last executing test programs: 2.88817951s ago: executing program 0 (id=70): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x5) ioctl$DVB_DEMUX_DMX_DQBUF(r0, 0xc0186f40, &(0x7f0000000040)={0x7fffffff, 0x5, 0xb08b, 0x4, 0x8, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)={0x444, 0x1f, 0x301, 0x70bd2b, 0x0, "", [@nested={0x433, 0x0, 0x0, 0x1, [@nested={0x4, 0xea}, @generic="f4000fbb79983800a5bdeaaa89160a11", @nested={0x34, 0x5f, 0x0, 0x1, [@generic="c29a16aa7b03331b30c9c8d58bcf640898d11ba663d57828dfc3da66302fd2b4f81951c54d0fd034261ac75ace521827"]}, @typed={0x4}, @nested={0x1c, 0x8, 0x0, 0x1, [@nested={0x18, 0x5b, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @uid}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x147}]}]}, @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x10}, @generic="ba26b934d06034da0f3bf24086b5d7e91eee1ede122d725cc21e3073fa4eca31ff900b5f809635d03eaaf73e0d2805b9ea6960d98cbd782df4915b13d6d294875e34006084e07f6495f0a20f7ba632406bebddd9bc86c149722a18828accdc5d2f82d84cfb21a2287c7a8481338d549b0291a32659578cffcd07578e", @nested={0x248, 0x80, 0x0, 0x1, [@nested={0x219, 0x14a, 0x0, 0x1, [@nested={0x4, 0x130}, @generic="1092409103ae528b84870bd29b0e56945fc25d0bab8cf18c4ecbabffaeda4bada8f054cecb17672e1241ed82c8d469077ddc17f0a80287b73264a42ed103a2acd7bfe898086fff02b0921e8efb537eb9bb78c886f1837f3942025fb32fba3f10a866c9778f9e62d9f36869baa43a4626d1dfde38da41698a1312f3b50881004785d1f4372effa94562ca1ae482e620fce24dde7ced910371a6bee2f39adc624400", @generic="b3bbabfb64b0c9fcd0718bbd1b9332537b46db046544c663b953d5ae48039ff2e08178c387d0234f5028e0083044e0febf186e335cd1751e081064f0cdb67f1275bdd0cc46e7f321848883126ab627249b93542c7921c368a579a91beb73f608a023a1a9de3dd235244bdcf3e5c72ac3f61c8a2c853b2a6403013f417eb65af9c70aea27685a59295669ebb04a2ea1701d68f6b2487d587a8ae2c66d5ce7173928941620c7097b4b6dc8295985d97528798086a5278e9b59c78abd871e6b733b14c19592e1152f8f04607cda2753e1ccaaabce2ba1c9f3391facd217417843b4b102202d6579422288bc7919994a1e03086326c40cbd996cfc", @generic="2aa7188c5c741de284bcd2c6918bf18e1c6bb6aef7c3e3defed3353ebf1756c1d152cf89def80102bd99142697936310a1898955c9c99f66e265e350c2acebff39a33e2fc8f017ff3fbc520c54d84f0fe80cc4a8182fa7392d1f73b199b27c156e7d8dfab823f2882cdaa5a3e70a0e99befaee9d3ae08e"]}, @typed={0x8, 0xaa, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x90, 0x0, 0x0, @u64=0x9}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @nested={0x84, 0x120, 0x0, 0x1, [@nested={0x7d, 0x4c, 0x0, 0x1, [@generic="d7cc0b0b2c336136671e1e1d497b761fc8054de45e8d15de6a4f0d25ca7b21ade412d9e06c8e4cbc0d88b350f35969ebb639ba52910aa814262b6850d981e326730766d6562a4c94c07b63a7eff32e0a10dcad5fe4e46f0281d19b99f4e6e3464c599cd747688ed978053d28a0b08baaca48831414b14f1ca7"]}]}, @generic="0f0231fc496637e2a9cd4c171f2cc1cc61bebd21afede9b71d4fa1d5067863c32a0ce9f61b4423246f97a9a1d10941942757cdf23d5ff7bdb8579d5eeccf1eb3a4165eaa084a81d776ee4bed66110f0e87a7df7af03f5d6b1c4c7045125fa41d2f5363beaf38393969a1aa2ffd894b8550eccb"]}]}, 0x444}], 0x1, 0x0, 0x0, 0x8091}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/2:0:0:0\x00', 0x10000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x43067, 0x6025}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xfc}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000002) 2.789287315s ago: executing program 0 (id=74): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f0000000700)=""/4096) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x22002) ioctl$CEC_ADAP_S_PHYS_ADDR(r2, 0x40026102, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x8070e, 0xaa) r4 = socket$netlink(0x10, 0x3, 0xe) read(r3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB='\x00'/28], 0x50) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000100), 0x200220, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000200)={0x0, 0x3, 0x10000, 0xd, 0x2, [0x0, 0x0, 0x0, 0x0], [0x8, 0x200, 0xffffff7f, 0x7], [0x80000001, 0xe, 0x9, 0x800], [0x1, 0x10000000000, 0x8c, 0x2]}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={r7}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x18, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @ldst={0x1, 0x3, 0x6, 0xb, 0x3, 0xfffffffffffffff4, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r9, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x48d4}, 0x94) 2.070254523s ago: executing program 3 (id=83): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000feffffff0000000001000500180040008000000000000000000000009500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}, 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x7, 0x1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040844) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x3c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d8fa78a70b59438b3631410e5da1d361"}]}}}}}}}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) r7 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0xd, 0xa, 0x7, 0x1f, @private2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xc9c96ac5ca45ee29, 0x7, 0x3, 0xc18}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r8, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010603}}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x20004090) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 1.981544332s ago: executing program 3 (id=84): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, &(0x7f0000000640)="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", 0x599, 0x4, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @mcast2, 0x3}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='pids.events\x00', 0x26e1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x5, 0x4}, 0x8) r4 = socket$kcm(0x2, 0x2, 0x0) close(r4) socket$kcm(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc0ed0000, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x2c, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000003f40)={r7, 0x7, 0x1, 0x5, 0x0, 0x1}, 0x14) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000640)=r3, 0x4) recvmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 1.920035977s ago: executing program 3 (id=85): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e2605c9"], 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conf_rsp={{0x5, 0x2, 0x24}, {0xc1, 0x4, 0x3, [@l2cap_conf_flushto={0x2, 0x2, 0x21}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xffff}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x59, 0x2, 0x7, 0xa, 0x7}}, @l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}]}}, 0x31) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39d8de344002b9e581a3a3fb0d5d5f307e5600", r1, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf3}, "6184e80ffeb4ba1d74abc0e6af88e8409b981837d10ad88d6c8c2fafbe6aa8cb96f1effd50f9e83a34f05ff37a0af7ebf90f0a99c2e3d4ca0d7623c85debd1a56e8a2aa1a3bba896d3f2e51ca397dab4943ea7a142ad5da84ab52a23d795629c4facb8cb1868fb8049251168b828c15da4880a937cd3e69843c9d8919df16b32b65ab74ec8cf13d2327e7f5facd02c929b445a6d82b82473b6ac591e04035bd8eb849ce36e2d3caf7fa73692a259710ca4599b63c7fe0009d4c5a6eb414ced33e79596b6f94d2c35807fbe4bf42dfa11e2686721e7ae6ff837aecaf8cdf79a832e3f6422bac298f2be7adda6036b397a30759d"}, 0xf7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x20048040) poll(&(0x7f00000000c0)=[{r2, 0x48}, {r0, 0x8000}, {r1, 0x8000}, {r0, 0x4080}], 0x4, 0x100db) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x40, 0xc9, 0x8}}}, 0x7) 1.917771389s ago: executing program 0 (id=86): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1140000, &(0x7f0000000040)={[{@volatile}, {@userxattr}, {@nfs_export_off}, {@uuid_on}, {@nfs_export_off}]}) 1.917655434s ago: executing program 0 (id=87): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r0, &(0x7f0000000000), 0x0) 1.830178926s ago: executing program 0 (id=88): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a7600000009000000ff01862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r10], 0x168}}], 0x1, 0x8000004) 1.631515663s ago: executing program 0 (id=89): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00001b00f8000000b702000014000000b703000000000000850000008b000000bf0900000000000055090100000000009500000000200000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4}, 0x10}, 0x94) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0x4) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x27e, &(0x7f0000000040)=ANY=[], 0x0) 1.061410751s ago: executing program 3 (id=103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x8d, 0x0, 0x1}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) setresgid(0x0, 0xffffffffffffffff, 0xee00) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc) 391.488644ms ago: executing program 2 (id=109): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000f40)=0x1, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r1, 0x7e423000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 280.485672ms ago: executing program 1 (id=110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0x50, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) ptrace(0x10, r6) r8 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f0000000080)={0xd, 0x0, @ofdm={0x6, 0x13, 0x16, 0x9, 0x2, 0xb, 0x4}}) 279.383887ms ago: executing program 2 (id=111): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 279.063108ms ago: executing program 1 (id=112): syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x4, 0x6, 0xb, 0xffffffffffffffff, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x1, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5744d83027d698ce}}}, &(0x7f0000000380)='GPL\x00', 0x80b, 0x7, &(0x7f00000003c0)=""/7, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0xf, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0xff}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x4, 0x6, 0xb, 0xffffffffffffffff, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x1, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5744d83027d698ce}}}, &(0x7f0000000380)='GPL\x00', 0x80b, 0x7, &(0x7f00000003c0)=""/7, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0xf, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0xff}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbf, 0xbf, 0x5, [@enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x5, [{0xd, 0xc}, {0xd, 0x7}, {0xa, 0xffff, 0x10}]}, @datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x40, 0x400}], "abce30"}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x2c, 0x1}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}, @var={0xe, 0x0, 0x0, 0xe, 0x5}, @const={0xe, 0x0, 0x0, 0xa, 0x3}, @enum={0x9, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x5}, {0xc, 0x5}, {0xe, 0x2}, {0xe, 0xc}]}]}, {0x0, [0x5f, 0x2e, 0x61]}}, &(0x7f0000000680)=""/255, 0xdd, 0xff, 0x1, 0xd, 0x10000, @value=r0}, 0x28) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x94, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ed}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x94, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ed}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) fchmodat(r0, &(0x7f0000000980)='./file0\x00', 0x60) getpeername(r0, &(0x7f00000009c0)=@ieee802154, &(0x7f0000000a40)=0x80) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000ac0)={0x0, @ethernet={0x1, @local}, @llc={0x1a, 0x5, 0x8, 0x1, 0x0, 0x1, @local}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)='rose0\x00', 0x7, 0x6, 0x77}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000001500)={&(0x7f0000000b40)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/160, 0xa0}, {&(0x7f0000000c40)=""/149, 0x95}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/187, 0xbb}, {&(0x7f0000000e00)=""/9, 0x9}], 0x5, &(0x7f0000001480)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x6}, {&(0x7f0000000ec0)=""/110, 0x6e}, &(0x7f0000001400)=[{&(0x7f0000000f40)=""/130, 0x82}, {&(0x7f0000001000)=""/177, 0xb1}, {&(0x7f00000010c0)=""/154, 0x9a}, {&(0x7f0000001180)=""/106, 0x6a}, {&(0x7f0000001200)=""/201, 0xc9}, {&(0x7f0000001300)=""/235, 0xeb}], 0x6, 0x40, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x28, 0x9}}], 0x60, 0x8400}, 0x4001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001540)='batadv0\x00', 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001580), 0xa840, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000015c0), 0x3) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000001600)={0x18, 0x0, {0x2, @broadcast, 'ip6_vti0\x00'}}) (async) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000001600)={0x18, 0x0, {0x2, @broadcast, 'ip6_vti0\x00'}}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000002680)={@caif, {&(0x7f0000001640)=""/4096, 0x1000}, &(0x7f0000002640)}, 0xa0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000002740)) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000002740)) getpgid(0xffffffffffffffff) (async) r4 = getpgid(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000002780)={0x2, r4}) listxattr(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)=""/36, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r0) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000002880)={@loopback, @rand_addr, @dev}, &(0x7f00000028c0)=0xc) (async) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000002880)={@loopback, @rand_addr, @dev}, &(0x7f00000028c0)=0xc) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000002900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000002b40), 0x1a002, 0x0) getsockname(r0, &(0x7f0000002b80)=@phonet, &(0x7f0000002c00)=0x80) (async) getsockname(r0, &(0x7f0000002b80)=@phonet, &(0x7f0000002c00)=0x80) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x28, 0x3f7, 0x6, 0x70bd27, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6c36b0b5aadebbe1}, 0x40000) recvfrom$rxrpc(r3, &(0x7f0000002d40)=""/209, 0xd1, 0x2000, &(0x7f0000002e40)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @local, 0x422}}, 0x24) (async) recvfrom$rxrpc(r3, &(0x7f0000002d40)=""/209, 0xd1, 0x2000, &(0x7f0000002e40)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @local, 0x422}}, 0x24) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004300)={@map=r3, 0xffffffffffffffff, 0x2d, 0x2018, 0x0, @value=r0}, 0x20) 277.402252ms ago: executing program 2 (id=113): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2000000000000007, &(0x7f00000000c0)=[{0x200, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x4000000) socket$inet_smc(0x2b, 0x1, 0x0) 201.13829ms ago: executing program 3 (id=114): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x443d6000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x123c02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000106000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000001600)=""/115, 0x0, 0x3332f000}) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)) (async) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x0, r5}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000280)=@arm64={0x80, 0x8, 0x37, '\x00', 0x9}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000000428bd7000fbdbdf2500000000", @ANYRES64, @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x20001054}, 0x20040040) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) (async) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) (async) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0xa738, 0x80000, r8}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r9, 0x4068aea3, &(0x7f0000000300)) 199.542409ms ago: executing program 1 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000000000000000000000000000000000010", @ANYRES32=r1, @ANYBLOB="07300000090400000a000100aaaaaaaaaa13000008001d00fffaffff"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = memfd_secret(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfff, 0x12) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r5], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0), 0x80) syz_emit_ethernet(0x5e, &(0x7f0000001900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "786284", 0x28, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @generic={0x3, 0x4, "2215fffb"}]}]}}}}}, 0x0) pread64(r3, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x82) 198.624232ms ago: executing program 2 (id=116): ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xfffff601, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x1a, 0x9, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000001) ioctl$FE_READ_BER(r0, 0x80046f46, &(0x7f0000000180)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) syz_emit_ethernet(0x77, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x1, 0x5, 0x69, 0x64, 0x0, 0x3, 0x2, 0x0, @private=0xa010100, @empty, {[@noop, @generic={0x88, 0x11, "e54164fba110cb6423c8facc770c74"}, @timestamp={0x44, 0x18, 0x29, 0x0, 0x6, [0x1, 0x7fffffff, 0x8, 0x1, 0xd0]}]}}, {0x1f, 0x4, 0x0, @private=0xa010101, "c713d02d76c58ac4616f1c209b19ae72a3039c51da22f22a47e0a0d05e1ceb8e8b"}}}}}, &(0x7f0000000240)={0x0, 0x2, [0x8d7, 0x7f1, 0x3bd, 0xba5]}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x27c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x300000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @local, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private1, 0x8001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x21b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0e2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6bce28e1}]}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x7fffffff, 0x7, {{0xe, 0x4, 0x0, 0xe, 0x38, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf9}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xec, [@empty, @private=0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @multicast1, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x7800, 0xa9cd34ae885760b0, 0x3, 0x101, {{0x2a, 0x4, 0x1, 0x0, 0xa8, 0x67, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@ssrr={0x89, 0x7, 0x78, [@remote]}, @end, @timestamp_prespec={0x44, 0x1c, 0x69, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x85d}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x8, 0xa9, 0x0, 0x1, [0x3]}, @ssrr={0x89, 0x23, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @private=0xa010102, @remote, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @noop, @noop, @cipso={0x86, 0x42, 0x1, [{0x0, 0x12, "7616714db6c8c04a438287374d9f6320"}, {0x7, 0xa, "9457cca9f087ff0b"}, {0x2, 0xa, "7977ce8ad4fc7cca"}, {0x6, 0x3, 'N'}, {0x7, 0x3, 'Z'}, {0x1, 0x2}, {0x2, 0xe, "c241e6e2500bb53170c0e589"}]}]}}}}}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000980)={&(0x7f0000000900)=""/109, 0x6d}) read$watch_queue(r0, &(0x7f00000009c0)=""/125, 0x7d) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000a40)={0x7fffffff, {{0xa, 0x4e21, 0x1, @local, 0x4}}, {{0xa, 0x4e22, 0x3, @remote, 0x2}}}, 0x108) write(r0, &(0x7f0000000b80)="43f7e7cd3f75b7222f00cf87e340b1453a78d2798a8445a3c4c1a25398578a8baf9505d77ab78487473ef0dda7a93bace7d46237bf5a11702bdc9f41ad9b14519147f57adb264ae7ef99b9c2984581a6620011d6332a900f6c8d0c4e", 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'syzkaller1\x00'}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000c40)=0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r7, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x808) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000e80)) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000001280)=0x7, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0], 0x0, 0x56, &(0x7f0000001380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x24000800) openat$cgroup_ro(r0, &(0x7f00000016c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000001700)) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001740), 0x50b801, 0x0) syz_open_pts(r10, 0x40) 140.306751ms ago: executing program 2 (id=117): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008000100", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x7f, 0x40, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'}) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) r8 = syz_open_pts(r4, 0x0) r9 = dup3(r8, r4, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x12) io_uring_enter(r0, 0x47bc, 0x80000000, 0x0, 0x0, 0x0) 61.244887ms ago: executing program 1 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x70, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x804b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x182df000) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/hardlockup_count', 0x180000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r1, 0x25, 0x8}, 0x14) 60.986265ms ago: executing program 1 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 1.278157ms ago: executing program 2 (id=120): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="2bae8f85ee", 0x5}, {0x0}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000040}], 0x1, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000004c0)={0x1, 0x9}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5999ca2af345f8b3d228584972d", "e9be1eae", "bb10000000000001"}, 0x28) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r4, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x60, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nr0\x00'}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010a5c770c2509fd77800010400"/28, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c0002800800130008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000006c0)={0x1, @sdr={0x34524742, 0x6}}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) 162.158µs ago: executing program 1 (id=121): arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000040)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000080)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000000c0)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000100)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000140)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000180)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000001c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000200)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000240)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000280)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000002c0)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000300)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000340)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000380)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000003c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000400)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000440)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000480)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000004c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000500)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000540)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000580)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000005c0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000600)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000640)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000680)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000006c0)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000700)) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000740)) 0s ago: executing program 3 (id=122): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165cc) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffd) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000040)=0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x4, @remote, 0xe3}}, 0x0, 0x0, 0x3f, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x10, 0xc9, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r7, 0x0, {0x2, 0xff, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000100)) prctl$PR_SET_THP_DISABLE(0x29, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46908' (ED25519) to the list of known hosts. [ 45.386680][ T40] audit: type=1400 audit(1771574222.885:62): avc: denied { name_bind } for pid=5847 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.422797][ T40] audit: type=1400 audit(1771574222.925:63): avc: denied { execute } for pid=5848 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.430075][ T40] audit: type=1400 audit(1771574222.925:64): avc: denied { execute_no_trans } for pid=5848 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.976631][ T40] audit: type=1400 audit(1771574225.475:65): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.984068][ T40] audit: type=1400 audit(1771574225.475:66): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.984716][ T5848] cgroup: Unknown subsys name 'net' [ 48.144917][ T5848] cgroup: Unknown subsys name 'cpuset' [ 48.151117][ T5848] cgroup: Unknown subsys name 'rlimit' [ 48.331820][ T5907] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.998152][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.635050][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 52.635067][ T40] audit: type=1400 audit(1771574230.125:82): avc: denied { execmem } for pid=5918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.819419][ T40] audit: type=1400 audit(1771574230.315:83): avc: denied { create } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.835026][ T40] audit: type=1400 audit(1771574230.315:84): avc: denied { read write } for pid=5922 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.845264][ T40] audit: type=1400 audit(1771574230.315:85): avc: denied { open } for pid=5922 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.855423][ T40] audit: type=1400 audit(1771574230.335:86): avc: denied { ioctl } for pid=5922 comm="syz-executor" path="socket:[2812]" dev="sockfs" ino=2812 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.862982][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.869681][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.871316][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.873713][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.876359][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.878482][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.881111][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.885497][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.886298][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.889472][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.892197][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.894513][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.897080][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.902068][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.902607][ T5924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.904534][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.909528][ T5924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.911742][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.911909][ T5924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.916557][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.920447][ T40] audit: type=1400 audit(1771574230.425:87): avc: denied { read } for pid=5928 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.929428][ T40] audit: type=1400 audit(1771574230.425:88): avc: denied { open } for pid=5928 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.940680][ T40] audit: type=1400 audit(1771574230.425:89): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.195347][ T40] audit: type=1400 audit(1771574230.695:90): avc: denied { module_request } for pid=5928 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.231258][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 53.309573][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 53.346743][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 53.407054][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.409717][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.411956][ T5928] bridge_slave_0: entered allmulticast mode [ 53.414922][ T5928] bridge_slave_0: entered promiscuous mode [ 53.424280][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.426546][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.428821][ T5928] bridge_slave_1: entered allmulticast mode [ 53.431450][ T5928] bridge_slave_1: entered promiscuous mode [ 53.434847][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 53.489724][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.492818][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.496021][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.498989][ T5926] bridge_slave_0: entered allmulticast mode [ 53.502730][ T5926] bridge_slave_0: entered promiscuous mode [ 53.515628][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.517906][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.520248][ T5926] bridge_slave_1: entered allmulticast mode [ 53.523203][ T5926] bridge_slave_1: entered promiscuous mode [ 53.543744][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.606103][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.608681][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.611162][ T5927] bridge_slave_0: entered allmulticast mode [ 53.614169][ T5927] bridge_slave_0: entered promiscuous mode [ 53.617788][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.620119][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.623140][ T5927] bridge_slave_1: entered allmulticast mode [ 53.625857][ T5927] bridge_slave_1: entered promiscuous mode [ 53.629827][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.634919][ T5928] team0: Port device team_slave_0 added [ 53.673279][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.677929][ T5928] team0: Port device team_slave_1 added [ 53.692228][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.695256][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.698496][ T5922] bridge_slave_0: entered allmulticast mode [ 53.702603][ T5922] bridge_slave_0: entered promiscuous mode [ 53.725825][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.728704][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.730896][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.733571][ T5922] bridge_slave_1: entered allmulticast mode [ 53.736263][ T5922] bridge_slave_1: entered promiscuous mode [ 53.740239][ T5926] team0: Port device team_slave_0 added [ 53.745172][ T5926] team0: Port device team_slave_1 added [ 53.770465][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.773493][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.783852][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.790967][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.813980][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.824564][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.827240][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.838571][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.851751][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.863277][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.865530][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.874537][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.887890][ T5927] team0: Port device team_slave_0 added [ 53.900643][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.903024][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.910975][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.921068][ T5927] team0: Port device team_slave_1 added [ 53.925659][ T5922] team0: Port device team_slave_0 added [ 53.951702][ T5922] team0: Port device team_slave_1 added [ 53.984293][ T5926] hsr_slave_0: entered promiscuous mode [ 53.987471][ T5926] hsr_slave_1: entered promiscuous mode [ 53.994113][ T5928] hsr_slave_0: entered promiscuous mode [ 53.997217][ T5928] hsr_slave_1: entered promiscuous mode [ 54.000134][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 54.002971][ T5928] Cannot create hsr debugfs directory [ 54.005376][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.007730][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.016183][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.020163][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.022809][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.030689][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.034915][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.037067][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.045221][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.053907][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.056577][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.067297][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.168335][ T5922] hsr_slave_0: entered promiscuous mode [ 54.171754][ T5922] hsr_slave_1: entered promiscuous mode [ 54.175088][ T5922] debugfs: 'hsr0' already exists in 'hsr' [ 54.177481][ T5922] Cannot create hsr debugfs directory [ 54.243051][ T5927] hsr_slave_0: entered promiscuous mode [ 54.245943][ T5927] hsr_slave_1: entered promiscuous mode [ 54.248106][ T5927] debugfs: 'hsr0' already exists in 'hsr' [ 54.249960][ T5927] Cannot create hsr debugfs directory [ 54.522922][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.528904][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.533614][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.546526][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.591758][ T5926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.599447][ T5926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.606042][ T5926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.613147][ T5926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.676198][ T5922] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.683885][ T5922] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.688704][ T5922] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.693980][ T5922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.765857][ T5927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.776195][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.779314][ T5927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.788202][ T5927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.794385][ T5927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.838074][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.858075][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.871302][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.873872][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.882772][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.893872][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.896174][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.899858][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.902286][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.917729][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.920773][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.946224][ T5285] Bluetooth: hci3: command tx timeout [ 54.946606][ T5924] Bluetooth: hci1: command tx timeout [ 54.948216][ T63] Bluetooth: hci2: command tx timeout [ 54.966870][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.008975][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.026692][ T63] Bluetooth: hci0: command tx timeout [ 55.027655][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.032086][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.054657][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.057695][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.068043][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.082558][ T40] audit: type=1400 audit(1771574232.575:91): avc: denied { sys_module } for pid=5926 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.100914][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.113616][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.115954][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.131627][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.134232][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.205391][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.218665][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.254153][ T5926] veth0_vlan: entered promiscuous mode [ 55.267797][ T5926] veth1_vlan: entered promiscuous mode [ 55.281292][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.306110][ T5926] veth0_macvtap: entered promiscuous mode [ 55.313068][ T5928] veth0_vlan: entered promiscuous mode [ 55.318581][ T5926] veth1_macvtap: entered promiscuous mode [ 55.327177][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.332673][ T5928] veth1_vlan: entered promiscuous mode [ 55.350439][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.356764][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.373294][ T5922] veth0_vlan: entered promiscuous mode [ 55.378377][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.381957][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.392085][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.395605][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.413318][ T5928] veth0_macvtap: entered promiscuous mode [ 55.418196][ T5927] veth0_vlan: entered promiscuous mode [ 55.422991][ T5928] veth1_macvtap: entered promiscuous mode [ 55.426299][ T5922] veth1_vlan: entered promiscuous mode [ 55.439865][ T5927] veth1_vlan: entered promiscuous mode [ 55.460534][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.466379][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.466593][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.471476][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.481285][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.484386][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.492849][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.496332][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.528365][ T5922] veth0_macvtap: entered promiscuous mode [ 55.532164][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.535492][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.548359][ T5922] veth1_macvtap: entered promiscuous mode [ 55.554797][ T5927] veth0_macvtap: entered promiscuous mode [ 55.567382][ T5927] veth1_macvtap: entered promiscuous mode [ 55.574790][ T5926] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.583814][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.586326][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.604575][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.610328][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.633908][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.636723][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.641076][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.649095][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.654959][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.655867][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.658262][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.684495][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.687198][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.709113][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.713927][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.732084][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.811854][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.818306][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.848186][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.851393][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.862830][ T6024] syzkaller0: entered promiscuous mode [ 55.865050][ T6024] syzkaller0: entered allmulticast mode [ 55.906941][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.910455][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.924744][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.927980][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.034664][ T6032] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 56.064916][ T6031] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 56.080982][ T6035] wireguard0: entered allmulticast mode [ 56.207437][ T6043] syzkaller0: entered promiscuous mode [ 56.209832][ T6043] syzkaller0: entered allmulticast mode [ 56.427508][ T6059] netlink: 100 bytes leftover after parsing attributes in process `syz.2.17'. [ 56.536053][ T6062] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 56.538708][ T6061] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 56.586677][ T6065] erspan1: entered promiscuous mode [ 56.810315][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 56.825677][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26'. [ 57.009105][ T6101] ip6erspan0: entered promiscuous mode [ 57.022620][ T63] Bluetooth: hci2: command tx timeout [ 57.024933][ T63] Bluetooth: hci1: command tx timeout [ 57.032301][ T5924] Bluetooth: hci3: command tx timeout [ 57.081917][ T6109] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 57.102666][ T5924] Bluetooth: hci0: command tx timeout [ 57.182966][ T6120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.208143][ T6120] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 57.239393][ T6117] cgroup: No subsys list or none specified [ 57.259398][ T6117] process 'syz.1.36' launched './file1' with NULL argv: empty string added [ 57.267815][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 57.267839][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 57.276685][ T6117] netlink: 68 bytes leftover after parsing attributes in process `syz.1.36'. [ 57.324834][ T6131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.473978][ T6138] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 57.476846][ T6138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.481412][ T6138] vhci_hcd vhci_hcd.0: Device attached [ 57.494960][ T6141] binder: 6139:6141 ioctl 5760 14 returned -22 [ 57.498244][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 57.504105][ T6140] usbip_core: unknown command [ 57.506096][ T6140] vhci_hcd: unknown pdu 0 [ 57.507965][ T6140] usbip_core: unknown command [ 57.523937][ T59] vhci_hcd vhci_hcd.3: stop threads [ 57.526400][ T59] vhci_hcd vhci_hcd.3: release socket [ 57.538483][ T59] vhci_hcd vhci_hcd.3: disconnect device [ 57.750273][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 57.750290][ T40] audit: type=1400 audit(1771574235.245:221): avc: denied { create } for pid=6154 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.750344][ T6157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.765615][ T40] audit: type=1400 audit(1771574235.265:222): avc: denied { getopt } for pid=6154 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.774353][ T40] audit: type=1400 audit(1771574235.275:223): avc: denied { remove_name } for pid=6154 comm="syz.1.46" name="file1" dev="9p" ino=75497677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.785286][ T40] audit: type=1400 audit(1771574235.275:224): avc: denied { unlink } for pid=6154 comm="syz.1.46" name="file1" dev="9p" ino=75497677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.038935][ T6163] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 58.045863][ T6165] netem: unknown loss type 0 [ 58.047959][ T6165] netem: change failed [ 58.050808][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.50'. [ 59.102380][ T63] Bluetooth: hci2: command tx timeout [ 59.105262][ T5924] Bluetooth: hci1: command tx timeout [ 59.182561][ T5924] Bluetooth: hci0: command tx timeout [ 59.692144][ T829] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.844007][ T829] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.847237][ T829] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.850480][ T829] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.858404][ T829] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.861919][ T829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.864836][ T829] usb 8-1: Product: syz [ 59.866229][ T829] usb 8-1: Manufacturer: syz [ 59.867711][ T829] usb 8-1: SerialNumber: syz [ 59.874521][ T829] hub 8-1:1.0: bad descriptor, ignoring hub [ 59.876526][ T829] hub 8-1:1.0: probe with driver hub failed with error -5 [ 60.081347][ T829] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.281306][ T40] audit: type=1400 audit(1771574237.775:225): avc: denied { read write } for pid=6180 comm="syz.3.54" name="lp0" dev="devtmpfs" ino=2844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 60.291666][ T40] audit: type=1400 audit(1771574237.775:226): avc: denied { open } for pid=6180 comm="syz.3.54" path="/dev/usb/lp0" dev="devtmpfs" ino=2844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 60.332376][ T40] audit: type=1400 audit(1771574237.835:227): avc: denied { read write } for pid=6180 comm="syz.3.54" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.341728][ T40] audit: type=1400 audit(1771574237.835:228): avc: denied { open } for pid=6180 comm="syz.3.54" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.351382][ T40] audit: type=1400 audit(1771574237.835:229): avc: denied { ioctl } for pid=6180 comm="syz.3.54" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.485105][ T6144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.565427][ T6184] netlink: 'syz.1.55': attribute type 5 has an invalid length. [ 60.576451][ T6184] ip6erspan0: entered promiscuous mode [ 60.582232][ T40] audit: type=1400 audit(1771574238.065:230): avc: denied { map } for pid=6188 comm="syz.0.57" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.620913][ T6191] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.640226][ T6198] random: crng reseeded on system resumption [ 60.645993][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 60.692574][ T5924] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 60.722813][ T6181] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 60.784037][ T6210] syzkaller0: entered promiscuous mode [ 60.785903][ T6210] syzkaller0: entered allmulticast mode [ 60.820190][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 60.993512][ T6234] binder: 6233:6234 unknown command 0 [ 60.995815][ T6234] binder: 6233:6234 ioctl c0306201 200000000080 returned -22 [ 61.063266][ T6243] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 61.138795][ T6247] vcan1: entered allmulticast mode [ 61.152314][ T6242] Zero length message leads to an empty skb [ 61.156825][ T6247] kvm: user requested TSC rate below hardware speed [ 61.182101][ T5924] Bluetooth: hci1: command tx timeout [ 61.184888][ T63] Bluetooth: hci2: command tx timeout [ 61.203236][ T829] usb 8-1: USB disconnect, device number 2 [ 61.209949][ T829] usblp0: removed [ 61.262108][ T5924] Bluetooth: hci0: command tx timeout [ 61.332098][ T6262] sp0: Synchronizing with TNC [ 61.374680][ T5924] block nbd0: Receive control failed (result -32) [ 61.824772][ T6282] openvswitch: netlink: Missing key (keys=40, expected=80) [ 61.833457][ T6282] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 61.866925][ T6286] netlink: 'syz.3.83': attribute type 10 has an invalid length. [ 61.869339][ T6286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.83'. [ 61.873466][ T6286] batadv0: entered promiscuous mode [ 61.875132][ T6286] batadv0: entered allmulticast mode [ 61.877202][ T6286] bridge0: port 3(batadv0) entered blocking state [ 61.879846][ T6286] bridge0: port 3(batadv0) entered disabled state [ 61.883198][ T6286] bridge0: port 3(batadv0) entered blocking state [ 61.885920][ T6286] bridge0: port 3(batadv0) entered forwarding state [ 62.020197][ T6295] random: crng reseeded on system resumption [ 62.059927][ T6298] syzkaller0: entered promiscuous mode [ 62.061698][ T6298] syzkaller0: entered allmulticast mode [ 62.132326][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 62.135884][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 62.391005][ T6308] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 62.404491][ T6308] team0: Port device dummy0 added [ 62.407942][ T6308] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 62.411023][ T6308] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 62.418283][ T6308] team0: Port device dummy0 removed [ 62.444679][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.452832][ T6313] QAT: Stopping all acceleration devices. [ 62.482962][ T6316] xt_nfacct: accounting object `syz0' does not exist [ 62.486573][ T6316] xt_nfacct: accounting object `syz0' does not exist [ 62.502544][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.693452][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.696588][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.699604][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.707955][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 62.711840][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.715328][ T24] usb 5-1: Product: syz [ 62.717501][ T24] usb 5-1: Manufacturer: syz [ 62.719597][ T24] usb 5-1: SerialNumber: syz [ 62.728046][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 62.730572][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 62.778554][ T6342] netlink: 'syz.1.102': attribute type 11 has an invalid length. [ 62.785713][ T6342] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 62.796343][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 62.796358][ T40] audit: type=1400 audit(1771574240.295:274): avc: denied { mounton } for pid=6341 comm="syz.1.102" path="/28" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.796776][ T6342] 9pnet_fd: p9_fd_create_tcp (6342): problem binding to privport [ 62.829872][ T40] audit: type=1326 audit(1771574240.325:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.103" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63cbd9c629 code=0x0 [ 62.936501][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 62.948842][ T40] audit: type=1400 audit(1771574240.445:276): avc: denied { view } for pid=6347 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 63.204512][ T5992] usb 5-1: USB disconnect, device number 2 [ 63.363165][ T40] audit: type=1400 audit(1771574240.865:277): avc: denied { setopt } for pid=6355 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.367141][ T6356] netlink: 'syz.1.107': attribute type 21 has an invalid length. [ 63.372810][ T6356] netlink: 156 bytes leftover after parsing attributes in process `syz.1.107'. [ 63.377156][ T6356] netlink: 'syz.1.107': attribute type 21 has an invalid length. [ 63.380334][ T6356] netlink: 156 bytes leftover after parsing attributes in process `syz.1.107'. [ 63.392148][ T6357] hub 6-0:1.0: USB hub found [ 63.395268][ T6357] hub 6-0:1.0: 1 port detected [ 63.430428][ T40] audit: type=1400 audit(1771574240.925:278): avc: denied { mount } for pid=6359 comm="syz.1.108" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 63.439952][ T40] audit: type=1400 audit(1771574240.935:279): avc: denied { search } for pid=6359 comm="syz.1.108" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.447287][ T40] audit: type=1400 audit(1771574240.935:280): avc: denied { search } for pid=6359 comm="syz.1.108" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.447912][ T6360] libceph: resolve '4' (ret=-3): failed [ 63.454838][ T40] audit: type=1400 audit(1771574240.935:281): avc: denied { read open } for pid=6359 comm="syz.1.108" path="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.465468][ T40] audit: type=1400 audit(1771574240.935:282): avc: denied { search } for pid=6359 comm="syz.1.108" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.503844][ T40] audit: type=1400 audit(1771574241.005:283): avc: denied { create } for pid=6361 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.643042][ T6011] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.705823][ T6378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6378 comm=syz.1.115 [ 63.749298][ T6378] trusted_key: encrypted_key: insufficient parameters specified [ 63.762914][ T6385] openvswitch: netlink: Unknown key attributes 2 [ 63.803886][ T6011] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.807009][ T6011] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.810111][ T6011] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.823991][ T6011] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 63.827529][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.830487][ T6011] usb 5-1: Product: syz [ 63.831859][ T6011] usb 5-1: Manufacturer: syz [ 63.837663][ T6011] usb 5-1: SerialNumber: syz [ 63.842845][ T6011] hub 5-1:1.0: bad descriptor, ignoring hub [ 63.845118][ T6011] hub 5-1:1.0: probe with driver hub failed with error -5 [ 63.982054][ C2] ------------[ cut here ]------------ [ 63.984226][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 63.986478][ C2] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#2: kworker/2:0/24 [ 63.989558][ C2] Modules linked in: [ 63.991015][ C2] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.994600][ C2] Tainted: [L]=SOFTLOCKUP [ 63.996334][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.999529][ C2] Workqueue: events free_ipc [ 64.001000][ C2] RIP: 0010:__queue_work+0xd0c/0x1150 [ 64.002737][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d d8 92 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 e5 c9 38 00 90 0f 0b 90 e9 b2 f5 [ 64.008936][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010046 [ 64.010829][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100733f151 [ 64.013362][ C2] RDX: ffff888036e6e978 RSI: ffffffff8a833ed0 RDI: ffffffff90dc64e0 [ 64.015951][ C2] RBP: ffff8880399f8a70 R08: 0000000000000005 R09: 0000000000000000 [ 64.018457][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888036e6e800 [ 64.020995][ C2] R13: 1ffff920000c918f R14: ffffffff81cfe320 R15: 0000000000000001 [ 64.023631][ C2] FS: 0000000000000000(0000) GS:ffff8880d6548000(0000) knlGS:0000000000000000 [ 64.026511][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.028629][ C2] CR2: 00007fe8dcb87800 CR3: 000000002be54000 CR4: 0000000000352ef0 [ 64.031136][ C2] Call Trace: [ 64.032200][ C2] [ 64.033120][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 64.034994][ C2] call_timer_fn+0x19a/0x670 [ 64.036471][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 64.038113][ C2] ? debug_object_activate+0x331/0x490 [ 64.039264][ T6404] netlink: 'syz.2.120': attribute type 15 has an invalid length. [ 64.039848][ C2] ? __run_timers+0x560/0xb30 [ 64.039875][ C2] ? __run_timers+0x560/0xb30 [ 64.039893][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 64.047289][ C2] __run_timers+0x570/0xb30 [ 64.048691][ C2] ? __pfx___run_timers+0x10/0x10 [ 64.050269][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 64.051870][ C2] run_timer_base+0x114/0x190 [ 64.053402][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 64.055126][ C2] run_timer_softirq+0x1a/0x50 [ 64.057181][ C2] handle_softirqs+0x1eb/0x9e0 [ 64.058799][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 64.060508][ C2] __irq_exit_rcu+0xef/0x150 [ 64.062013][ C2] irq_exit_rcu+0x9/0x30 [ 64.063412][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 64.065230][ C2] [ 64.066181][ C2] [ 64.067132][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 64.069036][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 64.071052][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 7c 52 f6 48 89 df e8 7e cc 52 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 03 43 f6 65 8b 05 9e 2e 7b 08 85 c0 74 16 5b [ 64.077051][ C2] RSP: 0018:ffffc9000062f9c8 EFLAGS: 00000246 [ 64.078935][ C2] RAX: 0000000000000002 RBX: ffffffff9b41fc00 RCX: 0000000000000040 [ 64.081392][ C2] RDX: 0000000000000000 RSI: ffffffff8de71e08 RDI: ffffffff8c1aefa0 [ 64.083840][ C2] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 64.086376][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 64.088819][ C2] R13: 0000000000000002 R14: 0000000000000002 R15: ffff888038e03800 [ 64.091194][ C2] debug_check_no_obj_freed+0x31f/0x630 [ 64.092923][ C2] ? __pfx___flush_work+0x10/0x10 [ 64.094498][ C2] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 64.096444][ C2] ? __pfx___mutex_lock+0x10/0x10 [ 64.097991][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 64.099601][ C2] ? enable_work+0x24c/0x320 [ 64.101067][ C2] ? rhashtable_free_and_destroy+0x16c/0x9b0 [ 64.103007][ C2] kfree+0x38f/0x6b0 [ 64.104279][ C2] ? bucket_table_free+0x61/0x230 [ 64.105935][ C2] rhashtable_free_and_destroy+0x16c/0x9b0 [ 64.107805][ C2] ? idr_destroy+0x62/0x2e0 [ 64.109305][ C2] ? up_write+0x290/0x4f0 [ 64.110696][ C2] free_ipc+0x117/0x210 [ 64.112010][ C2] process_one_work+0x9d7/0x1920 [ 64.113635][ C2] ? __pfx_process_one_work+0x10/0x10 [ 64.115369][ C2] ? __pfx_free_ipc+0x10/0x10 [ 64.116890][ C2] worker_thread+0x5da/0xe40 [ 64.118302][ C2] ? kthread+0x13a/0x450 [ 64.119653][ C2] ? __pfx_worker_thread+0x10/0x10 [ 64.121264][ C2] kthread+0x370/0x450 [ 64.122567][ C2] ? __pfx_kthread+0x10/0x10 [ 64.124032][ C2] ret_from_fork+0x754/0xd80 [ 64.125479][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 64.127115][ C2] ? __switch_to+0x7b4/0x1120 [ 64.128642][ C2] ? __pfx_kthread+0x10/0x10 [ 64.130133][ C2] ret_from_fork_asm+0x1a/0x30 [ 64.131622][ C2] [ 64.132660][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.134983][ C2] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.138361][ C2] Tainted: [L]=SOFTLOCKUP [ 64.139729][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.142982][ C2] Workqueue: events free_ipc [ 64.144482][ C2] Call Trace: [ 64.145570][ C2] [ 64.146449][ C2] dump_stack_lvl+0x100/0x190 [ 64.147971][ C2] vpanic+0x552/0x970 [ 64.149243][ C2] ? __pfx_vpanic+0x10/0x10 [ 64.150689][ C2] panic+0xd1/0xe0 [ 64.151927][ C2] ? __pfx_panic+0x10/0x10 [ 64.153385][ C2] ? check_panic_on_warn+0x1f/0x90 [ 64.154977][ C2] check_panic_on_warn.cold+0x19/0x34 [ 64.156700][ C2] ? __queue_work+0xd08/0x1150 [ 64.158249][ C2] __warn.cold+0x191/0x348 [ 64.159696][ C2] __report_bug+0x296/0x3d0 [ 64.161131][ C2] ? __queue_work+0xd08/0x1150 [ 64.162683][ C2] ? __pfx___report_bug+0x10/0x10 [ 64.164281][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 64.166025][ C2] ? look_up_lock_class+0x55/0x120 [ 64.167670][ C2] report_bug_entry+0xe1/0x290 [ 64.169216][ C2] ? __queue_work+0xd0c/0x1150 [ 64.170712][ C2] handle_bug+0x1c9/0x2a0 [ 64.172126][ C2] exc_invalid_op+0x17/0x50 [ 64.173625][ C2] asm_exc_invalid_op+0x1a/0x20 [ 64.175188][ C2] RIP: 0010:__queue_work+0xd0c/0x1150 [ 64.176953][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d d8 92 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 e5 c9 38 00 90 0f 0b 90 e9 b2 f5 [ 64.183020][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010046 [ 64.184969][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100733f151 [ 64.187433][ C2] RDX: ffff888036e6e978 RSI: ffffffff8a833ed0 RDI: ffffffff90dc64e0 [ 64.190073][ C2] RBP: ffff8880399f8a70 R08: 0000000000000005 R09: 0000000000000000 [ 64.192601][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888036e6e800 [ 64.195105][ C2] R13: 1ffff920000c918f R14: ffffffff81cfe320 R15: 0000000000000001 [ 64.197581][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 64.199449][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 64.201204][ C2] ? __queue_work+0xcda/0x1150 [ 64.202915][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 64.204746][ C2] call_timer_fn+0x19a/0x670 [ 64.206237][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 64.207841][ C2] ? debug_object_activate+0x331/0x490 [ 64.209563][ C2] ? __run_timers+0x560/0xb30 [ 64.211039][ C2] ? __run_timers+0x560/0xb30 [ 64.212554][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 64.214363][ C2] __run_timers+0x570/0xb30 [ 64.215820][ C2] ? __pfx___run_timers+0x10/0x10 [ 64.217440][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 64.219041][ C2] run_timer_base+0x114/0x190 [ 64.220560][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 64.222223][ C2] run_timer_softirq+0x1a/0x50 [ 64.223748][ C2] handle_softirqs+0x1eb/0x9e0 [ 64.225264][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 64.226931][ C2] __irq_exit_rcu+0xef/0x150 [ 64.228397][ C2] irq_exit_rcu+0x9/0x30 [ 64.229733][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 64.231505][ C2] [ 64.232493][ C2] [ 64.233431][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 64.235353][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 64.237403][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 7c 52 f6 48 89 df e8 7e cc 52 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 03 43 f6 65 8b 05 9e 2e 7b 08 85 c0 74 16 5b [ 64.243276][ C2] RSP: 0018:ffffc9000062f9c8 EFLAGS: 00000246 [ 64.245190][ C2] RAX: 0000000000000002 RBX: ffffffff9b41fc00 RCX: 0000000000000040 [ 64.247604][ C2] RDX: 0000000000000000 RSI: ffffffff8de71e08 RDI: ffffffff8c1aefa0 [ 64.250010][ C2] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 64.252455][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 64.254914][ C2] R13: 0000000000000002 R14: 0000000000000002 R15: ffff888038e03800 [ 64.257322][ C2] debug_check_no_obj_freed+0x31f/0x630 [ 64.259007][ C2] ? __pfx___flush_work+0x10/0x10 [ 64.260591][ C2] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 64.262539][ C2] ? __pfx___mutex_lock+0x10/0x10 [ 64.264169][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 64.265753][ C2] ? enable_work+0x24c/0x320 [ 64.267232][ C2] ? rhashtable_free_and_destroy+0x16c/0x9b0 [ 64.269154][ C2] kfree+0x38f/0x6b0 [ 64.270412][ C2] ? bucket_table_free+0x61/0x230 [ 64.272047][ C2] rhashtable_free_and_destroy+0x16c/0x9b0 [ 64.273880][ C2] ? idr_destroy+0x62/0x2e0 [ 64.275343][ C2] ? up_write+0x290/0x4f0 [ 64.276753][ C2] free_ipc+0x117/0x210 [ 64.278100][ C2] process_one_work+0x9d7/0x1920 [ 64.279710][ C2] ? __pfx_process_one_work+0x10/0x10 [ 64.281474][ C2] ? __pfx_free_ipc+0x10/0x10 [ 64.282899][ C2] worker_thread+0x5da/0xe40 [ 64.284403][ C2] ? kthread+0x13a/0x450 [ 64.285773][ C2] ? __pfx_worker_thread+0x10/0x10 [ 64.287389][ C2] kthread+0x370/0x450 [ 64.288648][ C2] ? __pfx_kthread+0x10/0x10 [ 64.290094][ C2] ret_from_fork+0x754/0xd80 [ 64.291636][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 64.293290][ C2] ? __switch_to+0x7b4/0x1120 [ 64.294809][ C2] ? __pfx_kthread+0x10/0x10 [ 64.296454][ C2] ret_from_fork_asm+0x1a/0x30 [ 64.298033][ C2] [ 64.299709][ C2] Kernel Offset: disabled [ 64.301102][ C2] Rebooting in 86400 seconds..