514] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.270905][T15020] __nla_validate_parse: 7 callbacks suppressed [ 216.270924][T15020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3325'. [ 216.282348][ T5514] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 216.286225][ T5514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.292622][T15014] 8021q: adding VLAN 0 to HW filter on device bond11 [ 216.294900][ T5514] usb 6-1: Product: syz [ 216.301768][ T5514] usb 6-1: Manufacturer: syz [ 216.305415][ T5514] usb 6-1: SerialNumber: syz [ 216.319967][ T5514] usb 6-1: config 0 descriptor?? [ 216.332065][T15020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.347103][ T5514] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 216.395081][T15034] SET target dimension over the limit! [ 216.662123][T15046] syz_tun (unregistering): left allmulticast mode [ 216.667534][T15046] syz_tun (unregistering): left promiscuous mode [ 216.675189][T15046] bridge0: port 3(syz_tun) entered disabled state [ 216.744803][T15061] overlay: Unknown parameter 'fowner' [ 216.747780][T15061] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 216.881982][ T7252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.995133][ T7252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.023439][ T5726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.033910][ T5726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.039427][ T5726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.042140][ T5726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.044713][ T5726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.101841][ T7252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.212683][ T7252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.229590][T15087] validate_nla: 1 callbacks suppressed [ 217.229605][T15087] netlink: 'syz.0.3342': attribute type 10 has an invalid length. [ 217.239395][T15087] team0: Device veth0 is up. Set it down before adding it as a team port [ 217.397035][ T5730] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.397231][ T5726] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.397260][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.430223][ T7252] bridge_slave_1: left allmulticast mode [ 217.432546][ T7252] bridge_slave_1: left promiscuous mode [ 217.434949][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.440002][ T7252] bridge_slave_0: left allmulticast mode [ 217.441899][ T7252] bridge_slave_0: left promiscuous mode [ 217.444400][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.580563][ T7252] bond1 (unregistering): (slave geneve2): Releasing active interface [ 217.602557][ T7252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.609310][ T7252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.614357][ T7252] bond0 (unregistering): Released all slaves [ 217.626177][ T7252] bond1 (unregistering): Released all slaves [ 217.651016][ T7252] bond2 (unregistering): Released all slaves [ 217.665816][ T7252] bond3 (unregistering): Released all slaves [ 217.691038][ T5437] 8021q: adding VLAN 0 to HW filter on device eth1 [ 217.793608][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 217.793640][ T42] audit: type=1400 audit(1786201162.715:1159): avc: denied { write } for pid=15105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.853009][ T42] audit: type=1400 audit(1786201162.775:1160): avc: denied { write } for pid=15108 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.913245][ T5437] 8021q: adding VLAN 0 to HW filter on device eth10 [ 217.955025][T15073] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.967116][T15073] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.974770][T15073] bridge_slave_0: entered allmulticast mode [ 217.985598][T15073] bridge_slave_0: entered promiscuous mode [ 218.008435][T15073] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.011445][T15073] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.015234][T15073] bridge_slave_1: entered allmulticast mode [ 218.019481][T15073] bridge_slave_1: entered promiscuous mode [ 218.068677][T15073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.081367][T15073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.111268][ T7252] hsr_slave_0: left promiscuous mode [ 218.113211][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3347'. [ 218.117911][ T7252] hsr_slave_1: left promiscuous mode [ 218.120698][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.123747][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.127658][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.130977][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.139064][ T7252] veth1_macvtap: left promiscuous mode [ 218.141450][ T7252] veth0_macvtap: left promiscuous mode [ 218.143792][ T7252] veth1_vlan: left promiscuous mode [ 218.146002][ T7252] veth0_vlan: left promiscuous mode [ 218.325803][ T7252] team0 (unregistering): Port device team_slave_1 removed [ 218.333723][ T7252] team0 (unregistering): Port device team_slave_0 removed [ 218.346966][ T5726] Bluetooth: hci4: command 0x1003 tx timeout [ 218.346985][ T5084] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 218.412924][T15127] netlink: 'syz.5.3348': attribute type 1 has an invalid length. [ 218.491628][T15123] 8021q: adding VLAN 0 to HW filter on device bond12 [ 218.514999][T15127] 8021q: adding VLAN 0 to HW filter on device bond6 [ 218.525935][T15073] team0: Port device team_slave_0 added [ 218.531892][T15073] team0: Port device team_slave_1 added [ 218.549521][T15134] SET target dimension over the limit! [ 218.584434][T15073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.591084][ C3] usb 6-1: yurex_control_callback - control failed: -2 [ 218.596907][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.607683][ T42] audit: type=1400 audit(1786201163.525:1161): avc: denied { write } for pid=15135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.610468][ T1038] usb 6-1: USB disconnect, device number 21 [ 218.629277][T15073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.630989][ T1038] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 218.635593][T15073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.641488][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.652952][T15073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.684542][T15142] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 218.691904][ T42] audit: type=1400 audit(1786201163.615:1162): avc: denied { write } for pid=15141 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.746286][ T5437] 8021q: adding VLAN 0 to HW filter on device eth11 [ 218.792096][ T41] IPVS: starting estimator thread 0... [ 218.803836][T15073] hsr_slave_0: entered promiscuous mode [ 218.808009][T15073] hsr_slave_1: entered promiscuous mode [ 218.810588][T15073] debugfs: 'hsr0' already exists in 'hsr' [ 218.812643][T15073] Cannot create hsr debugfs directory [ 218.849368][ T5084] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 218.878228][T15150] IPVS: using max 45 ests per chain, 108000 per kthread [ 218.878760][ T42] audit: type=1400 audit(1786201163.805:1163): avc: denied { write } for pid=15154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.935978][ T42] audit: type=1400 audit(1786201163.855:1164): avc: denied { write } for pid=15157 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.980418][ T5437] 8021q: adding VLAN 0 to HW filter on device eth12 [ 219.023689][T15169] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 219.052252][T15073] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.056521][T15073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.059443][T15073] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.064705][T15073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.068284][T15073] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.082446][T15073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.086103][T15073] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.092076][T15073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.140602][T15073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.146997][ T5084] Bluetooth: hci1: command tx timeout [ 219.155735][T15073] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.163062][T10891] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.166033][T10891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.176602][T10891] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.179655][T10891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.205934][ T42] audit: type=1400 audit(1786201164.125:1165): avc: denied { watch watch_reads } for pid=15182 comm="syz.1.3361" path="/file0" dev="ramfs" ino=64203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 219.229891][ T42] audit: type=1400 audit(1786201164.155:1166): avc: denied { execute } for pid=15182 comm="syz.1.3361" name="file0" dev="ramfs" ino=64203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 219.243762][ T42] audit: type=1400 audit(1786201164.165:1167): avc: denied { execute_no_trans } for pid=15182 comm="syz.1.3361" path="/file0" dev="ramfs" ino=64203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 219.302179][T15189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3359'. [ 219.467099][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.477026][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.537531][T15073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.563844][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3368'. [ 219.582169][T15221] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3370'. [ 219.594381][T15218] 8021q: adding VLAN 0 to HW filter on device bond13 [ 219.615087][ T42] audit: type=1400 audit(1786201164.535:1168): avc: denied { write } for pid=15214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.669889][ T5875] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 219.756139][T15073] veth0_vlan: entered promiscuous mode [ 219.765689][T15239] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3373'. [ 219.765864][T15073] veth1_vlan: entered promiscuous mode [ 219.771101][T15239] openvswitch: netlink: Flow key attr not present in new flow. [ 219.790467][T15073] veth0_macvtap: entered promiscuous mode [ 219.795946][T15073] veth1_macvtap: entered promiscuous mode [ 219.800331][T15239] MINIX-fs: blocksize too small for device [ 219.810613][T15073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.818899][T15073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.840256][ T5875] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.849389][ T5875] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 219.853257][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.879287][T10891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.883350][T10891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.899089][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.901761][ T5875] as10x_usb: device has been detected [ 219.904006][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.918703][ T5875] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 219.959019][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.962992][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.972106][ T5875] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 219.977038][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.983963][ T5875] as10x_usb: error during firmware upload part1 [ 219.987238][ T5875] Registered device Abilis Systems DVB-Titan [ 219.988946][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.314284][T15264] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 220.513612][T15282] netlink: 'syz.6.3379': attribute type 10 has an invalid length. [ 220.537473][T15282] team0: Device veth0 is up. Set it down before adding it as a team port [ 220.633612][T15294] macvlan2: entered promiscuous mode [ 220.635450][T15294] macvlan2: entered allmulticast mode [ 220.638756][T15294] bridge0: entered allmulticast mode [ 220.641156][T15294] bridge0: entered promiscuous mode [ 220.652348][T15294] team0: Port device macvlan2 added [ 220.925770][T15318] Cannot find add_set index 0 as target [ 220.983230][T15325] netlink: 'syz.0.3396': attribute type 1 has an invalid length. [ 221.023866][T15328] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 221.032040][T15325] 8021q: adding VLAN 0 to HW filter on device bond14 [ 221.227142][ T5084] Bluetooth: hci1: command tx timeout [ 221.329841][T15350] netlink: 'syz.0.3405': attribute type 10 has an invalid length. [ 221.336086][T15350] team0: Device veth0 is up. Set it down before adding it as a team port [ 221.547158][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.547982][ T5726] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.719145][T15370] md: could not open device unknown-block(0,0). [ 221.722748][T15370] md: md_import_device returned -6 [ 221.796534][T15382] SET target dimension over the limit! [ 221.906388][T15390] netlink: 'syz.0.3418': attribute type 4 has an invalid length. [ 221.912894][T15390] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3418'. [ 221.937852][T15390] netlink: 'syz.0.3418': attribute type 1 has an invalid length. [ 221.941052][T15392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3419'. [ 221.953175][T15390] 8021q: adding VLAN 0 to HW filter on device bond15 [ 221.969337][T15392] 8021q: adding VLAN 0 to HW filter on device bond7 [ 221.973557][T15390] : renamed from dummy0 (while UP) [ 222.061181][T15396] netlink: 'syz.5.3420': attribute type 10 has an invalid length. [ 222.243045][T15415] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 222.247470][T15405] netlink: 'syz.0.3424': attribute type 3 has an invalid length. [ 222.293166][T15405] nvme nvme0: rdma connection establishment failed (-104) [ 222.375907][T15422] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 222.384887][T15424] SET target dimension over the limit! [ 222.794555][T15442] netlink: 'syz.6.3438': attribute type 3 has an invalid length. [ 222.856675][T15442] nvme nvme0: rdma connection establishment failed (-104) [ 222.971853][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3445'. [ 223.043763][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3449'. [ 223.051461][T15469] veth1_vlan: Device is already in use. [ 223.203083][T15490] netlink: 'syz.5.3457': attribute type 10 has an invalid length. [ 223.306920][ T5726] Bluetooth: hci1: command tx timeout [ 223.491904][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 223.491922][ T42] audit: type=1400 audit(1786201168.415:1180): avc: denied { map } for pid=15510 comm="syz.6.3467" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.548438][T15523] gretap1: entered allmulticast mode [ 223.551708][T15523] syzkaller0: left promiscuous mode [ 223.553841][T15523] syzkaller0: left allmulticast mode [ 223.567359][T15523] fuse: root generation should be zero [ 223.593202][T15527] device-mapper: ioctl: Invalid ioctl structure: name mypoo, dev f801 [ 223.601074][T15528] geneve3: entered allmulticast mode [ 223.620091][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'. [ 223.669915][T15531] 8021q: adding VLAN 0 to HW filter on device bond16 [ 223.741804][T15537] SET target dimension over the limit! [ 223.748332][ T42] audit: type=1400 audit(1786201168.675:1181): avc: denied { read } for pid=15539 comm="syz.6.3476" name="/" dev="configfs" ino=2102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.773814][ T42] audit: type=1400 audit(1786201168.685:1182): avc: denied { read open } for pid=15539 comm="syz.6.3476" path="/" dev="configfs" ino=2102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.806571][T15543] netlink: 'syz.0.3479': attribute type 10 has an invalid length. [ 223.818572][T15543] team0: Device veth0 is up. Set it down before adding it as a team port [ 223.937146][T15553] netlink: 'syz.5.3480': attribute type 21 has an invalid length. [ 223.941598][T15553] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.155928][ T42] audit: type=1400 audit(1786201169.075:1183): avc: denied { write } for pid=15561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.230026][ T42] audit: type=1400 audit(1786201169.155:1184): avc: denied { write } for pid=15564 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.369188][ T42] audit: type=1400 audit(1786201169.295:1185): avc: denied { write } for pid=15570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.442724][ T42] audit: type=1400 audit(1786201169.365:1186): avc: denied { write } for pid=15577 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.535322][ T42] audit: type=1400 audit(1786201169.455:1187): avc: denied { write } for pid=15584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.637142][ T42] audit: type=1400 audit(1786201169.555:1188): avc: denied { write } for pid=15589 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.704088][T15596] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 224.770731][ T42] audit: type=1400 audit(1786201169.685:1189): avc: denied { write } for pid=15597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.982751][T15618] nvme nvme0: failed to connect socket: -111 [ 225.097413][T15633] netlink: 'syz.0.3500': attribute type 1 has an invalid length. [ 225.118080][T15633] 8021q: adding VLAN 0 to HW filter on device bond17 [ 225.241043][T15644] netlink: 'syz.0.3502': attribute type 21 has an invalid length. [ 225.244192][T15644] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.367176][T15655] Cannot find add_set index 0 as target [ 225.388470][ T5726] Bluetooth: hci1: command tx timeout [ 225.391064][T15657] netlink: 'syz.5.3509': attribute type 10 has an invalid length. [ 225.884814][T15681] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 225.929524][T15684] FAULT_INJECTION: forcing a failure. [ 225.929524][T15684] name failslab, interval 1, probability 0, space 0, times 0 [ 225.939944][T15684] CPU: 2 UID: 0 PID: 15684 Comm: syz.6.3522 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.939963][T15684] Tainted: [L]=SOFTLOCKUP [ 225.939967][T15684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.939983][T15684] Call Trace: [ 225.939994][T15684] [ 225.939999][T15684] dump_stack_lvl+0x100/0x190 [ 225.940108][T15684] should_fail_ex.cold+0x5/0xa [ 225.940136][T15684] should_failslab+0xc2/0x120 [ 225.940184][T15684] __kmalloc_cache_noprof+0x91/0x6c0 [ 225.940196][T15684] ? configfs_write_iter+0x388/0x4e0 [ 225.940223][T15684] configfs_write_iter+0x388/0x4e0 [ 225.940238][T15684] vfs_write+0x6ac/0x1050 [ 225.940253][T15684] ? __pfx_configfs_write_iter+0x10/0x10 [ 225.940267][T15684] ? __pfx_vfs_write+0x10/0x10 [ 225.940286][T15684] ksys_write+0x12a/0x250 [ 225.940296][T15684] ? __pfx_ksys_write+0x10/0x10 [ 225.940309][T15684] do_syscall_64+0x115/0x870 [ 225.940381][T15684] ? clear_bhb_loop+0x70/0xc0 [ 225.940395][T15684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.940406][T15684] RIP: 0033:0x7f2a4c99e0d9 [ 225.940417][T15684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.940427][T15684] RSP: 002b:00007f2a4d7ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.940446][T15684] RAX: ffffffffffffffda RBX: 00007f2a4cc26090 RCX: 00007f2a4c99e0d9 [ 225.940453][T15684] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000005 [ 225.940460][T15684] RBP: 00007f2a4d7ca090 R08: 0000000000000000 R09: 0000000000000000 [ 225.940466][T15684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.940472][T15684] R13: 00007f2a4cc26128 R14: 00007f2a4cc26090 R15: 00007ffe46c824f8 [ 225.940487][T15684] [ 225.951591][T15683] JFS: discard option not supported on device [ 226.019820][T15683] Mount JFS Failure: -5 [ 226.021215][T15683] jfs_mount failed w/return code = -5 [ 226.080742][T15686] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 226.211078][ T5875] usb 6-1: USB disconnect, device number 22 [ 226.250702][ T5875] Unregistered device Abilis Systems DVB-Titan [ 226.254913][ T5875] as10x_usb: device has been disconnected [ 226.289522][T15699] ipvlan7: entered allmulticast mode [ 226.291372][T15699] batadv_slave_1: entered allmulticast mode [ 226.295356][T15699] batman_adv: batadv0: Adding interface: ipvlan7 [ 226.299150][T15699] batman_adv: batadv0: The MTU of interface ipvlan7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.307466][T15699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.311146][T15699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.314203][T15699] batman_adv: batadv0: Interface activated: ipvlan7 [ 226.479443][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'. [ 226.493521][T15712] netlink: 'syz.6.3531': attribute type 1 has an invalid length. [ 226.498757][T15709] 8021q: adding VLAN 0 to HW filter on device bond15 [ 226.531687][T15712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.554014][T15712] bond1: (slave geneve2): making interface the new active one [ 226.559052][T15712] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 226.587095][ T5729] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 226.601170][T15715] bridge0: port 3(syz_tun) entered blocking state [ 226.603495][T15715] bridge0: port 3(syz_tun) entered disabled state [ 226.605827][T15715] syz_tun: entered allmulticast mode [ 226.608984][T15715] syz_tun: entered promiscuous mode [ 226.611019][T15715] bridge0: port 3(syz_tun) entered blocking state [ 226.613132][T15715] bridge0: port 3(syz_tun) entered forwarding state [ 226.617980][T15715] netlink: 'syz.6.3532': attribute type 1 has an invalid length. [ 226.621234][T15715] bridge0: port 3(syz_tun) entered disabled state [ 226.623466][T15715] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.625998][T15715] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.640145][T15715] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 226.725439][T15725] SET target dimension over the limit! [ 226.737256][ T5729] usb 5-1: device descriptor read/64, error -71 [ 226.790159][T15729] team0: Device veth0 is up. Set it down before adding it as a team port [ 226.944575][T15747] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3546'. [ 226.997038][ T5729] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 227.003859][T15751] 9p: Bad value for 'rfdno' [ 227.051215][T15755] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 227.091135][T15757] kvm: Disabled LAPIC found during irq injection [ 227.091201][T15758] FAULT_INJECTION: forcing a failure. [ 227.091201][T15758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.110593][T15758] CPU: 3 UID: 0 PID: 15758 Comm: syz.1.3551 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.110625][T15758] Tainted: [L]=SOFTLOCKUP [ 227.110630][T15758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.110637][T15758] Call Trace: [ 227.110642][T15758] [ 227.110647][T15758] dump_stack_lvl+0x100/0x190 [ 227.110668][T15758] should_fail_ex.cold+0x5/0xa [ 227.110682][T15758] _copy_from_iter+0x1f4/0x1690 [ 227.110732][T15758] ? __pfx__copy_from_iter+0x10/0x10 [ 227.110752][T15758] ? kasan_save_track+0x14/0x30 [ 227.110766][T15758] ? __kasan_kmalloc+0xaa/0xb0 [ 227.110779][T15758] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 227.110793][T15758] ? configfs_write_iter+0x388/0x4e0 [ 227.110817][T15758] configfs_write_iter+0xb3/0x4e0 [ 227.110841][T15758] vfs_write+0x6ac/0x1050 [ 227.110861][T15758] ? __pfx_configfs_write_iter+0x10/0x10 [ 227.110885][T15758] ? __pfx_vfs_write+0x10/0x10 [ 227.110918][T15758] ksys_write+0x12a/0x250 [ 227.110933][T15758] ? __pfx_ksys_write+0x10/0x10 [ 227.110948][T15758] do_syscall_64+0x115/0x870 [ 227.110963][T15758] ? clear_bhb_loop+0x70/0xc0 [ 227.110977][T15758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.110988][T15758] RIP: 0033:0x7f8bd1d9e0d9 [ 227.110999][T15758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.111010][T15758] RSP: 002b:00007f8bd2d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.111022][T15758] RAX: ffffffffffffffda RBX: 00007f8bd2026090 RCX: 00007f8bd1d9e0d9 [ 227.111029][T15758] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000005 [ 227.111035][T15758] RBP: 00007f8bd2d06090 R08: 0000000000000000 R09: 0000000000000000 [ 227.111042][T15758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.111049][T15758] R13: 00007f8bd2026128 R14: 00007f8bd2026090 R15: 00007ffe83257858 [ 227.111063][T15758] [ 227.114620][T15760] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 227.177950][ T5729] usb 5-1: device descriptor read/64, error -71 [ 227.242840][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3554'. [ 227.255939][T15763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.287022][ T5729] usb usb5-port1: attempt power cycle [ 227.305242][T15766] syzkaller0: entered promiscuous mode [ 227.307555][T15766] syzkaller0: entered allmulticast mode [ 227.353742][T15771] validate_nla: 1 callbacks suppressed [ 227.353766][T15771] netlink: 'syz.6.3556': attribute type 1 has an invalid length. [ 227.374961][T15771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.436824][T15774] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3557'. [ 227.503382][T15778] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3559'. [ 227.510621][T15778] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3559'. [ 227.515278][T15778] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 227.528338][T15778] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 227.531874][T15778] CIFS mount error: No usable UNC path provided in device string! [ 227.531874][T15778] [ 227.535745][T15778] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 227.647049][ T5729] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 227.664837][T15782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3561'. [ 227.678621][ T5729] usb 5-1: device descriptor read/8, error -71 [ 227.704392][T15785] 8021q: adding VLAN 0 to HW filter on device macsec1 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 227.781112][T15789] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 227.843142][T15797] FAULT_INJECTION: forcing a failure. [ 227.843142][T15797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.853761][T15797] CPU: 3 UID: 0 PID: 15797 Comm: syz.5.3566 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.853795][T15797] Tainted: [L]=SOFTLOCKUP [ 227.853803][T15797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.853814][T15797] Call Trace: [ 227.853822][T15797] [ 227.853830][T15797] dump_stack_lvl+0x100/0x190 [ 227.853863][T15797] should_fail_ex.cold+0x5/0xa [ 227.853888][T15797] _copy_to_user+0x32/0xd0 [ 227.853916][T15797] ksys_msgctl.constprop.0+0x2cc/0x340 [ 227.853970][T15797] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 227.853990][T15797] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.854037][T15797] do_syscall_64+0x115/0x870 [ 227.854060][T15797] ? clear_bhb_loop+0x70/0xc0 [ 227.854083][T15797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.854103][T15797] RIP: 0033:0x7fb0f599e0d9 [ 227.854116][T15797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.854132][T15797] RSP: 002b:00007fb0f682f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 227.854152][T15797] RAX: ffffffffffffffda RBX: 00007fb0f5c25fa0 RCX: 00007fb0f599e0d9 [ 227.854164][T15797] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000000 [ 227.854175][T15797] RBP: 00007fb0f682f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.854187][T15797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.854199][T15797] R13: 00007fb0f5c26038 R14: 00007fb0f5c25fa0 R15: 00007ffdcb052818 [ 227.854224][T15797] [ 227.929650][ T5729] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 227.948057][ T5729] usb 5-1: device descriptor read/8, error -71 [ 227.990579][T15801] input: syz1 as /devices/virtual/input/input19 [ 228.017762][T13544] udevd[13544]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory [ 228.021173][T13544] udevd[13544]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 228.063214][T15806] netlink: 'syz.5.3570': attribute type 10 has an invalid length. [ 228.067494][ T5729] usb usb5-port1: unable to enumerate USB device [ 228.173243][T15818] comedi comedi2: comedi_config --init_data is deprecated [ 228.248370][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3580'. [ 228.263774][T15832] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.347531][T15848] netlink: 'syz.6.3586': attribute type 1 has an invalid length. [ 228.381487][T15848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.420762][T15855] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 228.465226][T15858] FAULT_INJECTION: forcing a failure. [ 228.465226][T15858] name failslab, interval 1, probability 0, space 0, times 0 [ 228.482940][T15858] CPU: 1 UID: 0 PID: 15858 Comm: syz.1.3589 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.482962][T15858] Tainted: [L]=SOFTLOCKUP [ 228.482966][T15858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.482974][T15858] Call Trace: [ 228.482985][T15858] [ 228.482991][T15858] dump_stack_lvl+0x100/0x190 [ 228.483043][T15858] should_fail_ex.cold+0x5/0xa [ 228.483065][T15858] should_failslab+0xc2/0x120 [ 228.483087][T15858] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 228.483115][T15858] ? gadget_dev_desc_UDC_store+0x51/0x2e0 [ 228.483172][T15858] kstrdup+0x51/0xe0 [ 228.483187][T15858] gadget_dev_desc_UDC_store+0x51/0x2e0 [ 228.483203][T15858] configfs_write_iter+0x302/0x4e0 [ 228.483225][T15858] vfs_write+0x6ac/0x1050 [ 228.483237][T15858] ? __pfx_configfs_write_iter+0x10/0x10 [ 228.483252][T15858] ? __pfx_vfs_write+0x10/0x10 [ 228.483274][T15858] ksys_write+0x12a/0x250 [ 228.483284][T15858] ? __pfx_ksys_write+0x10/0x10 [ 228.483299][T15858] do_syscall_64+0x115/0x870 [ 228.483337][T15858] ? clear_bhb_loop+0x70/0xc0 [ 228.483355][T15858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.483371][T15858] RIP: 0033:0x7f8bd1d9e0d9 [ 228.483387][T15858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.483401][T15858] RSP: 002b:00007f8bd2d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.483420][T15858] RAX: ffffffffffffffda RBX: 00007f8bd2026090 RCX: 00007f8bd1d9e0d9 [ 228.483428][T15858] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000005 [ 228.483434][T15858] RBP: 00007f8bd2d06090 R08: 0000000000000000 R09: 0000000000000000 [ 228.483441][T15858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.483448][T15858] R13: 00007f8bd2026128 R14: 00007f8bd2026090 R15: 00007ffe83257858 [ 228.483462][T15858] [ 228.648510][T15864] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3593'. [ 228.716446][T15866] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 228.739266][T15870] FAULT_INJECTION: forcing a failure. [ 228.739266][T15870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 228.743662][T15870] CPU: 2 UID: 0 PID: 15870 Comm: syz.6.3596 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.743681][T15870] Tainted: [L]=SOFTLOCKUP [ 228.743686][T15870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.743693][T15870] Call Trace: [ 228.743698][T15870] [ 228.743704][T15870] dump_stack_lvl+0x100/0x190 [ 228.743725][T15870] should_fail_ex.cold+0x5/0xa [ 228.743738][T15870] ? prepare_alloc_pages+0x16d/0x5f0 [ 228.743756][T15870] should_fail_alloc_page+0xeb/0x140 [ 228.743772][T15870] prepare_alloc_pages+0x1f0/0x5f0 [ 228.743788][T15870] ? find_held_lock+0x2b/0x80 [ 228.743821][T15870] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 228.743835][T15870] ? up_write+0x2e5/0x5c0 [ 228.743852][T15870] ? process_measurement+0x1f4/0x2350 [ 228.743876][T15870] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 228.743888][T15870] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 228.743903][T15870] ? __lock_acquire+0x49f/0x1a40 [ 228.743919][T15870] ? __lock_acquire+0x49f/0x1a40 [ 228.743937][T15870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.743954][T15870] ? policy_nodemask+0xed/0x4f0 [ 228.743971][T15870] alloc_pages_mpol+0x1fb/0x540 [ 228.743987][T15870] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 228.744002][T15870] ? is_bpf_text_address+0x94/0x1a0 [ 228.744022][T15870] alloc_pages_noprof+0x1a/0x160 [ 228.744040][T15870] __pud_alloc+0x3b/0x690 [ 228.744062][T15870] __handle_mm_fault+0x13ea/0x2a00 [ 228.744075][T15870] ? mt_find+0x45e/0x8e0 [ 228.744093][T15870] ? __pfx___handle_mm_fault+0x10/0x10 [ 228.744104][T15870] ? __pfx_mt_find+0x10/0x10 [ 228.744127][T15870] ? find_vma+0xbf/0x140 [ 228.744140][T15870] ? __pfx_find_vma+0x10/0x10 [ 228.744155][T15870] handle_mm_fault+0x37b/0xa30 [ 228.744168][T15870] do_user_addr_fault+0x74c/0x12f0 [ 228.744191][T15870] exc_page_fault+0x6f/0xd0 [ 228.744207][T15870] asm_exc_page_fault+0x26/0x30 [ 228.744218][T15870] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 228.744241][T15870] Code: 89 ee 48 89 ef e8 d1 83 ec fc 4d 85 ff 75 26 e8 e7 89 ec fc 89 de 4c 89 e7 e8 6d 1d 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 c1 89 ec fc 48 89 d8 5b 5d 41 [ 228.744252][T15870] RSP: 0018:ffffc90003237d70 EFLAGS: 00050246 [ 228.744264][T15870] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 228.744270][T15870] RDX: 0000000000000001 RSI: ffffc90003237dd0 RDI: 0000200000000140 [ 228.744278][T15870] RBP: 0000200000000140 R08: 0000000000000000 R09: fffff52000646fbd [ 228.744285][T15870] R10: ffffc90003237def R11: 0000000000000000 R12: ffffc90003237dd0 [ 228.744292][T15870] R13: 0000200000000160 R14: 00007ffffffff000 R15: 0000000000000000 [ 228.744308][T15870] ksys_msgctl.constprop.0+0x2cc/0x340 [ 228.744329][T15870] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 228.744341][T15870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.744368][T15870] do_syscall_64+0x115/0x870 [ 228.744382][T15870] ? clear_bhb_loop+0x70/0xc0 [ 228.744395][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.744406][T15870] RIP: 0033:0x7f2a4c99e0d9 [ 228.744416][T15870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.744427][T15870] RSP: 002b:00007f2a4d7eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 228.744436][T15870] RAX: ffffffffffffffda RBX: 00007f2a4cc25fa0 RCX: 00007f2a4c99e0d9 [ 228.744443][T15870] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000000 [ 228.744450][T15870] RBP: 00007f2a4d7eb090 R08: 0000000000000000 R09: 0000000000000000 [ 228.744456][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.744463][T15870] R13: 00007f2a4cc26038 R14: 00007f2a4cc25fa0 R15: 00007ffe46c824f8 [ 228.744476][T15870] [ 229.055191][T15877] netlink: 'syz.1.3599': attribute type 10 has an invalid length. [ 229.064236][T15877] team0: Device veth0 is up. Set it down before adding it as a team port [ 229.195547][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 229.195565][ T42] audit: type=1400 audit(1786201174.115:1201): avc: denied { write } for pid=15886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.272705][ T42] audit: type=1400 audit(1786201174.195:1202): avc: denied { write } for pid=15893 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.349755][T15903] No buffer was provided with the request [ 229.361917][ T42] audit: type=1400 audit(1786201174.285:1203): avc: denied { write } for pid=15901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.390104][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3610'. [ 229.421346][ T42] audit: type=1400 audit(1786201174.345:1204): avc: denied { write } for pid=15910 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.426041][T15909] 8021q: adding VLAN 0 to HW filter on device bond16 [ 229.519145][T15924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=681 sclass=netlink_route_socket pid=15924 comm=syz.0.3612 [ 229.519176][ T42] audit: type=1400 audit(1786201174.445:1205): avc: denied { ioctl } for pid=15915 comm="syz.0.3612" path="socket:[70728]" dev="sockfs" ino=70728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 229.647207][T15933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3618'. [ 229.650871][T15936] netlink: 'syz.6.3619': attribute type 1 has an invalid length. [ 229.653620][T15933] unsupported nlmsg_type 40 [ 229.686041][T15936] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.711879][T15945] netlink: 'syz.0.3622': attribute type 1 has an invalid length. [ 229.751015][T15947] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 229.781358][T15952] FAULT_INJECTION: forcing a failure. [ 229.781358][T15952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.788233][ T42] audit: type=1400 audit(1786201174.715:1206): avc: denied { write } for pid=15948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.788478][T15952] CPU: 1 UID: 0 PID: 15952 Comm: syz.6.3624 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.788496][T15952] Tainted: [L]=SOFTLOCKUP [ 229.788500][T15952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.788521][T15952] Call Trace: [ 229.788526][T15952] [ 229.788531][T15952] dump_stack_lvl+0x100/0x190 [ 229.788600][T15952] should_fail_ex.cold+0x5/0xa [ 229.788619][T15952] ? prepare_alloc_pages+0x16d/0x5f0 [ 229.788648][T15952] should_fail_alloc_page+0xeb/0x140 [ 229.788665][T15952] prepare_alloc_pages+0x1f0/0x5f0 [ 229.788680][T15952] ? rcu_is_watching+0x12/0xc0 [ 229.788708][T15952] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 229.788723][T15952] ? up_write+0x2e5/0x5c0 [ 229.788740][T15952] ? process_measurement+0x1f4/0x2350 [ 229.788776][T15952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 229.788788][T15952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 229.788803][T15952] ? __lock_acquire+0x49f/0x1a40 [ 229.788821][T15952] ? __lock_acquire+0x49f/0x1a40 [ 229.788834][T15952] ? __css_rstat_updated+0x1ce/0x5a0 [ 229.788852][T15952] ? __lock_acquire+0x49f/0x1a40 [ 229.788865][T15952] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.788880][T15952] ? policy_nodemask+0xed/0x4f0 [ 229.788896][T15952] alloc_pages_mpol+0x1fb/0x540 [ 229.788912][T15952] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 229.788928][T15952] ? find_held_lock+0x2b/0x80 [ 229.788956][T15952] ? __pud_alloc+0x4f6/0x690 [ 229.788972][T15952] ? __pud_alloc+0x4f6/0x690 [ 229.788989][T15952] alloc_pages_noprof+0x1a/0x160 [ 229.789006][T15952] __pmd_alloc+0x3b/0x950 [ 229.789021][T15952] ? __pud_alloc+0x4fb/0x690 [ 229.789037][T15952] __handle_mm_fault+0xa9c/0x2a00 [ 229.789050][T15952] ? mt_find+0x45e/0x8e0 [ 229.789098][T15952] ? __pfx___handle_mm_fault+0x10/0x10 [ 229.789108][T15952] ? __pfx_mt_find+0x10/0x10 [ 229.789136][T15952] ? find_vma+0xbf/0x140 [ 229.789149][T15952] ? __pfx_find_vma+0x10/0x10 [ 229.789164][T15952] handle_mm_fault+0x37b/0xa30 [ 229.789177][T15952] do_user_addr_fault+0x74c/0x12f0 [ 229.789201][T15952] exc_page_fault+0x6f/0xd0 [ 229.789217][T15952] asm_exc_page_fault+0x26/0x30 [ 229.789229][T15952] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 229.789246][T15952] Code: 89 ee 48 89 ef e8 d1 83 ec fc 4d 85 ff 75 26 e8 e7 89 ec fc 89 de 4c 89 e7 e8 6d 1d 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 c1 89 ec fc 48 89 d8 5b 5d 41 [ 229.789258][T15952] RSP: 0018:ffffc9000521fd70 EFLAGS: 00050246 [ 229.789269][T15952] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 229.789276][T15952] RDX: 0000000000000001 RSI: ffffc9000521fdd0 RDI: 0000200000000140 [ 229.789283][T15952] RBP: 0000200000000140 R08: 0000000000000000 R09: fffff52000a43fbd [ 229.789290][T15952] R10: ffffc9000521fdef R11: 0000000000000000 R12: ffffc9000521fdd0 [ 229.789297][T15952] R13: 0000200000000160 R14: 00007ffffffff000 R15: 0000000000000000 [ 229.789313][T15952] ksys_msgctl.constprop.0+0x2cc/0x340 [ 229.789340][T15952] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 229.789352][T15952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.789379][T15952] do_syscall_64+0x115/0x870 [ 229.789395][T15952] ? clear_bhb_loop+0x70/0xc0 [ 229.789409][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.789419][T15952] RIP: 0033:0x7f2a4c99e0d9 [ 229.789429][T15952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.789440][T15952] RSP: 002b:00007f2a4d7eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 229.789450][T15952] RAX: ffffffffffffffda RBX: 00007f2a4cc25fa0 RCX: 00007f2a4c99e0d9 [ 229.789457][T15952] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000000 [ 229.789463][T15952] RBP: 00007f2a4d7eb090 R08: 0000000000000000 R09: 0000000000000000 [ 229.789470][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.789476][T15952] R13: 00007f2a4cc26038 R14: 00007f2a4cc25fa0 R15: 00007ffe46c824f8 [ 229.789489][T15952] [ 229.878508][T15962] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 229.880169][ T42] audit: type=1400 audit(1786201174.775:1207): avc: denied { write } for pid=15955 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.931355][T15969] FAULT_INJECTION: forcing a failure. [ 229.931355][T15969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.941846][T15969] CPU: 3 UID: 0 PID: 15969 Comm: syz.6.3627 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.941874][T15969] Tainted: [L]=SOFTLOCKUP [ 229.941880][T15969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.941890][T15969] Call Trace: [ 229.941911][T15969] [ 229.941920][T15969] dump_stack_lvl+0x100/0x190 [ 229.941952][T15969] should_fail_ex.cold+0x5/0xa [ 229.941975][T15969] _copy_to_user+0x32/0xd0 [ 229.942003][T15969] simple_read_from_buffer+0xcb/0x170 [ 229.942027][T15969] proc_fail_nth_read+0x1af/0x230 [ 229.942057][T15969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.942085][T15969] ? rw_verify_area+0xce/0x6d0 [ 229.942110][T15969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.942138][T15969] vfs_read+0x1e4/0xb40 [ 229.942166][T15969] ? __pfx_vfs_read+0x10/0x10 [ 229.942191][T15969] ? __fget_files+0x215/0x3d0 [ 229.942216][T15969] ? __fget_files+0x21f/0x3d0 [ 229.942241][T15969] ksys_read+0x12a/0x250 [ 229.942258][T15969] ? __pfx_ksys_read+0x10/0x10 [ 229.942281][T15969] do_syscall_64+0x115/0x870 [ 229.942304][T15969] ? clear_bhb_loop+0x70/0xc0 [ 229.942326][T15969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.942344][T15969] RIP: 0033:0x7f2a4c95e90e [ 229.942360][T15969] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.942376][T15969] RSP: 002b:00007f2a4d7c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.942395][T15969] RAX: ffffffffffffffda RBX: 00007f2a4d7ca6c0 RCX: 00007f2a4c95e90e [ 229.942406][T15969] RDX: 000000000000000f RSI: 00007f2a4d7ca0a0 RDI: 0000000000000006 [ 229.942418][T15969] RBP: 00007f2a4d7ca090 R08: 0000000000000000 R09: 0000000000000000 [ 229.942428][T15969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.942461][T15969] R13: 00007f2a4cc26128 R14: 00007f2a4cc26090 R15: 00007ffe46c824f8 [ 229.942486][T15969] [ 230.071863][T15976] netlink: 'syz.0.3631': attribute type 10 has an invalid length. [ 230.079708][T15976] team0: Device veth0 is up. Set it down before adding it as a team port [ 230.132654][ T42] audit: type=1400 audit(1786201175.055:1208): avc: denied { write } for pid=15980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.221181][ T42] audit: type=1400 audit(1786201175.145:1209): avc: denied { write } for pid=16001 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.255373][T16015] fuse: Unknown parameter 'fd 0x0000000000000009' [ 230.260482][T16016] fuse: Unknown parameter 'fd 0x0000000000000009' [ 230.287172][T16012] 8021q: adding VLAN 0 to HW filter on device bond17 [ 230.420089][T16042] netlink: 'syz.0.3647': attribute type 1 has an invalid length. [ 230.449730][T16042] 8021q: adding VLAN 0 to HW filter on device bond18 [ 230.515884][T16052] FAULT_INJECTION: forcing a failure. [ 230.515884][T16052] name failslab, interval 1, probability 0, space 0, times 0 [ 230.521021][T16052] CPU: 1 UID: 0 PID: 16052 Comm: syz.5.3653 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.521041][T16052] Tainted: [L]=SOFTLOCKUP [ 230.521045][T16052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.521052][T16052] Call Trace: [ 230.521057][T16052] [ 230.521062][T16052] dump_stack_lvl+0x100/0x190 [ 230.521082][T16052] should_fail_ex.cold+0x5/0xa [ 230.521098][T16052] should_failslab+0xc2/0x120 [ 230.521114][T16052] kmem_cache_alloc_noprof+0x91/0x6a0 [ 230.521127][T16052] ? __pud_alloc+0x4f6/0x690 [ 230.521143][T16052] ? __pmd_alloc+0xbf/0x950 [ 230.521160][T16052] __pmd_alloc+0xbf/0x950 [ 230.521174][T16052] ? __pud_alloc+0x4fb/0x690 [ 230.521190][T16052] __handle_mm_fault+0xa9c/0x2a00 [ 230.521203][T16052] ? mt_find+0x45e/0x8e0 [ 230.521221][T16052] ? __pfx___handle_mm_fault+0x10/0x10 [ 230.521231][T16052] ? __pfx_mt_find+0x10/0x10 [ 230.521253][T16052] ? find_vma+0xbf/0x140 [ 230.521266][T16052] ? __pfx_find_vma+0x10/0x10 [ 230.521282][T16052] handle_mm_fault+0x37b/0xa30 [ 230.521295][T16052] do_user_addr_fault+0x74c/0x12f0 [ 230.521317][T16052] exc_page_fault+0x6f/0xd0 [ 230.521332][T16052] asm_exc_page_fault+0x26/0x30 [ 230.521343][T16052] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 230.521360][T16052] Code: 89 ee 48 89 ef e8 d1 83 ec fc 4d 85 ff 75 26 e8 e7 89 ec fc 89 de 4c 89 e7 e8 6d 1d 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 c1 89 ec fc 48 89 d8 5b 5d 41 [ 230.521371][T16052] RSP: 0018:ffffc900060afd70 EFLAGS: 00050246 [ 230.521381][T16052] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 230.521389][T16052] RDX: 0000000000000001 RSI: ffffc900060afdd0 RDI: 0000200000000140 [ 230.521396][T16052] RBP: 0000200000000140 R08: 0000000000000000 R09: fffff52000c15fbd [ 230.521402][T16052] R10: ffffc900060afdef R11: 0000000000000000 R12: ffffc900060afdd0 [ 230.521409][T16052] R13: 0000200000000160 R14: 00007ffffffff000 R15: 0000000000000000 [ 230.521424][T16052] ksys_msgctl.constprop.0+0x2cc/0x340 [ 230.521438][T16052] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 230.521450][T16052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.521476][T16052] do_syscall_64+0x115/0x870 [ 230.521490][T16052] ? clear_bhb_loop+0x70/0xc0 [ 230.521503][T16052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.521514][T16052] RIP: 0033:0x7fb0f599e0d9 [ 230.521525][T16052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.521535][T16052] RSP: 002b:00007fb0f682f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 230.521544][T16052] RAX: ffffffffffffffda RBX: 00007fb0f5c25fa0 RCX: 00007fb0f599e0d9 [ 230.521551][T16052] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000000 [ 230.521557][T16052] RBP: 00007fb0f682f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.521563][T16052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.521570][T16052] R13: 00007fb0f5c26038 R14: 00007fb0f5c25fa0 R15: 00007ffdcb052818 [ 230.521583][T16052] [ 230.676315][T16057] netlink: 'syz.5.3654': attribute type 10 has an invalid length. [ 230.681459][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.685012][T16057] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 230.746526][T16064] netlink: 'syz.0.3657': attribute type 10 has an invalid length. [ 230.759189][T16064] team0: Device veth0 is up. Set it down before adding it as a team port [ 230.830524][T16074] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 230.918379][T16089] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 230.966513][T16093] 8021q: adding VLAN 0 to HW filter on device bond9 [ 231.047970][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 231.136550][T16112] 8021q: adding VLAN 0 to HW filter on device bond10 [ 231.207212][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 231.221133][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 231.230691][ T24] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 231.234759][ T24] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 231.238888][ T24] usb 6-1: config 14 has no interface number 0 [ 231.241618][ T24] usb 6-1: config 14 has no interface number 1 [ 231.243100][T16117] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 231.244306][ T24] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 231.248140][T16117] overlayfs: missing 'lowerdir' [ 231.251290][ T24] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 231.256549][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 231.260248][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 231.263910][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 231.267703][ T24] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.271855][ T24] usb 6-1: config 14 interface 57 has no altsetting 0 [ 231.273958][ T24] usb 6-1: config 14 interface 228 has no altsetting 0 [ 231.278168][ T24] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 231.281171][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.284410][ T24] usb 6-1: Product: syz [ 231.285787][ T24] usb 6-1: Manufacturer: syz [ 231.287556][ T24] usb 6-1: SerialNumber: syz [ 231.296492][T16120] FAULT_INJECTION: forcing a failure. [ 231.296492][T16120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.301297][T16120] CPU: 0 UID: 0 PID: 16120 Comm: syz.5.3679 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.301315][T16120] Tainted: [L]=SOFTLOCKUP [ 231.301319][T16120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.301326][T16120] Call Trace: [ 231.301331][T16120] [ 231.301336][T16120] dump_stack_lvl+0x100/0x190 [ 231.301356][T16120] should_fail_ex.cold+0x5/0xa [ 231.301369][T16120] ? prepare_alloc_pages+0x16d/0x5f0 [ 231.301387][T16120] should_fail_alloc_page+0xeb/0x140 [ 231.301404][T16120] prepare_alloc_pages+0x1f0/0x5f0 [ 231.301419][T16120] ? is_bpf_text_address+0x8a/0x1a0 [ 231.301438][T16120] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 231.301451][T16120] ? is_bpf_text_address+0x94/0x1a0 [ 231.301466][T16120] ? kernel_text_address+0x8d/0x100 [ 231.301479][T16120] ? find_held_lock+0x2b/0x80 [ 231.301490][T16120] ? __kernel_text_address+0xd/0x30 [ 231.301502][T16120] ? unwind_get_return_address+0x59/0xa0 [ 231.301515][T16120] ? arch_stack_walk+0xa6/0xf0 [ 231.301540][T16120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 231.301555][T16120] ? __pfx_stack_trace_save+0x10/0x10 [ 231.301568][T16120] ? stack_depot_save_flags+0x27/0x9d0 [ 231.301588][T16120] ? kasan_save_stack+0x3f/0x50 [ 231.301601][T16120] ? kasan_save_stack+0x30/0x50 [ 231.301615][T16120] ? handle_mm_fault+0x37b/0xa30 [ 231.301625][T16120] ? do_user_addr_fault+0x74c/0x12f0 [ 231.301641][T16120] ? exc_page_fault+0x6f/0xd0 [ 231.301656][T16120] ? asm_exc_page_fault+0x26/0x30 [ 231.301666][T16120] ? _copy_to_user+0x9f/0xd0 [ 231.301681][T16120] ? ksys_msgctl.constprop.0+0x2cc/0x340 [ 231.301694][T16120] ? do_syscall_64+0x115/0x870 [ 231.301708][T16120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.301721][T16120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.301736][T16120] ? policy_nodemask+0xed/0x4f0 [ 231.301757][T16120] alloc_pages_mpol+0x1fb/0x540 [ 231.301774][T16120] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 231.301793][T16120] alloc_pages_noprof+0x1a/0x160 [ 231.301811][T16120] pte_alloc_one+0x1c/0x3d0 [ 231.301823][T16120] __pte_alloc+0x6d/0x3e0 [ 231.301837][T16120] ? __pfx___pte_alloc+0x10/0x10 [ 231.301851][T16120] ? do_raw_spin_lock+0x128/0x260 [ 231.301867][T16120] ? find_held_lock+0x2b/0x80 [ 231.301878][T16120] do_anonymous_page+0x13ae/0x2080 [ 231.301898][T16120] ? __pmd_alloc+0x3fb/0x950 [ 231.301915][T16120] __handle_mm_fault+0x1d2c/0x2a00 [ 231.301928][T16120] ? mt_find+0x45e/0x8e0 [ 231.301945][T16120] ? __pfx___handle_mm_fault+0x10/0x10 [ 231.301955][T16120] ? __pfx_mt_find+0x10/0x10 [ 231.301978][T16120] ? find_vma+0xbf/0x140 [ 231.301991][T16120] ? __pfx_find_vma+0x10/0x10 [ 231.302006][T16120] handle_mm_fault+0x37b/0xa30 [ 231.302019][T16120] do_user_addr_fault+0x74c/0x12f0 [ 231.302041][T16120] exc_page_fault+0x6f/0xd0 [ 231.302055][T16120] asm_exc_page_fault+0x26/0x30 [ 231.302066][T16120] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 231.302081][T16120] Code: 89 ee 48 89 ef e8 d1 83 ec fc 4d 85 ff 75 26 e8 e7 89 ec fc 89 de 4c 89 e7 e8 6d 1d 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 c1 89 ec fc 48 89 d8 5b 5d 41 [ 231.302092][T16120] RSP: 0018:ffffc900038c7d70 EFLAGS: 00050246 [ 231.302102][T16120] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 231.302109][T16120] RDX: 0000000000000001 RSI: ffffc900038c7dd0 RDI: 0000200000000140 [ 231.302116][T16120] RBP: 0000200000000140 R08: 0000000000000000 R09: fffff52000718fbd [ 231.302123][T16120] R10: ffffc900038c7def R11: 0000000000000000 R12: ffffc900038c7dd0 [ 231.302129][T16120] R13: 0000200000000160 R14: 00007ffffffff000 R15: 0000000000000000 [ 231.302145][T16120] ksys_msgctl.constprop.0+0x2cc/0x340 [ 231.302158][T16120] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 231.302170][T16120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 231.302196][T16120] do_syscall_64+0x115/0x870 [ 231.302210][T16120] ? clear_bhb_loop+0x70/0xc0 [ 231.302223][T16120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.302234][T16120] RIP: 0033:0x7fb0f599e0d9 [ 231.302244][T16120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.302254][T16120] RSP: 002b:00007fb0f682f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 231.302264][T16120] RAX: ffffffffffffffda RBX: 00007fb0f5c25fa0 RCX: 00007fb0f599e0d9 [ 231.302272][T16120] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000000 [ 231.302282][T16120] RBP: 00007fb0f682f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.302290][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.302300][T16120] R13: 00007fb0f5c26038 R14: 00007fb0f5c25fa0 R15: 00007ffdcb052818 [ 231.302321][T16120] [ 231.669087][T16134] geneve3: entered allmulticast mode [ 231.701924][ T24] legousbtower 6-1:14.57: interrupt endpoints not found [ 231.710737][T16138] team0: Device veth0 is up. Set it down before adding it as a team port [ 231.749738][T16140] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 231.990220][T16157] 8021q: adding VLAN 0 to HW filter on device bond19 [ 232.117044][ T24] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 232.121519][T16177] 8021q: adding VLAN 0 to HW filter on device bond20 [ 232.125178][ T24] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 232.179631][T16183] FAULT_INJECTION: forcing a failure. [ 232.179631][T16183] name failslab, interval 1, probability 0, space 0, times 0 [ 232.185024][T16183] CPU: 3 UID: 0 PID: 16183 Comm: syz.0.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.185054][T16183] Tainted: [L]=SOFTLOCKUP [ 232.185062][T16183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.185071][T16183] Call Trace: [ 232.185078][T16183] [ 232.185085][T16183] dump_stack_lvl+0x100/0x190 [ 232.185117][T16183] should_fail_ex.cold+0x5/0xa [ 232.185144][T16183] should_failslab+0xc2/0x120 [ 232.185171][T16183] kmem_cache_alloc_noprof+0x91/0x6a0 [ 232.185196][T16183] ? ptlock_alloc+0x1f/0x70 [ 232.185216][T16183] ptlock_alloc+0x1f/0x70 [ 232.185231][T16183] pte_alloc_one+0x82/0x3d0 [ 232.185255][T16183] __pte_alloc+0x6d/0x3e0 [ 232.185278][T16183] ? __pfx___pte_alloc+0x10/0x10 [ 232.185301][T16183] ? do_raw_spin_lock+0x128/0x260 [ 232.185327][T16183] ? find_held_lock+0x2b/0x80 [ 232.185348][T16183] do_anonymous_page+0x13ae/0x2080 [ 232.185379][T16183] ? __pmd_alloc+0x3fb/0x950 [ 232.185407][T16183] __handle_mm_fault+0x1d2c/0x2a00 [ 232.185428][T16183] ? mt_find+0x45e/0x8e0 [ 232.185457][T16183] ? __pfx___handle_mm_fault+0x10/0x10 [ 232.185474][T16183] ? __pfx_mt_find+0x10/0x10 [ 232.185512][T16183] ? find_vma+0xbf/0x140 [ 232.185534][T16183] ? __pfx_find_vma+0x10/0x10 [ 232.185559][T16183] handle_mm_fault+0x37b/0xa30 [ 232.185583][T16183] do_user_addr_fault+0x74c/0x12f0 [ 232.185618][T16183] exc_page_fault+0x6f/0xd0 [ 232.185642][T16183] asm_exc_page_fault+0x26/0x30 [ 232.185659][T16183] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 232.185686][T16183] Code: 89 ee 48 89 ef e8 d1 83 ec fc 4d 85 ff 75 26 e8 e7 89 ec fc 89 de 4c 89 e7 e8 6d 1d 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 c1 89 ec fc 48 89 d8 5b 5d 41 [ 232.185702][T16183] RSP: 0018:ffffc90003807d70 EFLAGS: 00050246 [ 232.185726][T16183] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 232.185738][T16183] RDX: 0000000000000001 RSI: ffffc90003807dd0 RDI: 0000200000000140 [ 232.185749][T16183] RBP: 0000200000000140 R08: 0000000000000000 R09: fffff52000700fbd [ 232.185759][T16183] R10: ffffc90003807def R11: 0000000000000000 R12: ffffc90003807dd0 [ 232.185772][T16183] R13: 0000200000000160 R14: 00007ffffffff000 R15: 0000000000000000 [ 232.185800][T16183] ksys_msgctl.constprop.0+0x2cc/0x340 [ 232.185823][T16183] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 232.185843][T16183] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.185887][T16183] do_syscall_64+0x115/0x870 [ 232.185912][T16183] ? clear_bhb_loop+0x70/0xc0 [ 232.185934][T16183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.185955][T16183] RIP: 0033:0x7fd5a959e0d9 [ 232.185971][T16183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.185988][T16183] RSP: 002b:00007fd5aa4f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 232.186004][T16183] RAX: ffffffffffffffda RBX: 00007fd5a9825fa0 RCX: 00007fd5a959e0d9 [ 232.186016][T16183] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000000 [ 232.186028][T16183] RBP: 00007fd5aa4f0090 R08: 0000000000000000 R09: 0000000000000000 [ 232.186038][T16183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.186050][T16183] R13: 00007fd5a9826038 R14: 00007fd5a9825fa0 R15: 00007ffffca0ef28 [ 232.186073][T16183] [ 232.218005][T16180] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.333251][ T42] audit: type=1400 audit(1786201177.255:1210): avc: denied { write } for pid=16179 comm="syz.6.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 232.337565][T16186] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.344931][T16186] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 232.356180][T16186] bond6: (slave gre1): Error -95 calling set_mac_address [ 232.380258][T16187] gretap1: entered promiscuous mode [ 232.386338][T16187] bond6: (slave gretap1): making interface the new active one [ 232.392012][T16187] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 232.420447][T16180] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.424138][T16180] bond6: (slave bond7): Enslaving as an active interface with a down link [ 232.434536][T16198] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 232.555967][T16207] bridge_slave_0 (unregistering): left allmulticast mode [ 232.558445][T16207] bridge_slave_0 (unregistering): left promiscuous mode [ 232.561015][T16207] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.571530][ T24] usb 6-1: USB disconnect, device number 23 [ 232.594636][ T24] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 232.729300][T16216] xfrm1: entered allmulticast mode [ 232.770481][T16218] validate_nla: 6 callbacks suppressed [ 232.770496][T16218] netlink: 'syz.6.3715': attribute type 10 has an invalid length. [ 232.806150][T16218] team0: Device veth0 is up. Set it down before adding it as a team port [ 233.058095][T16242] __nla_validate_parse: 10 callbacks suppressed [ 233.058110][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3726'. [ 233.072508][T16242] 8021q: adding VLAN 0 to HW filter on device bond8 [ 233.170808][T16256] netlink: 'syz.0.3732': attribute type 1 has an invalid length. [ 233.184567][T16256] 8021q: adding VLAN 0 to HW filter on device bond21 [ 233.233050][T16260] FAULT_INJECTION: forcing a failure. [ 233.233050][T16260] name failslab, interval 1, probability 0, space 0, times 0 [ 233.237111][T16260] CPU: 3 UID: 0 PID: 16260 Comm: syz.0.3733 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.237130][T16260] Tainted: [L]=SOFTLOCKUP [ 233.237135][T16260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.237142][T16260] Call Trace: [ 233.237147][T16260] [ 233.237152][T16260] dump_stack_lvl+0x100/0x190 [ 233.237174][T16260] should_fail_ex.cold+0x5/0xa [ 233.237189][T16260] should_failslab+0xc2/0x120 [ 233.237206][T16260] kmem_cache_alloc_noprof+0x91/0x6a0 [ 233.237221][T16260] ? __anon_vma_prepare+0xae/0x5e0 [ 233.237234][T16260] __anon_vma_prepare+0xae/0x5e0 [ 233.237244][T16260] ? __pfx___pte_alloc+0x10/0x10 [ 233.237260][T16260] __vmf_anon_prepare+0x11f/0x250 [ 233.237276][T16260] do_anonymous_page+0x51b/0x2080 [ 233.237299][T16260] __handle_mm_fault+0x1d2c/0x2a00 [ 233.237312][T16260] ? mt_find+0x45e/0x8e0 [ 233.237330][T16260] ? __pfx___handle_mm_fault+0x10/0x10 [ 233.237339][T16260] ? __pfx_mt_find+0x10/0x10 [ 233.237362][T16260] ? find_vma+0xbf/0x140 [ 233.237376][T16260] ? __pfx_find_vma+0x10/0x10 [ 233.237391][T16260] handle_mm_fault+0x37b/0xa30 [ 233.237404][T16260] do_user_addr_fault+0x74c/0x12f0 [ 233.237426][T16260] exc_page_fault+0x6f/0xd0 [ 233.237441][T16260] asm_exc_page_fault+0x26/0x30 [ 233.237452][T16260] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 233.237469][T16260] Code: 89 ee 48 89 ef e8 d1 83 ec fc 4d 85 ff 75 26 e8 e7 89 ec fc 89 de 4c 89 e7 e8 6d 1d 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 c1 89 ec fc 48 89 d8 5b 5d 41 [ 233.237480][T16260] RSP: 0018:ffffc90007b0fd70 EFLAGS: 00050246 [ 233.237490][T16260] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 233.237515][T16260] RDX: 0000000000000001 RSI: ffffc90007b0fdd0 RDI: 0000200000000140 [ 233.237522][T16260] RBP: 0000200000000140 R08: 0000000000000000 R09: fffff52000f61fbd [ 233.237529][T16260] R10: ffffc90007b0fdef R11: 0000000000000000 R12: ffffc90007b0fdd0 [ 233.237536][T16260] R13: 0000200000000160 R14: 00007ffffffff000 R15: 0000000000000000 [ 233.237551][T16260] ksys_msgctl.constprop.0+0x2cc/0x340 [ 233.237566][T16260] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 233.237578][T16260] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.237603][T16260] do_syscall_64+0x115/0x870 [ 233.237617][T16260] ? clear_bhb_loop+0x70/0xc0 [ 233.237630][T16260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.237642][T16260] RIP: 0033:0x7fd5a959e0d9 [ 233.237651][T16260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.237661][T16260] RSP: 002b:00007fd5aa4f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 233.237671][T16260] RAX: ffffffffffffffda RBX: 00007fd5a9825fa0 RCX: 00007fd5a959e0d9 [ 233.237678][T16260] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000000 [ 233.237684][T16260] RBP: 00007fd5aa4f0090 R08: 0000000000000000 R09: 0000000000000000 [ 233.237691][T16260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.237702][T16260] R13: 00007fd5a9826038 R14: 00007fd5a9825fa0 R15: 00007ffffca0ef28 [ 233.237715][T16260] [ 233.811492][T16290] netlink: 'syz.6.3742': attribute type 10 has an invalid length. [ 233.824291][T16290] team0: Device veth0 is up. Set it down before adding it as a team port [ 233.877295][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 234.036947][ T5875] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 234.043601][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.047722][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 234.051676][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 234.055489][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.066585][ T10] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 234.075841][ T10] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 234.200628][T16306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.203580][T16306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.207082][ T5726] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 234.209116][T16306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.209712][ T5726] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 234.215117][T16288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.220466][T16306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.240501][T16288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.251326][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3753'. [ 234.283148][T16312] 8021q: adding VLAN 0 to HW filter on device bond9 [ 234.357624][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 234.360098][ T5875] usb 5-1: can't read configurations, error -71 [ 234.421575][T16325] netlink: 'syz.0.3758': attribute type 1 has an invalid length. [ 234.424792][T16327] FAULT_INJECTION: forcing a failure. [ 234.424792][T16327] name failslab, interval 1, probability 0, space 0, times 0 [ 234.429481][T16327] CPU: 3 UID: 0 PID: 16327 Comm: syz.6.3759 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.429499][T16327] Tainted: [L]=SOFTLOCKUP [ 234.429504][T16327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.429511][T16327] Call Trace: [ 234.429516][T16327] [ 234.429520][T16327] dump_stack_lvl+0x100/0x190 [ 234.429542][T16327] should_fail_ex.cold+0x5/0xa [ 234.429557][T16327] should_failslab+0xc2/0x120 [ 234.429574][T16327] kmem_cache_alloc_noprof+0x91/0x6a0 [ 234.429588][T16327] ? __anon_vma_prepare+0x344/0x5e0 [ 234.429601][T16327] __anon_vma_prepare+0x344/0x5e0 [ 234.429611][T16327] ? __pfx___pte_alloc+0x10/0x10 [ 234.429627][T16327] __vmf_anon_prepare+0x11f/0x250 [ 234.429643][T16327] do_anonymous_page+0x51b/0x2080 [ 234.429664][T16327] __handle_mm_fault+0x1d2c/0x2a00 [ 234.429677][T16327] ? mt_find+0x45e/0x8e0 [ 234.429695][T16327] ? __pfx___handle_mm_fault+0x10/0x10 [ 234.429705][T16327] ? __pfx_mt_find+0x10/0x10 [ 234.429728][T16327] ? find_vma+0xbf/0x140 [ 234.429741][T16327] ? __pfx_find_vma+0x10/0x10 [ 234.429755][T16327] handle_mm_fault+0x37b/0xa30 [ 234.429768][T16327] do_user_addr_fault+0x74c/0x12f0 [ 234.429791][T16327] exc_page_fault+0x6f/0xd0 [ 234.429805][T16327] asm_exc_page_fault+0x26/0x30 [ 234.429816][T16327] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 234.429833][T16327] Code: 89 ee 48 89 ef e8 d1 83 ec fc 4d 85 ff 75 26 e8 e7 89 ec fc 89 de 4c 89 e7 e8 6d 1d 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 c1 89 ec fc 48 89 d8 5b 5d 41 [ 234.429843][T16327] RSP: 0018:ffffc9000c30fd70 EFLAGS: 00050246 [ 234.429854][T16327] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 234.429861][T16327] RDX: 0000000000000001 RSI: ffffc9000c30fdd0 RDI: 0000200000000140 [ 234.429868][T16327] RBP: 0000200000000140 R08: 0000000000000000 R09: fffff52001861fbd [ 234.429874][T16327] R10: ffffc9000c30fdef R11: 0000000000000000 R12: ffffc9000c30fdd0 [ 234.429881][T16327] R13: 0000200000000160 R14: 00007ffffffff000 R15: 0000000000000000 [ 234.429896][T16327] ksys_msgctl.constprop.0+0x2cc/0x340 [ 234.429910][T16327] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 234.429922][T16327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 234.429949][T16327] do_syscall_64+0x115/0x870 [ 234.429962][T16327] ? clear_bhb_loop+0x70/0xc0 [ 234.429976][T16327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.429987][T16327] RIP: 0033:0x7f2a4c99e0d9 [ 234.429996][T16327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.430006][T16327] RSP: 002b:00007f2a4d7eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 234.430016][T16327] RAX: ffffffffffffffda RBX: 00007f2a4cc25fa0 RCX: 00007f2a4c99e0d9 [ 234.430023][T16327] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000000 [ 234.430029][T16327] RBP: 00007f2a4d7eb090 R08: 0000000000000000 R09: 0000000000000000 [ 234.430036][T16327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.430042][T16327] R13: 00007f2a4cc26038 R14: 00007f2a4cc25fa0 R15: 00007ffe46c824f8 [ 234.430056][T16327] [ 234.447358][T16280] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 234.460566][T16325] 8021q: adding VLAN 0 to HW filter on device bond22 [ 234.463948][T16280] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 234.471420][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 234.471437][ T42] audit: type=1400 audit(1786201179.395:1215): avc: denied { ioctl } for pid=16329 comm="syz.6.3760" path="socket:[72843]" dev="sockfs" ino=72843 ioctlcmd=0xae62 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 234.473115][T16280] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 234.477029][T16331] overlayfs: conflicting lowerdir path [ 234.490386][ T42] audit: type=1326 audit(1786201179.415:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.3760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c99e0d9 code=0x7ffc0000 [ 234.530538][T16280] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 234.532911][ T42] audit: type=1326 audit(1786201179.415:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.3760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c99e0d9 code=0x7ffc0000 [ 234.532962][ T42] audit: type=1326 audit(1786201179.415:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.3760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c99e0d9 code=0x7ffc0000 [ 234.533075][ T42] audit: type=1326 audit(1786201179.415:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.3760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c99e0d9 code=0x7ffc0000 [ 234.533119][ T42] audit: type=1326 audit(1786201179.415:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.3760" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2a4c99e0d9 code=0x7ffc0000 [ 234.545136][ T42] audit: type=1326 audit(1786201179.465:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.3760" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a4c95e90e code=0x7ffc0000 [ 234.549284][T16280] SPCP8x5 ttyUSB0: Set UART format 0x3600 failed (error = -32) [ 234.552203][ T42] audit: type=1326 audit(1786201179.475:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.3760" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a4c95e90e code=0x7ffc0000 [ 234.626886][ T42] audit: type=1326 audit(1786201179.475:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.3760" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a4c95e90e code=0x7ffc0000 [ 234.633985][ T42] audit: type=1326 audit(1786201179.485:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.6.3760" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a4c95e90e code=0x7ffc0000 [ 235.433079][T16358] netlink: 'syz.5.3768': attribute type 10 has an invalid length. [ 235.674439][T16376] sctp: [Deprecated]: syz.6.3775 (pid 16376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.674439][T16376] Use struct sctp_sack_info instead [ 235.683297][T16376] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3775'. [ 235.976515][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3779'. [ 235.996722][T16386] 8021q: adding VLAN 0 to HW filter on device bond10 [ 236.063280][T16391] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 236.104929][T16398] FAULT_INJECTION: forcing a failure. [ 236.104929][T16398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.114706][T16398] CPU: 2 UID: 0 PID: 16398 Comm: syz.0.3783 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.114735][T16398] Tainted: [L]=SOFTLOCKUP [ 236.114742][T16398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.114752][T16398] Call Trace: [ 236.114759][T16398] [ 236.114766][T16398] dump_stack_lvl+0x100/0x190 [ 236.114797][T16398] should_fail_ex.cold+0x5/0xa [ 236.114815][T16398] ? prepare_alloc_pages+0x16d/0x5f0 [ 236.114840][T16398] should_fail_alloc_page+0xeb/0x140 [ 236.114865][T16398] prepare_alloc_pages+0x1f0/0x5f0 [ 236.114891][T16398] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 236.114914][T16398] ? stack_trace_save+0x8e/0xc0 [ 236.114933][T16398] ? __pfx_stack_trace_save+0x10/0x10 [ 236.114951][T16398] ? stack_depot_save_flags+0x27/0x9d0 [ 236.114975][T16398] ? kasan_save_stack+0x3f/0x50 [ 236.114994][T16398] ? kasan_save_stack+0x30/0x50 [ 236.115012][T16398] ? kasan_save_track+0x14/0x30 [ 236.115034][T16398] ? kasan_save_stack+0x3f/0x50 [ 236.115053][T16398] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.115075][T16398] ? __lock_acquire+0x49f/0x1a40 [ 236.115096][T16398] ? do_syscall_64+0x115/0x870 [ 236.115118][T16398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.115144][T16398] ? __lock_acquire+0x49f/0x1a40 [ 236.115164][T16398] ? rcu_read_unlock+0x17/0x60 [ 236.115190][T16398] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.115212][T16398] ? policy_nodemask+0xed/0x4f0 [ 236.115236][T16398] alloc_pages_mpol+0x1fb/0x540 [ 236.115260][T16398] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 236.115282][T16398] ? find_held_lock+0x2b/0x80 [ 236.115297][T16398] ? __anon_vma_prepare+0x2db/0x5e0 [ 236.115313][T16398] ? __anon_vma_prepare+0x2db/0x5e0 [ 236.115331][T16398] folio_alloc_mpol_noprof+0x36/0x260 [ 236.115358][T16398] vma_alloc_folio_noprof+0xed/0x1d0 [ 236.115383][T16398] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 236.115406][T16398] ? __anon_vma_prepare+0x2e2/0x5e0 [ 236.115428][T16398] do_anonymous_page+0xb2b/0x2080 [ 236.115461][T16398] __handle_mm_fault+0x1d2c/0x2a00 [ 236.115481][T16398] ? mt_find+0x45e/0x8e0 [ 236.115506][T16398] ? __pfx___handle_mm_fault+0x10/0x10 [ 236.115521][T16398] ? __pfx_mt_find+0x10/0x10 [ 236.115556][T16398] ? find_vma+0xbf/0x140 [ 236.115575][T16398] ? __pfx_find_vma+0x10/0x10 [ 236.115597][T16398] handle_mm_fault+0x37b/0xa30 [ 236.115618][T16398] do_user_addr_fault+0x74c/0x12f0 [ 236.115655][T16398] exc_page_fault+0x6f/0xd0 [ 236.115676][T16398] asm_exc_page_fault+0x26/0x30 [ 236.115692][T16398] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 236.115715][T16398] Code: 89 ee 48 89 ef e8 d1 83 ec fc 4d 85 ff 75 26 e8 e7 89 ec fc 89 de 4c 89 e7 e8 6d 1d 5d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 c1 89 ec fc 48 89 d8 5b 5d 41 [ 236.115730][T16398] RSP: 0018:ffffc9000c7ffd70 EFLAGS: 00050246 [ 236.115746][T16398] RAX: 0000000000000001 RBX: 0000000000000020 RCX: 0000000000000020 [ 236.115757][T16398] RDX: 0000000000000001 RSI: ffffc9000c7ffdd0 RDI: 0000200000000140 [ 236.115768][T16398] RBP: 0000200000000140 R08: 0000000000000000 R09: fffff520018fffbd [ 236.115778][T16398] R10: ffffc9000c7ffdef R11: 0000000000000000 R12: ffffc9000c7ffdd0 [ 236.115789][T16398] R13: 0000200000000160 R14: 00007ffffffff000 R15: 0000000000000000 [ 236.115813][T16398] ksys_msgctl.constprop.0+0x2cc/0x340 [ 236.115835][T16398] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 236.115853][T16398] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.115893][T16398] do_syscall_64+0x115/0x870 [ 236.115912][T16398] ? clear_bhb_loop+0x70/0xc0 [ 236.115931][T16398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.115948][T16398] RIP: 0033:0x7fd5a959e0d9 [ 236.115963][T16398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.115978][T16398] RSP: 002b:00007fd5aa4f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 236.115993][T16398] RAX: ffffffffffffffda RBX: 00007fd5a9825fa0 RCX: 00007fd5a959e0d9 [ 236.116004][T16398] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000000 [ 236.116014][T16398] RBP: 00007fd5aa4f0090 R08: 0000000000000000 R09: 0000000000000000 [ 236.116024][T16398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.116052][T16398] R13: 00007fd5a9826038 R14: 00007fd5a9825fa0 R15: 00007ffffca0ef28 [ 236.116075][T16398] [ 236.222623][T16406] netlink: 'syz.6.3785': attribute type 1 has an invalid length. [ 236.291916][T16406] 8021q: adding VLAN 0 to HW filter on device bond11 [ 236.349617][T16413] tmpfs: Unknown parameter 'Œ' [ 236.358465][T16414] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3787'. [ 236.362809][T16413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3787'. [ 236.583309][ T24] usb 6-1: USB disconnect, device number 24 [ 236.603500][ T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 236.605714][ T5804] IPVS: starting estimator thread 0... [ 236.608679][T16432] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 236.609657][ T24] spcp8x5 6-1:1.0: device disconnected [ 236.643919][T16435] netlink: 'syz.1.3794': attribute type 10 has an invalid length. [ 236.655308][T16435] team0: Device veth0 is up. Set it down before adding it as a team port [ 236.712463][T16437] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472) [ 236.715424][T16437] SELinux: invalid class [ 236.717005][T16433] IPVS: using max 44 ests per chain, 105600 per kthread [ 236.726633][T16437] SELinux: failed to load policy [ 236.770346][T16448] loop8: detected capacity change from 0 to 7 [ 236.779025][T16448] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 236.781418][T16448] loop8: partition table partially beyond EOD, truncated [ 236.784843][T16448] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 236.796997][T16448] loop8: p2 start 121280928 is beyond EOD, truncated [ 236.823017][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3803'. [ 236.850641][T16455] 8021q: adding VLAN 0 to HW filter on device bond12 [ 236.898077][T13471] udevd[13471]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 236.941342][T16465] FAULT_INJECTION: forcing a failure. [ 236.941342][T16465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.945532][T16465] CPU: 2 UID: 0 PID: 16465 Comm: syz.6.3807 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.945564][T16465] Tainted: [L]=SOFTLOCKUP [ 236.945568][T16465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.945575][T16465] Call Trace: [ 236.945581][T16465] [ 236.945585][T16465] dump_stack_lvl+0x100/0x190 [ 236.945607][T16465] should_fail_ex.cold+0x5/0xa [ 236.945622][T16465] _copy_to_user+0x32/0xd0 [ 236.945639][T16465] simple_read_from_buffer+0xcb/0x170 [ 236.945654][T16465] proc_fail_nth_read+0x1af/0x230 [ 236.945673][T16465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.945691][T16465] ? rw_verify_area+0xce/0x6d0 [ 236.945707][T16465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.945724][T16465] vfs_read+0x1e4/0xb40 [ 236.945743][T16465] ? __pfx_vfs_read+0x10/0x10 [ 236.945760][T16465] ? __fget_files+0x215/0x3d0 [ 236.945775][T16465] ? __fget_files+0x21f/0x3d0 [ 236.945790][T16465] ksys_read+0x12a/0x250 [ 236.945799][T16465] ? __pfx_ksys_read+0x10/0x10 [ 236.945813][T16465] do_syscall_64+0x115/0x870 [ 236.945829][T16465] ? clear_bhb_loop+0x70/0xc0 [ 236.945842][T16465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.945853][T16465] RIP: 0033:0x7f2a4c95e90e [ 236.945863][T16465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.945874][T16465] RSP: 002b:00007f2a4d7eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.945886][T16465] RAX: ffffffffffffffda RBX: 00007f2a4d7eb6c0 RCX: 00007f2a4c95e90e [ 236.945893][T16465] RDX: 000000000000000f RSI: 00007f2a4d7eb0a0 RDI: 0000000000000003 [ 236.945899][T16465] RBP: 00007f2a4d7eb090 R08: 0000000000000000 R09: 0000000000000000 [ 236.945906][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.945912][T16465] R13: 00007f2a4cc26038 R14: 00007f2a4cc25fa0 R15: 00007ffe46c824f8 [ 236.945926][T16465] [ 237.002607][T16469] netlink: 'syz.5.3809': attribute type 1 has an invalid length. [ 237.038203][T16469] 8021q: adding VLAN 0 to HW filter on device bond11 [ 237.160377][T16474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.217939][T16480] netlink: 'syz.5.3814': attribute type 1 has an invalid length. [ 237.220989][T16480] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3814'. [ 237.224293][T16480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16480 comm=syz.5.3814 [ 237.394649][T16488] xt_TPROXY: Can be used only with -p tcp or -p udp [ 237.397740][T16489] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 237.397740][T16489] The task syz.6.3816 (16489) triggered the difference, watch for misbehavior. [ 237.831761][T16494] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3819'. [ 238.193242][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3830'. [ 238.260936][T16517] 8021q: adding VLAN 0 to HW filter on device bond23 [ 238.312180][T16529] netlink: 'syz.5.3834': attribute type 1 has an invalid length. [ 238.336047][T16522] bond18: entered promiscuous mode [ 238.342679][T16522] bond18: entered allmulticast mode [ 238.385626][T16529] 8021q: adding VLAN 0 to HW filter on device bond12 [ 238.441150][T16542] 9p: Bad value for 'wfdno' [ 238.516438][T16549] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3842'. [ 238.740906][ T5084] Bluetooth: hci4: sending frame failed (-49) [ 238.743357][ T5726] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 238.821183][T16576] bond19: entered promiscuous mode [ 238.823258][T16576] 8021q: adding VLAN 0 to HW filter on device bond19 [ 238.891721][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3858'. [ 238.924897][T16594] 8021q: adding VLAN 0 to HW filter on device bond13 [ 238.981440][T16599] netlink: 'syz.6.3863': attribute type 1 has an invalid length. [ 239.021396][T16599] 8021q: adding VLAN 0 to HW filter on device bond14 [ 239.068155][T16607] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3864'. [ 239.160898][T16615] exFAT-fs (nullb0): invalid boot record signature [ 239.166604][T16615] exFAT-fs (nullb0): failed to read boot sector [ 239.169404][T16615] exFAT-fs (nullb0): failed to recognize exfat type [ 239.226940][T16626] SET target dimension over the limit! [ 239.251834][T14577] syz_tun (unregistering): left allmulticast mode [ 239.254372][T14577] syz_tun (unregistering): left promiscuous mode [ 239.259294][T14577] bridge0: port 3(syz_tun) entered disabled state [ 239.564384][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.701328][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.707009][ T5824] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 239.783399][T16645] Process accounting resumed [ 239.825174][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.832260][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.836536][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.846221][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.847150][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.854008][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.856881][ T5824] usb 10-1: Using ep0 maxpacket: 8 [ 239.859932][ T5824] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 239.862976][ T5824] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.869552][ T5824] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.872741][ T5824] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.877452][ T5824] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.884181][ T5824] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.908105][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.973985][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.115599][ T5824] usb 10-1: usb_control_msg returned -32 [ 240.118299][ T5824] usbtmc 10-1:16.0: can't read capabilities [ 240.145402][ T24] usb 10-1: USB disconnect, device number 2 [ 240.220688][ T13] bridge_slave_1: left allmulticast mode [ 240.223178][ T13] bridge_slave_1: left promiscuous mode [ 240.225172][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.229441][ T13] bridge_slave_0: left allmulticast mode [ 240.231292][ T13] bridge_slave_0: left promiscuous mode [ 240.233205][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.240515][T16667] netlink: 'syz.5.3886': attribute type 21 has an invalid length. [ 240.291059][ T42] kauditd_printk_skb: 558 callbacks suppressed [ 240.291081][ T42] audit: type=1400 audit(1786201185.215:1783): avc: denied { write } for pid=16668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.359444][ T42] audit: type=1400 audit(1786201185.285:1784): avc: denied { write } for pid=16671 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.372756][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 240.400369][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.411532][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.415861][ T13] bond0 (unregistering): Released all slaves [ 240.424859][ T13] bond1 (unregistering): Released all slaves [ 240.436004][ T13] bond2 (unregistering): Released all slaves [ 240.453963][ T13] bond3 (unregistering): Released all slaves [ 240.465898][ T13] bond4 (unregistering): Released all slaves [ 240.477927][ T13] bond5 (unregistering): Released all slaves [ 240.488298][ T13] bond6 (unregistering): Released all slaves [ 240.503099][ T13] bond7 (unregistering): Released all slaves [ 240.513284][ T13] bond8 (unregistering): Released all slaves [ 240.525526][ T13] bond9 (unregistering): Released all slaves [ 240.542183][ T13] bond10 (unregistering): Released all slaves [ 240.552261][ T13] bond11 (unregistering): Released all slaves [ 240.566485][ T13] bond12 (unregistering): Released all slaves [ 240.578673][ T13] bond13 (unregistering): Released all slaves [ 240.589007][ T13] bond14 (unregistering): Released all slaves [ 240.597296][ T13] bond15 (unregistering): Released all slaves [ 240.608744][ T13] bond16 (unregistering): Released all slaves [ 240.620224][ T13] bond17 (unregistering): Released all slaves [ 240.645668][ T13] bond18 (unregistering): Released all slaves [ 240.663286][ T13] bond19 (unregistering): Released all slaves [ 240.685396][ T13] bond20 (unregistering): Released all slaves [ 240.709686][ T13] bond21 (unregistering): Released all slaves [ 240.726301][ T13] bond22 (unregistering): Released all slaves [ 240.770059][ T13] bond23 (unregistering): Released all slaves [ 240.798651][ T5437] 8021q: adding VLAN 0 to HW filter on device eth13 [ 240.802830][T16676] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3888'. [ 240.983581][ T42] audit: type=1400 audit(1786201185.905:1785): avc: denied { write } for pid=16681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.107288][ T42] audit: type=1400 audit(1786201186.035:1786): avc: denied { write } for pid=16693 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.221170][T16702] SET target dimension over the limit! [ 241.259645][ T5437] 8021q: adding VLAN 0 to HW filter on device eth14 [ 241.337317][ T42] audit: type=1400 audit(1786201186.255:1787): avc: denied { bind } for pid=16708 comm="syz.6.3897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.398327][T16709] 8021q: VLANs not supported on ip6_vti0 [ 241.405198][ T42] audit: type=1400 audit(1786201186.325:1788): avc: denied { listen } for pid=16708 comm="syz.6.3897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 241.501886][T16646] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.507017][T16646] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.512706][T16646] bridge_slave_0: entered allmulticast mode [ 241.518159][T16646] bridge_slave_0: entered promiscuous mode [ 241.524946][T16646] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.533462][T16646] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.537063][T16646] bridge_slave_1: entered allmulticast mode [ 241.541174][T16646] bridge_slave_1: entered promiscuous mode [ 241.592413][T16720] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 241.600229][T16646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.651013][T16646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.747743][T16646] team0: Port device team_slave_0 added [ 241.758886][T16646] team0: Port device team_slave_1 added [ 241.762982][ T42] audit: type=1400 audit(1786201186.685:1789): avc: denied { write } for pid=16728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.793167][T16646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.796661][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.806626][T16646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.811427][T16646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.812441][T16733] netlink: 'syz.6.3903': attribute type 21 has an invalid length. [ 241.813916][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.818538][T16733] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.828593][T16646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.833669][ T42] audit: type=1400 audit(1786201186.755:1790): avc: denied { write } for pid=16736 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.834049][T16738] netlink: 'syz.5.3906': attribute type 1 has an invalid length. [ 241.852678][ T42] audit: type=1400 audit(1786201186.775:1791): avc: denied { append } for pid=16730 comm="syz.1.3905" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.860375][ T42] audit: type=1400 audit(1786201186.775:1792): avc: denied { map } for pid=16730 comm="syz.1.3905" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.868351][ T13] hsr_slave_0: left promiscuous mode [ 241.871710][T16741] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 241.875497][ T13] hsr_slave_1: left promiscuous mode [ 241.879217][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.882469][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.886322][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.889746][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.901774][ T13] veth1_to_bridge: left allmulticast mode [ 241.904485][ T13] veth1_to_bridge: left promiscuous mode [ 241.907274][ T13] veth1_macvtap: left promiscuous mode [ 241.909656][ T13] veth0_macvtap: left promiscuous mode [ 241.912144][ T13] veth1_vlan: left promiscuous mode [ 241.914458][ T13] veth0_vlan: left promiscuous mode [ 241.947022][ T5726] Bluetooth: hci0: command tx timeout [ 242.007541][ T13] team0 (unregistering): Port device macvlan2 removed [ 242.142092][ T13] team0 (unregistering): Port device team_slave_1 removed [ 242.153969][ T13] team0 (unregistering): Port device team_slave_0 removed [ 242.261991][T16738] 8021q: adding VLAN 0 to HW filter on device bond13 [ 242.285707][ T5437] 8021q: adding VLAN 0 to HW filter on device eth15 [ 242.370602][T16646] hsr_slave_0: entered promiscuous mode [ 242.378182][T16646] hsr_slave_1: entered promiscuous mode [ 242.392200][T16646] debugfs: 'hsr0' already exists in 'hsr' [ 242.395516][T16646] Cannot create hsr debugfs directory [ 242.653931][ T5437] 8021q: adding VLAN 0 to HW filter on device eth16 [ 242.698988][ T13] IPVS: stop unused estimator thread 0... [ 242.745802][T16770] netlink: 'syz.6.3914': attribute type 1 has an invalid length. [ 242.856512][T16646] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 242.872939][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.877198][T16646] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 242.896454][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.901592][T16646] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 242.912894][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.924256][T16646] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 242.935082][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.003715][T16646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.015906][T16646] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.029288][T10901] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.032371][T10901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.041359][T10902] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.042302][T16796] netlink: 'syz.5.3919': attribute type 21 has an invalid length. [ 243.043706][T10902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.333239][T16646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.516233][T16646] veth0_vlan: entered promiscuous mode [ 243.522706][T16646] veth1_vlan: entered promiscuous mode [ 243.526061][T16824] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3925'. [ 243.545286][T16646] veth0_macvtap: entered promiscuous mode [ 243.553273][T16646] veth1_macvtap: entered promiscuous mode [ 243.583420][T16646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.590865][T16646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.637607][ T5777] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.640757][ T5777] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.643575][ T5777] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.769522][T10901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.778830][T10901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.788515][T16379] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.807012][T10901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.810521][T10901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.945526][T16845] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 244.028717][ T5726] Bluetooth: hci0: command tx timeout [ 244.103771][T16863] netlink: 'syz.1.3940': attribute type 1 has an invalid length. [ 244.139653][T16863] 8021q: adding VLAN 0 to HW filter on device bond20 [ 244.205050][T16869] netlink: 'syz.7.3941': attribute type 21 has an invalid length. [ 244.209997][T16869] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.431849][T16886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3949'. [ 244.612611][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3952'. [ 244.616926][T16897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=16897 comm=syz.6.3953 [ 244.622864][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3953'. [ 244.630597][T16897] netlink: 'syz.6.3953': attribute type 1 has an invalid length. [ 244.633539][T16897] nbd: error processing sock list [ 244.665811][T16895] 8021q: adding VLAN 0 to HW filter on device bond14 [ 244.823988][T16915] 9p: Bad value for 'wfdno' [ 245.004351][T16927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3964'. [ 245.132066][T16931] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 245.445764][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.449472][T16957] netlink: 'syz.6.3974': attribute type 21 has an invalid length. [ 245.455066][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.461710][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.465681][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.474312][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.479213][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.484225][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.489094][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.493484][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.499962][T16949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.752161][T16963] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 245.880537][T16971] netlink: 'syz.1.3981': attribute type 1 has an invalid length. [ 245.907347][T16971] 8021q: adding VLAN 0 to HW filter on device bond21 [ 245.986239][T16977] netlink: 'syz.1.3983': attribute type 37 has an invalid length. [ 245.988875][T16977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3983'. [ 246.107878][ T5726] Bluetooth: hci0: command tx timeout [ 246.428114][T16991] tcpci 0-0050: Can't find connector node. [ 246.431193][T16991] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 246.436586][T16991] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 246.449770][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 246.449789][ T42] audit: type=1400 audit(1786201191.375:1801): avc: denied { lock } for pid=16992 comm="syz.1.3990" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 246.466338][T16991] tcpci 1-0005: probe with driver tcpci failed with error -5 [ 246.466912][ T41] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 246.469797][T16991] i2c i2c-1: new_device: Instantiated device tcpci at 0x05 [ 246.595638][T17001] netlink: set zone limit has 4 unknown bytes [ 246.619281][ T41] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.622672][ T41] usb 12-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 246.628454][ T41] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.657346][ T41] as10x_usb: device has been detected [ 246.659786][ T41] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 246.677796][ T41] usb 12-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 246.682474][ T41] as10x_usb: error during firmware upload part1 [ 246.685720][ T41] Registered device Abilis Systems DVB-Titan [ 246.718083][T17004] netlink: 'syz.1.3995': attribute type 21 has an invalid length. [ 246.723751][T17004] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.584498][T17016] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4000'. [ 247.619401][T17019] netlink: 'syz.1.4001': attribute type 1 has an invalid length. [ 247.622095][T17019] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4001'. [ 247.622462][T17016] ALSA: seq fatal error: cannot create timer (-19) [ 247.680155][T17019] ------------[ cut here ]------------ [ 247.681893][T17019] err == -EMSGSIZE [ 247.681911][T17019] WARNING: net/core/rtnetlink.c:4538 at rtmsg_ifinfo_build_skb+0x1c1/0x260, CPU#0: syz.1.4001/17019 [ 247.686697][T17019] Modules linked in: [ 247.688865][T17019] CPU: 0 UID: 0 PID: 17019 Comm: syz.1.4001 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.692552][T17019] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 247.693960][T17019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.697754][T17019] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 247.699942][T17019] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 e0 b1 75 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 58 8f f0 [ 247.707907][T17019] RSP: 0018:ffffc9000694edb8 EFLAGS: 00010287 [ 247.709208][ T42] audit: type=1400 audit(1786201192.615:1802): avc: denied { write } for pid=5638 comm="syz-executor" path="pipe:[6709]" dev="pipefs" ino=6709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 247.709370][T17023] SET target dimension over the limit! [ 247.710677][T17019] RAX: 000000000000cc6f RBX: 00000000ffffffa6 RCX: ffffc90029cef000 [ 247.725015][T17019] RDX: 0000000000080000 RSI: ffffffff8994b300 RDI: ffff88801cb0a540 [ 247.728384][T17019] RBP: ffff8880393c0640 R08: 0000000000000005 R09: 0000000000000000 [ 247.731891][T17019] R10: 00000000ffffffa6 R11: 0000000000000000 R12: 0000000000000002 [ 247.735062][T17019] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888058320108 [ 247.738416][T17019] FS: 00007f8bd2d276c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 247.742162][T17019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.744885][T17019] CR2: 0000200000000040 CR3: 0000000039eb2000 CR4: 0000000000352ef0 [ 247.748284][T17019] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 247.751558][T17019] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 247.754872][T17019] Call Trace: [ 247.756171][T17019] [ 247.757464][T17019] rtnetlink_event+0x137/0x1f0 [ 247.759639][T17019] notifier_call_chain+0x99/0x3f0 [ 247.761825][T17019] call_netdevice_notifiers_info+0xbe/0x110 [ 247.764384][T17019] netif_disable_lro+0x3e9/0x660 [ 247.766478][T17019] ? __pfx_netif_disable_lro+0x10/0x10 [ 247.768826][T17019] ? lockdep_hardirqs_on+0x78/0x100 [ 247.771091][T17019] ? __local_bh_enable_ip+0x9e/0x120 [ 247.773259][T17019] ? neigh_parms_alloc+0x45f/0x5e0 [ 247.775173][T17019] ipv6_add_dev+0xde0/0x1520 [ 247.777287][T17019] addrconf_notify+0x5db/0x1ba0 [ 247.779297][T17019] ? __pfx_tls_dev_event+0x10/0x10 [ 247.781349][T17019] ? __pfx_addrconf_notify+0x10/0x10 [ 247.783476][T17019] ? ip6mr_device_event+0x1c4/0x230 [ 247.785553][T17019] notifier_call_chain+0x99/0x3f0 [ 247.787766][T17019] call_netdevice_notifiers_info+0xbe/0x110 [ 247.790129][T17019] register_netdevice+0x1998/0x25a0 [ 247.792189][T17019] ? __pfx_register_netdevice+0x10/0x10 [ 247.794387][T17019] macsec_newlink+0x4fb/0x1c50 [ 247.796306][T17019] ? __pfx_macsec_newlink+0x10/0x10 [ 247.798443][T17019] ? __kasan_kmalloc+0xaa/0xb0 [ 247.800392][T17019] ? __kvmalloc_node_noprof+0x36d/0x970 [ 247.802560][T17019] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 247.804422][T17019] ? validate_linkmsg+0x57c/0xba0 [ 247.806234][T17019] ? __pfx_validate_linkmsg+0x10/0x10 [ 247.808485][T17019] ? alloc_netdev_mqs+0x120a/0x15c0 [ 247.810620][T17019] ? rtnl_create_link+0xa4b/0xf80 [ 247.812345][T17019] ? __pfx_macsec_newlink+0x10/0x10 [ 247.815162][T17019] rtnl_newlink+0x1499/0x2380 [ 247.817726][T17019] ? __pfx_rtnl_newlink+0x10/0x10 [ 247.819877][T17019] ? find_held_lock+0x2b/0x80 [ 247.821816][T17019] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 247.824062][T17019] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 247.826387][T17019] ? avc_has_perm_noaudit+0x145/0x3b0 [ 247.828790][T17019] ? find_held_lock+0x2b/0x80 [ 247.830811][T17019] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 247.832969][T17019] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 247.835042][T17019] ? __pfx_rtnl_newlink+0x10/0x10 [ 247.837247][T17019] rtnetlink_rcv_msg+0x95e/0xe90 [ 247.839269][T17019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.841374][T17019] ? ref_tracker_free+0x37e/0x6c0 [ 247.843493][T17019] netlink_rcv_skb+0x159/0x420 [ 247.845462][T17019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.847771][T17019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.849983][T17019] ? netlink_deliver_tap+0x1ae/0xcc0 [ 247.852170][T17019] netlink_unicast+0x585/0x850 [ 247.854203][T17019] ? __pfx_netlink_unicast+0x10/0x10 [ 247.856387][T17019] netlink_sendmsg+0x8b0/0xda0 [ 247.858470][T17019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.860605][T17019] ? selinux_socket_sendmsg+0x198/0x2f0 [ 247.862882][T17019] ____sys_sendmsg+0xa4d/0xbe0 [ 247.864859][T17019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.867323][T17019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.869520][T17019] ? plist_check_list+0x1b8/0x280 [ 247.871686][T17019] ? plist_del+0x308/0x510 [ 247.873601][T17019] ___sys_sendmsg+0x190/0x1e0 [ 247.875675][T17019] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.877991][T17019] ? __lock_acquire+0x49f/0x1a40 [ 247.880138][T17019] ? futex_wake+0x220/0x5e0 [ 247.882111][T17019] __sys_sendmsg+0x160/0x210 [ 247.884101][T17019] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.886227][T17019] do_syscall_64+0x115/0x870 [ 247.888337][T17019] ? clear_bhb_loop+0x70/0xc0 [ 247.890415][T17019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.892886][T17019] RIP: 0033:0x7f8bd1d9e0d9 [ 247.894734][T17019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.902639][T17019] RSP: 002b:00007f8bd2d27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.906098][T17019] RAX: ffffffffffffffda RBX: 00007f8bd2025fa0 RCX: 00007f8bd1d9e0d9 [ 247.909299][T17019] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 247.912479][T17019] RBP: 00007f8bd1e35024 R08: 0000000000000000 R09: 0000000000000000 [ 247.916290][T17019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.920061][T17019] R13: 00007f8bd2026038 R14: 00007f8bd2025fa0 R15: 00007ffe83257858 [ 247.923264][T17019] [ 247.924505][T17019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 247.927418][T17019] CPU: 0 UID: 0 PID: 17019 Comm: syz.1.4001 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.931673][T17019] Tainted: [L]=SOFTLOCKUP [ 247.933377][T17019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.937379][T17019] Call Trace: [ 247.938728][T17019] [ 247.939974][T17019] dump_stack_lvl+0x100/0x190 [ 247.941897][T17019] vpanic+0x552/0x970 [ 247.943500][T17019] ? __pfx_vpanic+0x10/0x10 [ 247.945377][T17019] panic+0xd1/0xe0 [ 247.946872][T17019] ? __pfx_panic+0x10/0x10 [ 247.948693][T17019] check_panic_on_warn.cold+0x19/0x34 [ 247.950866][T17019] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 247.953063][T17019] __warn.cold+0x191/0x318 [ 247.954861][T17019] __report_bug+0x30f/0x440 [ 247.956696][T17019] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 247.958985][T17019] ? __pfx___report_bug+0x10/0x10 [ 247.961054][T17019] ? __pfx_rtnl_fill_ifinfo.isra.0+0x10/0x10 [ 247.963529][T17019] ? trace_kmalloc+0xeb/0x110 [ 247.965397][T17019] ? __kasan_kmalloc+0xaa/0xb0 [ 247.967425][T17019] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 247.970094][T17019] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 247.972422][T17019] report_bug+0xb2/0x220 [ 247.974216][T17019] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 247.976541][T17019] handle_bug+0x16a/0x2a0 [ 247.978386][T17019] exc_invalid_op+0x17/0x50 [ 247.980281][T17019] asm_exc_invalid_op+0x1a/0x20 [ 247.982248][T17019] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 247.984767][T17019] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 e0 b1 75 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 58 8f f0 [ 247.991676][T17019] RSP: 0018:ffffc9000694edb8 EFLAGS: 00010287 [ 247.994033][T17019] RAX: 000000000000cc6f RBX: 00000000ffffffa6 RCX: ffffc90029cef000 [ 247.996770][T17019] RDX: 0000000000080000 RSI: ffffffff8994b300 RDI: ffff88801cb0a540 [ 247.999355][T17019] RBP: ffff8880393c0640 R08: 0000000000000005 R09: 0000000000000000 [ 248.002515][T17019] R10: 00000000ffffffa6 R11: 0000000000000000 R12: 0000000000000002 [ 248.004987][T17019] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888058320108 [ 248.007752][T17019] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 248.009991][T17019] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 248.012121][T17019] rtnetlink_event+0x137/0x1f0 [ 248.013934][T17019] notifier_call_chain+0x99/0x3f0 [ 248.015897][T17019] call_netdevice_notifiers_info+0xbe/0x110 [ 248.018200][T17019] netif_disable_lro+0x3e9/0x660 [ 248.020134][T17019] ? __pfx_netif_disable_lro+0x10/0x10 [ 248.022041][T17019] ? lockdep_hardirqs_on+0x78/0x100 [ 248.024058][T17019] ? __local_bh_enable_ip+0x9e/0x120 [ 248.025678][T17019] ? neigh_parms_alloc+0x45f/0x5e0 [ 248.027261][T17019] ipv6_add_dev+0xde0/0x1520 [ 248.028760][T17019] addrconf_notify+0x5db/0x1ba0 [ 248.030795][T17019] ? __pfx_tls_dev_event+0x10/0x10 [ 248.032803][T17019] ? __pfx_addrconf_notify+0x10/0x10 [ 248.034941][T17019] ? ip6mr_device_event+0x1c4/0x230 [ 248.037060][T17019] notifier_call_chain+0x99/0x3f0 [ 248.039120][T17019] call_netdevice_notifiers_info+0xbe/0x110 [ 248.041599][T17019] register_netdevice+0x1998/0x25a0 [ 248.043818][T17019] ? __pfx_register_netdevice+0x10/0x10 [ 248.046144][T17019] macsec_newlink+0x4fb/0x1c50 [ 248.048209][T17019] ? __pfx_macsec_newlink+0x10/0x10 [ 248.050463][T17019] ? __kasan_kmalloc+0xaa/0xb0 [ 248.052482][T17019] ? __kvmalloc_node_noprof+0x36d/0x970 [ 248.054819][T17019] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 248.056960][T17019] ? validate_linkmsg+0x57c/0xba0 [ 248.059027][T17019] ? __pfx_validate_linkmsg+0x10/0x10 [ 248.060777][T17019] ? alloc_netdev_mqs+0x120a/0x15c0 [ 248.062489][T17019] ? rtnl_create_link+0xa4b/0xf80 [ 248.064545][T17019] ? __pfx_macsec_newlink+0x10/0x10 [ 248.066759][T17019] rtnl_newlink+0x1499/0x2380 [ 248.068779][T17019] ? __pfx_rtnl_newlink+0x10/0x10 [ 248.070983][T17019] ? find_held_lock+0x2b/0x80 [ 248.072975][T17019] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 248.075256][T17019] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 248.077516][T17019] ? avc_has_perm_noaudit+0x145/0x3b0 [ 248.079739][T17019] ? find_held_lock+0x2b/0x80 [ 248.081716][T17019] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 248.083881][T17019] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 248.085982][T17019] ? __pfx_rtnl_newlink+0x10/0x10 [ 248.088100][T17019] rtnetlink_rcv_msg+0x95e/0xe90 [ 248.090229][T17019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.092540][T17019] ? ref_tracker_free+0x37e/0x6c0 [ 248.094610][T17019] netlink_rcv_skb+0x159/0x420 [ 248.096621][T17019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.098869][T17019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.100984][T17019] ? netlink_deliver_tap+0x1ae/0xcc0 [ 248.103145][T17019] netlink_unicast+0x585/0x850 [ 248.105052][T17019] ? __pfx_netlink_unicast+0x10/0x10 [ 248.107131][T17019] netlink_sendmsg+0x8b0/0xda0 [ 248.108889][T17019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.110626][T17019] ? selinux_socket_sendmsg+0x198/0x2f0 [ 248.112447][T17019] ____sys_sendmsg+0xa4d/0xbe0 [ 248.114041][T17019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.115751][T17019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.117427][T17019] ? plist_check_list+0x1b8/0x280 [ 248.119207][T17019] ? plist_del+0x308/0x510 [ 248.121140][T17019] ___sys_sendmsg+0x190/0x1e0 [ 248.123138][T17019] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.125283][T17019] ? __lock_acquire+0x49f/0x1a40 [ 248.127207][T17019] ? futex_wake+0x220/0x5e0 [ 248.128661][T17019] __sys_sendmsg+0x160/0x210 [ 248.130213][T17019] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.132399][T17019] do_syscall_64+0x115/0x870 [ 248.134370][T17019] ? clear_bhb_loop+0x70/0xc0 [ 248.136329][T17019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.138301][T17019] RIP: 0033:0x7f8bd1d9e0d9 [ 248.139760][T17019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.146469][T17019] RSP: 002b:00007f8bd2d27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.149830][T17019] RAX: ffffffffffffffda RBX: 00007f8bd2025fa0 RCX: 00007f8bd1d9e0d9 [ 248.153032][T17019] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 248.156266][T17019] RBP: 00007f8bd1e35024 R08: 0000000000000000 R09: 0000000000000000 [ 248.159483][T17019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.162006][T17019] R13: 00007f8bd2026038 R14: 00007f8bd2025fa0 R15: 00007ffe83257858 [ 248.165264][T17019] [ 248.167381][T17019] Kernel Offset: disabled [ 248.168836][T17019] Rebooting in 86400 seconds..