last executing test programs: 5m17.327823692s ago: executing program 32 (id=448): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000240)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) 5m10.29827629s ago: executing program 4 (id=555): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000002880)={0xf27}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x4, [0x8, 0x101, 0xd7b8, 0x9]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x4, [0x8, 0x101, 0xd7b8, 0x9]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) 5m10.293658146s ago: executing program 4 (id=556): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000080)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4eba49c7}}, './file0\x00'}) 5m10.218229475s ago: executing program 4 (id=557): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) socket$unix(0x1, 0x1, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r2 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x600, 0x140) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000300)={0x28, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, &(0x7f00000001c0)="b8f5432dda5d4ee3bac1acda1982960b53aaac5490fc86020fd8d7254cc537fc1f6ba974823f27df8437e0b01fbfd42a1bc9d1cd9d1864ada8"}) (async) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r3, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}, 0xc34}], 0x1, 0x40010044, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES16=r4, @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 5m10.146244083s ago: executing program 4 (id=559): syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32], 0x80}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, r3, r4) 5m10.037269261s ago: executing program 4 (id=561): madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xa2, 0xffffffffffffffff}) close(r0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x8, r0, 0x1}) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f00000000c0)) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0x1) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x4) r2 = signalfd4(r1, &(0x7f00000001c0)={[0x3]}, 0x8, 0x80000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="0ba8feffdaa016278be924fae1e923d08964ba78bd3fdf7eebc77f4c515465ac46cc7df0207a1a0576ec7b64765820000b2b88c391fad9916cfb21c816787e78262f9c6c6bcdde60b731293b3dea7dbb1b88cd72bd5be38353ec61992e524534ee496685759c41d29309b37942d21c5a4006efc0d0bf0a8d50ef529921c3837d5b2eb5af8248ed8cf00faf0d6c1c0a6cf4c9b0af912960a41ca47ea80be2a8773f65735149297a2ce251851103ef", 0xae, 0x44000, &(0x7f0000000300)={0x11, 0x1, r4, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000340)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) read$FUSE(r2, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000002580)={{}, {0x1, 0x8}, [{0x2, 0x3, r5}], {0x4, 0x4}, [{0x8, 0x4, r6}, {0x8, 0x6, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x3}}, 0x3c, 0x2) io_setup(0xfffffffb, &(0x7f00000025c0)=0x0) r8 = eventfd2(0x6, 0x80000) io_cancel(r7, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0xd, r2, &(0x7f0000002600)="676f608c544e5b472c778ad7dfa722415ed5ca0da5653f917b4304bcc33440465f97ab39a2", 0x25, 0xffff, 0x0, 0x3, r8}, &(0x7f0000002680)) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x2000)=nil) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000026c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002700)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000002b40), r1) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x28, r9, 0x1509, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000002c40)={0xc}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000002d80)={r0, &(0x7f0000002c80)='*$&\x00', 0x1d50a2, &(0x7f0000002cc0)={@align=0xe, {0x8, 0x2, 0x10000, 0x4}}, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x2}) mq_getsetattr(r10, &(0x7f0000002dc0)={0x8, 0xfffffffffffffff3, 0x9, 0x4}, &(0x7f0000002e00)) 5m9.907712447s ago: executing program 2 (id=562): move_pages(0x0, 0x7, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x8) 5m9.907003204s ago: executing program 2 (id=564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m9.837709598s ago: executing program 2 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) write(r5, &(0x7f0000000180)="89dac2", 0x3) close(r5) io_uring_enter(r1, 0x78a6, 0x0, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee00, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000280)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$USERIO_CMD_REGISTER(r9, &(0x7f0000000080)={0x0, 0x8}, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) setuid(r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000240000012400000002000000100012000000000a0100000005000000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x8}, 0x28) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0xffffff8d, &(0x7f0000000000), 0x1, 0x0, 0x0, 0x1}, 0x0) 5m9.837044038s ago: executing program 2 (id=566): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0x38, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x8, 0x4be52, 0x89547, 0x3f}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 5m9.777703185s ago: executing program 2 (id=567): r0 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) r1 = open(&(0x7f0000000240)='./file0\x00', 0x24c00, 0x120) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x15) (async) fchmod(r0, 0x184) 5m9.777501435s ago: executing program 2 (id=568): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r3, 0x8947, &(0x7f0000000040)="a6cc04e2d8f1c38afbf14b29b86e3a") r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r7}, './file1\x00'}) (async) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c000600000000001a46b509000000000000fc28d5a27a1ad58d069400000000000001193ad88fc735029f5d"]) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r2], 0x15) 5m9.725976291s ago: executing program 4 (id=569): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7, 0x0, 0x1, 0x2201, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x4}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x6, 0xfff3}, {}, {0xfff2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffff8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@const={0x1, 0x0, 0x0, 0xa, 0x3}, @enum={0x7, 0x6, 0x0, 0x6, 0x4, [{0x6, 0xfff}, {0xb, 0x8}, {0x8, 0x3}, {0xf, 0x1}, {}, {0x9, 0x9}]}, @enum64={0xb, 0x3, 0x0, 0x13, 0x1, 0x1, [{0xb, 0x8, 0x6}, {0x8, 0x3, 0x1}, {0xc, 0x8, 0xf}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xac67}}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @func={0xe, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x49]}}, &(0x7f0000000500)=""/23, 0xc3, 0x17, 0x0, 0x1}, 0x28) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x9f) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000006000000000000000300000085100000ffffffff182b0000", @ANYRES32=r1, @ANYBLOB="0400", @ANYRES32=r2, @ANYBLOB="000000000c00000085000000490000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0x9c, &(0x7f0000000340)=""/156, 0x41000, 0x0, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x0, 0x8cd4, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r8], &(0x7f0000000640)=[{0x0, 0x1, 0x7, 0x7}, {0x3, 0x3, 0xd, 0x7}], 0x10, 0x1}, 0x94) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000001480)=[{0x1, 0xbe11, 0x0, 0x0}], 0x1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r9, {0x83}}, '.\x00'}) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r11, 0x1, 0x29, &(0x7f0000000140)=0x9, 0x4) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5m9.647898053s ago: executing program 33 (id=569): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7, 0x0, 0x1, 0x2201, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x4}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x6, 0xfff3}, {}, {0xfff2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffff8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@const={0x1, 0x0, 0x0, 0xa, 0x3}, @enum={0x7, 0x6, 0x0, 0x6, 0x4, [{0x6, 0xfff}, {0xb, 0x8}, {0x8, 0x3}, {0xf, 0x1}, {}, {0x9, 0x9}]}, @enum64={0xb, 0x3, 0x0, 0x13, 0x1, 0x1, [{0xb, 0x8, 0x6}, {0x8, 0x3, 0x1}, {0xc, 0x8, 0xf}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xac67}}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @func={0xe, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x49]}}, &(0x7f0000000500)=""/23, 0xc3, 0x17, 0x0, 0x1}, 0x28) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x9f) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000006000000000000000300000085100000ffffffff182b0000", @ANYRES32=r1, @ANYBLOB="0400", @ANYRES32=r2, @ANYBLOB="000000000c00000085000000490000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0x9c, &(0x7f0000000340)=""/156, 0x41000, 0x0, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x0, 0x8cd4, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r8], &(0x7f0000000640)=[{0x0, 0x1, 0x7, 0x7}, {0x3, 0x3, 0xd, 0x7}], 0x10, 0x1}, 0x94) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000001480)=[{0x1, 0xbe11, 0x0, 0x0}], 0x1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r9, {0x83}}, '.\x00'}) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r11, 0x1, 0x29, &(0x7f0000000140)=0x9, 0x4) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 4m54.754646431s ago: executing program 34 (id=568): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r3, 0x8947, &(0x7f0000000040)="a6cc04e2d8f1c38afbf14b29b86e3a") r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r7}, './file1\x00'}) (async) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c000600000000001a46b509000000000000fc28d5a27a1ad58d069400000000000001193ad88fc735029f5d"]) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r2], 0x15) 4m25.035258237s ago: executing program 6 (id=1013): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x84}]}, 0x24}}, 0x0) 4m25.034741662s ago: executing program 6 (id=1014): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$cdc_ncm(0x2, 0xe5, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x2, 0x1, 0xee, 0x40, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e2ab8d"}, {0x5, 0x24, 0x0, 0x32fd}, {0xd, 0x24, 0xf, 0x1, 0x943, 0x9c1b, 0xe00, 0x1}, {0x6, 0x24, 0x1a, 0x51e, 0x2}, [@obex={0x5, 0x24, 0x15, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0xcb, 0x2}, @dmm={0x7, 0x24, 0x14, 0x3dfd, 0x200}, @mdlm_detail={0x51, 0x24, 0x13, 0x1, "f0527ed51ae4c62e9fe90740d8dd3c57ff0af6328fd83feb419646bd4171d1aea9e3b143ec82f6a112274cc5b7d737da1958066bc6f87e591283ceaf398e6507b4a71b4a92d9499b1aa6f2d9c6"}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x9, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0xff, 0x4, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0xf, 0x9}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xf, 0x6, 0x7, 0x20, 0xc}, 0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="050f2a002f1fd93a53e73ab7537a7b9f54591428c2577ea1f1071002085e0409bbffffffff8e9b3a0a2624db3e000c045e80"], 0x5, [{0xa6, &(0x7f0000000380)=@string={0xa6, 0x3, "06a5445bf245ac1ba081e43d9dcc380d5f3ef9fbd39e1a5ec9e74d39a18378b632da99387db9df1ca8b96740435a9a0e0c688ef1264b635891d642b4f88b1ecc27b1684cad41c2dc93639481eaa8e5747683c735a33c7a61d1e5c7850b83f7083cc698183b8903c8af60921ee843b7056dca7e3a330c88fd7d89b2cf62ec27fc9ded77aa4448955c806ea56fc472bf7bced11315f724f524695311d89193fee5712b26e1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x458}}, {0xb0, &(0x7f0000000940)=@string={0xb0, 0x3, "fb5e380cbc471f9358d450fe2f8c6cae98be0b5a87d868a7f4be9d1cd3702f07b7b365015a94cba5349dbaa296af2a5613d7ff9ab624e7fadba661e43e63eab63978a9d0b258e4c29f7539570a229827db471dbf773a622dd09512af31161609aad180053e1e6459e9a7d9839fd72c4ed377faadf720c2c8b4c9b2917688a9246e501a89a68af90d49ecea61d2aa32aefc52c58df92ee91e97f33b75e2364fa00798ff91aa8f4416b79af79f44d7"}}, {0xc9, &(0x7f0000000480)=@string={0xc9, 0x3, "dc49b608ea30a8fb09d70924ce70e5111a9aaff6d34f0893b086963d837b48420e0544b46656f58f49f63899d243e330e5b48938a5e47d752652575b78749d847a463449cc4e7ea12de6e93830526b7ecd6d9595ac4ba4c31c3f887097c2a3acc930f98fcb3df1fcbfcade745f32e7ac90c4d86f83d89fb7769e5d7c61798340bd91bc5900b8723775ea734df7aa2538e38cd42a3f8025653b78a0c2c9c48f9872f89a136e7ced87566eddf3d0964a04527508c6d99a6ea05616d051d8e03f0a14509b6f74311c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x480a}}]}) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000008c0), 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) (async) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x4, r2}], {0x10, 0x2}}, 0x2c, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='s\x93&\x1a#M\xba\xdf\x1d`V\xe9\xa9ource1\xa1\x98Fz\xa2\xc1\x1bK\xaf\x8fX\xe81\xed\xdc\\k\xa0\x00P\x9cb\x12\xecC\xe1!\xc1|q\xd1\xf4\xa7!\x82K54\x14\xdc\xe1\x85\x98\x10X{\xcb\xca\x87\xb6\xaeT6\xbc`\x1f\x81\x98\xc2\xbbp\xa1\xc4\xd1\xc9:\xaa\xb7\x10m\x15\a\xbcU:\x1e\x06\xf4\xe1}\xf7XWx\x15\xdf\xa766\x12\xa0C\x8f\x98\xd79u\x19\xd4=\xff', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) socket(0x10, 0x80002, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2}, 0x807, 0xfffffff8, 0x7}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_FILS_KEK={0x11, 0xf2, "7386dc77ff8c98107bd699ca12"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x24024850) r5 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) write$sndseq(r6, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {}, @queue={0xa, {0x7fff, 0x1}}}], 0x1c) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000004) fcntl$lock(0xffffffffffffffff, 0x2dab2c239db8a56c, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x201}) fsmount(r0, 0x0, 0x8) (async) fsmount(r0, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x22, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x26, 0x0, @tid=r7}, &(0x7f0000000140)) (async) timer_create(0x6, &(0x7f0000000080)={0x0, 0x26, 0x0, @tid=r7}, &(0x7f0000000140)) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) 4m21.936888049s ago: executing program 6 (id=1053): mlockall(0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x48e, 0x0, 0x5}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x1f) writev(r0, &(0x7f0000000280)=[{&(0x7f0000004a80)="bd", 0x1}], 0x1) read$FUSE(r0, 0x0, 0x0) mlockall(0x3) mlockall(0x5) 4m21.386238293s ago: executing program 6 (id=1071): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000020692c000000000000060400000000ff7db1a24799f6ff36d6c5196a478cccb8df85c3daadf10bed1a9dea7bf364c86323ea13d4deeb2a2ccd9fadfa0992f0b41f503fc3d6616b76a458d8e5a3fc6f9a000000000000"], 0x0, 0xfffffffffffffe50}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008055}, 0x400c005) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0x850003d1) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f0000000000)=0x400000000008002) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-des3_ede-asm)\x00'}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x80665c, &(0x7f0000002240)={0x0, 0xe70a, 0x2, 0x2, 0x1d6}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0xa, &(0x7f0000000180)=[{0xa07d, 0x81, 0x0, 0x2}, {0x4, 0x4, 0x2, 0xfffffffe}, {0x8000, 0x9, 0x5, 0x9}, {0x4, 0x80, 0x6, 0x9c}, {0x81, 0x6, 0x6, 0x66d28d66}, {0x8, 0x0, 0x5, 0x4}, {0x2, 0x8, 0x6, 0x96f8}, {0x4, 0xbc, 0x0, 0xd}, {0x101, 0x3, 0x3, 0x800}, {0x9, 0x9, 0x1, 0x5}]}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) pipe2$watch_queue(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd, 0x8001}, {0xb, 0x5}, {0x0, 0x1}, {0xf, 0x1}, {0xf, 0x2}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x2c, 0x6}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x53, 0x4}, @enum64={0x3, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x5, 0x9, 0x1ff}, {0x3, 0x1000000, 0x4}]}]}, {0x0, [0x5f, 0x5f, 0x3e]}}, &(0x7f0000002180)=""/46, 0x95, 0x2e, 0x0, 0x29762996, 0x10000, @value=r7}, 0x28) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="eba60100090000007cdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="00000009140003000700000000000000faffffff00000000"], 0x30}}, 0x0) 4m21.106968162s ago: executing program 6 (id=1077): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x800) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 4m21.104901181s ago: executing program 6 (id=1078): seccomp$SECCOMP_SET_MODE_FILTER(0xffffc90000000000, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) (rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000ff, 0x0, 0x6}]}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, r11, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20000004) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000001}, 0x4000000) 4m5.188930459s ago: executing program 35 (id=1078): seccomp$SECCOMP_SET_MODE_FILTER(0xffffc90000000000, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) (rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000ff, 0x0, 0x6}]}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, r11, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20000004) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000001}, 0x4000000) 3m45.686896681s ago: executing program 1 (id=1414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) close(r0) (async, rerun: 32) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f0000000700)=[{&(0x7f0000000340)="89c78aed3d7ccc6ac8747c27513cc6381ffca7a106bb18ebbe3fb0581d3da6aa9bf33d464bf2c5f06acc782afffab868f3b9fa58dabb3b932cc24f40154298bfbc29beec7e6aaf31f8df49857bd7fbf157fbd0a5ddec69d88dc3fc61c6730118013a2b9020517041dfae15ba47e45f69066fb8b632eb4f86ed57e5dec00e39fa87e76ba91567d542c8c92aa84835608e95166ebc0b54fca19ba23f7ce4ff8788cb6f798589f69fbc07fc56cd7476d741b88ec0e6ba65", 0xb6}, {&(0x7f0000000400)="0a06868458e025869666a403971f871129f3c3e09fda365a9197581f467ebe5782e1fdb54a7697867b8a7eaa764db7779d312de8a3f6fb874d9d5ed48a2d2968f016f48f024f7bfbd1bd2e5470ea84d879206d7dbd9d68a7eebaa22ff378d929bc49b3a2ef6a26be72334cfc455c63a77a5b931f355254eb384067640851750c5b8a90655e7a14ddebdf94d43acba17f8cceef5299de1c0ffdec3055b53974423e15ad0b4341876dedc7bfdcf5c08137db9d39d2bb09", 0xb6}, {&(0x7f00000004c0)="e1d51822b02807cef0ccf63b6b30fe3e39df7e76877b55cfba67e983366346b52a6ca0600d24f62ea18687e76ac7916aa67e4645a850383a7dd1ccee8ac5277d95bfce07988f7eaf7a3b99b819412a672d252fd14b762de7a21029421168de73d871b0e8e592294c2ae348758aca85de2ef00d255b8b3b6075d9d0df28516ffbd66881cdcf8ee270cbc56d486a39672b66a446094379", 0x96}, {&(0x7f0000000000)="9e8e2f2eb283438d6bc9f77fa6425cb491150bb3bfc341ca0943d627ffb0af13c8a20b82d21edee34838efba9b4b008531279c", 0x33}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="f43fe21041c9cee256f57403fa26312319e6cac8ad0871f06b464f68e499eb2aad211f01e8be6567ead27c6084148fcd7af4e07fc1e833ba767966a4de7add2cc7de131bf580f8efc7afa35feaf997149ab90ab33da50fcfa98143f38d05a1a8d65091050340b31d5d82d8c2c26210836aaf1d3614359b4345cd068b00520eb6103e48773e9469c11ff82220b0e21d5f117f5838ce13c6631f63", 0x9a}, {&(0x7f0000000680)="4a1cedd8852bad5b53f47318a90420e0f39b3a450ac7f62d7add5ad85768f3c1e9805f5e2189d68b383d403c458923c8281220096dfdfa83df8db8f76f54b449eae79002e87e91d036209430f0410d", 0x4f}], 0x7, 0x8800000, 0xfffffffe, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @random="2716157f3354"}, 0x10) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$P9_RREMOVE(r4, &(0x7f0000000580)={0x7, 0x7b, 0x1}, 0x7) (async, rerun: 64) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000900090073797a3200000000140000001100010000000000000000000108000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000880c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3m45.615437754s ago: executing program 1 (id=1416): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x80) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000000c0)={0x1, "b85c528abf9426fe9d7e513b65c5c22df4909fa6891ca94446b88c663d7c32f4", 0x1, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000140)=0x3, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f00000004c0)) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x6b1, 0x6}}], 0x20}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f0000000080)=0x81) read$snddsp(r3, &(0x7f0000019240)=""/136, 0x88) 3m45.425878539s ago: executing program 1 (id=1422): write$selinux_create(0xffffffffffffffff, &(0x7f00000000c0)=@objname={'system_u:object_r:audisp_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x7, 0x20, './file0\x00'}, 0x57) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xb, 0x0, 0x0, @generic=0x3}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x108, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x14}, {0xc000400000000001}], 0x1, 0x2}}, @common=@hl={{0x28}, {0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000700)={&(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000e000000100000000600000000000000000000000070000008609"], 0x140}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x8e215322e300e0ff) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) unshare(0x6a040000) (async) unshare(0x6a040000) socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x2, 0x8a0f, 0x7fff, 0x200]}, &(0x7f0000000080)=0x78) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) (async) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r8, r7, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r6, 0x40085874, &(0x7f0000000140)={r6, 0x71f}) 3m43.947251496s ago: executing program 1 (id=1441): getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r0, @in={{0x2, 0x4e23, @empty}}}, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r0, 0x2, 0x3, 0x0, 0x0, 0x5783}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={r2, 0x7c, "e39e6a6983c729a18c2a389bc7a23d51bfb9e53b30b6696b918e0701198a2c9b6ed9622419dbd15fe154060e668a94375eec51b0f94a491e5cece2ac071a510781ac7fb37d41c929f8f41a467eae664d5f006026da2a76309a629657c0faaddccc83fa2708d0593654a8b9387b59a459e9cbb3572f6f7f895fd85524"}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={r3, 0x4}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000340)=0xbf, 0x4) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380)={r4, 0x1000, "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"}, &(0x7f00000013c0)=0x1008) (async) r5 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r5, &(0x7f0000001400)=""/185, 0xb9, 0x40000002, &(0x7f00000014c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x610}, 0x80) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x20000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000001580)={{0x0, 0x5d}, 0x0, 0x5, 0x100, {0x5, 0x5}, 0x4, 0x8}) (async) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000001600)='.pending_reads\x00', 0x103002, 0x110) ioctl$SNDCTL_DSP_NONBLOCK(r7, 0x500e, 0x0) r8 = getuid() (async) r9 = getgid() (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r11 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001880)={0x0, 0x0}) statx(r7, &(0x7f0000001900)='./file0\x00', 0x4000, 0x4, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r7, &(0x7f0000001a40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r15 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003a80), 0x2, 0x0) (async) r16 = getpid() (async) read$FUSE(r7, &(0x7f0000003f00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r18 = getgid() (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000006100)={0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000006180)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000006280)=0xe8) (async) r21 = getgid() (async) r22 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$unix(r7, &(0x7f000000b400)=[{{&(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f00000016c0)="f1d7348e89b071bdb0d5a1e6a3f329857a0fb7a7313d81e3d9d222fa9000987c96dd5d8e60568cc67ff3b764bb9308a9157f00d00165d033ab6cbd3d67c7165f857b80", 0x43}, {&(0x7f0000001740)="e90df55c82c15be9bc930d97b8c4fad4c7aa94c5c496f5be5399cb1fd2cf4902b725235aef3392e624292d86be03cc2b7d58b22d8b3d4fe0f7fca42c15b95e127793a63fe1717b63bd58b2f1b16e89d8ea3f321f7fbabfdd384e767814c7e656d08cd59eb54f9b6b3a44c310d96cdc5952848e11cedd8783ebd494cb10057cee95ffeb0748186c2eadd9fce1e1b7b25a4d", 0x91}], 0x2, &(0x7f0000003ac0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @rights={{0x28, 0x1, 0x1, [r10, r6, r6, r7, r11, r7]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x20, 0x1, 0x1, [r15, r5, r5, r6]}}], 0xa0, 0x40815}}, {{&(0x7f0000003b80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003c00)="ad6cf7aab6d59d0c5ecdf6e78cb0d1f2ef1f934378a3c440aea4da7346158f2bfb3a453c55dadda7238b619570c49bc05d56c92cac65", 0x36}, {&(0x7f0000003c40)="469802c9c898f00c58e38ea4ec5ab6766c7a4272dd335eba499bd67a47bdb6b349418a41947b7c0cd73026fbd6b2c0ae771fbd3895785b52bd871d44877824ed33d0f9a23d7d81d2969f3ee547", 0x4d}, {&(0x7f0000003cc0)="bef855293d9a90e43f60c6732d5b0f99e794fa2f770f488008d0e078de70312d57730f893e5dbdfc27369faeed4cb12d41465c9b8ab39a2ed9a76c142bd456cc5e6d6dbaa552", 0x46}, {&(0x7f0000003d40)="61cbe1067c67fb3e2b53deb1de260bd418e72ee19dce449e51e74ccc8ba0b44c69eebef6afe803ce3d777d14f86356adf9dcadcedb8369f5f146f76e97aecca22a4a4382f56fdca8d0ad0db00ac1258205b86da52a83437ad057cbf9431b694b1a3c38fa06f260819dd92917037c31d9ba86845e57e672d71f8242fce717aacc361bdd1a656e7e5cc34bce487be8ae56b5d51a3d5896238fa2940ecfa54a59945b1bfb8fa2c3c62b65b4bd249dc073bfeb34f740685adb9f8e1d4d8d6b1d9d27303b938544d63405eb3d63ece3f109da2f1d95bf321720aa2c942b45526a251df68a43915f5c47b26cfc1012", 0xec}, {&(0x7f0000003e40)="f478d6c9228ccd51b08a8db99cc2224a3715415d4393d29d6516a6fd04d476758ea1", 0x22}], 0x5, &(0x7f0000005f40)=[@cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}], 0x20, 0x40000}}, {{&(0x7f0000005f80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000060c0)=[{&(0x7f0000006000)}, {&(0x7f0000006040)="efd344a3c001977c5623450406d2d63b1ac76e5b93f276ae6f27bd41aa8b71a024019eeef1bc750aab558d51f47aca50025203f224fa552c329483a176edf17a27c43c744450fb9f3b6b07419a", 0x4d}], 0x2, &(0x7f000000a800)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x30, 0x1, 0x1, [r6, r1, r7, r5, r1, r6, r22, r5]}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f000000a900)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f000000ae80)=[{&(0x7f000000a980)="1b2ec93049e09f9dde09fec69b22188e40f8ba3654bbbce9250981ccc708df7cd31f2cc8899e93e4f4ead4fd91a5cf484ef4325ef846d71b1e", 0x39}, {&(0x7f000000a9c0)="481993cd9f940c53997d3a1ab1ea87de7d3e74325304e4632b5bc21c0062936a4940257cc7c08a378f003d810fe85e2b99dab8cf047577eb9265d0c1f467d6677d39d3d746897e087bf5a52a8c94a4178807167bf3bae52c9b859a3e32d0ee3caf86c113b1ff4b7be0ebfd3f48d6075eba2fa72c0db9cd5629a665f5e0d043ee6bd01c15feca7d511577a5972a4da9cffd6a8537a977f499d26267c94b8ec0f84316a9b1ba4b11866281c9ba998e0d1751982e5b56f5b6e203873b901ef3aa66c5259779eca0e1387076bac44d6617b7c70841fb10", 0xd5}, {&(0x7f000000aac0)="2c601d8b347935437c3c96bae626de38aeca3d72be4df7bd860ab627dbefb67866c542438e593d4ae3f20704b6779bf3bd399b1b0d7e8825e31c800372321d7a344b274cd70f2cce587d601e5f1e3b02f8e444391888536744dad6e1bcab5820ef44d69396da62e450b59481bc100398a4b7f91f036954a847dfdb57d10b2ed94d1dd0c78ede4491da30cd60c394c3f5b7a345a08e094890fc15a784991419d62ac05cc829e83bbd4acc9f9ecc", 0xad}, {&(0x7f000000ab80)="b92003502a94444d4cd1905ff5bdcccd74889ed501ab6e32f7cc46eba679e4629bd5e9956b943593638b0ae2cd2338ec859a2fb6740875f81bbea44fad56fb1743f1953598f2970c274731ec47ce8e9a9b5d1595cdf962e24e0df542e5fd125cc40131e0fb2a6b48fa09fd8d9f3af4dc", 0x70}, {&(0x7f000000ac00)="da05aeda53779d10b03d818636725cb5bc0f771826e459f5fd47f4468c0eb1d60b5a8e80423e1d569c313c62675ad4e90556d5d5c7f1710ca0161a5590beb5ce694299551b6f2456a900e873e2be8229cb7e6ad7f38a20fee275ef6efcde7cd217b1d63f9cc1daac7aecde5ec756883782b216bdc2d04e", 0x77}, {&(0x7f000000ac80)="a7f8ee507abf4602227491d122926e45244ba9d767426bb18714d597029ba41444acc2d68ae2f7b800fcc28620a9d6e973c548c21ab22a6aa6c2f73a0d483aa58ba680e836131b6659d0e41a259ebce1189f19d882da778c7c672f27c3eab2097bad24bda8", 0x65}, {&(0x7f000000ad00)="dce003dc44", 0x5}, {&(0x7f000000ad40)="c520a31140f53fe376c8604cd3459eb9da97e4bf2bca7d6ebb22af5ea4bbb8d9b0c0565d29ac106913c62ceca6f967a6f3648abdadecd3afb9dddd4b7cd2e29e292cb603c87524727245474b7f186632b8ea8ec7785f1e7f8b185204882cf2c7f452035bfb278db63a56db26264b3299b761daa700c6b825bbb5bbe59124b45a10e22c357a97e0963afc22b942de1fad0a5893137dd40e91dfe51540316cc33fa1aaf0d395b3d8ce5689b86ba7044e199e443beeaefbd9", 0xb7}, {&(0x7f000000ae00)="648b2b8458b417dc5079d0a9e5610ca844a161787ae2174c136592e24109af379d28076e0bce69815e232ed6a224aeeacdf9c1a938d1fbefc9da344b0360c839b1fcc661b77338eb6645c0f9110a49292dd56ca352ed8392952bb016f6eb51a8c02c93beec179e3d33b9a8c1", 0x6c}], 0x9, &(0x7f000000af40), 0x0, 0x40080}}, {{&(0x7f000000af80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000b300)=[{&(0x7f000000b000)}, {&(0x7f000000b040)="04247d681ab02cc3c714185e421dd455935540c2fe644415ae90f9585a48ead4135c0115cb2cbbd0b2f6d2d52d3b918ece7937d789b31fedd3365dbdd52f3de29a14db8f6ca9a19df1de0c85f26e167d3a4010df105c0f71b367fd832ae467a6d6864cd282dd943168a6a1fff6712472f9dcc25104378d8003be177979441d07f685890ef9472314bbcc4ce85bbca0a96a1f4ddc645841dea39b9d159558c67107eb8b28d3b3c657d2d8e374d9c49940bbef8b2fee5c1da4c6311ca0fc8b749ed1b4976a75", 0xc5}, {&(0x7f000000b140)="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", 0xfa}, {&(0x7f000000b240)="8da15992742cf5e60ff7d929fd38f01f8dd77074919a0d19bdba4bac11c5f926a313c531e79220e430d44b70ea3c809ccdf91c41544070e8d77aaf812b5510f8638f4405aa13ce6534", 0x49}, {&(0x7f000000b2c0)="f9078bb7380cd10c8849", 0xa}], 0x5, &(0x7f000000b3c0)=[@cred={{0x1c}}], 0x20, 0x20000001}}], 0x5, 0x40000000) 3m43.946693101s ago: executing program 1 (id=1442): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x8000013, 0x4, 0x6162f01a, 0x20, 0x5, 0x8}) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000540)=@chain={'key_or_keyring:', r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r3, &(0x7f0000000300)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000ff000000030000000000000020000000", @ANYRES32=r3, @ANYBLOB="01000000000000d6882736a98efd50", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="02000000030000000200"/28], 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000100021041d000000fedbdf2500000200", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r2], 0xb8}}, 0x40000) 3m43.794442597s ago: executing program 1 (id=1443): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x8000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000040)={r0, 0x3, {0x0, 0x0, 0x0, 0x4d3, 0xb5, 0x0, 0x12, 0xe, 0x11, "d5c7d2b3e0b132f3f8a69a09c5be8c2e66de27013e731d210787e9609d16b2f34ba80fd0ac80fb7243b13bb4df800b2e5e91ca4267f47798dd68eead886c9e5b", "e22bbc137654b95f3005dbef71edbd751f69d5f1b6d183b1ce437a3f2ecb0c6aae91a88e360aca6c19ec6caddc973863a4ad4b6f9d884b08677044cc84476c58", "6550ab69c8b94cb70011aa587a75cdc6947765640991b8b3cd9cc180ba3c01d3", [0x4, 0x8]}}) 3m28.753352417s ago: executing program 36 (id=1443): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x8000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000040)={r0, 0x3, {0x0, 0x0, 0x0, 0x4d3, 0xb5, 0x0, 0x12, 0xe, 0x11, "d5c7d2b3e0b132f3f8a69a09c5be8c2e66de27013e731d210787e9609d16b2f34ba80fd0ac80fb7243b13bb4df800b2e5e91ca4267f47798dd68eead886c9e5b", "e22bbc137654b95f3005dbef71edbd751f69d5f1b6d183b1ce437a3f2ecb0c6aae91a88e360aca6c19ec6caddc973863a4ad4b6f9d884b08677044cc84476c58", "6550ab69c8b94cb70011aa587a75cdc6947765640991b8b3cd9cc180ba3c01d3", [0x4, 0x8]}}) 2m55.106466174s ago: executing program 5 (id=1906): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m54.924235573s ago: executing program 5 (id=1907): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 74) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 2m54.828402615s ago: executing program 5 (id=1909): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000100)="1cf43af2b5a635321b2e4e546c881d33f2e81771d7c8c74ca60132a0bdcdd72af4857ebf954e3549a6a1de4e67fcd03316208d82f8a3a9d5b55e9b70df04fe799bc26d95b5812c651d1bffabb74d825098a6c54b6580b9e24d3fa11e75710d6b3dc1f94a80dbde696a31959e992764cb2131232f273a4d8ad7bf73586d06015d45bc1201f847a1f532ca859b15419ca67a2cf2e696c4734d4f9d21377946c390512fdffebdfdf2f3dd797c6f3eefb4dc3bbeffbb2386a405d03ad6c509bdfca3dabbb488efe7bc3649618e144bce1aac02a5e91912e983cb1a5787bafec660", 0xdf, 0x2, 0x0, 0x3, r0}]) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) getdents64(r0, &(0x7f00000000c0)=""/55, 0x37) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 2m54.675003062s ago: executing program 5 (id=1910): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x463}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000f2dc0)={{0x0, 0xffffffffffffffff, 0x7, 0xf, 0x1, 0xffffffffffffffc0, 0x6, 0xfffffffe, 0x6, 0x642, 0x1, 0x17d, 0x0, 0x244, 0x10}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r5, 0x0, 0xffffff45, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000002540)=0x8000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x1000000}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) socket$rds(0x15, 0x5, 0x0) 2m54.667749524s ago: executing program 5 (id=1911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[], 0xc2) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40004) 2m54.055467474s ago: executing program 5 (id=1917): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 75) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 2m53.995249754s ago: executing program 37 (id=1917): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 75) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 25.611284774s ago: executing program 8 (id=3834): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xc}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x8, 0xfff2}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5}]}}]}, 0x3c}}, 0x20004055) r0 = socket(0x28, 0x5, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x1a, 0xc, 0x4, 0x4, 0x4, 0xe80, 0x1, 0x91}}) (async) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x2c, 0x11, 0x16, 0x12, 0x8, 0x3, 0x1, 0x9f, 0x1}) (async) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0xd}}}}}, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) (async) close(r2) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1406, 0x200, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x32, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80854}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) 25.4039001s ago: executing program 8 (id=3838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000004080), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r0, r2, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0xa, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r5, r6, 0x2f}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r9, 0x25, 0x4}, 0x14) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000002020000004000000", @ANYRES32=r10], 0x27) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex=r4, r2, 0xf, 0x2024, 0x0, @void, @void, @value=r10, @void, r3}, 0x20) 25.258286049s ago: executing program 8 (id=3841): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000180)={0x0, 0x1, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r9, r11, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000380)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000300)={r12}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r0, 0xc010644f, &(0x7f00000001c0)={{0x18, 0x6, &(0x7f0000000280)=[{r1, 0x0, 0x8, 0xf991}, {0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x1, 0x10000, 0x3}, {r2, 0x0, 0x9, 0x3}, {r3, 0x0, 0x3ff8000000000}, {r12, 0x1, 0x2, 0x60d}]}}) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000031cf07fc445858b7f2495b218b4c65f7a8460653904e59468a930c130d60500343199f0fa790bf9bbe3fcca"], 0x14}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000180)={0x0, 0x1, 0x2}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r9, r11, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000380)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000300)={r12}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r0, 0xc010644f, &(0x7f00000001c0)={{0x18, 0x6, &(0x7f0000000280)=[{r1, 0x0, 0x8, 0xf991}, {0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x1, 0x10000, 0x3}, {r2, 0x0, 0x9, 0x3}, {r3, 0x0, 0x3ff8000000000}, {r12, 0x1, 0x2, 0x60d}]}}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000031cf07fc445858b7f2495b218b4c65f7a8460653904e59468a930c130d60500343199f0fa790bf9bbe3fcca"], 0x14}}, 0x0) (async) 25.035930094s ago: executing program 8 (id=3843): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x44) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execve(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000003c0)={[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='@/,[\x00', &(0x7f0000000100)='..(:\x12)[\xeb\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='\xc5#\'\x00', &(0x7f0000000280)='--\x00', &(0x7f00000002c0)='-:\x00', &(0x7f0000000300)=']-&^+-*@}\\\x0e\'&*/:-#\x00', &(0x7f0000000340)='{#:$}.-\x00', &(0x7f0000000380)='[%+-}\x00']}, &(0x7f0000000700)={[&(0x7f0000000440)='%\xfb\xb5/}\xaf$@))}@-[:}\\*\x00', &(0x7f0000000480)='L\x00', &(0x7f00000004c0)=':\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='@\x00', &(0x7f0000000600)='%$$\x00', &(0x7f0000000680)='\'#\x00', &(0x7f00000006c0)='\x00']}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) statx(r0, &(0x7f00000007c0)='./file0/../file0\x00', 0x6000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000940)={0x3, @bcast, r2}) 24.923226128s ago: executing program 8 (id=3845): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x44}}, 0x4000000) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000040)={0x9, 0x0, r2}) ioctl$DVB_DVR_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f00000000c0)={0x40, 0x0, r2}) 24.414479061s ago: executing program 8 (id=3854): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10108, 0x0, 0x314}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x60, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0, 0x40002141}) io_uring_enter(r0, 0x19ff, 0x0, 0x4, 0x0, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0x18) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f00000000c0)=0x7fff) (async) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x73, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) 24.325571636s ago: executing program 38 (id=3854): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10108, 0x0, 0x314}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x60, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0, 0x40002141}) io_uring_enter(r0, 0x19ff, 0x0, 0x4, 0x0, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0x18) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f00000000c0)=0x7fff) (async) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x73, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.861711487s ago: executing program 0 (id=4047): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0xc0c4) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x344, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x761, 0x7f}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x308, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, "4bb0ae3701b90c03e7e99ceded8da66eeca934231aed6eb3ef458aa7b05dbaff9cb5312c5a8a56a9fa26c67bf3e3f1f8ea8d85d368d21403db401f8562d9142c"}, @NL80211_BAND_5GHZ={0x38, 0x1, "1bf2a411d14f9673b63f04a359232fd2dd20188523fcbde42aae79a1e8db5a6cc08c97e85e8afa56f0cb021044e6c944b8d2bd7f"}, @NL80211_BAND_6GHZ={0x78, 0x3, "f2666d96abb450de336035895dae87d7d661188d259a58bee3587260343b1cc12fb948c754a0e46f4c40ead649df57409b88b2a619db641b563a76bd0f0c2977a8129f8accc440eb6d2ec27df0c118ddaa2f1fc4c794148f06ea171d288a9cedd0188a371c67a82a8cb8ac0041f6d09fd4c3c8c1"}, @NL80211_BAND_2GHZ={0x3c, 0x0, "267f863117d040f45ad18fb1214673a8bdeabc8b0a72e170ec4589b259ce1d76f5c459cab4236da8ab65d38939d903f59434b7918ec30b19"}, @NL80211_BAND_2GHZ={0x37, 0x0, "aed801d7c2d1f6c994287274a172fe1ca3233d354d568e4fa8852271329ca3679385b0d9b753731e686693c48a51ffadd4e17a"}, @NL80211_BAND_6GHZ={0xdd, 0x3, "6826f30fd74fd37bf065e35027949ddbf31368ec80989cc9652c34920312bdd1129ca339a6e9305dfad66850881f72d3e42d13871d1014e5a39838d8c15bd992d486462b48ec48b20e25ec3b7b0535f5651e67a221cf4499b57db328b28150a3cbbc74a8af307c79a1976ef189c5844d5779ae37596fdc2793ae7a5115c6e621c6762cd6e068843012b2b76c17cddae2341f6e1fdf6b249cdf8d142d613e242da4fc6d84ffc5774ecd3b892e313ec15ac455289fa210eb5e8b8d4c5a7db96f177e8862b230b1b2eca55820e9e44b852df7a700406d29167d84"}, @NL80211_BAND_5GHZ={0x29, 0x1, "64c68a80607e4eaf4e0feabc73f097daff57bd232a3fa08a502f729e665dc15fc89c89aeb2"}, @NL80211_BAND_6GHZ={0x8d, 0x3, "2aea2e034b040b95817e65804af9426c58c641207f2a60c67b3a018473dde8eb8e0da72fd10e92801fd854988d412e4a6ddc07c823162c085ce5653e289a089f551d0370d47a7aafe1b3ecd48431109920432c460846394ce7ab5af38dc33434557e592673b711616828f88e63dcae2bf51d78609be565e49f488f18523499f3e3b56dd6f59f6a8ecb"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x344}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000cbc000/0x4000)=nil, 0x4000}}) 2.768162269s ago: executing program 0 (id=4050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x29}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x6, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x7, 0x4, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40000, 0x0, 0x3], [0x80, 0x0, 0x8, 0xb16, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x7fff, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffe, 0x4, 0xffffffff, 0xf, 0x0, 0xff, 0xfffffffd, 0x5, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff, 0x20002], [0x3, 0x0, 0x8, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0xc045, 0x0, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xd, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5]}, 0x45c) setpgid(r4, r4) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008b9"], 0x125) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3ff, 0x119500) unlinkat(r7, &(0x7f0000000100)='./file1/file0\x00', 0x200) setpgid(0x0, r4) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="08000000010000", 0x7) 2.663184669s ago: executing program 3 (id=4051): r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x101042, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r0, 0x0}]) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f0000000880)="dc4c67", 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400001010000001fefffffffddbdf250000040030475d3aeccd3276c0c6bdb5c5f4f4867cf3edfda6c336b3df3cca6c87160bdceb29909769a0274be6391abacc7c220feb646cddf3d4a498c9fe48fc5b75f2a28a07fc790a11d6de8e41c5ef3312e2bf3dadd342e9b1e15fd4f2f7248ded6e19f018c1b81e56fc419022", @ANYRES32=0x0, @ANYBLOB="8a43030000000000080029003dd10000140003006261746164765f736c6176655f3000000500110002000000", @ANYRES64=r2, @ANYRES32=r2, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4004010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x4, &(0x7f0000000140)=[{0x79, 0x8f, 0x3, 0x80000001}, {0x5, 0x9, 0x5, 0xb}, {0x101, 0xd, 0x8, 0x80}, {0x8193, 0x2e, 0x8, 0xfffffffa}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000400)={{0x3c, @multicast1, 0x4e23, 0x1, 'rr\x00', 0x0, 0x3, 0x4a}, {@remote, 0x4e24, 0x10000, 0x6, 0x3, 0x3}}, 0x44) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) lsetxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000300), &(0x7f00000003c0), 0x2, 0x5) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) preadv(r4, &(0x7f00000000c0), 0x0, 0x9, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES16=r8, @ANYRES64=r0], 0x44}}, 0x0) 2.18250423s ago: executing program 9 (id=4053): r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x57) (async) sendto$packet(r0, &(0x7f0000000100)="e95d325003", 0x5, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x40000806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0xf81, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x1, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0x3, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0xc, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x103, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x5fc, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0x100000001, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x1000000000000c9, 0x6, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x71642aeb, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16f, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0xd5, 0x100000003, 0x4, 0x80, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0x3, 0x7]}) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (rerun: 32) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (rerun: 64) 1.817491758s ago: executing program 9 (id=4054): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x3234564e, 0x4, 0x81, 0x6, 0x5, 0x20000f9b, 0x0, 0x4, 0x0, 0x5}}) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x81, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) 1.724993355s ago: executing program 0 (id=4055): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000180)={{0x3c, @private=0xa010101, 0x4e21, 0x1, 'rr\x00', 0x3, 0xffffff25, 0x1e}, {@multicast2, 0x4e22, 0x2000, 0xc, 0x7, 0xff}}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x801) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000000)={0x1, r5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r5}) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="97871b60ee714475dea2dbd7a018e31e6ca7401e61d16d1ed2f5669ff386d035", 0x20}], 0x1}, 0x5) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000340)='zonefs\x00', 0x0) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r10, 0x1, 0x70bd26}, 0x14}}, 0x20048880) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmmsg$sock(r8, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 1.638550663s ago: executing program 9 (id=4056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) gettid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x10, 0x10038, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000003c0)="0f01c866ba4300b0fc7166ba400066b80b0066ef66baf80cb8ccc65186ef66bafc0ced0f380a630b2e67450f015f818ed8c4221d05c166410fea2ddc000048b84f4e0000000000000f23c00f21f83503000a000f23f8460f0666baa100ed", 0x5e}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.355993638s ago: executing program 0 (id=4057): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@loopback, 0x0}, &(0x7f0000000100)=0x14) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r7, 0x80480911, 0x200000000005) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008840}, 0x40800) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) 1.094838582s ago: executing program 0 (id=4059): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@null, 0xa, 'lo\x00'}) syz_open_dev$sndctrl(&(0x7f0000000440), 0x20000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x80) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x900}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r5, 0x80184151, &(0x7f0000000080)={0x0, 0x0}) 980.142466ms ago: executing program 3 (id=4061): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 811.354667ms ago: executing program 3 (id=4063): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000040)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1, 0x2000005}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x18, r1, 0x1, 0x0, &(0x7f0000000000)=[{0xc842000000000, 0x8000}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) 685.609513ms ago: executing program 7 (id=4064): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000580)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4008841) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 555.343445ms ago: executing program 3 (id=4065): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000200)={0x10004, 0x0, &(0x7f0000ffe000/0x2000)=nil}) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x40000000) sendto$inet6(r2, 0x0, 0x0, 0x4, 0x0, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x83) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x5d22f5f6fd534cd7}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003800)='net/igmp6\x00') fcntl$setownex(r4, 0xf, &(0x7f0000003880)={0x1}) fcntl$getflags(r4, 0xb) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f00000001c0)=0xcc, 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x4000000) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000540)="00214797357e0e", 0x7}], 0x1, 0x739, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES16=r8, @ANYRESHEX=r9, @ANYRES8=r9], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, r9, 0x0, 0x2, 0xfe, 0x3, "750538d1ee602ec4802a04ea7cdc0700bb2cd9893bc31f80718337d9bdc73ce9fdb9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x12}, 0x60) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 555.153983ms ago: executing program 7 (id=4066): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000140)={{0x870ea164cf983553, 0x9, 0x7, 0x1dc, 0x9b, 0x8, 0x104, 0xfff}, "0a1a95196d544259b36b325921ad5eff5804a1d34999a6c02a50cc51f9b065605d71a0f6c98dca468fb14913b8b615b34b83405a9612ece216e89ee837a49f05e0beb492fb8344a6c0148af5f15c5b6120db59c5148e1a1257cce528168379d8aa566c0f82dbbb82593717ef6acc187d", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x590) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) 448.471936ms ago: executing program 7 (id=4067): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) r5 = geteuid() r6 = getgid() ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000080)) write$P9_RGETATTR(r4, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x84, {0x10, 0x3, 0x4}, 0x5, r5, r6, 0x8, 0xffffffffffffffff, 0xbf, 0x101, 0xdaa7, 0x7ff, 0x10, 0x3ff, 0x7, 0x4, 0xa7, 0x6, 0x9, 0x3, 0xe26c3bd}}, 0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r2, 0x1}, 0x8) 448.208144ms ago: executing program 9 (id=4068): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/5, 0x5}, {&(0x7f0000000280)=""/24, 0x18}], 0x2, 0x3ff, 0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7e4cd07ec3ee777de774fc7987cca41989080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value64=0x100}}) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) 347.969879ms ago: executing program 7 (id=4069): r0 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) fchmod(r0, 0x184) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) (async) fchmod(r0, 0x184) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 347.36396ms ago: executing program 3 (id=4070): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) (async) write(r4, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000000002000008000f40fe00000e", 0x24) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 223.502537ms ago: executing program 7 (id=4071): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x6000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 221.792866ms ago: executing program 9 (id=4072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@migrate={0xa4, 0x21, 0x200, 0x70bd2c, 0x25dfdbff, {{@in6=@mcast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e20, 0x2, 0xa, 0x10, 0x20, 0x4, r6, r8}, 0x0, 0x2}, [@replay_thresh={0x8, 0xb, 0xd5}, @tmpl={0x44, 0x5, [{{@in=@remote, 0x4d6, 0x6c}, 0x2, @in6=@local, 0x0, 0x4, 0x1, 0x4, 0x101, 0x9, 0x3ff}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x784e}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 78.43759ms ago: executing program 7 (id=4073): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000040)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1, 0x2000005}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x18, r1, 0x1, 0x0, &(0x7f0000000000)=[{0xc842000000000, 0x8000}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r4}) 77.151864ms ago: executing program 0 (id=4074): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000002580)={0x2, &(0x7f00000024c0)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x63}, @void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9f18a1be5d63673a75de302f7e7b08931c6bf81308821bc7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "489f79ffa78e9d163ad6a83a8797cebd717cda305f8f36e3"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004001}, 0x10) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) 76.935139ms ago: executing program 3 (id=4075): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x1}}]}}]}, 0x44}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x77359400}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x12}}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x1, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4000}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}}, 0x24040084) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_getvlan={0x40, 0x72, 0x10, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x8014) 0s ago: executing program 9 (id=4076): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x24c2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x48000) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) kernel console output (not intermixed with test programs): ysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 330.513672][ T40] audit: type=1400 audit(2000000285.580:6633): avc: denied { ioctl } for pid=21423 comm="syz.7.3350" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 330.569266][T21486] Cannot find add_set index 2 as target [ 330.595758][T21486] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 330.774310][ T5997] usb 12-1: USB disconnect, device number 27 [ 331.548937][T21537] net_ratelimit: 125 callbacks suppressed [ 331.548956][T21537] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 331.714363][ T9389] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 331.715438][ T1241] wlan1: Trigger new scan to find an IBSS to join [ 331.915717][ T9389] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.920613][ T9389] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.924971][ T9389] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 331.929181][ T9389] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.938435][ T9389] usb 12-1: config 0 descriptor?? [ 331.941900][T21549] input: syz0 as /devices/virtual/input/input37 [ 332.118706][T21570] QAT: failed to copy from user cfg_data. [ 332.168577][ T9389] usbhid 12-1:0.0: can't add hid device: -71 [ 332.170631][ T9389] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 332.179653][ T9389] usb 12-1: USB disconnect, device number 28 [ 332.433867][T21597] __nla_validate_parse: 2 callbacks suppressed [ 332.433884][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 332.442548][T21596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3377'. [ 332.472117][T21596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3377'. [ 332.485552][T21596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3377'. [ 332.678636][T19115] wlan1: Creating new IBSS network, BSSID ae:13:48:5e:5d:1f [ 333.537602][T21641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.631370][T21643] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3384'. [ 333.670659][T21643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.787316][T21641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.794396][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 333.805912][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 333.867573][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3385'. [ 333.874784][T21655] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 333.889803][T21654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.913886][T21654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.940306][T21654] exFAT-fs (nbd9): unable to read boot sector [ 333.942255][T21654] exFAT-fs (nbd9): failed to read boot sector [ 333.944158][T21654] exFAT-fs (nbd9): failed to recognize exfat type [ 334.022431][T21649] Invalid argument reading file caps for ./file0 [ 334.125915][T21662] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 334.764228][T21671] tmpfs: Bad value for 'mpol' [ 334.817642][T21674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21674 comm=syz.0.3391 [ 334.890539][T21679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3393'. [ 335.051631][T21692] 9p: Unknown access argument : -22 [ 335.151026][T21698] netlink: 'syz.7.3396': attribute type 7 has an invalid length. [ 335.195705][T21705] tmpfs: User quota inode hardlimit too large. [ 335.224361][T21698] netlink: 'syz.7.3396': attribute type 7 has an invalid length. [ 335.558695][ T24] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 335.566517][T21731] xt_policy: output policy not valid in PREROUTING and INPUT [ 335.754843][T21746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3406'. [ 335.766353][T21746] geneve2: entered promiscuous mode [ 335.783353][ T40] kauditd_printk_skb: 37326 callbacks suppressed [ 335.783364][ T40] audit: type=1400 audit(2000000290.600:43585): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 335.800771][T21746] geneve2: entered allmulticast mode [ 335.802698][ T40] audit: type=1400 audit(2000000290.600:43586): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 335.803648][ T24] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 335.813976][ T40] audit: type=1400 audit(2000000290.600:43587): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 335.821551][T21750] bridge2: entered promiscuous mode [ 335.829511][ T40] audit: type=1400 audit(2000000290.600:43588): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 335.836345][ T24] usb 14-1: can't read configurations, error -71 [ 335.842497][ T40] audit: type=1400 audit(2000000290.610:43589): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 335.853571][ T40] audit: type=1400 audit(2000000290.610:43590): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 335.861372][ T40] audit: type=1400 audit(2000000290.619:43591): avc: denied { read write } for pid=21738 comm="syz.7.3405" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.865900][T21750] bridge2: entered allmulticast mode [ 335.879301][ T40] audit: type=1400 audit(2000000290.619:43592): avc: denied { read write open } for pid=21738 comm="syz.7.3405" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.889484][ T40] audit: type=1400 audit(2000000290.619:43593): avc: denied { ioctl } for pid=21738 comm="syz.7.3405" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.899202][ T40] audit: type=1400 audit(2000000290.638:43594): avc: denied { write } for pid=21741 comm="syz.8.3406" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 336.096184][T21774] affs: No valid root block on device nullb0 [ 336.329268][ T5991] hid-generic 0004:0006:0002.000D: item fetching failed at offset 1/2 [ 336.333133][ T5991] hid-generic 0004:0006:0002.000D: probe with driver hid-generic failed with error -22 [ 336.467503][T21791] random: crng reseeded on system resumption [ 336.477753][T21791] Restarting kernel threads ... [ 336.479684][T21791] Done restarting kernel threads. [ 336.565658][T21796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.787261][T21840] netlink: 'syz.9.3423': attribute type 16 has an invalid length. [ 336.805709][T21842] tmpfs: Bad value for 'mpol' [ 336.962524][T21771] 9pnet_fd: p9_fd_create_tcp (21771): problem connecting socket to 127.0.0.1 [ 337.430311][T21890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.749607][T21914] syzkaller1: entered promiscuous mode [ 337.751363][T21914] syzkaller1: entered allmulticast mode [ 337.903006][T21930] bond4: option downdelay: invalid value (18446744073709551615) [ 337.905638][T21930] bond4: option downdelay: allowed values 0 - 2147483647 [ 337.909417][T21930] bond4 (unregistering): Released all slaves [ 337.964804][T21856] ALSA: mixer_oss: invalid OSS volume ';' [ 338.367350][T22027] bond6: (slave bond_slave_1): Device is not our slave [ 338.367373][T22027] bond6: option active_slave: invalid value (bond_slave_1) [ 338.368782][T22027] bond6 (unregistering): Released all slaves [ 338.487984][T22029] kvm: kvm [22028]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 338.491347][T22029] kvm: kvm [22028]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 338.539238][T22104] i2c i2c-1: dtv_property_process_set: SET cmd 0x000929ab undefined [ 338.542579][T22103] __nla_validate_parse: 7 callbacks suppressed [ 338.542591][T22103] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3453'. [ 338.548644][T22029] kvm_intel: kvm [22028]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 338.556824][T22103] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3453'. [ 338.567269][T22029] kvm: kvm [22028]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 338.570486][T22029] kvm: kvm [22028]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 338.894004][T22125] netlink: 'syz.8.3458': attribute type 1 has an invalid length. [ 338.913599][ T9] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 338.999186][ T5997] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 339.108822][ T9] usb 5-1: config index 0 descriptor too short (expected 119, got 27) [ 339.112239][ T9] usb 5-1: config 169 has too many interfaces: 188, using maximum allowed: 32 [ 339.116057][ T9] usb 5-1: config 169 has an invalid descriptor of length 141, skipping remainder of the config [ 339.122562][ T9] usb 5-1: config 169 has 0 interfaces, different from the descriptor's value: 188 [ 339.138540][ T9] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 339.141534][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.144265][ T9] usb 5-1: Product: syz [ 339.145638][ T9] usb 5-1: Manufacturer: syz [ 339.147200][ T9] usb 5-1: SerialNumber: syz [ 339.170614][ T5997] usb 14-1: Using ep0 maxpacket: 16 [ 339.183852][ T5997] usb 14-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.190957][ T5997] usb 14-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.195436][ T5997] usb 14-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.199502][ T5997] usb 14-1: config 1 interface 0 has no altsetting 0 [ 339.216208][ T5997] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 339.219220][ T5997] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.221819][ T5997] usb 14-1: Product: syz [ 339.223222][ T5997] usb 14-1: Manufacturer: syz [ 339.225051][ T5997] usb 14-1: SerialNumber: syz [ 339.344396][T22145] ref_ctr_offset mismatch. inode: 0xc2f offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 339.421583][ T9] usb 5-1: USB disconnect, device number 47 [ 339.458969][ T5997] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 339.683966][T22115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.688584][T22115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.704263][ T1163] usb 14-1: USB disconnect, device number 7 [ 339.716569][ T1163] usblp0: removed [ 340.018738][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.021528][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.024809][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.042357][T22179] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 340.079704][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.084255][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.088286][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.093306][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.097336][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.101596][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.105554][T22179] xfrm0 speed is unknown, defaulting to 1000 [ 340.208549][T22189] hugetlbfs: Bad value '$' for mount option 'size' [ 340.208549][T22189] [ 340.274290][T22190] binder: BINDER_SET_CONTEXT_MGR already set [ 340.283007][T22190] binder: 22187:22190 ioctl 4018620d 200000000100 returned -16 [ 340.498957][T22211] mmap: syz.7.3472 (22211): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 340.591914][T22216] program syz.9.3471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.786199][T22210] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 340.868569][T22233] gretap3: entered promiscuous mode [ 340.981515][T22247] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3480'. [ 340.991814][T22249] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3476'. [ 341.019645][T22249] bond4: entered promiscuous mode [ 341.026685][T22249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.055564][T22249] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3476'. [ 341.139020][ T40] kauditd_printk_skb: 1491 callbacks suppressed [ 341.139033][ T40] audit: type=1400 audit(2000000295.620:45086): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 341.160053][ T40] audit: type=1400 audit(2000000295.620:45087): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 341.174743][ T40] audit: type=1400 audit(2000000295.658:45088): avc: denied { create } for pid=22289 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 341.176634][T22291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3483'. [ 341.181177][ T40] audit: type=1400 audit(2000000295.658:45089): avc: denied { prog_load } for pid=22290 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 341.191284][ T40] audit: type=1400 audit(2000000295.658:45090): avc: denied { bpf } for pid=22290 comm="syz.9.3482" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.198439][ T40] audit: type=1400 audit(2000000295.667:45091): avc: denied { prog_load } for pid=22290 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 341.205508][ T40] audit: type=1400 audit(2000000295.667:45092): avc: denied { perfmon } for pid=22290 comm="syz.9.3482" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.214386][ T40] audit: type=1400 audit(2000000295.667:45093): avc: denied { perfmon } for pid=22290 comm="syz.9.3482" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.221657][ T40] audit: type=1400 audit(2000000295.667:45094): avc: denied { perfmon } for pid=22290 comm="syz.9.3482" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.228505][ T40] audit: type=1400 audit(2000000295.667:45095): avc: denied { perfmon } for pid=22290 comm="syz.9.3482" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.258294][T22331] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3482'. [ 341.276156][T22331] bond3: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 341.533598][T22382] loop4: detected capacity change from 0 to 7 [ 341.533854][T22382] buffer_io_error: 23 callbacks suppressed [ 341.533863][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.533882][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.533899][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.533915][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.533937][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.533958][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.533973][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.533981][T22382] ldm_validate_partition_table(): Disk read failed. [ 341.533995][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.534010][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.534024][T22382] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.534040][T22382] Dev loop4: unable to read RDB block 0 [ 341.534069][T22382] loop4: unable to read partition table [ 341.534156][T22382] loop4: partition table beyond EOD, truncated [ 341.534167][T22382] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 341.601812][T22388] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3487'. [ 341.724288][ T5933] Bluetooth: hci5: ISO packet for unknown connection handle 1039 [ 341.777306][T22398] mac80211_hwsim hwsim26 : renamed from wlan1 (while UP) [ 342.075382][T22411] netlink: 'syz.0.3493': attribute type 33 has an invalid length. [ 342.078321][T22411] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3493'. [ 342.094001][ T5991] hid-generic 0004:0006:0002.000E: item fetching failed at offset 1/2 [ 342.097023][ T5991] hid-generic 0004:0006:0002.000E: probe with driver hid-generic failed with error -22 [ 342.191063][T22418] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3494'. [ 342.607217][T22439] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 342.860027][T22451] overlayfs: conflicting lowerdir path [ 342.942045][T22458] program syz.0.3504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.948103][T22458] ata1.00: invalid command format 0 [ 343.270751][T22490] netlink: 'syz.8.3512': attribute type 4 has an invalid length. [ 343.394410][ T5925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.412461][ T5925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.415743][ T5925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.419575][ T5925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.422913][ T5925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.519937][T22494] vxcan1 speed is unknown, defaulting to 1000 [ 343.600578][T22511] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 343.663471][T22507] vxcan1 speed is unknown, defaulting to 1000 [ 343.663537][T22494] lo speed is unknown, defaulting to 1000 [ 343.871817][T22516] netlink: 'syz.9.3516': attribute type 10 has an invalid length. [ 343.879854][T22516] team0: Failed to send options change via netlink (err -105) [ 343.882307][T22516] team0: Port device dummy0 added [ 343.887884][T22494] xfrm0 speed is unknown, defaulting to 1000 [ 343.893339][T22516] netlink: 'syz.9.3516': attribute type 10 has an invalid length. [ 343.915685][T22525] __nla_validate_parse: 4 callbacks suppressed [ 343.915702][T22525] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3519'. [ 343.942996][T22507] lo speed is unknown, defaulting to 1000 [ 343.946667][T22516] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 343.977201][T22516] team0: Failed to send options change via netlink (err -105) [ 343.980122][T22516] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 343.983206][T22516] team0: Port device dummy0 removed [ 344.084958][ T7813] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.089566][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3521'. [ 344.123400][T22507] xfrm0 speed is unknown, defaulting to 1000 [ 344.204275][ T7813] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.308335][ T7813] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.370512][T22591] bridge2: entered promiscuous mode [ 344.418506][ T7813] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.633457][ T7813] bridge_slave_1: left allmulticast mode [ 344.635306][ T7813] bridge_slave_1: left promiscuous mode [ 344.638620][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.654165][ T7813] bridge_slave_0: left allmulticast mode [ 344.656124][ T7813] bridge_slave_0: left promiscuous mode [ 344.662137][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.761557][T22631] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3525'. [ 344.783474][T22631] openvswitch: netlink: Flow key attr not present in new flow. [ 344.818363][ T7813] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 344.857906][ T7813] bond0 (unregistering): (slave xfrm1): Releasing backup interface [ 344.915645][ T7813] dvmrp0 (unregistering): left allmulticast mode [ 345.186294][ T7813] bond1 (unregistering): Released all slaves [ 345.197908][ T7813] smc: removing net device bond0 with user defined pnetid SYZ2 [ 345.201419][ T7813] bond0 (unregistering): Released all slaves [ 345.212294][ T7813] bond2 (unregistering): Released all slaves [ 345.220804][ T7813] bond3 (unregistering): Released all slaves [ 345.231595][ T7813] bond4 (unregistering): Released all slaves [ 345.240882][T22563] bpq0: entered promiscuous mode [ 345.242490][T22563] bpq0: entered allmulticast mode [ 345.263860][T22494] chnl_net:caif_netlink_parms(): no params data found [ 345.395295][ T7813] : left promiscuous mode [ 345.521958][T22494] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.525283][T22494] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.529048][T22494] bridge_slave_0: entered allmulticast mode [ 345.532178][T22494] bridge_slave_0: entered promiscuous mode [ 345.548273][ T7813] tipc: Left network mode [ 345.548710][T22494] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.552700][T22494] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.555531][T22494] bridge_slave_1: entered allmulticast mode [ 345.569777][T22494] bridge_slave_1: entered promiscuous mode [ 345.602937][T22494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.612409][T22494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.644588][T22494] team0: Port device team_slave_0 added [ 345.651206][T22494] team0: Port device team_slave_1 added [ 345.674422][ T5933] Bluetooth: hci2: command tx timeout [ 345.742228][T22494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.745046][T22494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.765122][T22494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.806937][T22494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.809770][T22494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.838364][T22494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.931842][T22494] hsr_slave_0: entered promiscuous mode [ 345.934276][T22494] hsr_slave_1: entered promiscuous mode [ 345.936442][T22494] debugfs: 'hsr0' already exists in 'hsr' [ 345.938285][T22494] Cannot create hsr debugfs directory [ 346.209277][T22875] netlink: 'syz.0.3532': attribute type 28 has an invalid length. [ 346.212497][T22875] netlink: 'syz.0.3532': attribute type 28 has an invalid length. [ 346.215375][T22875] netlink: 'syz.0.3532': attribute type 28 has an invalid length. [ 346.218315][T22875] netlink: 'syz.0.3532': attribute type 28 has an invalid length. [ 346.225902][T22875] netlink: 'syz.0.3532': attribute type 28 has an invalid length. [ 346.232572][T22875] netlink: 'syz.0.3532': attribute type 28 has an invalid length. [ 346.499000][ T40] kauditd_printk_skb: 2109 callbacks suppressed [ 346.499018][ T40] audit: type=1400 audit(2000000300.631:47205): avc: denied { ioctl } for pid=11890 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.550807][ T40] audit: type=1400 audit(2000000300.631:47206): avc: denied { write } for pid=22774 comm="syz.9.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 346.564348][ T40] audit: type=1400 audit(2000000300.631:47207): avc: denied { write } for pid=22774 comm="syz.9.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 346.569655][T22783] audit: audit_backlog=65 > audit_backlog_limit=64 [ 346.571731][ T40] audit: type=1400 audit(2000000300.631:47208): avc: denied { write } for pid=22774 comm="syz.9.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 346.574376][T22783] audit: audit_lost=194 audit_rate_limit=0 audit_backlog_limit=64 [ 346.584521][ T5636] audit: audit_backlog=65 > audit_backlog_limit=64 [ 346.586751][ T5636] audit: audit_lost=195 audit_rate_limit=0 audit_backlog_limit=64 [ 346.588467][T22783] audit: backlog limit exceeded [ 346.588944][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 346.608298][ T7813] hsr_slave_0: left promiscuous mode [ 346.610913][ T7813] hsr_slave_1: left promiscuous mode [ 346.613051][ T7813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.616506][ T7813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.029426][T22920] autofs4:pid:22920:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 347.054996][T22920] autofs4:pid:22920:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 347.061487][T22494] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 347.071298][T22494] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 347.085058][T22494] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 347.094010][T22494] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 347.250968][ T7813] IPVS: stop unused estimator thread 0... [ 347.348435][T22494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.509842][T22948] kAFS: unable to lookup cell '/,cL' [ 347.529496][T22948] validate_nla: 42 callbacks suppressed [ 347.529508][T22948] netlink: 'syz.8.3540': attribute type 61 has an invalid length. [ 347.726774][T22494] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.755742][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.758105][ T7812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.776730][ T7814] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.779058][ T7814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.878038][ T5933] Bluetooth: hci2: command tx timeout [ 347.925271][T22972] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 348.093096][ T1163] usb 13-1: new full-speed USB device number 31 using dummy_hcd [ 348.276844][T22494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.456014][ T1163] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 348.458442][ T1163] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 348.461889][ T1163] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.465610][ T1163] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 348.469400][ T1163] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 348.479502][ T1163] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 348.482114][ T1163] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 348.485544][ T1163] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.490303][ T1163] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 348.494965][ T1163] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 348.506149][ T1163] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 348.518987][ T1163] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 348.522599][ T1163] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.526292][ T1163] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 348.529845][ T1163] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 348.547343][ T1163] usb 13-1: string descriptor 0 read error: -22 [ 348.549457][ T1163] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 348.553612][ T1163] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.569558][ T1163] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 348.807039][T22963] geneve3: entered promiscuous mode [ 348.819451][T22963] geneve3: entered allmulticast mode [ 348.950163][T22494] veth0_vlan: entered promiscuous mode [ 348.975035][T22494] veth1_vlan: entered promiscuous mode [ 349.041592][T22494] veth0_macvtap: entered promiscuous mode [ 349.053615][T22494] veth1_macvtap: entered promiscuous mode [ 349.077677][T22494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.091849][T22494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.114690][T23042] netlink: 4764 bytes leftover after parsing attributes in process `syz.9.3555'. [ 349.117537][ T7814] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.125187][ T7814] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.128322][T23043] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 349.129513][ T7814] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.135096][ T7814] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.207511][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3556'. [ 349.209998][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'. [ 349.231131][ T7813] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.233285][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3556'. [ 349.234136][ T7813] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.237634][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'. [ 349.258220][ T7813] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.261908][ T7813] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.395519][ T7814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.398424][ T7814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.466098][ T7814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.468667][ T7814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.524400][T23074] befs: (nbd9): unable to read superblock [ 349.615740][T23081] tmpfs: Bad value for 'mpol' [ 349.814962][T23094] syzkaller0: entered promiscuous mode [ 349.817002][T23094] syzkaller0: entered allmulticast mode [ 350.063834][T23110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.066252][T23110] IPv6: NLM_F_CREATE should be set when creating new route [ 350.103156][ T5933] Bluetooth: hci2: command tx timeout [ 350.133787][T23113] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 350.572991][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3571'. [ 350.758631][T23147] No control pipe specified [ 350.888420][T23151] ipvlan1: entered allmulticast mode [ 350.890564][T23151] veth0_vlan: entered allmulticast mode [ 351.003165][T23156] vxcan1 speed is unknown, defaulting to 1000 [ 351.098292][T23156] lo speed is unknown, defaulting to 1000 [ 351.150307][ T5997] usb 13-1: USB disconnect, device number 31 [ 351.547971][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.551148][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.556464][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.561743][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.565399][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.570431][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.573830][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.577167][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.581920][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.585903][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.591827][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.596541][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.601533][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.605398][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.608900][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.612857][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.617468][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.620964][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.625125][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.628446][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.631945][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.637535][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.640883][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.648516][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.651823][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.657150][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.665619][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.670340][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.674866][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.678590][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.681918][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.686170][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.689794][T23197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.819641][T23205] sp0: Synchronizing with TNC [ 351.864745][ T40] kauditd_printk_skb: 2669 callbacks suppressed [ 351.864762][ T40] audit: type=1400 audit(2000000305.641:49716): avc: denied { read } for pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 351.892062][ T40] audit: type=1400 audit(2000000305.669:49717): avc: denied { write } for pid=23100 comm="syz.7.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.963391][ T40] audit: type=1400 audit(2000000305.735:49718): avc: denied { read } for pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 351.982713][ T40] audit: type=1400 audit(2000000305.744:49719): avc: denied { read } for pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 352.027495][ T40] audit: type=1400 audit(2000000305.744:49720): avc: denied { read } for pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 352.071693][ T40] audit: type=1400 audit(2000000305.753:49721): avc: denied { recv } for pid=5846 comm="syz-executor" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 352.079955][ T40] audit: type=1400 audit(2000000305.753:49722): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 352.107558][ T40] audit: type=1400 audit(2000000305.763:49723): avc: denied { read write } for pid=12908 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.115784][ T40] audit: type=1400 audit(2000000305.763:49724): avc: denied { read write open } for pid=12908 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.123962][ T40] audit: type=1400 audit(2000000305.763:49725): avc: denied { ioctl } for pid=12908 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.339050][ T5933] Bluetooth: hci2: command tx timeout [ 352.343480][T23231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3584'. [ 352.346300][T23231] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3584'. [ 352.362184][T23231] syzkaller1: entered promiscuous mode [ 352.365558][T23231] syzkaller1: entered allmulticast mode [ 352.687858][T23260] netlink: 'syz.9.3589': attribute type 10 has an invalid length. [ 352.690424][T23260] netlink: 228 bytes leftover after parsing attributes in process `syz.9.3589'. [ 352.995608][T23272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.208935][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3599'. [ 353.212826][T23298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3599'. [ 353.222651][T23297] binder: binder_mmap: 23295 200000ffe000-200001000000 bad vm_flags failed -1 [ 353.293175][T23303] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 353.303832][T23303] input: syz1 as /devices/virtual/input/input39 [ 353.328411][T23303] netlink: 'syz.0.3600': attribute type 1 has an invalid length. [ 353.870469][T23335] Bluetooth: MGMT ver 1.23 [ 353.875529][T23335] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3607'. [ 354.056762][T23347] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 354.273703][T23356] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 354.544668][T23366] cgroup: none used incorrectly [ 354.581432][T23366] netlink: 'syz.7.3613': attribute type 58 has an invalid length. [ 354.599226][T23370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 354.618685][T23373] autofs: Unknown parameter '00000000000000000000' [ 354.775008][T23385] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 354.797663][T23385] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 354.835808][T23395] ipvlan1: left allmulticast mode [ 354.838034][T23395] veth0_vlan: left allmulticast mode [ 354.895561][T23401] xt_socket: unknown flags 0x20 [ 354.928830][T23406] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3622'. [ 354.931840][T23406] netlink: 'syz.9.3622': attribute type 20 has an invalid length. [ 354.936565][T23406] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3622'. [ 354.944419][T23406] netlink: 'syz.9.3622': attribute type 20 has an invalid length. [ 355.019115][T23413] netlink: 'syz.9.3626': attribute type 1 has an invalid length. [ 355.046770][T23413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.115025][T23413] bond4: (slave veth7): Enslaving as an active interface with a down link [ 355.133069][T23413] mac80211_hwsim hwsim27 wlan0: left promiscuous mode [ 355.135247][T23413] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 355.141088][T23413] bond4: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 355.445668][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3634'. [ 355.467169][T23535] overlayfs: overlapping lowerdir path [ 355.584286][T23553] nbd: must specify at least one socket [ 355.756135][T23571] netlink: 'syz.8.3640': attribute type 10 has an invalid length. [ 355.766026][T23571] mac80211_hwsim hwsim26 : entered promiscuous mode [ 356.059076][T23598] syz.0.3647: attempt to access beyond end of device [ 356.059076][T23598] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 356.064049][T23598] gfs2: error -5 reading superblock [ 356.113306][T23603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.127386][T23598] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 356.256667][T23616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3653'. [ 356.307988][T23621] kvm: user requested TSC rate below hardware speed [ 356.311936][T23621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 356.547532][T23649] libceph: resolve '4' (ret=-3): failed [ 356.636469][T23655] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3661'. [ 356.646667][T23651] tipc: Started in network mode [ 356.648913][T23651] tipc: Node identity 4, cluster identity 4711 [ 356.651572][T23651] tipc: Node number set to 4 [ 356.689639][T23658] hpfs: Bad magic ... probably not HPFS [ 356.696330][T23658] hpfs: Bad magic ... probably not HPFS [ 356.749166][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3660'. [ 356.988052][T23683] autofs: Unknown parameter 'fd00000000000000000000' [ 357.079946][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3668'. [ 357.217157][ T40] kauditd_printk_skb: 1549 callbacks suppressed [ 357.217170][ T40] audit: type=1400 audit(2000000310.652:51275): avc: denied { ioctl } for pid=15797 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3224 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.230467][ T40] audit: type=1400 audit(2000000310.661:51276): avc: denied { recv } for pid=5635 comm="dhcpcd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.241748][ T40] audit: type=1400 audit(2000000310.661:51277): avc: denied { recv } for pid=5635 comm="dhcpcd" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.254587][ T40] audit: type=1400 audit(2000000310.661:51278): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.264811][ T40] audit: type=1400 audit(2000000310.670:51279): avc: denied { recv } for pid=11890 comm="syz-executor" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.275773][ T40] audit: type=1400 audit(2000000310.670:51280): avc: denied { recv } for pid=11890 comm="syz-executor" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.288097][ T40] audit: type=1400 audit(2000000310.670:51281): avc: denied { recv } for pid=11890 comm="syz-executor" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.312903][ T40] audit: type=1400 audit(2000000310.670:51282): avc: denied { recv } for pid=11890 comm="syz-executor" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.327006][ T40] audit: type=1400 audit(2000000310.670:51283): avc: denied { recv } for pid=11890 comm="syz-executor" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.338108][ T40] audit: type=1400 audit(2000000310.670:51284): avc: denied { recv } for pid=11890 comm="syz-executor" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.387470][T23705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3674'. [ 357.391946][T23703] VFS: Mount too revealing [ 357.421550][T23705] pim6reg99999999: entered allmulticast mode [ 357.570776][T23718] 8021q: VLANs not supported on sit0 [ 357.595945][T23718] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3676'. [ 357.599556][T23718] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 357.730427][ T5978] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 357.768702][T23726] kvm: user requested TSC rate below hardware speed [ 357.902820][ T5978] usb 14-1: Using ep0 maxpacket: 8 [ 357.921658][ T5978] usb 14-1: config 2 has an invalid interface number: 202 but max is 3 [ 357.926902][ T5978] usb 14-1: config 2 has an invalid interface number: 184 but max is 3 [ 357.929971][ T5978] usb 14-1: config 2 has an invalid interface number: 187 but max is 3 [ 357.932730][ T5978] usb 14-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 357.938510][ T5978] usb 14-1: config 2 has an invalid interface number: 185 but max is 3 [ 357.941642][ T5978] usb 14-1: config 2 has no interface number 0 [ 357.943576][ T5978] usb 14-1: config 2 has no interface number 1 [ 357.953224][ T5978] usb 14-1: config 2 has no interface number 2 [ 357.957035][ T5978] usb 14-1: config 2 has no interface number 3 [ 357.959107][ T5978] usb 14-1: config 2 interface 202 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 357.966077][ T5978] usb 14-1: config 2 interface 202 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 357.969577][ T5978] usb 14-1: config 2 interface 202 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 357.973286][ T5978] usb 14-1: config 2 interface 202 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 357.979982][ T5978] usb 14-1: config 2 interface 202 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 64 [ 357.983235][ T5978] usb 14-1: config 2 interface 202 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 357.986716][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 357.991774][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 357.996492][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 358.008118][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has an endpoint descriptor with address 0x18, changing to 0x8 [ 358.015085][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 358.023207][ T5978] usb 14-1: config 2 interface 184 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 358.028181][ T5978] usb 14-1: config 2 interface 184 altsetting 9 endpoint 0x7 has invalid maxpacket 1943, setting to 1024 [ 358.035650][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 358.039900][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 358.047448][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has a duplicate endpoint with address 0x81, skipping [ 358.051185][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 358.059443][ T5978] usb 14-1: config 2 interface 184 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 358.065982][ T5978] usb 14-1: config 2 interface 184 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 358.070640][ T5978] usb 14-1: config 2 interface 187 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 358.079129][ T5978] usb 14-1: config 2 interface 187 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 358.085373][ T5978] usb 14-1: config 2 interface 187 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 358.088715][ T5978] usb 14-1: config 2 interface 187 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 358.092147][ T5978] usb 14-1: config 2 interface 185 altsetting 12 has a duplicate endpoint with address 0xF, skipping [ 358.097379][ T5978] usb 14-1: config 2 interface 185 altsetting 12 has a duplicate endpoint with address 0x6, skipping [ 358.100827][ T5978] usb 14-1: config 2 interface 185 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 358.104401][ T5978] usb 14-1: config 2 interface 185 altsetting 12 has a duplicate endpoint with address 0xE, skipping [ 358.111973][ T5978] usb 14-1: config 2 interface 185 altsetting 12 has a duplicate endpoint with address 0xF, skipping [ 358.115268][ T5978] usb 14-1: config 2 interface 185 altsetting 12 has a duplicate endpoint with address 0xD, skipping [ 358.121406][ T5978] usb 14-1: config 2 interface 185 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 358.124729][ T5978] usb 14-1: config 2 interface 202 has no altsetting 0 [ 358.128540][ T5978] usb 14-1: config 2 interface 184 has no altsetting 0 [ 358.130704][ T5978] usb 14-1: config 2 interface 187 has no altsetting 0 [ 358.132813][ T5978] usb 14-1: config 2 interface 185 has no altsetting 0 [ 358.147346][ T5978] usb 14-1: Dual-Role OTG device on HNP port [ 358.154022][ T5978] usb 14-1: New USB device found, idVendor=154b, idProduct=f00d, bcdDevice=59.93 [ 358.156938][ T5978] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.171596][ T5978] usb 14-1: Product: ᰊ [ 358.173006][ T5978] usb 14-1: Manufacturer: Ѝ [ 358.174471][ T5978] usb 14-1: SerialNumber: syz [ 358.212267][T23711] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 358.458022][ T5978] usb-storage 14-1:2.202: USB Mass Storage device detected [ 358.474610][ T5978] usb-storage 14-1:2.202: Quirks match for vid 154b pid f00d: 2000000 [ 358.543551][ T5978] usb-storage 14-1:2.184: USB Mass Storage device detected [ 358.552006][ T5978] usb-storage 14-1:2.184: Quirks match for vid 154b pid f00d: 2000000 [ 358.621662][ T5978] usb-storage 14-1:2.187: USB Mass Storage device detected [ 358.640292][ T5978] usb-storage 14-1:2.187: Quirks match for vid 154b pid f00d: 2000000 [ 358.689555][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 358.691810][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 358.707745][ T5978] usb-storage 14-1:2.185: USB Mass Storage device detected [ 358.718893][ T5978] usb-storage 14-1:2.185: Quirks match for vid 154b pid f00d: 2000000 [ 358.731999][T23799] netlink: 'syz.0.3690': attribute type 10 has an invalid length. [ 358.747858][T23799] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 358.765061][T23799] bond0: (slave bond_slave_0): Releasing backup interface [ 358.771295][T23799] bond0: (slave bond_slave_1): Releasing backup interface [ 358.781193][T23799] team0: Port device team_slave_0 removed [ 358.794920][T23799] team0: Port device team_slave_1 removed [ 358.797416][T23799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.797650][ T5978] usb 14-1: USB disconnect, device number 8 [ 358.799842][T23799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.816282][T23789] ceph: No mds server is up or the cluster is laggy [ 358.817952][T23799] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.828273][T23807] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3690'. [ 358.916110][T23799] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3690'. [ 358.954401][T23799] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 358.961918][T23799] bond0 (unregistering): Released all slaves [ 359.772984][T23868] tipc: Started in network mode [ 359.776194][T23868] tipc: Node identity 84e, cluster identity 4711 [ 359.779003][T23868] tipc: Node number set to 2126 [ 360.611770][T23890] syzkaller1: entered promiscuous mode [ 360.613524][T23890] syzkaller1: entered allmulticast mode [ 361.231150][T23913] No control pipe specified [ 361.651297][T23931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23931 comm=syz.8.3721 [ 361.734348][T23937] netlink: 'syz.8.3725': attribute type 16 has an invalid length. [ 361.737669][T23937] netlink: 'syz.8.3725': attribute type 2 has an invalid length. [ 361.740637][T23937] netlink: 64102 bytes leftover after parsing attributes in process `syz.8.3725'. [ 361.780496][T23942] No control pipe specified [ 361.852763][ T5933] Bluetooth: hci2: connection err: -111 [ 362.016659][T23961] netlink: 212144 bytes leftover after parsing attributes in process `syz.7.3730'. [ 362.022776][T23965] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3731'. [ 362.022928][T23961] netlink: 'syz.7.3730': attribute type 21 has an invalid length. [ 362.105078][T23965] bond0: entered allmulticast mode [ 362.116681][ T24] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 362.146569][T24008] netlink: 'syz.7.3733': attribute type 2 has an invalid length. [ 362.287508][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 362.290913][ T24] usb 13-1: too many configurations: 246, using maximum allowed: 8 [ 362.302185][ T24] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 362.305505][ T24] usb 13-1: can't read configurations, error -61 [ 362.437349][ T24] usb 13-1: new high-speed USB device number 33 using dummy_hcd [ 362.597922][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 362.600802][ T40] kauditd_printk_skb: 1433 callbacks suppressed [ 362.600814][ T40] audit: type=1400 audit(2000000315.681:52718): avc: denied { ioctl } for pid=23945 comm="syz.8.3727" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.600962][ T24] usb 13-1: too many configurations: 246, using maximum allowed: 8 [ 362.614888][ T40] audit: type=1400 audit(2000000315.700:52719): avc: denied { ioctl } for pid=23945 comm="syz.8.3727" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.623038][ T40] audit: type=1400 audit(2000000315.700:52720): avc: denied { ioctl } for pid=23945 comm="syz.8.3727" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.626893][ T24] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 362.631025][ T40] audit: type=1400 audit(2000000315.700:52721): avc: denied { ioctl } for pid=23945 comm="syz.8.3727" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.633900][ T24] usb 13-1: can't read configurations, error -61 [ 362.641438][ T40] audit: type=1400 audit(2000000315.700:52722): avc: denied { ioctl } for pid=23945 comm="syz.8.3727" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.641473][ T40] audit: type=1400 audit(2000000315.700:52723): avc: denied { ioctl } for pid=23945 comm="syz.8.3727" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.646110][ T24] usb usb13-port1: attempt power cycle [ 362.651031][ T40] audit: type=1400 audit(2000000315.700:52724): avc: denied { ioctl } for pid=23945 comm="syz.8.3727" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.668561][ T40] audit: type=1400 audit(2000000315.700:52725): avc: denied { ioctl } for pid=23945 comm="syz.8.3727" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.676606][ T40] audit: type=1400 audit(2000000315.718:52726): avc: denied { read write } for pid=12908 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.684245][ T40] audit: type=1400 audit(2000000315.718:52727): avc: denied { read write open } for pid=12908 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.941897][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.028074][ T24] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 363.061230][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 363.067417][ T24] usb 13-1: too many configurations: 246, using maximum allowed: 8 [ 363.087053][ T24] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 363.091757][ T24] usb 13-1: can't read configurations, error -61 [ 363.248072][ T24] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 363.274238][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 363.277758][ T24] usb 13-1: too many configurations: 246, using maximum allowed: 8 [ 363.289450][ T24] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 363.293149][ T24] usb 13-1: can't read configurations, error -61 [ 363.296347][ T24] usb usb13-port1: unable to enumerate USB device [ 363.354202][T24051] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 363.356776][T24051] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 363.485095][ T5978] IPVS: starting estimator thread 0... [ 363.581934][T24059] IPVS: using max 46 ests per chain, 110400 per kthread [ 363.604436][T24062] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3747'. [ 364.534564][T24080] syzkaller0: entered promiscuous mode [ 364.536378][T24080] syzkaller0: entered allmulticast mode [ 364.819614][ T7813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.257869][T24107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.271268][T24108] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 365.836266][T24157] syzkaller0: entered promiscuous mode [ 365.838119][T24157] syzkaller0: entered allmulticast mode [ 366.065459][T24167] ufs: You didn't specify the type of your ufs filesystem [ 366.065459][T24167] [ 366.065459][T24167] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 366.065459][T24167] [ 366.065459][T24167] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 366.094725][T24168] ip6erspan0: entered promiscuous mode [ 366.219151][T24174] vxcan1 speed is unknown, defaulting to 1000 [ 366.332539][T24174] lo speed is unknown, defaulting to 1000 [ 366.595672][T24204] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3767'. [ 366.599141][T24204] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3767'. [ 366.720089][T24207] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 367.372377][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3773'. [ 367.376292][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3773'. [ 367.637521][T24241] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 367.666475][T24245] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 367.717270][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3777'. [ 367.823184][T24258] ptrace attach of "/syz-executor exec"[15797] was attempted by "/syz-executor exec"[24258] [ 367.897803][T24265] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.3781'. [ 367.963459][ T40] kauditd_printk_skb: 2333 callbacks suppressed [ 367.963475][ T40] audit: type=1400 audit(2000000320.691:55061): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 368.021947][ T40] audit: type=1400 audit(2000000320.691:55062): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 368.049947][ T40] audit: type=1400 audit(2000000320.710:55063): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 368.059530][ T40] audit: type=1400 audit(2000000320.710:55064): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 368.068033][ T40] audit: type=1400 audit(2000000320.710:55065): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 368.076411][ T40] audit: type=1400 audit(2000000320.720:55066): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 368.084797][ T40] audit: type=1400 audit(2000000320.720:55067): avc: denied { recv } for pid=5846 comm="syz-executor" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 368.094695][ T40] audit: type=1400 audit(2000000320.720:55068): avc: denied { read write } for pid=12908 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.118399][ T40] audit: type=1400 audit(2000000320.720:55069): avc: denied { read write open } for pid=12908 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.138437][ T40] audit: type=1400 audit(2000000320.720:55070): avc: denied { ioctl } for pid=12908 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.350823][T24291] program syz.9.3784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.173466][T24299] Failed to get privilege flags for destination (handle=0x2:0x0) [ 369.325474][T24308] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3792'. [ 369.391821][T24311] sp0: Synchronizing with TNC [ 369.402009][T24311] sp0: Found TNC [ 369.407792][T24311] netlink: 124 bytes leftover after parsing attributes in process `syz.8.3793'. [ 369.410793][T24311] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3793'. [ 369.416398][T24311] hub 6-0:1.0: USB hub found [ 369.418626][T24311] hub 6-0:1.0: 1 port detected [ 369.428268][T24318] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3794'. [ 369.431725][T24310] [U] ` [ 369.478024][T24303] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 369.637236][T24337] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 369.662447][T24341] FAULT_INJECTION: forcing a failure. [ 369.662447][T24341] name failslab, interval 1, probability 0, space 0, times 0 [ 369.666550][T24341] CPU: 3 UID: 0 PID: 24341 Comm: syz.7.3798 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.666568][T24341] Tainted: [L]=SOFTLOCKUP [ 369.666573][T24341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.666579][T24341] Call Trace: [ 369.666584][T24341] [ 369.666589][T24341] dump_stack_lvl+0x100/0x190 [ 369.666621][T24341] should_fail_ex.cold+0x5/0xa [ 369.666636][T24341] should_failslab+0xc2/0x120 [ 369.666654][T24341] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 369.666669][T24341] ? sock_alloc_inode+0x25/0x1c0 [ 369.666693][T24341] ? __pfx_sock_alloc_inode+0x10/0x10 [ 369.666709][T24341] sock_alloc_inode+0x25/0x1c0 [ 369.666723][T24341] alloc_inode+0x68/0x250 [ 369.666738][T24341] sock_alloc+0x44/0x280 [ 369.666753][T24341] do_accept+0xf9/0x530 [ 369.666763][T24341] ? do_raw_spin_lock+0x128/0x260 [ 369.666776][T24341] ? __pfx_do_accept+0x10/0x10 [ 369.666795][T24341] __sys_accept4+0x108/0x200 [ 369.666810][T24341] ? __pfx___sys_accept4+0x10/0x10 [ 369.666826][T24341] ? __pfx_ksys_write+0x10/0x10 [ 369.666849][T24341] __x64_sys_accept4+0x96/0x100 [ 369.666864][T24341] ? lockdep_hardirqs_on+0x78/0x100 [ 369.666881][T24341] do_syscall_64+0x106/0xf80 [ 369.666895][T24341] ? clear_bhb_loop+0x40/0x90 [ 369.666909][T24341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.666921][T24341] RIP: 0033:0x7f6a7eb9bf79 [ 369.666932][T24341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.666943][T24341] RSP: 002b:00007f6a7fb1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 369.666954][T24341] RAX: ffffffffffffffda RBX: 00007f6a7ee16090 RCX: 00007f6a7eb9bf79 [ 369.666961][T24341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 369.666968][T24341] RBP: 00007f6a7fb1f090 R08: 0000000000000000 R09: 0000000000000000 [ 369.666974][T24341] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 369.666981][T24341] R13: 00007f6a7ee16128 R14: 00007f6a7ee16090 R15: 00007ffe99f00048 [ 369.666995][T24341] [ 369.901444][T24349] ptrace attach of "/syz-executor exec"[11890] was attempted by "/syz-executor exec"[24349] [ 370.528486][T24355] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 370.619591][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 370.622489][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 370.700475][T24397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3807'. [ 370.946698][T24416] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 370.954063][T24416] VFS: Can't find a romfs filesystem on dev nullb0. [ 370.954063][T24416] [ 371.074679][T24419] FAULT_INJECTION: forcing a failure. [ 371.074679][T24419] name failslab, interval 1, probability 0, space 0, times 0 [ 371.078781][T24419] CPU: 0 UID: 0 PID: 24419 Comm: syz.7.3813 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.078801][T24419] Tainted: [L]=SOFTLOCKUP [ 371.078805][T24419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 371.078812][T24419] Call Trace: [ 371.078817][T24419] [ 371.078823][T24419] dump_stack_lvl+0x100/0x190 [ 371.078845][T24419] should_fail_ex.cold+0x5/0xa [ 371.078860][T24419] should_failslab+0xc2/0x120 [ 371.078877][T24419] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 371.078891][T24419] ? security_inode_alloc+0x3b/0x2c0 [ 371.078940][T24419] ? lockdep_init_map_type+0x5c/0x250 [ 371.078961][T24419] security_inode_alloc+0x3b/0x2c0 [ 371.078977][T24419] inode_init_always_gfp+0xced/0x1040 [ 371.078998][T24419] alloc_inode+0x8e/0x250 [ 371.079012][T24419] sock_alloc+0x44/0x280 [ 371.079028][T24419] do_accept+0xf9/0x530 [ 371.079038][T24419] ? do_raw_spin_lock+0x128/0x260 [ 371.079051][T24419] ? __pfx_do_accept+0x10/0x10 [ 371.079070][T24419] __sys_accept4+0x108/0x200 [ 371.079081][T24419] ? __pfx___sys_accept4+0x10/0x10 [ 371.079092][T24419] ? __pfx_ksys_write+0x10/0x10 [ 371.079110][T24419] __x64_sys_accept4+0x96/0x100 [ 371.079120][T24419] ? lockdep_hardirqs_on+0x78/0x100 [ 371.079135][T24419] do_syscall_64+0x106/0xf80 [ 371.079148][T24419] ? clear_bhb_loop+0x40/0x90 [ 371.079161][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.079174][T24419] RIP: 0033:0x7f6a7eb9bf79 [ 371.079184][T24419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.079195][T24419] RSP: 002b:00007f6a7fb1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 371.079206][T24419] RAX: ffffffffffffffda RBX: 00007f6a7ee16090 RCX: 00007f6a7eb9bf79 [ 371.079213][T24419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 371.079220][T24419] RBP: 00007f6a7fb1f090 R08: 0000000000000000 R09: 0000000000000000 [ 371.079226][T24419] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 371.079233][T24419] R13: 00007f6a7ee16128 R14: 00007f6a7ee16090 R15: 00007ffe99f00048 [ 371.079247][T24419] [ 371.134646][ T9397] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 371.326157][ T9397] usb 14-1: unable to get BOS descriptor or descriptor too short [ 371.340119][ T9397] usb 14-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 371.344946][ T9397] usb 14-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024 [ 371.351162][ T9397] usb 14-1: config 1 interface 0 has no altsetting 0 [ 371.361853][ T9397] usb 14-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 371.368433][ T9397] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.373629][ T9397] usb 14-1: Product: syz [ 371.376044][ T9397] usb 14-1: Manufacturer: syz [ 371.378083][ T9397] usb 14-1: SerialNumber: syz [ 371.390324][T24407] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 371.988678][ T9397] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/input/input40 [ 371.990933][T24445] vivid-004: disconnect [ 372.010493][T24445] tmpfs: Bad value for 'mpol' [ 372.015143][T24444] vivid-004: reconnect [ 372.026207][ T9397] usb 14-1: USB disconnect, device number 9 [ 372.026509][ T5319] pxrc 14-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 372.102027][T24461] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3818'. [ 372.136970][T24460] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 372.468525][T24483] overlayfs: failed to resolve './file0/file1': -2 [ 372.559909][T24489] FAULT_INJECTION: forcing a failure. [ 372.559909][T24489] name failslab, interval 1, probability 0, space 0, times 0 [ 372.565629][T24489] CPU: 0 UID: 0 PID: 24489 Comm: syz.0.3824 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.565657][T24489] Tainted: [L]=SOFTLOCKUP [ 372.565662][T24489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 372.565673][T24489] Call Trace: [ 372.565680][T24489] [ 372.565687][T24489] dump_stack_lvl+0x100/0x190 [ 372.565724][T24489] should_fail_ex.cold+0x5/0xa [ 372.565749][T24489] should_failslab+0xc2/0x120 [ 372.565775][T24489] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 372.565798][T24489] ? __d_alloc+0x34/0xa80 [ 372.565823][T24489] __d_alloc+0x34/0xa80 [ 372.565844][T24489] d_alloc_pseudo+0x1c/0xc0 [ 372.565868][T24489] alloc_file_pseudo+0xcf/0x230 [ 372.565889][T24489] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 372.565907][T24489] ? inode_init_always_gfp+0xd0e/0x1040 [ 372.565939][T24489] sock_alloc_file+0x50/0x210 [ 372.565962][T24489] do_accept+0x242/0x530 [ 372.565980][T24489] ? do_raw_spin_lock+0x128/0x260 [ 372.566000][T24489] ? __pfx_do_accept+0x10/0x10 [ 372.566032][T24489] __sys_accept4+0x108/0x200 [ 372.566052][T24489] ? __pfx___sys_accept4+0x10/0x10 [ 372.566070][T24489] ? __pfx_ksys_write+0x10/0x10 [ 372.566097][T24489] __x64_sys_accept4+0x96/0x100 [ 372.566115][T24489] ? lockdep_hardirqs_on+0x78/0x100 [ 372.566137][T24489] do_syscall_64+0x106/0xf80 [ 372.566158][T24489] ? clear_bhb_loop+0x40/0x90 [ 372.566181][T24489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.566200][T24489] RIP: 0033:0x7fa074f9bf79 [ 372.566216][T24489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.566232][T24489] RSP: 002b:00007fa075e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 372.566251][T24489] RAX: ffffffffffffffda RBX: 00007fa075216090 RCX: 00007fa074f9bf79 [ 372.566262][T24489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 372.566272][T24489] RBP: 00007fa075e56090 R08: 0000000000000000 R09: 0000000000000000 [ 372.566283][T24489] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 372.566293][T24489] R13: 00007fa075216128 R14: 00007fa075216090 R15: 00007ffcc8c00f08 [ 372.566317][T24489] [ 372.593963][T24491] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 372.727251][ T7959] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 372.889010][ T7959] usb 12-1: Using ep0 maxpacket: 16 [ 372.896282][ T7959] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 372.908019][ T7959] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 372.912501][ T7959] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.915346][ T7959] usb 12-1: Product: syz [ 372.918646][ T7959] usb 12-1: Manufacturer: syz [ 372.920205][ T7959] usb 12-1: SerialNumber: syz [ 372.924903][ T7959] usb 12-1: config 0 descriptor?? [ 372.935499][ T7959] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 372.938542][ T7959] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 373.020240][T24509] comedi comedi2: pcmmio: I/O port conflict (0xfffffffffffffffb,32) [ 373.097665][T24511] __nla_validate_parse: 4 callbacks suppressed [ 373.097683][T24511] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3828'. [ 373.333235][ T40] kauditd_printk_skb: 2200 callbacks suppressed [ 373.333247][ T40] audit: type=1400 audit(2000000325.711:57253): avc: denied { allowed } for pid=24521 comm="syz.9.3830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 373.343004][ T40] audit: type=1400 audit(2000000325.711:57254): avc: denied { create } for pid=24521 comm="syz.9.3830" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.352305][ T40] audit: type=1400 audit(2000000325.711:57255): avc: denied { map } for pid=24521 comm="syz.9.3830" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.364054][ T40] audit: type=1400 audit(2000000325.721:57256): avc: denied { read write } for pid=24521 comm="syz.9.3830" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.373867][ T40] audit: type=1400 audit(2000000325.721:57257): avc: denied { map } for pid=24521 comm="syz.9.3830" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.382821][ T40] audit: type=1400 audit(2000000325.721:57258): avc: denied { read write } for pid=24521 comm="syz.9.3830" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.402190][ T40] audit: type=1400 audit(2000000325.721:57259): avc: denied { recv } for pid=5846 comm="syz-executor" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 373.411261][ T40] audit: type=1400 audit(2000000325.721:57260): avc: denied { read write } for pid=11890 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 373.419451][ T40] audit: type=1400 audit(2000000325.721:57261): avc: denied { read write open } for pid=11890 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 373.427413][ T40] audit: type=1400 audit(2000000325.721:57262): avc: denied { ioctl } for pid=11890 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 373.557688][T24535] bond5: (slave bond_slave_1): Device is not bonding slave [ 373.560011][T24535] bond5: option active_slave: invalid value (bond_slave_1) [ 373.565578][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3834'. [ 373.568244][T24530] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3834'. [ 373.582127][T24535] bond5 (unregistering): Released all slaves [ 373.582774][ T7959] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 373.621860][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3834'. [ 373.626247][T24530] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3834'. [ 373.631477][T24528] rtc_cmos 00:05: Alarms can be up to one day in the future [ 373.728425][T24608] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.3836'. [ 373.731648][T24608] netlink: Unknown conntrack attr (type=2304, max=9) [ 373.905439][T24626] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3840'. [ 374.058020][ T7959] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 374.060973][ T7959] em28xx 12-1:0.0: board has no eeprom [ 374.450771][ T7959] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 374.453349][ T7959] em28xx 12-1:0.0: dvb set to bulk mode. [ 374.460230][ T7958] em28xx 12-1:0.0: Binding DVB extension [ 374.469177][ T9397] rtc_cmos 00:05: Alarms can be up to one day in the future [ 374.478075][ T9397] rtc_cmos 00:05: Alarms can be up to one day in the future [ 374.481330][ T9397] rtc_cmos 00:05: Alarms can be up to one day in the future [ 374.486473][T24673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24673 comm=syz.0.3850 [ 374.487422][ T9397] rtc_cmos 00:05: Alarms can be up to one day in the future [ 374.493134][ T9397] rtc rtc0: __rtc_set_alarm: err=-22 [ 374.500955][T24673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3850'. [ 374.893342][ T5925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.898706][ T5925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.903593][ T5925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.908055][ T5925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.912699][ T5925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.957055][T24703] vxcan1 speed is unknown, defaulting to 1000 [ 375.035617][T24703] lo speed is unknown, defaulting to 1000 [ 375.242511][T24703] chnl_net:caif_netlink_parms(): no params data found [ 375.305141][T24703] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.307732][T24703] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.310057][T24703] bridge_slave_0: entered allmulticast mode [ 375.312792][T24703] bridge_slave_0: entered promiscuous mode [ 375.317234][T24703] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.319443][T24703] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.321693][T24703] bridge_slave_1: entered allmulticast mode [ 375.324364][T24703] bridge_slave_1: entered promiscuous mode [ 375.345452][T24703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.353959][T24703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.372850][T24703] team0: Port device team_slave_0 added [ 375.377673][T24703] team0: Port device team_slave_1 added [ 375.397981][T24703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.400059][T24703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.408433][T24703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.414184][T24703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.416293][T24703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.425675][T24703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.473597][T24703] hsr_slave_0: entered promiscuous mode [ 375.476794][T24703] hsr_slave_1: entered promiscuous mode [ 375.480536][T24703] debugfs: 'hsr0' already exists in 'hsr' [ 375.482984][T24703] Cannot create hsr debugfs directory [ 375.692530][T24477] em28xx 12-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 375.703944][ T5997] usb 12-1: USB disconnect, device number 29 [ 375.706471][ T5997] em28xx 12-1:0.0: Disconnecting em28xx [ 375.804289][ T7958] em28xx 12-1:0.0: Registering input extension [ 375.812234][ T5997] em28xx 12-1:0.0: Closing input extension [ 375.846586][ T5997] em28xx 12-1:0.0: Freeing device [ 377.060969][ T5933] Bluetooth: hci4: command tx timeout [ 377.780225][T24685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.803273][T24703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.837446][T24703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.900788][T24703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.925200][T24703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.985125][T25044] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 377.989819][T25044] VFS: Can't find a romfs filesystem on dev nullb0. [ 377.989819][T25044] [ 378.118952][T25051] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 378.140187][T24703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.169884][T24703] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.181359][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.184488][ T7813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.213484][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.216600][ T7813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.408186][T25061] sock: sock_set_timeout: `syz.9.3861' (pid 25061) tries to set negative timeout [ 378.540783][T25070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3866'. [ 378.688158][ T40] kauditd_printk_skb: 3018 callbacks suppressed [ 378.688171][ T40] audit: type=1400 audit(2000000330.722:60281): avc: denied { search } for pid=25073 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.698349][ T40] audit: type=1400 audit(2000000330.722:60282): avc: denied { search } for pid=25073 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.705541][ T40] audit: type=1400 audit(2000000330.722:60283): avc: denied { search } for pid=25073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.713471][ T40] audit: type=1400 audit(2000000330.722:60284): avc: denied { read open } for pid=25073 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.716384][T25073] audit: audit_backlog=65 > audit_backlog_limit=64 [ 378.721758][ T40] audit: type=1400 audit(2000000330.722:60285): avc: denied { getattr } for pid=25073 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.721789][ T40] audit: type=1400 audit(2000000330.722:60286): avc: denied { search } for pid=25073 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.721812][ T40] audit: type=1400 audit(2000000330.722:60287): avc: denied { search } for pid=25073 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.724106][T25073] audit: audit_lost=256 audit_rate_limit=0 audit_backlog_limit=64 [ 378.740354][ T40] audit: type=1400 audit(2000000330.722:60288): avc: denied { search } for pid=25073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.814600][T24703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.876849][T24703] veth0_vlan: entered promiscuous mode [ 378.892531][T24703] veth1_vlan: entered promiscuous mode [ 378.934374][T24703] veth0_macvtap: entered promiscuous mode [ 378.942563][T24703] veth1_macvtap: entered promiscuous mode [ 378.970987][T24703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.982072][T24703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.993793][ T7813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.000792][ T7813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.005779][ T7813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.012985][ T7813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.043790][T25079] bridge0: entered promiscuous mode [ 379.046006][T25079] macvlan2: entered promiscuous mode [ 379.053329][T25080] macvlan3: entered promiscuous mode [ 379.165545][T19115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.170880][T19115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.236836][T25092] smc: net device bond0 applied user defined pnetid SYZ2 [ 379.243175][T19115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.246369][T19115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.287426][ T5933] Bluetooth: hci4: command tx timeout [ 379.504837][T25105] netlink: 'syz.7.3872': attribute type 8 has an invalid length. [ 379.507329][T25105] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 379.823148][T25120] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 379.827304][T25120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'. [ 379.962705][T25156] devpts: Bad value for 'max' [ 380.023453][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 380.028055][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 380.030553][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 380.032973][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 380.187189][T25171] sock: sock_set_timeout: `syz.3.3879' (pid 25171) tries to set negative timeout [ 380.543502][T25183] ./bus: Can't lookup blockdev [ 381.228102][T25226] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 381.232320][T25226] cramfs: wrong magic [ 381.241807][T25226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25226 comm=syz.0.3891 [ 381.433847][T25237] FAULT_INJECTION: forcing a failure. [ 381.433847][T25237] name failslab, interval 1, probability 0, space 0, times 0 [ 381.438001][T25237] CPU: 3 UID: 0 PID: 25237 Comm: syz.0.3893 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.438019][T25237] Tainted: [L]=SOFTLOCKUP [ 381.438024][T25237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.438030][T25237] Call Trace: [ 381.438035][T25237] [ 381.438040][T25237] dump_stack_lvl+0x100/0x190 [ 381.438062][T25237] should_fail_ex.cold+0x5/0xa [ 381.438077][T25237] should_failslab+0xc2/0x120 [ 381.438095][T25237] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 381.438110][T25237] ? __alloc_skb+0x140/0x710 [ 381.438125][T25237] __alloc_skb+0x140/0x710 [ 381.438136][T25237] ? __alloc_skb+0x5b7/0x710 [ 381.438147][T25237] ? __pfx___alloc_skb+0x10/0x10 [ 381.438158][T25237] ? rtnl_prop_list_size+0x144/0x2c0 [ 381.438172][T25237] ? if_nlmsg_size+0x4a4/0xb30 [ 381.438187][T25237] rtmsg_ifinfo_build_skb+0x81/0x260 [ 381.438205][T25237] rtmsg_ifinfo+0xa4/0x1b0 [ 381.438223][T25237] netif_state_change+0x17f/0x380 [ 381.438238][T25237] ? __pfx_netif_state_change+0x10/0x10 [ 381.438257][T25237] ? dev_change_xdp_fd+0x1b0/0x300 [ 381.438271][T25237] do_setlink.isra.0+0x34bd/0x3e50 [ 381.438289][T25237] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 381.438304][T25237] ? __lock_acquire+0x4a5/0x2630 [ 381.438322][T25237] ? __pfx_stack_trace_save+0x10/0x10 [ 381.438336][T25237] ? netlink_net_capable+0x145/0x1c0 [ 381.438355][T25237] ? lock_acquire+0x1cf/0x380 [ 381.438376][T25237] ? trace_contention_end+0x140/0x180 [ 381.438392][T25237] ? __mutex_lock+0x26a/0x1b90 [ 381.438408][T25237] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 381.438425][T25237] ? rtnl_newlink+0x8bb/0x2380 [ 381.438441][T25237] ? __pfx___mutex_lock+0x10/0x10 [ 381.438456][T25237] ? rcu_is_watching+0x12/0xc0 [ 381.438468][T25237] ? cap_capable+0x107/0x460 [ 381.438491][T25237] rtnl_newlink+0x1b79/0x2380 [ 381.438510][T25237] ? __pfx_rtnl_newlink+0x10/0x10 [ 381.438522][T25237] ? find_held_lock+0x2b/0x80 [ 381.438535][T25237] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 381.438547][T25237] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 381.438561][T25237] ? avc_has_perm_noaudit+0x145/0x3b0 [ 381.438577][T25237] ? __lock_acquire+0x4a5/0x2630 [ 381.438601][T25237] ? find_held_lock+0x2b/0x80 [ 381.438615][T25237] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 381.438628][T25237] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 381.438642][T25237] ? __pfx_rtnl_newlink+0x10/0x10 [ 381.438656][T25237] rtnetlink_rcv_msg+0x95e/0xe90 [ 381.438671][T25237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.438688][T25237] ? ref_tracker_free+0x37e/0x6c0 [ 381.438704][T25237] netlink_rcv_skb+0x159/0x420 [ 381.438719][T25237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.438734][T25237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.438754][T25237] ? netlink_deliver_tap+0x1ae/0xcc0 [ 381.438771][T25237] netlink_unicast+0x5aa/0x870 [ 381.438788][T25237] ? __pfx_netlink_unicast+0x10/0x10 [ 381.438809][T25237] netlink_sendmsg+0x8b0/0xda0 [ 381.438826][T25237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.438854][T25237] ? __might_fault+0x20/0x140 [ 381.438872][T25237] ____sys_sendmsg+0xa54/0xc30 [ 381.438891][T25237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.438914][T25237] ___sys_sendmsg+0x190/0x1e0 [ 381.438932][T25237] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.438968][T25237] __sys_sendmsg+0x170/0x220 [ 381.438981][T25237] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.439004][T25237] do_syscall_64+0x106/0xf80 [ 381.439017][T25237] ? clear_bhb_loop+0x40/0x90 [ 381.439031][T25237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.439043][T25237] RIP: 0033:0x7fa074f9bf79 [ 381.439053][T25237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.439065][T25237] RSP: 002b:00007fa075e77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.439075][T25237] RAX: ffffffffffffffda RBX: 00007fa075215fa0 RCX: 00007fa074f9bf79 [ 381.439082][T25237] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 381.439089][T25237] RBP: 00007fa075e77090 R08: 0000000000000000 R09: 0000000000000000 [ 381.439096][T25237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.439102][T25237] R13: 00007fa075216038 R14: 00007fa075215fa0 R15: 00007ffcc8c00f08 [ 381.439118][T25237] [ 381.581038][ T5933] Bluetooth: hci4: command tx timeout [ 381.628082][T25237] A link change request failed with some changes committed already. Interface bond7 may have been left with an inconsistent configuration, please check. [ 381.910079][T25256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=25256 comm=syz.9.3898 [ 381.917890][T25252] XFS (nbd3): SB validate failed with error -5. [ 381.919230][T25256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3898'. [ 381.922749][T25256] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3898'. [ 381.963157][T25263] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 382.277649][T25287] tipc: Can't bind to reserved service type 2 [ 382.572742][T25300] netlink: 'syz.3.3907': attribute type 29 has an invalid length. [ 382.576317][T25300] netlink: 'syz.3.3907': attribute type 29 has an invalid length. [ 382.582066][T25300] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3907'. [ 382.756473][T25310] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 383.352014][T25340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3917'. [ 383.361156][T25349] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 383.361156][T25349] The task syz.3.3919 (25349) triggered the difference, watch for misbehavior. [ 383.609796][T25359] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 383.659863][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 383.665414][ T5933] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 383.665441][ T5933] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 383.667998][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 383.673353][ T5933] Bluetooth: hci3: unexpected event for opcode 0x203b [ 383.675620][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 383.737474][ T5933] Bluetooth: hci4: command tx timeout [ 383.891162][T25370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 383.928579][ T7958] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 384.081716][ T40] kauditd_printk_skb: 4578 callbacks suppressed [ 384.081729][ T40] audit: type=1400 audit(2000000335.760:64515): avc: denied { recv } for pid=5997 comm="kworker/0:4" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 384.091800][ T7958] usb 5-1: device descriptor read/64, error -71 [ 384.099010][ T40] audit: type=1400 audit(2000000335.760:64516): avc: denied { recv } for pid=5997 comm="kworker/0:4" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 384.108763][ T40] audit: type=1400 audit(2000000335.760:64517): avc: denied { recv } for pid=5997 comm="kworker/0:4" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 384.117000][ T40] audit: type=1400 audit(2000000335.770:64518): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 384.126337][ T40] audit: type=1400 audit(2000000335.770:64519): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 384.135992][ T40] audit: type=1400 audit(2000000335.770:64520): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 384.145058][ T40] audit: type=1400 audit(2000000335.770:64521): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 384.153971][ T40] audit: type=1400 audit(2000000335.807:64522): avc: denied { search } for pid=25375 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.162253][ T40] audit: type=1400 audit(2000000335.807:64523): avc: denied { search } for pid=25375 comm="rm" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.173499][ T40] audit: type=1400 audit(2000000335.807:64524): avc: denied { search } for pid=25375 comm="rm" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.327494][T25383] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 384.345788][ T7958] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 384.485056][ T7958] usb 5-1: device descriptor read/64, error -71 [ 384.604312][ T7958] usb usb5-port1: attempt power cycle [ 384.752912][T25402] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 384.905358][T25409] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3928'. [ 384.918139][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3929'. [ 384.921824][T25410] netlink: 'syz.3.3929': attribute type 30 has an invalid length. [ 384.925469][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3929'. [ 384.966361][ T7958] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 385.000880][ T7958] usb 5-1: device descriptor read/8, error -71 [ 385.256595][ T7958] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 385.302852][ T7958] usb 5-1: device descriptor read/8, error -71 [ 385.379933][T25427] netlink: 'syz.9.3934': attribute type 4 has an invalid length. [ 385.388631][T25427] dlm: Unknown command passed to DLM device : 33 [ 385.388631][T25427] [ 385.427064][ T7958] usb usb5-port1: unable to enumerate USB device [ 385.576527][T25440] FAULT_INJECTION: forcing a failure. [ 385.576527][T25440] name failslab, interval 1, probability 0, space 0, times 0 [ 385.581463][T25440] CPU: 1 UID: 0 PID: 25440 Comm: syz.9.3936 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.581482][T25440] Tainted: [L]=SOFTLOCKUP [ 385.581487][T25440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.581493][T25440] Call Trace: [ 385.581498][T25440] [ 385.581503][T25440] dump_stack_lvl+0x100/0x190 [ 385.581525][T25440] should_fail_ex.cold+0x5/0xa [ 385.581540][T25440] ? tomoyo_encode2+0xfb/0x3c0 [ 385.581561][T25440] should_failslab+0xc2/0x120 [ 385.581579][T25440] __kmalloc_noprof+0xe0/0x850 [ 385.581594][T25440] ? rcu_is_watching+0x12/0xc0 [ 385.581609][T25440] tomoyo_encode2+0xfb/0x3c0 [ 385.581628][T25440] tomoyo_encode+0x29/0x50 [ 385.581645][T25440] tomoyo_realpath_from_path+0x18c/0x690 [ 385.581666][T25440] tomoyo_path_number_perm+0x23c/0x580 [ 385.581680][T25440] ? tomoyo_path_number_perm+0x22e/0x580 [ 385.581696][T25440] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 385.581726][T25440] ? find_held_lock+0x2b/0x80 [ 385.581739][T25440] ? __fget_files+0x215/0x3d0 [ 385.581755][T25440] ? hook_file_ioctl_common+0x146/0x410 [ 385.581771][T25440] ? __fget_files+0x21f/0x3d0 [ 385.581790][T25440] security_file_ioctl+0xd3/0x230 [ 385.581807][T25440] __x64_sys_ioctl+0xb7/0x210 [ 385.581823][T25440] do_syscall_64+0x106/0xf80 [ 385.581837][T25440] ? clear_bhb_loop+0x40/0x90 [ 385.581851][T25440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.581862][T25440] RIP: 0033:0x7f00abd9bf79 [ 385.581873][T25440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.581884][T25440] RSP: 002b:00007f00acc78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.581896][T25440] RAX: ffffffffffffffda RBX: 00007f00ac016180 RCX: 00007f00abd9bf79 [ 385.581903][T25440] RDX: 0000000000000000 RSI: 00000000810c9365 RDI: 0000000000000003 [ 385.581910][T25440] RBP: 00007f00acc78090 R08: 0000000000000000 R09: 0000000000000000 [ 385.581917][T25440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.581923][T25440] R13: 00007f00ac016218 R14: 00007f00ac016180 R15: 00007ffc0f027588 [ 385.581939][T25440] [ 385.581949][T25440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 385.591871][T25436] 0xffffffdffffffffd-0xffffffe00002001c : "" [ 385.661718][T25436] mtd: partition "" is out of reach -- disabled [ 385.684800][T25436] ftl_cs: FTL header not found. [ 386.465066][T25465] ip6gre1: entered promiscuous mode [ 386.466762][T25465] ip6gre1: entered allmulticast mode [ 386.483379][T25465] binder: 25464:25465 ioctl c0306201 200000000540 returned -22 [ 386.492096][T25465] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3940'. [ 386.701923][T25473] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3941'. [ 386.899877][T25482] netlink: 'syz.9.3943': attribute type 1 has an invalid length. [ 386.902290][T25482] netlink: 'syz.9.3943': attribute type 2 has an invalid length. [ 386.917474][T25482] binder: 25478:25482 unknown command 0 [ 386.919270][T25482] binder: 25478:25482 ioctl c0306201 200000000080 returned -22 [ 387.004438][T25487] can0: slcan on ttyS3. [ 387.059634][T25484] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 387.062042][T25484] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 387.102994][T25493] vxcan1 speed is unknown, defaulting to 1000 [ 387.160968][T25484] can0 (unregistered): slcan off ttyS3. [ 387.197805][T25502] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 387.244735][T25493] lo speed is unknown, defaulting to 1000 [ 387.306897][T25503] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3946'. [ 387.711857][T25558] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3952'. [ 387.863772][T25551] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.869125][T25551] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.871462][T25551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.938833][T25566] x_tables: duplicate underflow at hook 1 [ 388.029168][T25571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3955'. [ 388.038736][T25575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3955'. [ 388.091389][T25573] pimreg3: entered allmulticast mode [ 388.261762][T25590] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 388.267830][T25590] UDF-fs: Scanning with blocksize 2048 failed [ 388.280568][T25590] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 388.287629][T25590] UDF-fs: Scanning with blocksize 4096 failed [ 388.340560][T25590] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 388.472486][T25600] overlayfs: missing 'workdir' [ 388.649087][T25609] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 388.831000][T25629] Cannot find map_set index 65532 as target [ 389.210606][T25651] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 389.337006][T25656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3977'. [ 389.440792][ T40] kauditd_printk_skb: 2254 callbacks suppressed [ 389.440804][ T40] audit: type=1400 audit(2000000340.771:66779): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53162 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 389.463842][ T40] audit: type=1400 audit(2000000340.780:66780): avc: denied { map_create } for pid=25659 comm="syz.0.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 389.480679][ T40] audit: type=1400 audit(2000000340.790:66781): avc: denied { map_create } for pid=25659 comm="syz.0.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 389.486739][ T40] audit: type=1400 audit(2000000340.790:66782): avc: denied { map_read map_write } for pid=25659 comm="syz.0.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 389.495483][ T40] audit: type=1400 audit(2000000340.790:66783): avc: denied { ioctl } for pid=25661 comm="syz.9.3979" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x5610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 389.505769][ T40] audit: type=1400 audit(2000000340.799:66784): avc: denied { read write } for pid=25661 comm="syz.9.3979" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.518924][ T40] audit: type=1400 audit(2000000340.799:66785): avc: denied { read write open } for pid=25661 comm="syz.9.3979" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.528622][ T40] audit: type=1400 audit(2000000340.799:66786): avc: denied { ioctl } for pid=25661 comm="syz.9.3979" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.538918][ T40] audit: type=1400 audit(2000000340.799:66787): avc: denied { ioctl } for pid=25661 comm="syz.9.3979" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.549619][ T40] audit: type=1400 audit(2000000340.827:66788): avc: denied { ioctl } for pid=25661 comm="syz.9.3979" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.768856][ T9397] usb 14-1: new full-speed USB device number 10 using dummy_hcd [ 389.951205][ T9397] usb 14-1: not running at top speed; connect to a high speed hub [ 389.963544][ T9397] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 389.975498][ T9397] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 389.978419][ T9397] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.994008][ T9397] usb 14-1: Product: syz [ 389.995695][ T9397] usb 14-1: Manufacturer: syz [ 389.997290][ T9397] usb 14-1: SerialNumber: syz [ 390.027250][T25662] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 390.252826][ T9397] usblp 14-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 390.279669][ T9397] usb 14-1: USB disconnect, device number 10 [ 390.285775][ T9397] usblp0: removed [ 391.066010][T25734] netlink: 276 bytes leftover after parsing attributes in process `syz.9.3992'. [ 391.502927][T25745] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 391.692721][T25755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3996'. [ 391.805123][T25755] kvm: pic: non byte write [ 391.955476][T25764] Cannot find add_set index 1 as target [ 392.451788][T25773] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 392.481365][T25776] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 392.512216][T25776] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.4002' sets config #65535 [ 392.636986][T25779] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.640374][T25779] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.731601][T25785] ALSA: mixer_oss: invalid OSS volume 'IGAgN' [ 392.734975][T25785] ALSA: mixer_oss: invalid OSS volume 'IM' [ 392.759442][T25779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.766787][T25779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.888492][ T7812] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.894509][ T7812] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.897379][ T7812] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.900234][ T7812] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.998034][T25807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5435 sclass=netlink_route_socket pid=25807 comm=syz.7.4009 [ 393.226373][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4011'. [ 393.230667][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4011'. [ 393.233879][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4011'. [ 393.238836][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4011'. [ 393.243840][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4011'. [ 393.250367][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4011'. [ 393.403008][T25831] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 393.409500][T25833] netlink: 'syz.3.4015': attribute type 10 has an invalid length. [ 393.417453][T25833] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 393.421268][T25833] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 393.425526][T25833] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 393.561306][T25840] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 393.735285][T25856] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 393.741493][T25851] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4019'. [ 394.034003][T25885] dvmrp0: entered allmulticast mode [ 394.166057][ T9387] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 394.207922][T25890] binder: BINDER_SET_CONTEXT_MGR already set [ 394.210938][T25890] binder: 25889:25890 ioctl 4018620d 200000000040 returned -16 [ 394.220010][T25890] binder: 25889:25890 ioctl c0306201 2000000002c0 returned -14 [ 394.325408][T25900] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 394.364632][ T9387] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.368478][ T9387] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 394.380324][ T9387] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25190, setting to 8 [ 394.384449][ T9387] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 394.387816][ T9387] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.413592][T25871] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.419568][ T9387] hub 8-1:1.0: bad descriptor, ignoring hub [ 394.421552][ T9387] hub 8-1:1.0: probe with driver hub failed with error -5 [ 394.433937][ T9387] cdc_wdm 8-1:1.0: skipping garbage [ 394.435822][ T9387] cdc_wdm 8-1:1.0: skipping garbage [ 394.440418][ T9387] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 394.445914][ T9387] cdc_wdm 8-1:1.0: Unknown control protocol [ 394.696377][T25916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.699389][T25916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.722445][ T24] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 394.810494][ T40] kauditd_printk_skb: 1550 callbacks suppressed [ 394.810507][ T40] audit: type=1400 audit(2000000345.791:68339): avc: denied { ioctl } for pid=25906 comm="syz.7.4030" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 394.836229][ T40] audit: type=1400 audit(2000000345.810:68340): avc: denied { create } for pid=25924 comm="syz.0.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.849016][ T40] audit: type=1400 audit(2000000345.819:68341): avc: denied { write } for pid=25924 comm="syz.0.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.853765][T25925] : entered promiscuous mode [ 394.872049][ T24] usb 12-1: device descriptor read/64, error -71 [ 394.875467][ T40] audit: type=1400 audit(2000000345.856:68342): avc: denied { read write } for pid=12908 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.887588][ T40] audit: type=1400 audit(2000000345.856:68343): avc: denied { read write open } for pid=12908 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.897261][ T40] audit: type=1400 audit(2000000345.856:68344): avc: denied { recv } for pid=5846 comm="syz-executor" saddr=127.0.0.1 src=53162 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 394.906918][ T40] audit: type=1400 audit(2000000345.856:68346): avc: denied { recv } for pid=5844 comm="sshd-session" saddr=10.0.2.2 src=36114 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 394.916830][ T40] audit: type=1400 audit(2000000345.856:68345): avc: denied { ioctl } for pid=12908 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.924680][ T40] audit: type=1400 audit(2000000345.866:68347): avc: denied { read write } for pid=15797 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.935017][ T40] audit: type=1400 audit(2000000345.866:68348): avc: denied { read write open } for pid=15797 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.958586][T25930] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 395.128831][ T24] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 395.152765][T25940] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4035'. [ 395.269721][ T24] usb 12-1: device descriptor read/64, error -71 [ 395.408686][ T24] usb usb12-port1: attempt power cycle [ 395.625686][T25954] openvswitch: netlink: Flow actions attr not present in new flow. [ 395.680792][T25871] cdc_wdm 8-1:1.0: Error autopm - -16 [ 395.680989][ T1163] usb 8-1: USB disconnect, device number 7 [ 395.771310][ T24] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 395.805525][ T24] usb 12-1: device descriptor read/8, error -71 [ 395.806884][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.809788][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.888351][T25968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.903224][T25967] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 396.047157][T26008] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 396.059822][ T24] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 396.082703][ T24] usb 12-1: device descriptor read/8, error -71 [ 396.084881][T26011] xt_hashlimit: size too large, truncated to 1048576 [ 396.201084][ T24] usb usb12-port1: unable to enumerate USB device [ 396.205973][T26011] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.208843][T26011] bridge_slave_1: left allmulticast mode [ 396.212559][T26011] bridge_slave_1: left promiscuous mode [ 396.215184][T26011] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.227887][T26011] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 396.519267][T26029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.808301][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 396.813434][T26048] comedi comedi0: comedi_config --init_data is deprecated [ 396.970415][ T24] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 396.977616][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.981288][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.984964][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 396.992456][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.996691][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.000325][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 397.008991][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.012029][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.015540][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 397.020867][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.023798][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.027164][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 397.032764][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.036450][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.040285][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 397.046355][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.049974][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.054187][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 397.060109][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.064326][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.068376][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 397.073816][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.076719][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.080141][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 397.092246][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 397.095885][ T24] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 397.098657][ T24] usb 8-1: Product: syz [ 397.100083][ T24] usb 8-1: Manufacturer: syz [ 397.102052][ T24] usb 8-1: SerialNumber: syz [ 397.111988][ T24] usb 8-1: config 0 descriptor?? [ 397.130250][ T24] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 397.369825][T26037] overlay: ./file1 is not a directory [ 397.385564][ T24] usb 8-1: USB disconnect, device number 8 [ 397.392681][ T24] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 397.733221][T26080] kvm: MONITOR instruction emulated as NOP! [ 397.810383][T26088] __nla_validate_parse: 3 callbacks suppressed [ 397.810399][T26088] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4058'. [ 397.817750][T26087] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4058'. [ 397.832397][T26087] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 397.844505][T26088] team_slave_1: entered allmulticast mode [ 398.053242][T26107] loop5: detected capacity change from 0 to 7 [ 398.214965][T26116] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 398.254891][T26107] Dev loop5: unable to read RDB block 7 [ 398.256724][T26107] loop5: unable to read partition table [ 398.274249][T26107] loop5: partition table beyond EOD, truncated [ 398.287515][T26107] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 398.306794][T26119] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 398.430728][T26126] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 398.563873][T26137] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 398.566225][T26137] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 398.570664][T26137] cramfs: wrong magic [ 398.772365][T26155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.793299][T26154] vivid-003: disconnect [ 398.797396][T26152] vivid-003: reconnect [ 398.819091][T26162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4070'. [ 398.884567][T26162] bond2: entered promiscuous mode [ 398.886493][T26162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.914910][T26173] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 399.097943][T26212] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 399.115671][T26215] ------------[ cut here ]------------ [ 399.117506][T26215] i != fen6_info->nsiblings [ 399.117513][T26215] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xbc1/0xe40, CPU#0: syz.3.4075/26215 [ 399.122788][T26215] Modules linked in: [ 399.124222][T26215] CPU: 0 UID: 0 PID: 26215 Comm: syz.3.4075 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.127716][T26215] Tainted: [L]=SOFTLOCKUP [ 399.129123][T26215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.132603][T26215] RIP: 0010:nsim_fib_event_nb+0xbc1/0xe40 [ 399.134615][T26215] Code: 20 48 8b 6c 24 28 e8 6e 17 ce fa e8 69 17 ce fa 44 89 fe 44 89 ef e8 4e 11 ce fa 45 39 fd 0f 84 6a fd ff ff e8 50 17 ce fa 90 <0f> 0b 90 e9 5c fd ff ff e8 42 17 ce fa 48 c7 c7 60 00 7d 8c e8 a6 [ 399.141855][T26215] RSP: 0018:ffffc9000459f118 EFLAGS: 00010283 [ 399.143814][T26215] RAX: 0000000000009520 RBX: ffffc9000459f260 RCX: ffffc90007421000 [ 399.146319][T26215] RDX: 0000000000080000 RSI: ffffffff873a8170 RDI: ffff8880266a6c18 [ 399.148819][T26215] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 399.151550][T26215] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880477c2000 [ 399.154089][T26215] R13: 0000000000000001 R14: ffff88802d366700 R15: ffff8880266a6c00 [ 399.156670][T26215] FS: 00007fe2e749f6c0(0000) GS:ffff8880d6352000(0000) knlGS:0000000000000000 [ 399.159599][T26215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.161960][T26215] CR2: 0000200000001340 CR3: 000000004277e000 CR4: 0000000000352ef0 [ 399.164508][T26215] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 399.166942][T26215] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 399.169502][T26215] Call Trace: [ 399.170618][T26215] [ 399.171580][T26215] notifier_call_chain+0x99/0x420 [ 399.173254][T26215] atomic_notifier_call_chain+0x71/0x1c0 [ 399.175130][T26215] call_fib_notifiers+0x33/0x70 [ 399.176800][T26215] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 399.178886][T26215] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 399.181155][T26215] ? find_held_lock+0x2b/0x80 [ 399.182787][T26215] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 399.184719][T26215] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 399.186605][T26215] ip6_route_multipath_add+0x128f/0x1ba0 [ 399.188410][T26215] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 399.190361][T26215] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 399.192070][T26215] ? inet6_rtm_newroute+0xf5/0x160 [ 399.193784][T26215] inet6_rtm_newroute+0xf5/0x160 [ 399.195411][T26215] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 399.197194][T26215] ? __lock_acquire+0x4a5/0x2630 [ 399.198786][T26215] ? find_held_lock+0x2b/0x80 [ 399.200449][T26215] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 399.202373][T26215] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 399.204323][T26215] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 399.206606][T26215] rtnetlink_rcv_msg+0x95e/0xe90 [ 399.208375][T26215] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.210461][T26215] ? ref_tracker_free+0x37e/0x6c0 [ 399.212488][T26215] netlink_rcv_skb+0x159/0x420 [ 399.214335][T26215] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.216872][T26215] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.219127][T26215] ? netlink_deliver_tap+0x1ae/0xcc0 [ 399.221386][T26215] netlink_unicast+0x5aa/0x870 [ 399.223430][T26215] ? __pfx_netlink_unicast+0x10/0x10 [ 399.225749][T26215] netlink_sendmsg+0x8b0/0xda0 [ 399.227930][T26215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.230111][T26215] ? __might_fault+0x20/0x140 [ 399.231712][T26215] ____sys_sendmsg+0xa54/0xc30 [ 399.233276][T26215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.234937][T26215] ___sys_sendmsg+0x190/0x1e0 [ 399.236573][T26215] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.238254][T26215] __sys_sendmsg+0x170/0x220 [ 399.239804][T26215] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.241482][T26215] ? __pfx___seccomp_filter+0x10/0x10 [ 399.243295][T26215] do_syscall_64+0x106/0xf80 [ 399.244792][T26215] ? clear_bhb_loop+0x40/0x90 [ 399.246303][T26215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.248269][T26215] RIP: 0033:0x7fe2e659bf79 [ 399.249720][T26215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.256086][T26215] RSP: 002b:00007fe2e749f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.258879][T26215] RAX: ffffffffffffffda RBX: 00007fe2e6815fa0 RCX: 00007fe2e659bf79 [ 399.261418][T26215] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 399.263899][T26215] RBP: 00007fe2e66327e0 R08: 0000000000000000 R09: 0000000000000000 [ 399.266477][T26215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.269055][T26215] R13: 00007fe2e6816038 R14: 00007fe2e6815fa0 R15: 00007ffd221e7c88 [ 399.272234][T26215] [ 399.273588][T26215] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.275969][T26215] CPU: 0 UID: 0 PID: 26215 Comm: syz.3.4075 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.279386][T26215] Tainted: [L]=SOFTLOCKUP [ 399.280765][T26215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.283875][T26215] Call Trace: [ 399.284936][T26215] [ 399.285919][T26215] dump_stack_lvl+0x100/0x190 [ 399.287377][T26215] vpanic+0x552/0x970 [ 399.288645][T26215] ? __pfx_vpanic+0x10/0x10 [ 399.290163][T26215] panic+0xd1/0xe0 [ 399.291336][T26215] ? __pfx_panic+0x10/0x10 [ 399.292762][T26215] check_panic_on_warn.cold+0x19/0x34 [ 399.294460][T26215] ? nsim_fib_event_nb+0xbc1/0xe40 [ 399.296099][T26215] __warn.cold+0x191/0x348 [ 399.297497][T26215] __report_bug+0x296/0x3d0 [ 399.298936][T26215] ? nsim_fib_event_nb+0xbc1/0xe40 [ 399.300525][T26215] ? __pfx___report_bug+0x10/0x10 [ 399.302093][T26215] ? nsim_fib_event_nb+0xbc1/0xe40 [ 399.303733][T26215] report_bug+0xb2/0x220 [ 399.305103][T26215] ? nsim_fib_event_nb+0xbc1/0xe40 [ 399.306741][T26215] handle_bug+0x166/0x2a0 [ 399.308128][T26215] exc_invalid_op+0x17/0x50 [ 399.309622][T26215] asm_exc_invalid_op+0x1a/0x20 [ 399.311246][T26215] RIP: 0010:nsim_fib_event_nb+0xbc1/0xe40 [ 399.313018][T26215] Code: 20 48 8b 6c 24 28 e8 6e 17 ce fa e8 69 17 ce fa 44 89 fe 44 89 ef e8 4e 11 ce fa 45 39 fd 0f 84 6a fd ff ff e8 50 17 ce fa 90 <0f> 0b 90 e9 5c fd ff ff e8 42 17 ce fa 48 c7 c7 60 00 7d 8c e8 a6 [ 399.319029][T26215] RSP: 0018:ffffc9000459f118 EFLAGS: 00010283 [ 399.321005][T26215] RAX: 0000000000009520 RBX: ffffc9000459f260 RCX: ffffc90007421000 [ 399.323494][T26215] RDX: 0000000000080000 RSI: ffffffff873a8170 RDI: ffff8880266a6c18 [ 399.326009][T26215] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 399.328503][T26215] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880477c2000 [ 399.331458][T26215] R13: 0000000000000001 R14: ffff88802d366700 R15: ffff8880266a6c00 [ 399.334553][T26215] ? nsim_fib_event_nb+0xbc0/0xe40 [ 399.336249][T26215] ? nsim_fib_event_nb+0xbc0/0xe40 [ 399.337894][T26215] notifier_call_chain+0x99/0x420 [ 399.339509][T26215] atomic_notifier_call_chain+0x71/0x1c0 [ 399.341882][T26215] call_fib_notifiers+0x33/0x70 [ 399.343965][T26215] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 399.346743][T26215] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 399.349437][T26215] ? find_held_lock+0x2b/0x80 [ 399.351357][T26215] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 399.353300][T26215] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 399.355145][T26215] ip6_route_multipath_add+0x128f/0x1ba0 [ 399.356910][T26215] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 399.358806][T26215] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 399.360818][T26215] ? inet6_rtm_newroute+0xf5/0x160 [ 399.362923][T26215] inet6_rtm_newroute+0xf5/0x160 [ 399.364957][T26215] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 399.367197][T26215] ? __lock_acquire+0x4a5/0x2630 [ 399.369138][T26215] ? find_held_lock+0x2b/0x80 [ 399.370724][T26215] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 399.372618][T26215] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 399.374257][T26215] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 399.376022][T26215] rtnetlink_rcv_msg+0x95e/0xe90 [ 399.377633][T26215] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.379567][T26215] ? ref_tracker_free+0x37e/0x6c0 [ 399.381306][T26215] netlink_rcv_skb+0x159/0x420 [ 399.382834][T26215] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.384581][T26215] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.386322][T26215] ? netlink_deliver_tap+0x1ae/0xcc0 [ 399.388516][T26215] netlink_unicast+0x5aa/0x870 [ 399.390276][T26215] ? __pfx_netlink_unicast+0x10/0x10 [ 399.391959][T26215] netlink_sendmsg+0x8b0/0xda0 [ 399.393533][T26215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.395210][T26215] ? __might_fault+0x20/0x140 [ 399.396740][T26215] ____sys_sendmsg+0xa54/0xc30 [ 399.398273][T26215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.399961][T26215] ___sys_sendmsg+0x190/0x1e0 [ 399.401442][T26215] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.403141][T26215] __sys_sendmsg+0x170/0x220 [ 399.404639][T26215] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.406269][T26215] ? __pfx___seccomp_filter+0x10/0x10 [ 399.407984][T26215] do_syscall_64+0x106/0xf80 [ 399.409482][T26215] ? clear_bhb_loop+0x40/0x90 [ 399.411406][T26215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.413317][T26215] RIP: 0033:0x7fe2e659bf79 [ 399.414708][T26215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.420700][T26215] RSP: 002b:00007fe2e749f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.423566][T26215] RAX: ffffffffffffffda RBX: 00007fe2e6815fa0 RCX: 00007fe2e659bf79 [ 399.426308][T26215] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 399.428783][T26215] RBP: 00007fe2e66327e0 R08: 0000000000000000 R09: 0000000000000000 [ 399.431557][T26215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.434402][T26215] R13: 00007fe2e6816038 R14: 00007fe2e6815fa0 R15: 00007ffd221e7c88 [ 399.437025][T26215] [ 399.438593][T26215] Kernel Offset: disabled [ 399.440244][T26215] Rebooting in 86400 seconds..